Letting Go cafe, Inc – Privacy Policy

Who we are

Our website is: https://lettinggocafe.com.

What personal data we collect and why we collect it

While you visit our site, we’ll track:

• Products you’ve viewed: we’ll use this to, for example, show you products you’ve recently viewed
• Location, IP address and browser type: we’ll use this for purposes like estimating taxes and shipping
• Shipping address: we’ll ask you to enter this so we can, for instance, estimate shipping before you place an order, and send you the order!

We’ll also use cookies to keep track of cart contents while you’re browsing our site.

Note: you may want to further detail your cookie policy, and link to that section from here.

When you purchase from us, we’ll ask you to provide information including your name, billing address, shipping address, email address, phone number, credit card/payment details and optional account information like username and password. We’ll use this information for purposes, such as, to:

• Send you information about your account and order
• Respond to your requests, including refunds and complaints
• Process payments and prevent fraud
• Set up your account for our store
• Comply with any legal obligations we have, such as calculating taxes
• Improve our store offerings
• Send you marketing messages, if you choose to receive them

If you create an account, we will store your name, address, email and phone number, which will be used to populate the checkout for future orders.

We generally store information about you for as long as we need the information for the purposes for which we collect and use it, and we are not legally required to continue to keep it. For example, we will store order information for XXX years for tax and accounting purposes. This includes your name, email address and billing and shipping addresses.

We will also store comments or reviews, if you choose to leave them.

Personal data is not just created by a user’s interactions with your site. Personal data is also generated from technical processes such as contact forms, comments, cookies, analytics, and third party embeds.

By default WordPress does not collect any personal data about visitors, and only collects the data shown on the User Profile screen from registered users. However some of your plugins may collect personal data. You should add the relevant information below.

Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Contact forms

By default, WordPress does not include a contact form. We keep contact form submissions (name, email, and phone) for a certain period for customer service purposes, and may use the information submitted for marketing purposes with the option to “opt out.”

Cookies

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Analytics

We use WooCommerce Analytics to determine how to better understand the habits and activity of our customers and visitors to the website. This information is not sold and shared outside of the Letting Go Cafe Inc administrators for our WooCommerce online store.

By default WordPress does not collect any analytics data.

Who we share your data with

If you request a password reset, your IP address will be included in the reset email. By default WordPress does not share any personal data with anyone.

How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where your data is sent

Visitor comments may be checked through an automated spam detection service.

European data protection law requires data about European residents which is transferred outside the European Union to be safeguarded to the same standards as if the data was in Europe. We maintain these standards using third party providers.

Contact information

For privacy-specific concerns. you can email “info@LettinGoCafe.om” and place the words “Privacy Policy Concern/Question” in the subject line of your email.

How we protect your data

IYour Data Protection Rights

Under applicable data protection laws, depending upon the country in which you reside, and subject to applicable exceptions and definitional differences among various laws, you may have certain rights about how your Personal Information is collected, stored, used and shared.

Whether you decide to exercise your privacy rights or not, we will not discriminate or deny you services, charge you different prices, or provide you with a different level of service solely for exercising your privacy rights. Although, certain personalized services for PayPal customers may not provide the same level of personalization if you decide to limit the amount of Personal Information you share with us.

How you can exercise your rights

We recognize the importance of your ability to control the use of your Personal Information and provide several ways for you to exercise your privacy rights.

If you, or an authorized agent, where permitted, want to exercise any of your rights relating to your Personal Information in your account profile(s), please follow the instructions on how to exercise your data protection rights below.

Even if you do not have a PayPal account (for example, where you use Pay without a PayPal account), you may find instructions to submit a privacy-rights request.

We may first need to verify who you are before we can respond to your request. If permitted or required under privacy laws, we may ask you to provide us with information necessary to reasonably verify your identity before responding to your request. We will compare the information you submit against our internal business records to verify your identity. If we can’t verify your identity, we may not be able to fulfill your request, unless the right does not require verification. If we deny your request in whole or in part, you may have the right to be informed of the reasons we have for not taking action and regarding the possibility to appeal our decision or lodging a complaint with a supervisory authority and seeking judicial remedy. In such circumstances, we will provide you with information regarding the appeals process. You can also contact us, as noted in above.

Authorized agents

If we receive your request from an authorized agent, we may ask for evidence that you have provided such agent with a power of attorney or that the agent otherwise has valid written authority to submit requests to exercise rights on your behalf, including a guardianship, conservatorship or other protective arrangement.

Your rights

Your right to know and request a copy of the Personal Information. If you want to request the Personal Information that we’ve collected about you, you have choices:

• Log in to your PayPal account(s) or profile management portal, and submit a request.
• If you reside in the United States, Call or contact us and request that we provide you with the data we’ve collected. For other countries, please refer to Our Contact Information.

Your right to request a list of specific third parties. If you want to request a list of the specific third parties to which we have disclosed your Personal Information:

• If you reside in the United States, Call or contact us and request that we provide you with the data we’ve disclosed. For other countries, you may also submit a request through the Help Center.

Your right to correct your Personal Information. If you want to correct certain of your Personal Information, you can:

• Log in to your PayPal account(s) or profile management portal, and submit a request.
• If you reside in the United States, Call or contact us and request that we provide you with the data we’ve collected. For other countries, please refer to Our Contact Information.

Your right to delete your Personal Information. If you want to delete certain of your Personal Information, you can:

• Log in to your PayPal account(s) or profile management portal, and delete any information that you’ve previously added. For example, you may delete your non-primary addresses in your settings.
• If you reside in the United States, Call or contact us and request that we provide you with the data we’ve collected. For other countries, please refer to Our Contact Information.
• Close your PayPal account(s) or profile.

If you close your PayPal account(s) or profile, delete, or request that we delete Personal Information, we still need to keep some Personal Information as explained in How Long Do We Store Your Personal Information so we can, where permitted by applicable law:

• Complete a transaction, provide goods or services you requested, or comply with our promises to you in the user agreement or other contract you have with us;
• Detect and prevent malicious, fraudulent, or illegal activity;
• Protect your (or another person’s) legal rights, including the right to free speech;
• Manage our internal business processes that are reasonably related to your expectations when using our Services;
• Comply with laws and other legal or governmental processes; and
• Other exempt purposes under applicable law.

Your right to object to legitimate interest processing. Where applicable by law, if you want to object to our use of your Personal Information to pursue our legitimate interests or those of a third party, you can refer to Our Contact Information of this Privacy Statement to contact us. See Our Lawful Basis for Processing Personal Information for more information.

Your right to withdraw your consent. If you want to withdraw consent to our use of your Personal Information in circumstances where we processed it with your consent, you can refer to Our Contact Information of this Privacy Statement to contact us. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your Personal Information conducted in reliance on a lawful processing ground other than consent.

Your right to object to or opt out of Profiling in furtherance of Automated Decisions that produce legal or similarly significant effects on you and related rights.

• As explained in AI and Automated Decision Making we may use Automated Decision Making technology and Agentic AI Tools.
• In the United States, these are either exempt practices or do not trigger an opt-out right under applicable United States privacy laws. However, in other jurisdictions, individuals may exercise the right to seek a review of, or to object to and/or revoke consent for, an Automated Decision that has legal or similarly significant effects on them (together with the relevant Profiling), where this right exists, by contacting us. We will then review the decision, taking into account relevant additional circumstances.
• If you are not approved under the Automated Decisions, you may not have access to our services. PayPal has several safety mechanisms to ensure the decisions are appropriate. These mechanisms include ongoing overviews of our decision models and random sampling in individual cases. If you have any concern about the outcome, you can contact us, and we will determine whether the procedure was performed appropriately.

Your rights related to Sensitive Personal Information. Where required by law, we will obtain your consent before collecting and processing your Sensitive Personal Information. You can withdraw your consent by contacting us and refer to Our Contact Information of this Privacy Statement.

• We will also only use your Sensitive Personal Information in accordance with the consent you have given or for certain permitted purposes to the extent permitted or exempt under applicable law, which is why it is not necessary to exercise a right to limit use and disclosure of Sensitive Personal Information under the United States privacy laws. Under the United States privacy laws, these permitted purposes include providing the goods or services you requested; preventing, detecting, and investigating security incidents; resisting malicious, deceptive, fraudulent, or illegal actions and prosecuting those responsible; verifying or maintaining the quality or safety of a product, service, or device; and ensuring physical safety of natural persons. The exemption we rely on for precise geolocation is based on the Gramm-Leach-Bliley Act.

Your rights related to disclosure of Personal Information to third-parties for direct marketing purposes: You may request certain details about how your Personal Information is disclosed to third parties for direct marketing purposes. In the United States, Call or contact us.

Understanding your choices

You can control how Personal Information is collected or disclosed, as well as how we communicate with you. Here are some of the ways you can customize your choices.

Choose how we collect Personal Information

You may choose to limit the Personal Information you provide when our apps or Services request it. To help make choices that are right for you, it’s important to understand that Personal Information helps us provide a richer, more personalized experience for you.

Also, some Personal Information is required for our Services to function. For example, sharing your contacts helps make it easier for you to find the people you want to send money to. If you choose not to share your contacts with us, you can still use our mobile apps, but some actions may not be as fast or easy as it would be if you shared your contacts. Another example is creating an account or Fastlane profile with us. If you choose not to provide information that is required for an account or Fastlane profile to function, like your name and email address, we will not be able to create an account or Fastlane profile for you.

Choose how linked accounts collect and use Personal Information

If you link your account(s) to a third-party service, you may be able to manage how your Personal Information is collected, used, and shared by them. Read the third parties’ privacy policies to see the choices they offer you.
You can control which third-party services you link to your account and what Personal Information they can collect about you. For example, to manage the permissions, go to the Security settings in your account(s).

Choose what we disclose with other Users

Some Personal Information may be seen by other Users. You may be able to adjust or turn off this setting in the Data and Privacy section in your account settings.

Choose what we share with Partners and Merchants for Personalized Shopping

Unless we are required to obtain your consent, we share Personal Information collected after November 27, 2025 (or from earlier if you consent) for personalized shopping experiences in the United States. Personal Information we disclose includes, for example, products, preferences, sizes, and styles we think you’ll like. To opt-out of Personal Information sharing with Partners and Merchants for personalized shopping experiences, log into your PayPal account and edit your preferences in the Data and Privacy setting. If you opt-out, we will continue to disclose your Personal Information as necessary to complete transactions you initiate but will not disclose Personal Information to Partners and Merchants for personalized shopping experiences.

Choose how we communicate with you

Your choices about how we communicate with you differ depending on the purpose of the message, how it is delivered and other requirements under applicable law. Some messages are considered optional, and some are necessary for you to manage your accounts or Fastlane profile with us. We use email, text messages, push notifications on your mobile device, and even phone calls or paper mail depending on the situation, your preferences and applicable law.

You can click the unsubscribe link in a PayPal, Hyperwallet, or Fastlane marketing email, opt-out of a text message by replying “STOP,” or turn off notifications on your device. You can also change your account’s notification settings or the notification preferences on your device.

You won’t be able to opt-out of messages that are considered necessary for the Services, such as digital receipts and emails that alert you to changes in your account(s) or Fastlane profile’s status. You may be able to decide how we send those messages, such as by email, phone, text message, or a notification on your mobile device.

What data breach procedures we have in place

In this section you should explain what procedures you have in place to deal with data breaches, either potential or real, such as internal reporting systems, contact mechanisms, or bug bounties.

What third parties we receive data from

We use Google for Woo Commerce. this means we may be storing personal data or sharing data with an external service. Learn more about what data is collected by Google and what you may want to include in your privacy policy.

What automated decision making and/or profiling we do with user data

Since our customers do not apply for credit, or aggregate their data into an advertising profile – you r information is not used to make decisions about aggregated data.

Akismet

We collect information about visitors who comment on Sites that use our Akismet Anti-spam service. The information we collect depends on how the User sets up Akismet for the Site, but typically includes the commenter’s IP address, user agent, referrer, and Site URL (along with other information directly provided by the commenter such as their name, username, email address, and the comment itself).