Privacy policy

Last updated: October 8, 2026

This Privacy Policy explains how Gnomish Bazaar ("we," "us," or "our") collects, uses, and shares your personal information when you visit or make a purchase from gnomishbazaar.com (the "Site"), contact us, or sign up for our emails.

Information we collect

Information you give us. When you make or try to make a purchase, we collect your name, billing address, shipping address, payment details, email address, and phone number ("Order Information"). If you email us or use our Contact form, we keep the messages you send us and our replies. If you sign up for our emails, we keep your email address and your subscription preferences.

Payment information. Payments are handled by our payment providers (for example, Shopify Payments, Shop Pay, or PayPal, depending on the payment method you choose at checkout). We do not see or store your full credit card number.

Information collected automatically. When you visit the Site, we and our service providers automatically collect information about your device and how you use the Site. This includes your browser type, IP address, time zone, the pages and products you view, the websites or search terms that referred you, and how you interact with the Site ("Device Information"). We collect Device Information using:

  • Cookies: small data files placed on your device, often with an anonymous unique identifier. You can control or delete cookies through your browser settings. For more information, visit https://allaboutcookies.org.
  • Log files: records of activity on the Site, including IP address, browser type, internet service provider, referring and exit pages, and date and time stamps.
  • Tags, pixels, and web beacons: small pieces of code that record how you browse the Site and whether you complete a purchase.

"Personal Information" in this policy means Order Information, Device Information, and the other information described above.

How we use your information

We use your Personal Information to:

  • process and ship your orders, take payment, and send order confirmations, invoices, and shipping updates;
  • answer your questions and provide customer service;
  • screen orders for possible risk or fraud;
  • manage our inventory and keep our business, tax, and accounting records;
  • understand how customers use the Site and improve it;
  • measure how well our advertising works, and show you ads for our products as described below; and
  • send you marketing emails, if you have signed up for them.

AI assistants

We're a small shop, and we use AI assistants, including Shopify's built-in AI assistant, to help us run it. These tools may process your Order Information and the emails you send us. For example, they help us process and track orders, check whether an order has shipped, remind us of follow-ups we've promised you, manage inventory and restocks, and keep our books. A person at Gnomish Bazaar reviews this work and makes the final decisions. We do not use AI to make decisions about you that have legal or similarly significant effects.

We configure our AI providers so our customers' personal information is not used to train their AI models, and we choose providers whose terms say so. We share only what's needed for the task.

How we share your information

We do not sell your personal information for money. We share it with companies that help us run our store, and only as much as they need to do their job:

  • Our e-commerce platform: Shopify (see "Shopify" below).
  • Payment providers: to process your payment and help prevent fraud.
  • Shipping and postage services: such as Pirate Ship and the carriers that deliver your order (USPS, UPS, or FedEx), to buy postage, ship your order, and provide tracking.
  • Email services: to run our customer service inbox and to send order emails and the occasional newsletter.
  • Google: for analytics, advertising measurement, and customer reviews (see "Google services" below).
  • AI and automation tools: as described in "AI assistants" above.
  • Accounting and tax professionals: as needed for bookkeeping and tax filings.

We may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant, or other lawful request, to protect our rights or the safety of others, or as part of a sale or transfer of our business.

Some of the advertising and Shopify features described below may be considered "selling," "sharing," or "targeted advertising" under the privacy laws of some U.S. states. You can opt out as described in "Your choices about advertising and data sharing."

Shopify

Our store is hosted by Shopify. Shopify collects and processes your personal information when you visit and make purchases on our Site. This includes providing services to us that use information from your interactions with our store, with other merchants, and with Shopify ("Enhanced Services"), such as personalization, store performance, fraud prevention, analytics, and more relevant advertising. To provide these services, information you submit to our Site will be shared with Shopify and other third parties that may be located in other countries, including Canada and the United States. Shopify's use of personal information to place or deliver advertising based on your activity with other merchants and with Shopify may be considered "sharing" or "targeted advertising" under some U.S. state privacy laws.

If you use Shop Pay or the Shop app, Shopify also handles your information under its own Consumer Privacy Policy.

Google services

Google Analytics and the Google tag. We use Google Analytics and the Google tag (through the Google & YouTube app for Shopify) to understand how visitors use the Site and to measure whether our Google Ads lead to visits and purchases. These tools use cookies and similar technologies to collect Device Information and details of purchases made on the Site. You can learn how Google uses information from sites that use its services at https://policies.google.com/technologies/partner-sites. You can opt out of Google Analytics by installing Google's browser add-on: https://tools.google.com/dlpage/gaoptout.

Google Ads. We advertise on Google (for example, Google Search, Google Shopping, and YouTube). We do not display ads on our Site. Google may use cookies and similar technologies to measure the results of our ads and, where allowed, to show our ads to people who have visited our Site ("remarketing"). Google may combine this with other information it has about your activity on other websites and apps.

Google Customer Reviews. After you check out, you may be offered the option to take a survey from Google Customer Reviews. If you choose to take part, we share your email address, order number, delivery country, and the expected delivery date of your order with Google. Google may also receive the product identifiers (GTINs) for the items you bought and, if you're signed in to your Google Account, information about that account. Google uses this to send you one survey after your order is delivered. Third parties, including Google, may place and read cookies on your browser or use web beacons or similar technologies to collect information in connection with the Google Customer Reviews program. Google may receive information about transactions conducted on our Site. Google's use of this information is covered by Google's Privacy Policy: https://policies.google.com/privacy.

Your choices about advertising and data sharing

  • Your Privacy Choices page: opt out of the "sale" or "sharing" of your personal information and of targeted advertising, for our Site and Shopify, at https://gnomishbazaar.com/pages/data-sharing-opt-out.
  • Global Privacy Control (GPC): if your browser sends a GPC signal, we treat it as a request to opt out of the sale or sharing of your personal information and of targeted advertising, as supported by our store platform.
  • Google: turn off personalized ads in Google's My Ad Center at https://myadcenter.google.com, and opt out of Google Analytics at https://tools.google.com/dlpage/gaoptout.
  • Industry opt-outs: you can also opt out of interest-based ads from many companies through the Digital Advertising Alliance at https://optout.aboutads.info. To learn more about how online advertising works, visit https://thenai.org/about-online-advertising/.
  • Cookies: you can block or delete cookies in your browser settings. Some parts of the Site, such as the shopping cart, may not work without them.

Do Not Track

Some browsers send a "Do Not Track" signal. Because there is no common standard for how to respond to these signals, our Site does not change its data collection when it receives one. We do honor Global Privacy Control signals as described above. Other parties, such as Google, may collect information about your online activities over time and across different websites when you use our Site.

Marketing emails

We send marketing emails only to people who have signed up for them, and only a few times a year. You can unsubscribe at any time using the link at the bottom of any marketing email or by contacting us. We'll still send you emails about your orders.

Your rights

Wherever you live, you can ask us to:

  • tell you what personal information we have about you and give you a copy;
  • correct or update it; or
  • delete it.

To make a request, email us at help@gnomishbazaar.com or write to the address below. We may need to verify your identity first, and we'll respond within a reasonable time. We won't treat you differently for making a request. If you disagree with how we handled your request, reply to our response and we'll take another look. Some information, such as order, tax, and accounting records, must be kept for a period of time even if you ask us to delete it (see "Data retention").

If you are in the European Economic Area, the United Kingdom, or Switzerland, we process your information to fulfill our contract with you (for example, when you place an order), with your consent where required, and for our legitimate business interests described in this policy. You may also have the right to restrict or object to processing, to data portability, to withdraw consent, and to complain to your local data protection authority. Your information will be transferred to and processed in the United States, Canada, and other countries.

Data retention

We keep order records, including your name, addresses, contact details, and what you bought, for at least seven years for tax and accounting purposes. Our store platform keeps order records until they are deleted, so they may be kept longer than seven years. Customer service emails are kept as long as needed to help you and keep a record of your requests.

If you ask us to delete your information, we will remove or anonymize your personal details (such as your name, email address, and addresses) where we can. We may keep the basic record of a sale, such as what was sold, when, and for how much, as long as we need it for legal, tax, and accounting purposes.

Security

We take reasonable steps to protect your personal information, and we choose service providers that do the same. No method of transmission or storage is completely secure, so we can't guarantee absolute security.

Children

Our Site is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Changes

We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons. When we do, we'll post the updated policy on this page and change the "Last updated" date at the top. If we make a significant change, we'll also post a notice on our Site.

Contact us

If you have questions about our privacy practices, want to make a request, or want to make a complaint, please contact us:

  • Email: help@gnomishbazaar.com
  • Our Contact form on the Site
  • Mail: Gnomish Bazaar, 4641 Post St #4933, El Dorado Hills, CA 95762, United States