Security
SECURITY
Last Updated: September 11, 2026
Protecting our visitors, customers, and the Enchanta community matters to us.
This page explains Enchanta's general approach to security, how you can help protect your information, and how to report a suspected security issue.
Enchanta is operated by Nina Bustamante in Henderson, Nevada, United States.
OUR APPROACH TO SECURITY
Enchanta uses reasonable administrative, technical, and organizational safeguards designed to protect personal information and our Services against unauthorized access, loss, misuse, alteration, or disclosure.
Our security practices may change and evolve as Enchanta grows, our technology changes, and new risks emerge.
SHOPIFY & ONLINE STORE SECURITY
Our online store is powered by Shopify.
Shopify provides technology used to operate our storefront and ecommerce functionality.
Payments made through our online store are processed through Shopify and/or supported payment providers.
Payment providers handle payment information according to their own security and privacy practices.
Enchanta generally does not need to receive or store your complete payment-card number in order to process a standard online Shopify transaction.
PAYMENT INFORMATION
Please enter payment information only through the official checkout process provided through enchantauniverse.com.
Do not send complete payment-card information, banking credentials, passwords, or other authentication credentials to Enchanta by ordinary email.
If someone claiming to represent Enchanta asks you to email your password or complete payment-card number, do not provide it.
DATA MINIMIZATION
We aim to collect personal information reasonably necessary to:
-
provide our Services;
-
fulfill purchases;
-
process and support orders;
-
administer accounts;
-
administer Velmere enrollment;
-
administer memberships and subscriptions;
-
communicate with customers;
-
prevent fraud;
-
maintain security;
-
comply with legal obligations; and
-
operate and improve Enchanta.
For more information about the information we collect and use, please review our Privacy Policy.
SERVICE PROVIDERS
Enchanta relies on third-party providers for portions of our operations.
Depending on our current technology and business operations, these may include providers of:
-
ecommerce technology;
-
payment processing;
-
website infrastructure;
-
email;
-
marketing;
-
analytics;
-
advertising;
-
shipping;
-
fulfillment;
-
fraud prevention; and
-
other business or technology services.
Using third-party providers does not eliminate all security risk.
We seek to use established providers appropriate to the services they perform.
NO SYSTEM IS COMPLETELY SECURE
No website, email service, database, network, payment system, device, or method of transmitting or storing information can be guaranteed to be completely secure.
Although Enchanta takes reasonable measures designed to protect information, we cannot guarantee absolute security.
You use online services with the understanding that internet-based systems inherently involve some security risk.
Nothing in this statement limits any responsibility Enchanta has under applicable law.
HOW YOU CAN HELP PROTECT YOURSELF
You can help protect your information and Enchanta account by:
-
using a strong and unique password;
-
not reusing passwords across different services;
-
protecting access to your email account;
-
not sharing account credentials;
-
keeping your device, operating system, and browser updated;
-
using appropriate device security;
-
checking that you are visiting enchantauniverse.com before entering personal or payment information;
-
being cautious with unexpected messages, links, attachments, or payment requests; and
-
contacting us if something appears suspicious.
If you believe your password for an account has been compromised, change it promptly where account functionality permits and secure the email account associated with it.
PHISHING & IMPERSONATION
Fantasy belongs inside Enchanta. Fraud does not.
Scammers may attempt to imitate legitimate brands through:
-
fake websites;
-
misleading domain names;
-
fake social-media accounts;
-
fraudulent advertisements;
-
fraudulent emails;
-
text messages;
-
direct messages; or
-
fake customer-support communications.
Before entering payment information or other sensitive information, make sure you are interacting with an official Enchanta service.
Our official website is:
enchantauniverse.com
Our customer contact email is:
If a message claiming to be from Enchanta appears suspicious, do not provide sensitive information through the message.
ENCHANTA WILL NOT ASK FOR YOUR PASSWORD BY EMAIL
Enchanta will not ask you to send us your account password by email.
We also do not need you to send your complete payment-card number by ordinary email to resolve a normal customer-service request.
Never send us passwords, authentication codes, or complete payment-card credentials through ordinary email.
SUSPICIOUS ENCHANTA WEBSITES, ACCOUNTS OR MESSAGES
If you discover a website, social-media account, email, advertisement, store listing, or message that appears to impersonate Enchanta, Velmere School of Magic, or another Enchanta property, please report it to:
Subject:
Suspected Enchanta Impersonation
Where possible, include relevant screenshots, account names, links, or other information that will help us investigate.
Do not interact further with a suspected scam merely to gather evidence.
ACCOUNT SECURITY INCIDENTS
If you believe an Enchanta account has been accessed without your authorization, contact us promptly at:
Subject:
Account Security
Please provide enough information for us to identify the relevant account without sending passwords or complete payment credentials.
PAYMENT FRAUD
If you believe a payment method has been used without your authorization in connection with an Enchanta purchase, contact us promptly.
You should also contact your bank, card issuer, payment provider, or other financial institution directly if you believe your financial credentials have been compromised.
Enchanta cannot freeze or secure a bank account or payment card on your financial institution's behalf.
REPORTING A SECURITY VULNERABILITY
If you believe you have discovered a security vulnerability affecting an Enchanta-operated website or service, we appreciate responsible reports.
Please contact:
Subject:
Security Report
Please provide enough information for us to understand and investigate the issue, including where you observed it and a clear description of the suspected vulnerability.
Please Do Not:
When investigating or reporting a suspected security issue, do not:
-
access another person's account or personal information;
-
obtain or retain information that does not belong to you;
-
modify or delete data;
-
install malware;
-
use social engineering;
-
conduct denial-of-service attacks;
-
intentionally disrupt our Services;
-
physically attack infrastructure or personnel;
-
demand payment in exchange for withholding a vulnerability;
-
violate applicable law; or
-
publicly disclose sensitive vulnerability details before Enchanta has had a reasonable opportunity to investigate.
If you unintentionally encounter personal information or other sensitive data while identifying a vulnerability, stop accessing the information and tell us what occurred.
NO BUG-BOUNTY PROMISE
Unless Enchanta expressly establishes a separate written bug-bounty program, submitting a vulnerability report does not create:
-
an employment relationship;
-
contractor relationship;
-
partnership;
-
agency relationship;
-
promise of compensation;
-
entitlement to a reward; or
-
other commercial relationship with Enchanta.
We may acknowledge helpful reports, but we do not promise payment or other compensation.
SECURITY INCIDENTS
If Enchanta becomes aware of a suspected security incident, we may take appropriate steps to:
-
investigate;
-
contain the incident;
-
protect affected systems;
-
preserve relevant information;
-
work with service providers;
-
prevent further unauthorized activity;
-
remediate identified issues; and
-
comply with applicable legal obligations.
If applicable law requires us to notify affected individuals, regulators, law enforcement, or other parties about a qualifying personal-data incident, we will provide notifications as required.
FRAUD & ABUSE PREVENTION
We may use reasonable measures designed to identify and prevent:
-
fraudulent transactions;
-
unauthorized account activity;
-
payment abuse;
-
automated attacks;
-
malicious activity;
-
violations of our Terms of Service; and
-
threats to the integrity of our Services.
Where reasonably necessary, suspicious orders or accounts may be reviewed, restricted, suspended, or cancelled in accordance with our Terms of Service and applicable law.
THIRD-PARTY SERVICES
Links from Enchanta to third-party websites or services do not make those third-party systems part of Enchanta's security environment.
Third parties maintain their own security practices and policies.
Please use appropriate caution before providing personal or financial information to a third-party service.
CHILDREN & TEENS
Parents and guardians should help younger users understand basic online-security practices, including not sharing:
-
passwords;
-
authentication codes;
-
home addresses in public areas;
-
payment information;
-
private contact information; or
-
other sensitive information
through public or community features.
Please review our Privacy Policy for information about Enchanta's age and children's privacy practices.
CHANGES TO THIS SECURITY PAGE
We may update this page as our Services, security practices, technology, providers, or legal obligations change.
The Last Updated date identifies the current version.
CONTACT ENCHANTA
For general security questions:
Enchanta
Operated by Nina Bustamante
Henderson, Nevada, United States
Email: enchanta.universe@gmail.com
Security vulnerabilities:
Subject: Security Report
Suspected impersonation or phishing:
Subject: Suspected Enchanta Impersonation
Account concerns:
Subject: Account Security
Please do not include passwords, authentication codes, or complete payment-card information in your email.