Who we are
Birch & Bracken is a trade name of Anaya, a business registered in Israel (Merhav Am, Israel). We are responsible for the personal information described here. Email us at hello@birchbracken.com.
What we collect
Order details: your name, email address, phone number, shipping address, the items you buy and the amounts paid.
Payment: payments are processed by PayPal. We receive confirmation of the payment and transaction identifiers, never your card or bank details.
Technical data: our hosting provider processes your IP address and browser information to deliver the site and protect it from abuse. Your shopping bag is kept in your browser's session storage.
Analytics: shopping and purchase events (such as viewing an item, starting checkout or completing an order) for site analytics with Google Analytics, which sets its own cookies.
Marketing measurement: the same events together with your browser details, IP address, ad click identifiers (from Meta and Google) and, for purchases, your email address, phone number, name and city in hashed (one-way encrypted) form, shared with Meta and Google to measure and improve our ads. Meta and Google may set their own cookies.
Analytics and marketing measurement are on when you visit our store, and you can turn either off at any time (see Your privacy choices below). If you visit from the European Economic Area, the United Kingdom, Switzerland or Quebec, they stay off unless you turn them on.
Waitlist
If you join our waitlist before checkout opens, we keep your email address to send you one message when ordering becomes available. Ask us anytime and we will remove it.
Reviews
After delivery we may email you once to ask for a review. If you write one, we show your first name and initial, your country and your size, never your email or address. Every review is read before it appears, and we do not remove a review because it is critical. Ask us anytime and we will remove yours.
Your account
You can sign in to your account with Google. Google tells us your name, your email address, that Google has verified that email, and an identifier for your Google account; we ask for nothing else, and we never see your Google password. Google's own privacy policy applies to your Google account.
Your account shows the orders placed with the same email address, the addresses they were sent to, and the reviews you wrote. Only you see it once signed in; it never shows another customer's orders. We keep a sign-in cookie in your browser for up to 30 days, or until you sign out. You can delete your account at any time from the account page; your orders stay with us as accounting records.
Chat
If you use the chat on our site, its replies are written by a digital assistant using OpenAI, which processes your messages on our behalf. We keep the conversation for 90 days, to answer you and to improve our service, and then delete it. Please don't share payment details in the chat.
To check an order in the chat, you enter its reference and your checkout email in a form; we use them only to find your order, and your email is not sent to OpenAI. If you ask for a person, we keep the email you give us to reply to you.
How we use it
To process and deliver your order, provide customer service, take payment and prevent fraud, meet our legal and tax obligations, and, unless you opt out, understand how our store is used and measure and improve our marketing.
Who we share it with
Our logistics and delivery partners, who receive your name, address and phone number to deliver your order; PayPal, to process payment; Cloudflare, which hosts our store; OpenAI, which writes the replies of the chat on our site; Google, for analytics and, if you choose, to sign you in to your account; and, unless you opt out, Meta and Google for advertising measurement.
We do not sell your personal information for money. Under California law, sharing information with Meta and Google for advertising measurement may count as "sharing" for cross-context behavioral advertising, or as a "sale". You can opt out at any time, as described below.
Your privacy choices
Use the "Your Privacy Choices" link at the bottom of our shop page to turn analytics or marketing measurement off (or back on). Your choice applies right away, and shopping works the same either way.
We honour Global Privacy Control (GPC): if your browser sends this signal, we treat it as an opt-out of sharing for advertising, and marketing measurement stays off.
When you opt out, we stop sharing your activity with Meta and Google for advertising and do not send your later purchases to them. Shopping, checkout and order emails are not affected.
International transfers
We operate from Israel and our providers process data in other countries, including the United States. We use providers that protect personal information as required by applicable law.
How long we keep it
We keep order and accounting records for as long as tax and accounting laws require. Chat conversations are deleted after 90 days. Your account stays until you delete it, and sign-in sessions end after 30 days. Turning off analytics or marketing measurement deletes measurement events we have not yet sent.
Your rights
Depending on where you live (for example California, Canada, Australia or New Zealand), you can ask to access, correct or delete your personal information, opt out of sharing for advertising, and withdraw consent at any time. We will not treat you differently for using these rights. Email us at hello@birchbracken.com. We reply within 30 days.
Children
Our store is not directed to children under 16, and we do not knowingly collect their information.
Changes
We will post any changes to this policy on this page with a new date.