Privacy Policy

1. Our Commitment to Privacy

At aubmarenodoro (hereinafter referred to as “I”), I respect your privacy and take the protection of personal information seriously. This Privacy Policy explains how I collect, use, disclose, retain, and protect personal information when you visit my website, browse home furnishing products, place an order, contact me, or use the services available through the website.

This policy is intended to explain what information may be collected, why it is processed, which categories of recipients may receive it, and what choices and rights may be available to you.

The privacy requirements that apply to your information depend on your location, the nature of the processing, and the services involved. Where applicable, I follow relevant United States privacy requirements, including California privacy requirements, and the General Data Protection Regulation (GDPR) and related European data protection requirements.

This policy should be read together with any cookie notices, consent settings, checkout notices, and other privacy information displayed on the website.

2. Personal Information I Collect

The personal information I collect depends on how you use the website and which services you choose to use.

2.1 Information You Provide

When you place an order, contact me, request assistance, or submit a return or complaint, you may provide information such as your name, email address, telephone number, billing address, shipping address, order details, delivery instructions, and the contents of your communications.

If you submit photographs, documents, or other supporting materials to resolve an order issue, I may process the information contained in those materials to review and respond to your request.

2.2 Order and Transaction Information

I may collect information about the products you order, quantities, order numbers, order dates, purchase history, delivery status, transaction references, refund status, and related customer service records.

Payment information may include the payment method selected, billing details, transaction identifiers, and payment confirmation or status. Payment card details are processed through the payment method and payment service providers made available during checkout. The precise payment information collected or retained depends on the payment method and the provider involved.

2.3 Device, Log, and Website Activity Information

When you visit the website, certain technical information may be collected, including your IP address, browser type, device information, operating system, access times, referring pages, pages viewed, shopping cart activity, session identifiers, and interactions with website features.

Where analytics, advertising, or similar technologies are enabled, additional information about website activity or interactions may be collected in accordance with the applicable consent requirements and privacy settings.

2.4 Information from Service Providers and Other Sources

I may receive information from service providers involved in payment processing, order fulfillment, delivery, fraud prevention, website operation, customer support, analytics, or marketing, where the relevant service is enabled and the information is necessary for its purpose.

For example, a payment provider may return a transaction status, or a delivery provider may provide tracking and delivery confirmation information.

I do not intentionally request personal information that is unnecessary for the relevant service. Please avoid sending sensitive personal information unless it is reasonably necessary to address your request.

3. Purposes for Which I Use Personal Information

I use personal information for purposes connected with operating the online store and providing the services you request.

These purposes may include:

Processing orders, confirming payments, arranging fulfillment, and delivering purchased products.
Sending order confirmations, shipping updates, delivery notifications, and other service-related communications.
Responding to questions, handling complaints, reviewing returns and exchanges, processing refunds, and resolving order disputes.
Maintaining the website, shopping cart, checkout, customer records, and other essential online store functions.
Identifying errors, improving website performance, and understanding how visitors interact with the website.
Protecting transactions, detecting suspicious activity, preventing fraud, and maintaining the security of the website and customer records.
Maintaining accounting, tax, transaction, and other records where required or reasonably necessary.
Sending promotional emails or other marketing communications where permitted and, when required, after obtaining your consent.
Establishing, exercising, or defending legal claims and responding to lawful requests from public authorities.

I limit personal information use to purposes that are relevant to the circumstances in which the information was collected. If I intend to use information for a materially different purpose, I will provide additional information or obtain consent where required.

4. Cookies and Similar Technologies

The website may use cookies, pixels, tags, local storage, and similar technologies to operate essential features, remember preferences, maintain shopping cart contents, understand website performance, and support optional analytics or advertising functions.

Depending on the technologies enabled, these tools may collect information such as browser identifiers, device information, IP addresses, pages visited, interactions with website content, and shopping activity.

Strictly necessary technologies may be used where needed to provide a service you request, maintain website security, or operate essential website functions. Non-essential analytics, personalization, or advertising technologies will be used in accordance with the consent and opt-out requirements that apply to your location.

You can manage available cookie choices through the website's cookie banner or privacy settings, where provided. You can also use your browser to restrict or delete cookies, although doing so may affect certain website features.

If the website uses third-party analytics, advertising pixels, or similar tools, those providers may process information under their own privacy terms and according to the permissions and settings configured for the website. I will not describe optional tracking as universally enabled or disabled regardless of the actual configuration.

5. Categories of Recipients and Information Disclosures

I may disclose personal information to the following categories of recipients when reasonably necessary for the purposes described in this policy. The specific recipients depend on the services enabled, the transaction involved, and the information required for the relevant task.

5.1 Online Store and Hosting Service Providers

The website operates through an ecommerce platform and associated infrastructure providers. These providers may process customer, order, checkout, device, log, and transaction-related information to host the website, operate the shopping cart and checkout, maintain store functionality, support security, and manage customer records.

Where Shopify provides platform services for the store, Shopify and relevant affiliated or infrastructure service providers may process personal information in connection with those services. Their processing is also subject to the applicable terms, privacy documentation, and data processing arrangements.

5.2 Payment Processors and Payment Services

Payment processors, payment gateways, card networks, financial institutions, and fraud-prevention services may receive information needed to authorize, process, verify, or review a payment.

Depending on the payment method, this may include your name, billing details, transaction amount, order reference, payment token, transaction status, and relevant fraud-prevention information. Payment providers process information under their applicable privacy and security terms.

The payment provider available for a particular order is the provider identified during checkout. I do not identify a specific payment processor in this policy unless that provider is actually used by the store.

5.3 Shipping, Fulfillment, and Delivery Providers

Shipping carriers, fulfillment partners, warehouses, and delivery service providers may receive the recipient's name, shipping address, telephone number where needed, delivery instructions, parcel information, and tracking references.

This information is used to prepare, dispatch, transport, track, and deliver an order, and to investigate delivery issues or process eligible returns.

5.4 Customer Support and Communication Providers

Email hosting, communication, customer service, and support systems may process your contact details, order references, messages, attachments, and service history so that I can respond to questions, send service notices, and manage complaints or requests.

5.5 Analytics, Advertising, and Marketing Providers

If analytics, advertising, audience measurement, or marketing tools are enabled, the providers operating those tools may receive certain device identifiers, online activity information, cookie identifiers, IP addresses, and information about interactions with the website.

The specific information shared depends on the tool, its configuration, your consent choices, and the privacy settings that apply. Some disclosures for cross-context behavioral advertising or targeted advertising may be treated as “sharing” under applicable US state privacy laws even when no money is exchanged. Where required, I will provide the applicable opt-out mechanism and honor valid opt-out preference signals.

5.6 Ecommerce Applications and Other Service Providers

Third-party applications integrated with the store may process information needed for their functions, such as order management, inventory, customer support, returns, reviews, fraud prevention, accessibility, analytics, or website maintenance.

An application will only be relevant to this policy if it is actually installed, integrated, or otherwise used in the store's operations. The information available to each application depends on its permissions and function.

5.7 Professional Advisers and Public Authorities

Personal information may be disclosed to legal advisers, accountants, auditors, insurers, courts, regulators, law enforcement agencies, or other public authorities where reasonably necessary to comply with a binding legal obligation, respond to a lawful request, protect rights or safety, investigate suspected fraud, or establish, exercise, or defend a legal claim.

5.8 Business Transfers

If the store or its relevant business operations are involved in a merger, restructuring, financing, acquisition, or sale of assets, relevant information may be disclosed to parties involved in that transaction, subject to appropriate confidentiality safeguards and applicable privacy requirements.

5.9 Limits on Disclosure

I do not intentionally disclose personal information to unrelated recipients for purposes incompatible with those described in this policy. Where a service provider processes information on my behalf, I seek to limit access to what is reasonably necessary for the assigned task and to use appropriate contractual or other safeguards where required.

Certain providers may also process information for their own purposes under their own privacy terms. The applicable provider documentation and the actual service configuration determine whether a provider acts on my behalf, acts independently, or performs different roles for different processing activities.

6. Sale, Sharing, and Targeted Advertising

I do not state that personal information is never sold or shared for advertising purposes without first reviewing the actual data flows and settings of the website and its integrated services.

Some US privacy laws define “sale,” “sharing,” or “targeted advertising” broadly. Depending on the tools enabled, certain disclosures of online identifiers or browsing activity to analytics or advertising providers may fall within one of these definitions, even if no direct payment is made for the information.

Where applicable law grants you the right to opt out of the sale or sharing of personal information or targeted advertising, I will provide the required method to exercise that right. You may also contact me using the details in Section 14.

If a legally recognized opt-out preference signal, such as Global Privacy Control, applies to the website and the relevant processing, I will handle that signal as required by applicable law and the website's technical configuration.

You may withdraw consent for optional cookies through the available cookie settings where provided. Opting out of targeted advertising or optional analytics does not prevent the processing necessary to complete an order, deliver a product, maintain account security, or meet applicable obligations.

7. Legal Bases for Processing Under the GDPR

Where the GDPR applies, I process personal data on an appropriate legal basis depending on the purpose and circumstances.

7.1 Contract Performance

I process information where necessary to take steps at your request before entering into a contract or to perform a purchase agreement. This may include processing orders, confirming payments, arranging delivery, providing customer support, and managing returns or refunds.

7.2 Legal Obligations

I may process or retain information where necessary to comply with applicable tax, accounting, recordkeeping, consumer protection, or other legal obligations.

7.3 Legitimate Interests

Where permitted, I may process information to protect the website and transactions, prevent fraud, maintain business records, resolve disputes, improve website functionality, and administer customer service.

When relying on legitimate interests, I consider the purpose of the processing, the impact on individuals, and any applicable rights to object.

7.4 Consent

Where consent is required, I will request it before processing the relevant information. This may apply to certain non-essential cookies, optional tracking technologies, or marketing communications.

You may withdraw consent at any time through the available settings or by contacting me. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

7.5 Legal Claims and Other Permitted Grounds

Where applicable, I may process information when necessary to establish, exercise, or defend legal claims, or on another lawful basis permitted by the GDPR.

The legal basis applicable to a particular activity depends on the information involved and the purpose for which it is processed. I will not treat consent to one activity as automatic consent to unrelated optional processing.

8. Your Privacy Rights

The rights available to you depend on the privacy laws applicable to your location and the processing of your information. Some rights are subject to verification requirements, legal exceptions, or other conditions.

8.1 Rights Under the GDPR

Where the GDPR applies, you may have the following rights:

Right of access: Request confirmation of whether your personal data is being processed and obtain access to that data and relevant information about the processing.
Right to rectification: Request correction of inaccurate personal data or completion of incomplete data.
Right to erasure: Request deletion of personal data where the applicable conditions are met. Certain records may need to be retained for legal obligations or other permitted grounds.
Right to restriction: Request that processing be restricted in the circumstances provided by the GDPR.
Right to data portability: Where the conditions are met, receive personal data you provided in a structured, commonly used, machine-readable format and, where technically feasible and legally required, request transmission to another controller.
Right to object: Object to processing based on legitimate interests on grounds relating to your particular situation. You have an unconditional right to object to the processing of personal data for direct marketing, including profiling related to that direct marketing.
Right to withdraw consent: Withdraw consent where processing is based on consent. Withdrawal does not affect the lawfulness of prior processing.
Right to lodge a complaint: Lodge a complaint with a competent data protection supervisory authority, particularly in the EU or EEA country of your habitual residence, place of work, or the place of the alleged infringement, where applicable.

If a request is refused in whole or in part because a legal exception applies, I will explain the relevant reason where required.

8.2 Rights Under Applicable US State Privacy Laws

Depending on your state of residence and the applicable law, you may have the right to:

Know or access categories and specific pieces of personal information collected about you.
Receive information about the categories of sources, purposes of collection, and categories of recipients to whom personal information is disclosed.
Request deletion of personal information, subject to applicable exceptions.
Request correction of inaccurate personal information.
Obtain a portable copy of certain personal information in a usable format.
Opt out of the sale or sharing of personal information, targeted advertising, or certain profiling where those rights apply.
Limit certain uses or disclosures of sensitive personal information where the law provides that right.
Appeal a decision on a privacy request where an appeal right is provided by applicable law.
Exercise privacy rights without unlawful discrimination or retaliation.

Not every right applies in every state or to every type of business or processing activity. Requests will be evaluated under the law applicable to the request.

8.3 How to Submit a Request

To exercise a privacy right, contact me using the details in Section 14. Please describe the right you wish to exercise and provide enough information for me to understand the request.

I may request reasonable information to verify your identity and, where permitted, your authority to act for another person. I will not use verification information for unrelated purposes and will handle requests within the time limits required by applicable law.

Where a law permits an authorized agent to submit a request, I may require proof of authorization and, where legally permitted, verification directly from the individual concerned.

9. International Data Transfers

The store's contact address is in the United States. Personal information may be processed in the United States and may also be processed in other countries where the ecommerce platform, payment providers, shipping or fulfillment services, customer support providers, applications, or other service providers operate.

The exact destinations depend on the services actually used, their infrastructure, and their current data-processing arrangements. I do not represent that all personal information remains in the United States, the European Economic Area, or any other single region.

For transfers of personal data subject to the GDPR from the EEA to a country outside the EEA, the applicable transfer mechanism depends on the destination and the circumstances of the transfer. Where required, a transfer may rely on:

An applicable European Commission adequacy decision for the destination country or recipient, within the scope of that decision.
Standard Contractual Clauses approved by the European Commission, together with any additional measures required following an assessment of the transfer.
Another legally permitted transfer mechanism or derogation, where its specific conditions are satisfied.

For transfers subject to UK or Swiss data protection requirements, the applicable adequacy arrangements, contractual safeguards, or other permitted mechanisms will be assessed separately where relevant.

The availability of a particular safeguard cannot be assumed for every service provider or destination. I will use the mechanism applicable to the transfer concerned and provide information about the relevant safeguard upon a valid request, subject to lawful restrictions and the protection of confidential information.

To request information about a particular international transfer, including the relevant recipient, destination country, and transfer safeguard where applicable, contact me using the details in Section 14. I will provide the information available for the processing concerned. The current privacy and data-transfer documentation of the relevant service provider may also provide additional details about its processing locations and safeguards.

10. Data Retention

I retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including fulfilling orders, providing customer service, maintaining transaction records, resolving disputes, protecting the website, and meeting applicable legal or accounting obligations.

Retention periods vary according to the type of information, the service involved, and any legal requirement. For example, transaction and tax records may need to be retained for a period required by applicable accounting or tax rules, while certain technical logs or browsing information may be retained for a shorter period based on security or operational needs.

Information submitted in connection with a complaint, refund, or dispute may be retained for as long as reasonably necessary to resolve the matter and maintain relevant records.

When personal information is no longer required and there is no valid reason to retain it, I will take reasonable steps to delete it, anonymize it, or otherwise remove it from active use, subject to applicable retention obligations and technical limitations.

For information held by third-party providers, retention may also be governed by their own applicable policies and contractual arrangements. Where required, I will take appropriate steps to address deletion or retention requests involving service providers that process information on my behalf.

11. Data Security and Personal Data Incidents

I use reasonable technical and organizational measures intended to protect personal information against unauthorized access, accidental loss, improper disclosure, alteration, and misuse.

Depending on the service and the information involved, these measures may include access restrictions, account controls, secure data transmission, service-provider safeguards, and review of relevant operational procedures.

No method of transmission or storage can be guaranteed to be completely secure. If a personal data incident occurs, I will assess the circumstances, take appropriate steps to reduce potential harm, and provide notifications to affected individuals or authorities where required by applicable law.

If you believe your personal information has been exposed, used improperly, or otherwise affected by a security issue involving the website, please contact me promptly so I can review the matter.

12. Children's Privacy

The website is intended for general consumers and is not designed to knowingly collect personal information directly from children where such collection is prohibited by applicable law.

If I become aware that personal information has been collected from a child in circumstances that require parental consent or deletion, I will take appropriate steps in accordance with applicable requirements.

A parent or legal guardian who believes a child has provided personal information through the website may contact me using the details in Section 14.

13. Changes to This Privacy Policy

I may update this Privacy Policy when the website's operations, service providers, information-handling practices, or applicable privacy requirements change.

When a change materially affects how personal information is collected, used, disclosed, or otherwise processed, I will provide notice through an appropriate method where required. If renewed consent or another specific action is legally required, I will follow the applicable requirements.

The latest version published on the website describes the practices set out in the current policy. I encourage you to review this page periodically.

14. Contact Information and Privacy Requests

For questions about this Privacy Policy, requests to access, correct, delete, or obtain a portable copy of personal information, objections to processing, opt-out requests, or questions about international data transfers, please contact me using the details below.

Address: 1092 53rd St, Emeryville, CA 94608, United States

Phone: +1 (510) 684-9273

Email: team@aubmarenodoro.com

Business Hours: Monday through Friday, 9:00 AM to 6:00 PM Eastern Time (ET)

When you contact me, please identify the type of request and provide sufficient details for me to understand it. Please do not include full payment card numbers, passwords, or other unnecessary sensitive information in your message.

I will review privacy requests and respond within the timeframe required by the applicable privacy requirements. Where a request cannot be fulfilled in full because a legal exception applies, I will explain the applicable limitation where required.

If the GDPR applies to your personal data, you may also lodge a complaint with the competent data protection supervisory authority. If a US state privacy law applies, you may exercise the rights provided by that law, including any applicable appeal or opt-out rights.