Kristina Lucia Teddy Bears LLC dba Curiously Curated Creations of Kristina Lucia (“Curiously Curated Creations,” “Company,” “we,” “our,” or “us”) is committed to safeguarding the privacy of visitors to our website, clients, prospective clients, vendors, providers, and any other individual for whom the Company obtains personal information (each, “you,” or “your”).
We want you to know how we collect, use, share, and protect your information. Some of the information may be “personal information” (also referred to as “personal data”) which is information that (either alone or in combination with other information available to the Company) identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with you, or a particular individual or household (subject to certain exceptions set forth in the California Consumer Privacy Act (the “CCPA“) and the California Privacy Rights Act (the “CPRA”)).
The Company is the data controller in relation to any personal information that the Company processes about you and is responsible for ensuring that such processing complies with applicable data protection laws, including the European Union General Data Protection Regulation (the “GDPR”) and the CCPA.
This Privacy Policy (the “Policy”) applies to information collected by this website or mobile applications to which this Policy is linked (the “Site”), or during the course of our engagement or pre-engagement. The Company owns, operates, and maintains the Site. This Policy does not apply to third-party platforms or websites to which this website may provide a link. There may be additional or different privacy policies associated with use of our services. You should review those privacy policies prior to your use of our services.
Consent
Please read this Policy before using this Site. By using this Site, you are consenting to the collection, use, and disclosure of your information as set forth in this Policy. This Policy is part of our website Terms of Use that govern your use of this Site.
Notification of Changes
We reserve the right to modify this Policy at any time. We may occasionally update this Policy as our services and privacy practices change, or as required by applicable legal or regulatory requirements. Where it is practicable, we will notify you by email of any significant changes. In addition, if we are changing our Policy in a manner that might cause disclosure of information that you have previously requested not be disclosed, we will contact you and give you the ability to opt out of such disclosure. The last update of this Privacy Policy is below.
Personal Information We Collect About You
We may collect and use the following types of personal information, which may directly or indirectly identify you or your household:
- Identifiers such as your name, account information, IP address, and any other similar information used to identify you.
- Contact information, including phone number, mailing address, billing address, and email address.
- Payment and transaction data, such as credit card, bank account or other payment and invoicing details, and purchase history.
- Account and preference data, such as any preferences, interests, usernames/passwords, subscriptions, saved items, wish lists, downloads, or mailing list sign-ups.
- Device, geolocation, and usage data, including browser type, device type, IP address, visit time, cookie data, pages viewed on our website, operating system and network, and location and time zone setting (if enabled by your device settings or browser).
- Legal and regulatory compliance data as required for purposes such as anti-money laundering and market abuse regulations requirements,
- Characteristics of protected classifications under California, New York or federal law.
- Any other information you provide voluntarily, including during customer service interactions or form submissions.
We may supplement the information that you provide to us with data that we receive or obtain from third-party services, shipping providers, payment processors, or publicly available sources.
How Your Information is Collected
We collect personal information directly from you when you:
- Create an account
- Place an order
- Subscribe to our newsletter
- Contact us for support
- Interact with our website or social media
We may also collect information automatically using cookies and similar tracking technologies.
How, Why and How Long We Use Your Personal Information
We use your personal information for purposes including:
- Processing your orders, delivering products, and managing returns
- Communicating with you about your purchases, account, or inquiries
- Improving our website, products, and customer service
- Sending you marketing communications, when permitted
- Preventing fraud, security breaches, or misuse of our website
- Complying with legal obligations, where applicable
- When you have given consent
We retain personal information only as long as necessary to fulfill the purposes outlined above, meet legal obligations, and maintain business records. When no longer needed, we may anonymize or securely delete your data.
Health Information
We do not intentionally collect or request any personal health or medical information through our Site or services. If you voluntarily provide health-related information in any communication with us, such information will not be shared and shall be kept confidential in accordance with this Policy.
Curiously Curated Creations is not responsible for any health information you choose to disclose to unrelated third-party platforms, referenced resources, and other unrelated organizations linked from our Site. We are not responsible for the data policies or procedures or content of any linked websites or referenced resources. We recommend reviewing the privacy policies any third-party websites you visit or resources you access.
Promotional Communications
We may use your personal information to send you updates, news, and information about our industry, our business and our services generally, including by email, text message, telephone, or post.
We will always treat your personal information with the utmost respect and never sell or share it with other organizations outside the Company for marketing purposes.
You have the right to opt out of receiving promotional communications at any time by contacting us at the contact details below or using the “unsubscribe” link in emails or “STOP” number in texts, where applicable.
Who We Share Your Personal Information With
We do not sell your personal information. We also do not share it with unrelated third parties except as described in this Policy or with your consent.
In the ordinary course of business, we may share your information with:
- Service providers and vendors who help us operate our website and deliver our products/services, including Stripe, our trusted payment processor (you can review Stripe’s privacy policy here), IT service providers, financial institutions, web hosting providers, email service providers, and other client management databases and cloud-based solutions providers.
- Third-party venues for events and workshops, and third-party tools that help us understand and improve our website and marketing efforts, such as analytics platforms.
- Shipping and logistics partners who help us fulfill orders and ensure delivery.
- Law enforcement, regulatory bodies, or government agencies when required to comply with applicable law, enforce our terms and conditions, respond to legal processes and requests, or protect and defend the rights, property, or safety of our business or others from legal claims.
- Successors to our business, such as in the case of a sale, merger, reorganization, restructuring, or transfer of assets, where your information may be transferred as part of that transaction, provided the successor or third party agrees to treat your information in a manner consistent with this Policy.
- Other third parties approved of by you.
In all cases in which we share your information with a third party for the purpose of providing a service to us, we ensure that they only process your personal information under our instructions and ensure the security and confidentiality of your personal information by implementing the appropriate technical and organizational measures for such processing.
Please note that our Site may contain links to external websites. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any third-party sites you visit.
Where Your Personal Information is Held
Your information may be stored in secure systems operated by us or the Company’s third-party service providers as described above (see above: “Who We Share Your Personal Information with”). These third parties may be located in the United States or other countries outside of your place of residence, including countries outside the European Economic Area (“EEA”).
Users in the European Economic Area, Switzerland, and the United Kingdom
If you are a resident of the EEA, Switzerland, or the United Kingdom (“UK”), this section applies with respect to personal data collected through your use of the Site.
Purposes of processing and legal basis for processing. As outlined above, we process personal data in various ways. Such processing relies on the following legal bases: (1) with your consent; (2) as necessary to provide services; and (3) as necessary for our legitimate interests in providing services, including your use of the Site, where those interests do not override your fundamental rights and freedom related to data privacy.
Transfers. Curiously Curated Creations is located in the United States. By providing any information to this Site, all users, including without limitation users in the member states of the EEA, Switzerland, and the UK, consent to the collection, storage, forward transfer, and processing of such information in the United States of America.
Your rights. With respect to the processing of your personal data, you are entitled to rights under the data protection laws applicable in the UK, Europe, and Switzerland, including (1) the General Data Protection Regulation (“GDPR”), Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016, (2) the UK General Data Protection Regulation (“UK GDPR”) and Data Protection Act 2018 (“DPA 2018”), and (3) the Federal Act on Data Protection (“FADP”). If you wish to exercise any such right, including the right to access, rectify, or request erasure of personal data, please contact us using the contact information provided below. In order to verify your identity, we may require you to provide us with personal information prior to accessing any records containing information about you.
If you are in the EEA, you also have the right to lodge a complaint with the local data protection authority, such as la Commission Nationale de l’Informatique et des Libertés (“CNIL”) in France, if you believe that we have not complied with applicable data protection laws, including the GDPR. Please click here for a list of local data protection authorities in the EEA countries. If you are in the UK, you have the right to lodge a complaint with the Information Commissioner’s Office, who can be contacted here.
Please note that some of these rights may be limited where we have an overriding interest or legal obligation to continue to process the personal information or where data may be exempt from disclosure due to reasons of legal professional privilege or professional secrecy obligations.
United Kingdom and European Residents
Under the GDPR, UK GDPR, DPA 2018, and FADP, you have the following rights:
- The right to be informed about how your personal data is collected, used, stored, and shared.
- The right to rectify or update inaccurate or incomplete personal data.
- The right of access to your personal data.
- The right to be forgotten (erasure), or request deletion of your personal data for specific reasons.
- The right to restrict the processing of your data under specific conditions.
- The right to data portability in a commonly used, machine-readable format for transfer.
- The right to object to data processing for certain purposes, such as direct marketing.
- The right to withdraw consent at any time.
- The right to lodge a complaint with the ICO.
- Rights regarding automated profiling and decision making.
California Residents
Under the CCPA and CPRA, you have the following rights:
- Right to Know: You have the right to request that we disclose to you the Personal Information we collect, use, or disclose, and information about our data practices;
- Right to Request Deletion: You have the right to request that we delete your Personal Information that we have collected from you;
- Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights;
- Right to Opt-Out: You have the right to opt-out of the sale of Personal Information;
- Right to Correct: You have the right to correct inaccurate Personal Information and;
- Right to Limit Use and Disclosure: You have the right to limit use and disclosure of sensitive Personal Information.
Under the CCPA and CPRA, you may exercise these rights yourself or you may designate an authorized agent to make these requests on your behalf. To exercise rights, including your “right to know” or “right to request deletion,” contact us via the contact information below.
Security
We have implemented technical and organizational security measures in an effort to safeguard the personal information in our custody and control. Such measures include, for example, limiting access to personal information only to staff and authorized service providers on a need-to-know basis for the purposes described in this Privacy Statement, as well as other administrative, technical, and physical safeguards.
We endeavor to take all reasonable steps to protect your personal information, but cannot guarantee the security of any data you disclose online. Please note that email is not a secure medium and should not be used to send confidential or sensitive information. By providing information online, you accept the inherent security risks of providing information over the Internet and will not hold us responsible for any breach of security, unless it is due to our negligence or willful default.
Children under the Age of 18
This Site is not directed to children under 13, and we do not knowingly collect personal information from children under the age of 13. If you are a parent or guardian and believe that your child of under the age of 13 has provided us with personal information without your consent, please contact us immediately so that we may delete the information.
While our products are intended for children, this Site and our services are intended for parents, guardians, and adult purchasers. By using this Site, you affirm that you are at least 18 years of age or are using the Site under the supervision of a parent or guardian. We do not knowingly collect information from children. If you believe we have collected information from a child under the age of 18, please contact us.
Cookies
When you interact with our Site, certain information about your use of our Site is automatically collected. Much of this information is collected through tags, text files, web beacons and other tracking technologies, known as “cookies,” as well as through your web browser or device (e.g., IP address, MAC address, browser version, etc.). We may place cookies in the browser files of your computer when you visit. Cookies may be stored on your computer’s hard drive. The information we collect using cookies allows us to recognize you as a user when you access the Site. We will always ask for your consent to use any non-essential cookies on our Site. You may decline or withdraw such consent at any time, and this will not affect your access to the Site.
You may manage your cookie preferences by adjusting your browser settings to refuse some or all cookies. Please note that disabling certain cookies may affect the functionality of the Site. Where required by law, we will request your explicit consent before placing non-essential cookies on your device. You may withdraw or change your cookie preferences at any time through your browser settings or through any cookie management tools we make available on the Site.
Do Not Track
Please note that we do not support “Do Not Track” browser settings at this time.
Contact Us
If you have any questions or concerns about this Policy, or would like to exercise any of the rights pursuant to this Policy or relevant laws or regulations, please contact us using the contact information below:
Representative Name: Kristina Lucia Pezza
Email: kristinalucia@cccokl.com
Last update: May 30, 2025