PRIVACY POLICY

AlloraDecor (“we,” “our,” or “us”) values your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit or make a purchase from https://alloradecor.store (the “Site”) and use our services globally, including customers in the United States and Saudi Arabia. By using our Site and services, you agree to the practices described in this policy.

1. Scope and Acceptance

1.1. Applicability. This Privacy Policy applies to all users of the Site—whether you reside in the United States, Saudi Arabia, or elsewhere—and governs the collection, use, and sharing of information through our online storefront, customer support channels, and any related services (collectively, the “Services”).

1.2. Consent. By accessing or using the Site or Services, you acknowledge that you have read, understood, and agree to this Privacy Policy. If you do not agree with any part of this policy, please do not use or access our Site or Services.

1.3. Updates. We may modify this Privacy Policy at any time. We will post any updates on this page and revise the “Last Updated” date above. Continuing to use the Site or Services after changes are posted constitutes your acceptance of those changes.

2. Information We Collect

We collect information in three main ways: directly from you, automatically as you navigate the Site, and from third parties.

2.1. Information You Provide Directly

When you use our Site or Services, you may voluntarily provide us with personal data, including but not limited to:

Contact Details: Full name, email address, phone number, billing address, and shipping address.
Account Credentials: Username, password, security question responses, and other authentication data.
Order Information: Product selections, payment confirmations, and purchase history.
Customer Support Communications: Any information you include when you contact us via email or web form, such as inquiries, feedback, or complaints.

Providing this information is required to process your orders, manage your account, and deliver customer support. You may choose not to provide certain data, but that may limit your ability to use certain features or make purchases.

2.2. Information Collected Automatically

When you visit or interact with our Site, we automatically gather certain information through cookies and similar technologies (see Section 6). This may include:

Device & Browser Data: Device type, browser type, operating system, and screen resolution.
Usage Data: IP address, time and date stamps, pages viewed, links clicked, and navigation paths.
Geolocation: Approximate location derived from IP address.

We use this information to understand how you interact with the Site, diagnose technical issues, improve functionality, and provide relevant content or advertisements.

2.3. Information from Third Parties

We may obtain information from third-party services and partners, including:

Payment Processors: When you make a purchase, payment details (e.g., credit card information) are collected by our payment gateway providers (such as Stripe or PayPal) and not stored on our servers.
Service Providers: Shipping companies, cloud hosting providers, analytics platforms (e.g., Google Analytics), marketing partners, and fraud-prevention vendors.
Advertising Partners: We may allow ad networks to collect data to deliver targeted advertising, subject to your consent where required by law.

Whenever we receive data from third parties, we handle it in accordance with this Privacy Policy.

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1. Order Fulfillment & Customer Service

Process and fulfill your orders (including payment processing, shipping, and handling returns)
Create, maintain, and operate your customer account
Respond to your inquiries, complaints, or requests for support
Provide order status and transactional emails (such as shipping confirmations)

3.2. Site Improvement & Analytics

Analyze usage patterns to improve Site performance, design, and features
Monitor and detect fraudulent or malicious activity
Conduct internal research and analytics to understand how customers interact with our Site

3.3. Marketing & Personalization

Send you promotional communications, newsletters, and special offers (where you have opted in or where permitted by law) and tailor content based on your browsing or purchase history
Display relevant advertising on third-party sites (e.g., retargeting ads) in accordance with your preferences
Provide personalized recommendations

3.4. Legal Compliance & Protection of Rights

Comply with applicable legal obligations (such as tax, accounting, and shipping regulations)
Enforce our Terms of Service or other agreements
Protect and defend our rights, privacy, safety, or property, and that of our users or the public
Respond to lawful requests from public and government authorities

4. Legal Bases for Processing (Where Applicable)

Depending on the jurisdiction and the type of data, we rely on one or more of the following legal bases to process your personal information:

Performance of a Contract: When you place an order or create an account, we process your data to fulfill our contractual obligations.
Legal Compliance: We may need to process personal data to comply with applicable laws (e.g., tax laws, customs requirements).
Legitimate Interests: We process certain data to run and improve our business, prevent fraud, and ensure network and information security, provided these interests are not overridden by your fundamental privacy rights.
Consent: We rely on your consent to send marketing communications, set nonessential cookies, or share data with advertising partners, where required by law.

If we rely on consent, you may withdraw it at any time (see Section 11).

5. Disclosure of Your Information

We do not sell your personal information. We share or disclose your data only under the following circumstances and with the categories of recipients described below:

5.1. Service Providers & Business Partners

Order Fulfillment Partners: Payment processors, shipping carriers, and fulfillment centers
Technology Providers: Hosting providers, cloud storage, analytics services (e.g., Google Analytics), email services
Customer Support Providers: Third-party platforms or contractors that help manage user inquiries

These partners receive only the information necessary to perform their services and are contractually bound to use it solely for that purpose.

5.2. Marketing & Advertising Partners

We may share aggregated or de-identified data with advertising partners and analytics providers to serve targeted ads, measure ad performance, or for remarketing purposes. Such partners may use cookies, web beacons, or similar technologies to collect personal data on our behalf.

5.3. Affiliates & Subsidiaries

We may share information with our corporate affiliates or subsidiaries for the purposes outlined in this Privacy Policy (e.g., to streamline support or combine data for analytics).

5.4. Legal & Security Obligations

To comply with legal process (e.g., subpoenas, court orders) or respond to lawful requests from government authorities
To investigate, prevent, or take action regarding suspected illegal or fraudulent activity, potential threats to the physical safety of any person, or violations of our Terms of Service
In connection with any merger, acquisition, sale of assets, or other change of corporate control (provided that the transferee assumes comparable privacy obligations)

6. Cookies and Tracking Technologies

6.1. What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help the website remember your actions and preferences (such as login status, language choice, and other display preferences) over a period of time.

6.2. Types of Cookies We Use

Essential Cookies: Strictly necessary for Site operation, such as facilitating login sessions, securing checkout, and enabling basic navigation. Disabling these cookies may prevent the Site from functioning correctly.
Performance & Analytics Cookies: Collect anonymous information about how visitors use our Site (e.g., pages visited, time spent). We use these cookies to improve Site functionality and user experience.
Functional Cookies: Remember your choices (e.g., language preference, region) to provide a personalized experience.
Advertising & Targeting Cookies: Collect information about your browsing habits to deliver relevant advertisements on our Site and across third-party platforms.

6.3. Third-Party Cookies

We allow certain third-party service providers (e.g., Google Analytics, Facebook Pixel, advertising networks) to place cookies on your device to collect usage data across different websites and deliver targeted advertising. These third-party providers have their own privacy and cookie policies, which you should review:

Google Analytics: https://policies.google.com/privacy
Facebook Cookies: https://www.facebook.com/policy/cookies/

6.4. Managing and Disabling Cookies

Most web browsers automatically accept cookies by default. You can modify your browser settings to block or delete cookies if you prefer. However, disabling cookies may impact Site performance and your ability to use certain features. For guidance on managing cookies, refer to AboutCookies.org or consult your browser’s help documentation.

7. Data Security

7.1. Security Measures. We implement reasonable administrative, technical, and physical safeguards designed to protect your personal information against unauthorized access, disclosure, alteration, or destruction. Examples include encryption of sensitive data (e.g., SSL/TLS for data in transit), secure data centers, access controls, and periodic security audits.

7.2. No Guarantee of Absolute Security. While we strive to protect your data, no security measure is completely infallible. We cannot guarantee 100% security of your information. You are responsible for keeping your account credentials (username, password) confidential and notifying us immediately if you suspect unauthorized access.

8. Data Retention

We retain personal information only for as long as necessary to:

Fulfill the purposes for which the information was collected (e.g., processing orders, providing customer support)
Comply with legal, tax, accounting, or reporting requirements
Resolve disputes, enforce our agreements, and maintain records of your consent

Once data is no longer needed, we will securely delete, anonymize, or aggregate it in accordance with applicable laws.

9. International Data Transfers

Our servers and certain service providers may be located in jurisdictions outside your country of residence, including the United States and Saudi Arabia. When we transfer your personal data internationally, we use appropriate safeguards to ensure that it remains adequately protected, such as:

Standard Contractual Clauses (SCCs): Adopted by the European Commission or relevant authorities for lawful data transfer.
Binding Corporate Rules (BCRs): For transfers between our affiliated entities, where applicable.
Other Legal Mechanisms: As required by local data protection laws.

By using our Site or providing your personal information, you consent to such transfers.

10. Children’s Privacy

10.1. Age Restriction. Our Services are not intended for children under the age of 16. We do not knowingly collect personal information from anyone under 16. If you believe we have collected data from a child under 16, please contact us immediately at DECOHDE@GMAIL.COM. We will promptly delete any such information in accordance with applicable law.

10.2. Parental Rights. If you are a parent or guardian and become aware that your child under 16 has provided us with personal data, please reach out so that we can remove the information and terminate the child’s account.

11. Your Rights and Choices

Depending on your country of residence, you may have certain legal rights regarding the personal data we hold about you. Below is a summary of key rights for U.S. and Saudi residents:

11.1. United States (California Consumer Privacy Act—CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you.
Right to Delete: Request deletion of your personal information held by us, subject to certain exceptions.
Right to Opt-Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal data. We do not “sell” personal data as defined under CCPA, but if we engage in any sharing that could be interpreted as a sale, you can opt out.
Right to Non-Discrimination: We may not discriminate against you for exercising your CCPA rights (e.g., by charging different prices or providing a different level of service).

To exercise any of these rights, please submit a verifiable request to DECOHDE@GMAIL.COM. We may require you to verify your identity before processing your request.

11.2. Saudi Arabia (Personal Data Protection Law—PDPL)

If you reside in Saudi Arabia, you have the following rights under the PDPL:

Right to Access: Request confirmation of whether we process your personal data and obtain a copy of that data.
Right to Rectification: Request correction of inaccurate or incomplete personal data.
Right to Erasure: Request deletion of your personal data, subject to legal obligations.
Right to Restrict Processing: Request that we limit processing in certain circumstances.
Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time.
Right to Portability: Request a copy of your personal data in a structured, machine-readable format.

To exercise any of these rights, please contact us at DECOHDE@GMAIL.COM. We may ask for information to verify your identity before fulfilling your request.

11.3. Other Jurisdictions

If you reside in other jurisdictions, you may have similar rights under applicable laws, such as:

European Economic Area (EEA): Right of access, rectification, erasure, restriction, portability, objection, and withdrawal of consent under the General Data Protection Regulation (GDPR).
Other Regions: Rights as provided by local data protection laws.

To exercise your rights or if you have questions, please email DECOHDE@GMAIL.COM. We will process your request in accordance with applicable law and verify your identity before responding.

12. Opting Out of Marketing Communications

You may opt out of receiving marketing emails or newsletters from us by clicking the “unsubscribe” link at the bottom of any promotional email or by contacting us at DECOHDE@GMAIL.COM. Please note that even if you opt out of marketing messages, we may still send you transactional or administrative emails (e.g., order confirmations, shipping updates).

13. Third-Party Websites and Services

Our Site may contain links to third-party websites, plug-ins, or services that are not owned or controlled by AlloraDecor. This Privacy Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party websites you visit.

14. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Once we no longer need your information, we will securely delete, anonymize, or aggregate it in accordance with applicable laws.

15. International Data Transfers

Because we operate globally, your personal data may be transferred to, processed, and stored in countries outside your place of residence. When we transfer personal data internationally, we implement appropriate safeguards, such as:

Standard Contractual Clauses (SCCs) approved by the European Commission
Binding Corporate Rules (BCRs)
Other mechanisms recognized under data protection laws

By using our Site and providing your information, you consent to such transfers.

16. Data Security Measures

We apply appropriate technical, organizational, and administrative measures to protect personal data, including:

Encryption: We use SSL/TLS encryption to secure data in transit.
Access Controls: Only authorized personnel have access to your personal information.
Secure Storage: Data is stored in secure facilities and servers with industry-standard safeguards.
Periodic Audits: We conduct regular security assessments to identify and mitigate potential vulnerabilities.

Despite these safeguards, no security measure is completely infallible. You play a role in protecting your data by keeping your login credentials confidential and notifying us immediately of any suspected account breach.

17. Children’s Privacy

Our Services are not intended for children under 16 years of age. We do not knowingly collect personal data from anyone under 16. If we become aware that we have collected personal information from a child under 16, we will promptly delete that data. If you believe that we might have any information from or about a child under 16, please contact us at DECOHDE@GMAIL.COM.

18. California “Shine the Light” Disclosure

California Civil Code Section 1798.83, also known as the “Shine the Light” law, grants California residents the right to request certain information regarding our disclosure of personal information to third parties for direct marketing purposes. To request this information, please contact us at DECOHDE@GMAIL.COM. We will respond within 30 days of receiving a verifiable request.

19. Changes to This Privacy Policy

We may modify this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we do, we will revise the “Last Updated” date at the top of this policy. If we make any material changes, we may provide additional notice (e.g., by email or a prominent notice on the Site) as required by law. Your continued use of the Site after any changes signifies your acceptance of the updated Privacy Policy.

20. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us by email:

Phone: +966 555792551
Email: DECOHDE@GMAIL.COM

We will respond to your inquiry as promptly as possible and in accordance with applicable laws.

Thank you for trusting AlloraDecor. We are committed to maintaining the confidentiality, integrity, and security of your personal information.