Privacy
PRIVACY POLICY
Last modified: 11/11/22
Introduction
At Shepherds Pack LLC DBA Reveal Mint (“Company”, “We”, “Us”, “Our”, etc.), We strive to be clear about what we’re doing with your data, whether that’s how we store it, where we get it from, what we need it for, and more. Privacy is about freedom of identity, and that’s why we want you (“You”, “Your”, etc.) to feel like you are making a clear decision if you consent to our privacy policy.
This privacy policy applies to our data collection practices when you visit or interact with www.Revealmint.com (“Website”), including through interactions facilitated through other services, such as Facebook, Instagram, TikTok, SnapChat, Twitter, LinkedIn, Tumblr, Google, Amazon, Yahoo. It covers Shepherds Pack LLC and its employees’ handling of your data collected under the terms of this policy.
If we get data from or about you from a different source, then it is not governed by this privacy policy unless we explicitly state otherwise. One example of a different source would be if you walked into our office and left your business card — we’d have information about you, but it wouldn’t be covered by this privacy policy. Another example would be if you had given your business card to your neighbor, and your neighbor gave us your business card because they thought it would be helpful — that also wouldn’t be covered by this privacy policy. This policy also doesn’t apply to any links to other websites. Links to other websites are governed by the privacy policies of those specific websites.
For the purposes of the General Data Protection Regulation (known as the “GDPR”), Shepherds Pack LLC, DBA Reveal Mint located at P.O.Box 763, Teague, TX 75860-0763, is a “Data Controller.” This means that we direct the flow of collected personal information, as opposed to being a “Data Processor,” which is a person or company that does things with and to the information.
What You Can Do to Let Us Know You Accept This Privacy Policy
The internet is a big place, and it's hard to keep track of everybody who visits us and agrees or disagrees with our privacy policy. Because of that, when you use our site you are consenting to the terms of this policy. If you don't like this policy and don't want your data treated the way described here, then you have to stop using the site.
Information We Collect About You
We use this section to explain our data collection practices to you. We combine the data we have about you together. For example, we might combine information about how long you were on our website for with your username. Any information we combine will be treated as if it is all equally sensitive information. We only collect information from you that allows us to make the site run smoothly and provide you with our services.
Personally Identifiable Information
Personally identifiable information is information that can identify you as a person — simple, right? Well personally identifiable information can also be a combination of information that reveals who you are.
For example, if I know your birthday is on July 4, 1976, I can’t necessarily figure out who you are. However, if I know your birthday, where you went to college, whether you’re married or not, and maybe your zip code, then I probably know enough to figure out who you are if I really wanted to. So personally identifiable information can be either something very specific about you, like your full name, or it can be a combination of general details that let me narrow down the possibilities until I figure out that it can only be you.
What
We purposefully seek the following personally identifiable information from you in a variety of circumstances: your full name, home address, email address, IP address, date of birth, telephone number, gender, and exact location.
When
We may seek personally identifiable information from you in a variety of ways, including: when you register on our Website, fill out a contact form or other online form, make online purchases, make user comments or otherwise interact via social media, through automated means, through your calls or emails to customer services, and from our processors.
Why
We may use personally identifiable information in the following ways: For fulfilling the purpose for which the information was given, order processing and delivery, marketing purposes, business purposes, fraud prevention, improving the service, providing offers, and to provide you with access to this website.
We may also use your information for marketing our services, products, and offerings, or those that we think may be of interest to you.
We store any personally identifiable information that we’ve collected until customers ask us to remove their data.
Non-Identifiable Personal Information
Non-identifiable personal information is information that’s technically about you, but cannot be linked directly to you without being combined with personal information. For example, if I know that you use Google Chrome when you visit my site, I will never be able to figure out who you are without combining it with personally identifiable information — even if I know what search terms you typed in, what kind of computer you are using, and how long you use the site for every time you visit, I will not be able to figure out that the user is you without personally identifiable information.
What
We purposefully seek the following non-identifiable personal information from you in a variety of circumstances: your browser type, operating system, session length, page views, length of page views, referral links, search terms, general location data, general demographic data, purchase information, mobile network information, browser settings, crash reports, website actions (e.g. “add to cart”), and abandoned cart data.
When
We may request non-identifiable personal information from you in a variety of ways, including: when you register on our Website, fill out a contact form or other online form, make online purchases, through automated means, through your calls or emails to customer services, from our processors, and from other third parties.
Why
We may use non-identifiable personal information in the following ways: to enable website features, process and ship orders, run analytics, facilitate ads and marketing, and conduct fraud prevention.
We store any non-identifiable personal information that we’ve collected until customers ask us to remove their data. Some data is stored only in customers’ browser and can be cleared by the customer at any time.
Sensitive Information
Sensitive information is the type of information that you might not necessarily want people to know, or at least, you would want to control who knows the information and how they come across it. An example of sensitive information could be your credit score or your social security number. As you can imagine, sensitive information should only be requested by a company if they really need the information to provide you with services.
We don't collect any sensitive information from you because it's not needed for us to provide our services to you.
About Automated Collection
Automated technologies help us make our website run more smoothly. Through the use of automated means, we are able to see which of our pages are most popular, how users find our website, what causes errors in the website, and a lot of other details which help us make the website the best it can be.
We may use a number of automation technologies, including cookies. Flash cookies, web beacons, or others as they become available or necessary.
Cookies
Cookies are small text files that a website sends to your computer to try to make your experience online a smoother one. Cookies often contain very little data, such as a User ID or the last time you logged in to a particular site. When your computer connects to the website, the website might read the cookie to figure out whether you’re a returning customer, whether you’ve seen the most recent privacy policy update, or whether you need to be automatically logged out. As you can probably tell from those examples, cookies serve a variety of necessary functions. However, if you’d prefer, you can disable cookies. You can visit www.allaboutcookies.org for information about deleting and blocking cookies on your browser.
Our automated technologies are supported by the use of other technologies, which may include technologies from Facebook, Alphabet, Inc., Snapchat, and Shopify. For an updated list, input www.revealmint.com. onto a website such as https://www.cookieserve.com/.
Please note that disabling and deleting cookies might make this website (and others) work improperly.
Flash Cookies
Flash cookies are functionally similar to regular cookies, but they are not subject to the same controls as regular cookies are. While you can follow the directions in the “Cookies” section to block most cookies, flash cookies require a different type of opt out. To learn how you can manage your Flash cookie settings, visit the Flash player settings page on Adobe's website.
Cookies Necessary for the Functioning of the Store
| Name | Function | Duration |
|---|---|---|
| _ab | Used in connection with access to admin. | 2y |
| _secure_session_id | Used in connection with navigation through a storefront. | 24h |
| _shopify_country | Used in connection with checkout. | session |
| _shopify_m | Used for managing customer privacy settings. | 1y |
| _shopify_tm | Used for managing customer privacy settings. | 30min |
| _shopify_tw | Used for managing customer privacy settings. | 2w |
| _storefront_u | Used to facilitate updating customer account information. | 1min |
| _tracking_consent | Tracking preferences. | 1y |
| c | Used in connection with checkout. | 1y |
| cart | Used in connection with shopping cart. | 2w |
| cart_currency | Used in connection with shopping cart. | 2w |
| cart_sig | Used in connection with checkout. | 2w |
| cart_ts | Used in connection with checkout. | 2w |
| cart_ver | Used in connection with shopping cart. | 2w |
| checkout | Used in connection with checkout. | 4w |
| checkout_token | Used in connection with checkout. | 1y |
| dynamic_checkout_shown_on_cart | Used in connection with checkout. | 30min |
| hide_shopify_pay_for_checkout | Used in connection with checkout. | session |
| keep_alive | Used in connection with buyer localization. | 2w |
| master_device_id | Used in connection with merchant login. | 2y |
| previous_step | Used in connection with checkout. | 1y |
| remember_me | Used in connection with checkout. | 1y |
| secure_customer_sig | Used in connection with customer login. | 20y |
| shopify_pay | Used in connection with checkout. | 1y |
| shopify_pay_redirect | Used in connection with checkout. | 30 minutes, 3w or 1y depending on value |
| storefront_digest | Used in connection with customer login. | 2y |
| tracked_start_checkout | Used in connection with checkout. | 1y |
| checkout_one_experiment | Used in connection with checkout. | session |
Reporting and Analytics
| Name | Function | Duration |
|---|---|---|
| _landing_page | Track landing pages. | 2w |
| _orig_referrer | Track landing pages. | 2w |
| _s | Shopify analytics. | 30min |
| _shopify_d | Shopify analytics. | session |
| _shopify_s | Shopify analytics. | 30min |
| _shopify_sa_p | Shopify analytics relating to marketing & referrals. | 30min |
| _shopify_sa_t | Shopify analytics relating to marketing & referrals. | 30min |
| _shopify_y | Shopify analytics. | 1y |
| _y | Shopify analytics. | 1y |
| _shopify_evids | Shopify analytics. | session |
| _shopify_ga | Shopify and Google Analytics. | session |
The length of time that a cookie remains on your computer or mobile device depends on whether it is a “persistent” or “session” cookie. Session cookies last until you stop browsing and persistent cookies last until they expire or are deleted. Most of the cookies we use are persistent and will expire between 30 minutes and two years from the date they are downloaded to your device.
You can control and manage cookies in various ways. Please keep in mind that removing or blocking cookies can negatively impact your user experience and parts of our website may no longer be fully accessible.
Most browsers automatically accept cookies, but you can choose whether or not to accept cookies through your browser controls, often found in your browser’s “Tools” or “Preferences” menu. For more information on how to modify your browser settings or how to block, manage or filter cookies can be found in your browser’s help file or through such sites as: www.allaboutcookies.org.
Additionally, please note that blocking cookies may not completely prevent how we share information with third parties such as our advertising partners. To exercise your rights or opt-out of certain uses of your information by these parties, please follow the instructions in the “Behavioural Advertising” section above.
Web Beacons
Web Beacons are tiny files that load when a user completes an action like visiting a particular webpage, or opening an email. Because the tiny file is loaded from a server, and the server can see that your computer is trying to open the page or email, the server can deduce that you have visited the page or viewed the email.
“Do Not Track”
“Do Not Track” signals are a brand new feature that some web browsers allow their users to send. The idea behind the “Do Not Track” signals is that all of the websites of various companies will come to an agreement about standardizing a way to not track people who visit their websites. That way, people who turn on “Do Not Track” will always know what parts of their privacy are protected without having to read every single privacy policy.
There is not yet an industry consensus on how to handle “Do Not Track” signals, so our website is not yet set up to handle them. In the future, this section will discuss how the “Do Not Track” signals are honored.
Who Else Sees Your Data
Most websites who collect user data have relationships with other companies or people that result in user data being shared with those companies or people. This section explains how those relationships work, and what our relationships with others look like when it comes to your data.
Processors Who Help Us Run Our Site
Most businesses need others’ help to run properly (imagine using eBay without PayPal!). When a business hires another business or uses another business’s services, that other business is sometimes called a third party processor, or a subprocessor.
We try to keep this section up-to-date with who our subprocessors are, and what kinds of information they collect.
As of the date that these terms were last updated, our subprocessors include:
Shopify
Stripe
Affirm
Paypal
Amazon
Afterpay North America
Reach (With Reach UK Ltd)
Apple
Facebook, Instagram
USPS
UPS
DHL
Shipstation
Google
Back in Stock from SureSwift Capital
Brex Treasury
Checkout Promotions & Upsells from Store Recon
Easy GDPR + Cookie Bar
Edit Order by Cleverific app (Cleverific Inc)
Gorgias
Grin
Inventory Planner
Klaviyo
Marsello Limited
Matrixify app (ITissible, SIA)
Pepperjam
PushOwl Web Push Notifications
Rewind
Smart Wishlist
Snapchat
Stamped.io Reviews & UGC
Supermetrics
TaxJar
Pinterest
TikTok
Hotjar
Zonos
Liquid
Our subprocessors have access to a variety of information, insofar as their access to the data is necessary to help us provide services to you. Our subprocessors have access to your full name, home address, email address, IP address, date of birth, telephone number, gender, exact location, and first and third party cookies.
Third Parties We Share Information With
Businesses often have complicated relationships with other businesses. Some companies are owned by other companies, they work with companies that are owned by the same company, they engage in partnerships, and find any variety of ways to work together to bring services and products to the public.
We may currently share information with some third parties. Before we get into that, you should know that if we ever sell the company, part of the company, or any of the assets of the company, our users' data would probably be shared with the purchasing company or person. Be aware that sharing of your data might have to happen in that kind of circumstance.We may always share data, if our legal counsel believes it is required of us, in order to comply with any court order, law, or legal process, including to respond to any government or regulatory request. We may also share data, at our discretion, if we believe disclosure is necessary or appropriate to protect the rights, property, or safety of the company, our customers, or others. We may also share data to protect ours or other people's rights, or in connection with a sale, merger, etc. of the company, or sharing that is necessary for us to run our site or services.
We currently share customer data with Liquid Web, which provides us with data storage services.
Third Parties Who Share Information With Us
Some companies get information from third parties for a variety of reasons. One example might be if a website is trying to create a more personalized web browsing experience for their users. If a website knows the kind of content you like, and they’re able to share that information with another website, then that other website can also make sure to only show you content that you like. However, there can be any number of reasons why a website needs information from third parties, like for credit checks, allowing users to login through social media, or other reasons.
We don't collect any information about our users from third parties.
Children Under the Age of Majority
Our Website is not intended for anyone under the age of majority in their respective jurisdiction, and in no case is our website to be used by anyone under the age of 18 years of age. No one under the age of majority may provide any information to or on the Website. We do not knowingly collect personal information from those under the age of majority. If you are under the age of majority, do not use or provide any information on this Website or through any of its features, register on the Website, make any purchases through the Website, use any of the interactive or public comment features of this Website, or provide any information about yourself to us, including your name, address, telephone number, email address, or any screen name or user name you may use. If we learn we have collected or received personal information from a person under the age of majority, we will delete that information. If you believe we might have any information from or about a person under the age of majority, please contact us at admin@revealmint.com
Security
Our company makes efforts to provide security to our user data. It’s impossible to guarantee that data security will be 100% effective, that’s why you hear about hacks or viruses all the time now. Small companies, large companies, and even governments are sometimes the victims of cyber attacks. We take steps to protect your data through encrypting data in transit, providing for the physical security of servers, imposing binding confidentiality obligations on employees, and conducting penetration testing.
To delete your information at your request, or due to our recordkeeping practices, we use a deletion feature provided by Shopify. When we delete a user record, any orders the user might have are anonymized and the user’s data is deleted in up to 10 days. If the user is not eligible for deletion then the request remains attached to the account and automatically executed once the user becomes eligible. Shopify forwards the deletion request to all our third party processors, who must then delete any data they hold on that customer within 48 hours. We manually delete any customer data that is held by another service not linked to Shopify.
Your Choices and Rights
This section describes your choices and rights regarding how we handle your data. In order to protect user data from theft or misuse, we may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights).
You won’t have to pay anything to exercise your rights, the only exceptions being if your request is clearly unfounded, repetitive or excessive. In those situations we might also refuse to comply with your request.
We try to respond to all legitimate requests under these rights within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated as to when we expect to have the request completed.
GDPR
Even though these rights are guaranteed for EU users and residents, we are proud to grant the following options to all of our users.
The General Data Protection Regulation is a law passed in the European Union that grants EU internet users a variety of rights regarding their data. Those rights include
- The right to request access to their data;
- The right to request correction of their data;
- The right to request erasure of their data;
- The right to object to the processing of their data;
- The right to request their data in a machine readable format;
- The right to be free of decisions affecting their rights based solely on automated processes; and
- The right to withdraw their consent to undue data processing.
Legal Bases for Processing
The GDPR also requires that companies list their “Legal Basis” for each type of processing. Depending on the circumstances, our legal bases include:
- User consent;
- Necessity for the performance of our obligations to the user; and
- Necessity for the purposes of our justified legitimate interests.
For more information on how legal bases work, please visit https://gdpr-info.eu/art-6-gdpr/.
California Rights
The rights listed in this section are specific to California residents.
California's "Shine the Light" law allows California users of our website to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. We attempt to be transparent about where your data is going. If you would like to request more information or clarification about whether your data is only going to third parties as described in this privacy policy, please contact us using your preferred method in the “Contact Us” section at the end of this policy.
California users are also allowed to opt out of any sales of their personal information that may occur. Users who opt out may opt back in at any time.
California users may request that we delete their personal information, but those requests have some exceptions. One example of an exception would be if you paid for one of our products or services, and then requested that your data be deleted before we could deliver the product or service you paid for.
Processing of Data Outside of the EU
The internet is a complex, interwoven, global structure, so your data may move across the planet. Be aware that this includes areas outside of the European Economic Area.By continuing to use this website, you are telling us that you consent to these transfers, even if the countries your data travels to don’t have the same level of privacy protection as your home country.
Changes to This Privacy Policy
We ask that you check back from time to time to see if any changes have been made to this policy. Continued use of the website after any changes are made means that you accept the changes.
The date that the most recent updates went into effect is listed at the beginning of this policy.
Contact Info
If you ever have any questions, concerns, or comments about this policy or about exercising the options made available to you in this privacy policy, please contact admin@revealmint.com