Privacy Policy

Mattheessen's ("we," "us," or "our") respects your privacy. This Privacy Policy explains what personal information we collect, why we collect it, how we use and share it, and your rights. This policy applies to our website, mobile site, in‑store transactions at our locations (including Key West and Nashville), and orders shipped to you.

Business Contact

Mattheessen's
419 Duval Street, Key West, FL
Phone: (305) 923‑5418
Email: privacy@mattheessens.com

Information We Collect

Information You Provide

Name, email, billing and shipping address, phone number, account password, order history, and other information you submit.

Transaction Data

Purchase details (cookies, fudge, macaroons), payment confirmation, delivery and pickup choices.

Payment Data

Payments are processed via PayPal. We do not store full card numbers on our servers; payment details are handled by PayPal.

Device and Usage Data

IP address, browser type, pages viewed, referring/exit pages, operating system, cookie identifiers, and analytics.

Communications

Customer service messages, reviews, and marketing preferences.

Social Login Data

If you sign in with a social account, we may collect profile information you authorize.

How We Use Your Information

• To process and fulfill orders, including payment, shipping, and confirmations.
• To communicate about orders, account matters, customer service, and (where permitted) marketing and promotions.
• To personalize and improve the website and our offerings.
• To detect and prevent fraud and comply with legal obligations.
• For analytics and advertising purposes, including retargeting on social media.

Legal Basis for Processing (Where Applicable)

• Performance of a contract to fulfill orders.
• Consent for marketing and cookie use where required.
• Legitimate interests for fraud prevention, service improvement, and advertising.
• Legal compliance when required.

Cookies and Tracking Technologies

We and our partners use cookies and similar technologies to operate the site, remember preferences, enable functionality, and analyze traffic. We and our advertising partners may use collected data for retargeting and interest‑based advertising on social media.

You can control cookie settings through your browser and opt out of certain analytics/advertising tools; disabling cookies may affect site functionality.

Third‑Party Services and Sharing

Service Providers

We share data with PayPal (payment processing), shipping carriers, email/marketing platforms, analytics providers, and other vendors who perform services for us.

Advertising Partners

We may share or allow access to data for retargeting/advertising on social platforms.

Legal Requests

We may disclose information to comply with laws or to protect rights, property, safety, or to respond to lawful requests.

Business Transfers

Customer information may be transferred in connection with a merger, sale, or business reorganization.

Data Retention

We retain personal information as long as necessary to provide services, fulfill orders, comply with legal obligations (including tax records), resolve disputes, and enforce agreements. Retention periods vary by data type and legal requirements.

Your Choices and Rights

Access and Correction

Access or update your account information by logging into your account or contacting us.

Deletion

Request deletion of personal data; we may retain certain records for legal or tax reasons.

Marketing Opt‑Out

Opt out of promotional emails via the unsubscribe link or by contacting privacy@mattheessens.com.

Advertising Opt‑Out

To opt out of interest‑based advertising/retargeting, use the opt‑out tools provided by the advertising platforms or visit your device/browser ad settings.

California and Other Rights

If you are a resident of California or another jurisdiction with similar laws, you may have additional rights (access, delete, opt out of sale). We do not sell personal information for money; contact us to exercise applicable rights.

Security

We use administrative, technical, and physical measures intended to protect personal information. No system is completely secure; we cannot guarantee absolute security.

Children's Privacy

Our services are not directed to children under 16. We do not knowingly collect personal information from children under 16. If we learn we have collected such information, we will take steps to delete it.

International Transfers

Data may be processed or stored in the United States or other countries where our service providers operate. We apply appropriate safeguards as required by law.

Changes to This Policy

We may update this policy. We will post the revised policy with a new effective date. Significant changes will be highlighted or otherwise communicated when required.

Notice

This Privacy Policy is for informational purposes and does not constitute legal advice. Consider consulting legal counsel to ensure compliance with laws applicable to your customers (for example GDPR, CCPA/CPRA).