Privacy Policy

At The Pilgrim Letters, your privacy is important to us. This Privacy Policy explains how we collect, use, and protect your personal information when you visit our website, subscribe to our letters, or interact with our services. By using our website, you agree to the practices described here, which comply with applicable privacy laws including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA).

Information We Collect

We collect personal information that you provide directly, such as your name, mailing address, email address, and payment details when you subscribe, make a purchase, or contact us. We may also automatically collect non-personal information when you interact with our website, such as your IP address, browser type, device details, and browsing behavior. In addition, we use cookies and similar technologies to better understand how visitors use our website and to improve your browsing experience.

How We Use Your Information

We use the information we collect to process and deliver your subscriptions, fulfill orders, and communicate with you about your account or updates you have requested. Your information may also be used to improve the design and functionality of our website, to ensure the security of our services, and to comply with legal obligations. Where required, we process your information with your consent, and under GDPR we rely on lawful bases such as contractual necessity, legal compliance, legitimate interests, or explicit consent.

Sharing of Information

The Pilgrim Letters LLC does not sell or rent your personal information to third parties. We may share your data only with trusted service providers, including payment processors, shipping partners, and website hosting providers, who assist us in operating our services and are bound by strict confidentiality obligations. In limited circumstances, we may also disclose information when required by law or necessary to protect our legal rights, property, or safety.

Data Security

We take appropriate administrative, technical, and organizational measures to safeguard your personal information against loss, misuse, unauthorized access, or disclosure. While we make every effort to protect your data, no method of transmission or storage is completely secure, and we cannot guarantee absolute protection. We retain personal information only as long as necessary to fulfill the purposes described in this policy and to meet legal or accounting obligations, after which it will be securely deleted or anonymized.

Your Rights

If you are located in the European Union or the United Kingdom, you have rights under GDPR including the right to access, correct, or delete your personal data, the right to withdraw consent, the right to object to certain processing, and the right to request data portability. If you are a California resident, you have rights under the CCPA/CPRA to know what personal information we collect, to request access or deletion of your data, and to opt out of the sale or sharing of personal information, though we do not sell data. We will never discriminate against you for exercising these rights. Requests to exercise any of these rights can be made by contacting us directly.

Cookies and Tracking

Our website uses cookies and similar technologies to enhance your browsing experience, analyze traffic, and remember your preferences. Some cookies are essential to the operation of the site, while others are optional and help us improve performance and personalize content. You may manage or disable cookies through your browser settings at any time, although certain features of the website may not function properly without them.

International Data Transfers

If you access our services from outside the United States, please note that your information may be transferred and stored in the United States. We ensure that any such transfers comply with applicable data protection laws, and where required, we implement safeguards such as standard contractual clauses to protect your information.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Any updates will be posted on this page with a new effective date. Continued use of our website and services after these changes constitutes your acceptance of the revised policy.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at [email protected] you are located in the EU or UK, you may also contact your local Data Protection Authority for additional information or to lodge a complaint.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture may be visible to the public in the context of your comment.