1. Introduction

Decor Arbor ("we," "our," or "us") operates the website decorarbor.com and related services. This Privacy Policy applies to all information collected through our website, mobile applications, and any related services, sales, marketing, or events (collectively, the "Services").

By using our Services, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Services.

2. Information We Collect

Personal Information You Provide

We collect personal information that you voluntarily provide when you:

• Create an account or register on our website
• Make a purchase or place an order
• Subscribe to our newsletter or marketing communications
• Contact our customer service team
• Participate in surveys, contests, or promotions
• Leave reviews or feedback

This information may include:

• Identity Information: Name, username, date of birth
• Contact Information: Email address, phone number, shipping and billing addresses
• Payment Information: Credit card details, billing address (processed securely by our payment processors)
• Account Information: Password, account preferences, wishlist items
• Communication Data: Correspondence, feedback, and customer service inquiries

Information Automatically Collected

When you visit our website, we automatically collect certain information about your device and usage:

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages viewed, time spent on pages, navigation paths, referral sources
• Location Data: Approximate location based on IP address
• Cookie Data: Information collected through cookies and similar technologies

3. How We Use Your Information

We use the information we collect to:

• Process Orders: Fulfill purchases, process payments, arrange shipping and delivery
• Provide Customer Service: Respond to inquiries, resolve issues, and provide support
• Personalize Experience: Customize content, product recommendations, and marketing communications
• Send Communications: Order confirmations, shipping updates, newsletters (with your consent)
• Improve Services: Analyze usage patterns, conduct research, and enhance our website
• Prevent Fraud: Detect and prevent fraudulent transactions and abuse
• Legal Compliance: Comply with legal obligations and protect our rights

4. Information Sharing

We do not sell your personal information. We may share your information with:

• Service Providers: Third-party vendors who assist with payment processing, shipping, email delivery, analytics, and customer support
• Business Partners: Trusted partners for joint marketing initiatives (with your consent)
• Legal Requirements: When required by law, court order, or government request
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Protection of Rights: To protect our rights, property, or safety, or that of our users

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and track information and improve our Services.

Types of Cookies We Use

• Essential Cookies: Required for basic website functionality, such as shopping cart and checkout
• Analytics Cookies: Help us understand how visitors interact with our website
• Functional Cookies: Remember your preferences and personalize your experience
• Marketing Cookies: Track your browsing activity to display relevant advertisements

Managing Cookies

You can control cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website. Most browsers allow you to:

• View and delete cookies
• Block all cookies or third-party cookies
• Set preferences for specific websites

Third-Party Analytics

We use analytics services including:

• Google Analytics: To analyze website traffic and usage patterns
• Hotjar: To understand user behavior through heatmaps and recordings

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

• SSL/TLS encryption for data transmission
• Secure payment processing through PCI-compliant providers
• Regular security assessments and updates
• Access controls and employee training
• Secure data storage with encryption at rest

While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Account Information: Retained while your account is active and for a reasonable period afterward
• Transaction Records: Retained for 7 years for tax and legal purposes
• Marketing Preferences: Until you unsubscribe or request deletion
• Analytics Data: Aggregated and anonymized data may be retained indefinitely

8. Your Rights

Depending on your location, you may have certain rights regarding your personal information:

• Access: Request a copy of your personal information
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Portability: Receive your data in a portable format
• Opt-Out: Unsubscribe from marketing communications
• Restriction: Request restriction of processing in certain circumstances

To exercise these rights, please contact us using the information provided below. We will respond to your request within the timeframes required by applicable law.

9. GDPR Rights (European Union/EEA)

If you are located in the European Union or European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR):

Legal Basis for Processing

We process your personal data based on:

• Contract Performance: Processing necessary to fulfill our contract with you (e.g., processing orders)
• Legitimate Interests: Processing for our legitimate business interests, balanced against your rights
• Consent: Processing based on your explicit consent (e.g., marketing communications)
• Legal Obligation: Processing required by law

Your GDPR Rights

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority

10. CCPA Rights (California Residents)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

Your CCPA Rights

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected
• Right to Delete: Request deletion of your personal information, subject to certain exceptions
• Right to Opt-Out: Opt out of the sale of your personal information (note: we do not sell personal information)
• Right to Non-Discrimination: Not receive discriminatory treatment for exercising your privacy rights

Categories of Information Collected

In the past 12 months, we have collected the following categories of personal information:

• Identifiers (name, email, phone number, address)
• Commercial information (purchase history, products viewed)
• Internet activity (browsing history, search queries on our site)
• Geolocation data (approximate location)
• Inferences (preferences, characteristics)

Exercising Your Rights

To exercise your CCPA rights, you may:

• Email us at [email protected]
• Call us at (289) 216-8291
• Submit a request through our contact form

We will verify your identity before processing your request. You may designate an authorized agent to make a request on your behalf.

11. Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will take steps to remove that information.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country.

When we transfer personal data internationally, we use appropriate safeguards such as:

• Standard contractual clauses approved by regulatory authorities
• Data processing agreements with our service providers
• Compliance with applicable data protection frameworks

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

• Posting the updated policy on our website
• Updating the "Last Updated" date at the top of this page
• Sending you an email notification for significant changes

We encourage you to review this Privacy Policy periodically for any changes. Your continued use of our Services after any changes indicates your acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For EU/EEA residents, you may also contact your local data protection authority if you have concerns about how we handle your personal information.