Privacy Policy

1. Who We Are

Global Small Commodities is a small editorial site operated from 4398 S Lincoln St, Englewood, CO 80113, United States. For privacy questions, write to [email protected]. We're not affiliated with any gift card issuer, retailer, or payment network. We don't sell, activate, or replace gift cards. That's the issuer's job, not ours.

2. Information You Provide

When you write to us at [email protected], we receive whatever you choose to include (typically a name, email address, and your question or feedback). The message stays in our mailbox and is used only to answer your inquiry.

We do not run a web form that stores submissions on this site, and we do not ask for gift card numbers, PINs, payment card details, or government identification numbers. Please do not include such information in any message.

3. Information Collected Automatically

Like most websites, our hosting provider's server logs record standard technical information when pages are requested. This may include the IP address of the device making the request, the browser and operating system identifier, the URL requested, a timestamp, and a referring URL if one is present. Raw access logs are kept for no longer than 90 days for security and operational reasons, after which they are deleted or aggregated.

4. Categories of Personal Information

Under the categories defined by US state privacy laws (including the California CCPA/CPRA), the personal information we may collect includes:

• Identifiers: name, email address, and IP address when you contact us or visit the site.
• Internet or other electronic network activity: browser type, pages visited, and referring URLs from server logs.
• Geolocation information: approximate city-level location inferred from IP address only. We do not collect precise GPS coordinates.

We do not collect Social Security numbers, driver's license numbers, financial account numbers, biometric information, health information, or other "sensitive personal information" as defined by US state privacy laws.

5. Sources of Personal Information

Personal information comes directly from you (when you email us) and automatically from your device (when you visit the site). We do not purchase personal information from data brokers.

6. How We Use Information

We use information only for the purposes you would reasonably expect: answering your inquiries when you contact us, remembering your storage preferences, keeping the site secure and operational, detecting and preventing fraud or abuse, and understanding general usage patterns if you have opted in to analytics.

7. Sale or Sharing of Personal Information

We do not sell, rent, lease, or share your personal information for monetary or other valuable consideration. We do not engage in "cross-context behavioral advertising" as that term is defined under California's CPRA or comparable laws of other US states. We may disclose information only to service providers that help us operate the site (for example, our hosting provider and the email service that delivers your messages to us), under arrangements that limit their use of the information to performing those services, and only to the extent necessary. We may also disclose information where required to comply with a valid legal process.

8. Cookies and Similar Technologies

This site uses a minimal set of cookies and browser storage. One essential entry stores your storage preference so we remember your choice between visits. Optional analytics or functional storage items, if any are set, are placed only after you opt in through the preferences dialog on the site. See our Cookie Policy for the full inventory.

9. Third-Party Resources We Load

To function correctly, the site loads a small number of assets from third-party providers. When these assets load, the third party receives standard request information such as your IP address and user-agent string. The providers are:

• Google Fonts (fonts.googleapis.com, fonts.gstatic.com) for web typography.
• Cloudflare cdnjs (cdnjs.cloudflare.com) for the Font Awesome icon library.
• OpenStreetMap (openstreetmap.org) for the map embed on the Contact page only.

These providers operate under their own privacy policies. We do not share any personal information with them beyond what is inherent in your browser requesting the asset.

10. Your US State Privacy Rights

Depending on your state of residence, US state privacy laws (including but not limited to the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA); the Colorado Privacy Act (CPA); the Virginia Consumer Data Protection Act (VCDPA); the Connecticut Data Privacy Act (CTDPA); and the Utah Consumer Privacy Act (UCPA)) may give you the right to:

• request to know what personal information we have collected about you;
• request correction of inaccurate personal information;
• request deletion of personal information we hold about you;
• request a portable copy of personal information you provided to us;
• opt out of the sale or sharing of personal information (we do not engage in either, so this right has no current effect, but you may submit a request and we will confirm in writing);
• be free from discrimination for exercising any of these rights.

To exercise any of these rights, email [email protected] with the subject line "Privacy Request" and a description of your request. We will take reasonable steps to verify your identity and respond within the timeframe required by the law that applies to you (generally 45 days, extendable once where permitted). You may also use an authorised agent to submit a request on your behalf; we may ask for written proof of authorisation.

Global Privacy Control (GPC). Where required by applicable law, we treat a Global Privacy Control browser signal as a valid request to opt out of the sale or sharing of personal information.

11. Children's Privacy

The site is intended for adult consumers. Consistent with the federal Children's Online Privacy Protection Act (COPPA), we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information through the site, write to [email protected] so the information can be promptly removed.

12. Data Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorised access, alteration, disclosure, or destruction. These include HTTPS/TLS encryption of data in transit, access controls on the mailbox where inquiries are received, and ongoing review of our hosting provider's security posture. No internet transmission or storage system is completely secure, and we cannot guarantee absolute security.

13. Data Retention

Email inquiries are retained only for as long as necessary to address the inquiry and keep a reasonable correspondence record, typically no longer than 24 months. Raw server access logs are kept for up to 90 days. Storage preference settings remain in your browser until you clear them or up to 12 months, whichever comes first.

14. International Visitors

The site is operated from the United States and is intended for US readers. If you choose to access the site from outside the United States, any information you send will be processed in the United States under United States law, which may not provide the same level of data protection as the laws of your country.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be indicated by updating the "Effective" and "Last reviewed" dates at the top of this page. Continued use of the site after an update constitutes acceptance of the updated policy.