Third Party Services

Payment Processing & Financial Data


EdenFantasys uses secure third-party payment providers to process customer transactions. These services ensure that sensitive financial data is handled in compliance with global security standards, such as PCI DSS.

Our payment partners include:
  • Braintree (a PayPal company) — for credit/debit card payments and tokenized storage
  • PayPal Checkout — as a standalone alternative for PayPal account holders
  • Apple Pay and Google Pay — processed via Braintree's mobile wallet integrations


What We Collect


To complete your purchase, we collect the following information at checkout:
  • Full name
  • Credit or debit card details (card number, expiration date, CVV)
  • Billing and shipping address
  • Optional: email address, phone number
  • Technical data: IP address and device information (identified prior to checkout)

We do not store your card details. Payment credentials are securely tokenized by Braintree for future use (e.g., refunds, reorders).

How Your Data Is Used


We use this data to:
  • Process your transactions and confirm your orders
  • Detect and prevent fraud (including device analysis and risk scoring)
  • Respond to customer service inquiries and refund requests


How Third Parties Use and Share Your Data


All payment methods are processed through Braintree or PayPal, who may collect and use additional information for the purposes of:
  • Payment authorization and settlement
  • Fraud detection and risk management
  • Dispute resolution (e.g., chargebacks)
  • Compliance with legal and financial regulations

These providers may share data with:
  • Payment networks (e.g., Visa, Mastercard)
  • Issuing banks or card providers
  • Authorized sub-processors and analytics services
  • Law enforcement or regulatory bodies, where required

For more information, see:

International Transfers


As part of global processing operations, your payment data may be transferred outside the U.S. Our processors implement adequate safeguards, such as Binding Corporate Rules and Standard Contractual Clauses, to protect your information in accordance with applicable laws.

Your Rights


You have the right to request access to, correction of, or deletion of personal information you have provided during the checkout process. Requests related to data directly collected and controlled by EdenFantasys (such as order records, email, shipping address, or support interactions) can be submitted to us at privacy@edenfantasys.com.
  • Please note: EdenFantasys does not control the data collected directly by our payment processors (such as Braintree, PayPal, Apple Pay, or Google Pay). We cannot alter or delete data stored within their systems. If you wish to exercise your rights regarding payment-specific data—such as card information, transaction metadata, or device-based risk scoring—you must contact the relevant provider directly using the links above.
  • We will make a reasonable effort to assist in directing your inquiry where appropriate, but we cannot act as a proxy or agent for third-party services.


Shipping & Logistics Providers


EdenFantasys partners with trusted third-party logistics providers to deliver your orders safely and efficiently. These include:
  • UPS (United Parcel Service)
  • FedEx
  • DHL
  • United States Postal Service (USPS)

In order to fulfill shipments, we share the following information with these carriers:
  • Full name
  • Shipping address
  • Phone number (when expedited delivery service selected)
  • Order ID or reference number
  • Order item details (when required for customs forms on international deliveries)

This information is used solely for the purpose of order delivery, including:
  • Generating and printing shipping labels
  • Facilitating physical transportation of the package
  • Resolving shipping issues (e.g., failed delivery, lost parcels)
  • Submitting required customs documentation when applicable

EdenFantasys does not authorize logistics providers to use your information for marketing or profiling. However, some carriers—such as UPS and FedEx—may initiate independent contact with customers who are registered users of services like MyUPS or FedEx Delivery Manager. These interactions are governed by the respective carrier’s privacy policy and do not involve EdenFantasys.
Our shipping system is integrated with these carriers through secure APIs and is hosted on a domain separate from our main website. The backend system communicates with the front-end solely via controlled, authenticated internal APIs.
We retain shipping records, including shipment metadata, tracking logs, and label details, for up to one year following the order. These records support:
  • Customer service and delivery verification
  • Internal performance monitoring
  • Legal and regulatory compliance

After one year, these records are securely deleted in accordance with our retention policy.
You may review each carrier's privacy policy to understand how they manage shipping data:

Third-Party Login (OAuth Authentication)


EdenFantasys.com provides optional login functionality through trusted third-party identity providers using OAuth, a secure authorization protocol. This allows you to log in using credentials from services you already use, without sharing your password with us.
The third-party providers we support include:
  • Facebook (Meta)
  • Google
  • Amazon

When you choose to log in via one of these providers, we may receive limited information from your third-party account, such as:
  • Your name (as it appears on the provider account)
  • Your email address
  • Your profile picture (if available and permitted by the provider)

This information is used solely to:
  • Authenticate your identity
  • Create or associate your EdenFantasys account
  • Facilitate login and account access

We do not request or access additional profile details (such as contact lists, calendars, or behavioral data), do not post on your behalf, and do not use this information for advertising, tracking, or profiling.
You can revoke EdenFantasys’ access to your login credentials or profile information at any time by managing your preferences in:
Please refer to the respective privacy policies for each provider:
Use of these login options is entirely voluntary, and you may choose to create or access your EdenFantasys account using your email address and password instead.

Tawk.to Live Chat (Script-Based Tracker)


We use a third-party chat service, Tawk.to, to provide real-time customer support directly on our website. This service is implemented via a JavaScript snippet embedded on our pages. It allows you to initiate conversations with our team, submit inquiries, and receive assistance while browsing.

What Information is Collected


When you use the chat feature, EdenFantasys may collect:
  • Your name (manually entered)
  • Your email address (if you choose to provide it)
  • The transcript of the chat conversation

While we do not store any additional visitor data beyond this, Tawk.to may collect technical and behavioral information from users, including:
  • IP address and geolocation
  • Device and browser type
  • Page URLs visited on our site
  • Date and time of interactions
  • Cookies used to maintain session state (e.g., __tawkuuid)

For a detailed list of subprocessors and infrastructure used by Tawk.to (e.g., DigitalOcean, AWS, Twilio, Google, PostHog), you can view their DPA Annex II.

Use and Purpose


  • To provide real-time support and troubleshooting
  • To maintain chat history and allow follow-up communication
  • To support offline messaging when live agents are unavailable

We do not use chat transcripts for profiling or marketing, and we do not enrich or connect them to other behavioral data about you.

Data Storage and Rights


All chat data is securely stored on Tawk.to’s servers. EdenFantasys does not download or store this data independently. Tawk.to acts as a data processor, and EdenFantasys retains control over which data is collected and for what purpose.
You have the right to access or request deletion of any personal data exchanged through the chat. For such requests, contact us at privacy@edenfantasys.com.
For further information, see Tawk.to’s Privacy Policy and CCPA Statement.

AI-Powered Search


EdenFantasys uses an AI-powered search service to help visitors quickly discover relevant products and categories. This feature is powered by a third-party GPT model that interprets natural language input to match user queries with our product catalog.

How It Works


When you type into the search bar on our website, your input is transmitted to an externally hosted GPT model via a secure API. The model uses semantic matching techniques to return product results based on your query, product metadata, and search context.

What Data Is Shared


  • Only your search terms are sent to the GPT engine.
  • No personally identifiable information (PII) — such as your name, email, order history, or account details — is included in or inferred from the request.
  • EdenFantasys does not intentionally associate user identities with individual searches.

How Data Is Used


  • We log user search inputs to help improve the relevance and quality of the search experience.
  • These logs may be analyzed to identify popular search terms, improve product tagging, and troubleshoot search issues.
  • Search logs are stored and analyzed internally by EdenFantasys; we do not permit the GPT provider to retain or train on user data.

Safeguards


All API communications with the GPT model are secured using encryption. EdenFantasys does not allow the AI provider to persist or use your queries beyond the session.
This functionality is offered to enhance your shopping experience and does not affect your account data, purchase records, or communication preferences.


Google Analytics (Script-Based Tracker)


We use Google Analytics 4 (GA4), implemented through Google Tag Manager, to monitor and improve the performance, usability, and effectiveness of our website. GA4 helps us understand how visitors interact with our online store, what products they view, and how they move through the shopping experience.
Google Analytics collects non-identifying technical information through JavaScript tags, including:
  • Pageviews and click activity
  • Checkout funnel progress
  • Product and promotional impressions
  • Transaction confirmations
  • Login events and email sign-up actions

This information allows us to analyze conversion paths, optimize user experience, and identify areas for improvement.
We do not use GA4 for audience profiling or behavioral advertising. While our Google Analytics property is connected to Google Ads for the purpose of conversion tracking, we do not share or target audiences across platforms. Google Analytics 4 automatically applies IP address anonymization, and no personally identifiable information is transmitted.
Data collected through Google Analytics is governed by Google’s Privacy Policy and may be stored on servers in the United States or elsewhere, depending on Google's infrastructure.
You may disable Google Analytics tracking by adjusting your browser settings, using Google’s opt-out tool.

WURFL Device Detection (Script-Based Tracker)


We use the WURFL.js service provided by ScientiaMobile, Inc. to detect your device type, browser, screen size, and related technical attributes. This allows us to deliver an optimized browsing experience based on whether you are visiting from a mobile phone, tablet, or desktop computer.
The WURFL service is implemented on our site using a JavaScript-based call that dynamically queries ScientiaMobile’s infrastructure to assess device capabilities in real time. This assessment enables us to serve appropriately formatted content and improve page performance.
WURFL may collect the following technical data:
  • Browser type and version
  • Operating system and device model
  • Screen resolution and device type
  • User-agent string

WURFL does not collect personally identifiable information (PII) and does not attempt to identify individual users. However, the service may transmit technical cookies (e.g., wurfljs_cache) to enable its functionality. Depending on browser behavior, these cookies may appear as either first-party or third-party.
EdenFantasys does not store or retain any data returned by WURFL. All data usage is limited to real-time rendering decisions and is not logged or used for advertising.
For more information about the service and [ScientiaMobile's policies, please refer to the WURFL Terms of Service and Privacy Policy.