Privacy Policy

1. Personal Information We Collect

1.1 Information You Voluntarily Provide

• Identifying Information: Your full name, billing address, shipping address, email address, phone number, and any other contact details you provide when placing an order, creating an account, or contacting customer service.
• Payment Information: Credit card, debit card, PayPal, or other payment method details required to process your orders. Please note that we do not store full payment card information; all sensitive payment data is securely processed by our third-party payment service providers (e.g., Shopify Payments, PayPal) in compliance with Payment Card Industry Data Security Standard (PCI DSS).
• Account Information: If you create an account with us, we will collect your username, password (encrypted), and any other information you choose to include in your account profile.
• Order and Transaction Information: Details of your orders (e.g., product(s) purchased, order amount, order number, delivery preferences) and transaction history with us.
• Communication Information: The content of your emails, chat messages, or other communications with our customer service team, including any questions, concerns, or feedback you provide.
• Marketing Consent: Your consent to receive promotional emails, newsletters, or other marketing communications from us (you may withdraw this consent at any time, as outlined in Section 7).
• Biometric Information (If Applicable): We do not collect biometric information (e.g., fingerprints, facial recognition data) unless explicitly required for a specific service, and only with your prior written consent, in compliance with the Illinois Biometric Information Privacy Act (BIPA) and FTC guidelines. Any biometric information collected will be stored securely, used only for the stated purpose, and destroyed once no longer necessary.

1.2 Automatically Collected Information

• Device Information: Your IP address, device type (e.g., smartphone, tablet, computer), operating system, browser type and version, screen resolution, and mobile network information.
• Usage Data: Information about how you navigate our store, including the pages you visit, the time spent on each page, the products you view or add to your cart, the links you click, and your search queries.
• Location Information: We may collect approximate geographic location information from your IP address, solely for the purpose of optimizing our Services for your region, calculating shipping costs, and complying with local laws. We do not collect precise GPS location data without your explicit consent.
• Cookies and Similar Technologies: We use cookies, web beacons, and other tracking technologies to enhance your user experience, analyze website traffic, and personalize content and advertisements. For more information about our use of cookies, please see Section 8.

2. Purposes for Using Your Personal Information

• Order Fulfillment and Processing: To process your orders, verify your payment information, arrange for shipping and delivery, send order confirmations, shipping tracking updates, and post-purchase notifications (e.g., return or refund confirmations).
• Customer Support: To respond to your inquiries, resolve complaints, address issues with your orders, and provide you with assistance related to our products and Services.
• Account Management: To create and manage your account, verify your identity, and provide you with access to account features (e.g., order history, saved addresses).
• Marketing and Promotions: To send you promotional emails, newsletters, and special offers about our products, services, and events, but only if you have explicitly consented to receive such communications. We may also use your information to personalize marketing content based on your browsing and purchase history.
• Fraud Prevention and Security: To detect and prevent fraudulent transactions, unauthorized access to your account, and other illegal or harmful activities. We may analyze your order and usage data to identify suspicious activity and protect our business and customers.
• Website Improvement: To analyze usage data and customer feedback to optimize our website design, product offerings, user experience, and overall business operations.
• Legal Compliance: To comply with applicable U.S. federal and state laws, regulations, and legal obligations (e.g., tax reporting, consumer protection laws, and responding to legal requests from government authorities).
• Business Operations: To manage our business, including inventory management, financial reporting, and internal analytics.

3. Legal Basis for Processing Your Personal Information

• Performance of a Contract: To fulfill our contractual obligations to you, such as processing and delivering your orders and providing customer support.
• Legitimate Business Interests: To operate our business, prevent fraud, improve our Services, and market our products (where such interests do not override your privacy rights).
• Consent: To send you marketing communications, collect biometric information (if applicable), and use non-essential cookies (you may withdraw your consent at any time).
• Legal Obligation: To comply with applicable laws, regulations, and legal requirements (e.g., tax, accounting, and consumer protection laws).

4. Sharing Your Personal Information

• Payment Service Providers: Shopify Payments, PayPal, and other payment processors who handle payment transactions on our behalf. These providers process your payment information in compliance with PCI DSS to ensure the security of your financial data.
• Shipping and Logistics Providers: Courier companies (e.g., USPS, UPS, FedEx) who deliver your orders to you. We share your shipping address and contact information with these providers to facilitate delivery.
• Email Service Providers: Providers who assist us in sending order confirmations, shipping updates, and marketing communications (only if you have consented to receive marketing emails).
• Analytics and Marketing Providers: Providers who help us analyze website traffic, track user behavior, and optimize our marketing campaigns (e.g., Google Analytics). These providers may use cookies and similar technologies to collect anonymous or pseudonymous data.
• Legal and Financial Advisors: Lawyers, accountants, and other professionals who assist us in complying with legal and financial obligations.
• Government Authorities: We may disclose your personal information to government authorities or law enforcement agencies if required by law, regulation, or legal process (e.g., a subpoena or court order), or to protect our rights, property, or safety, or the rights, property, or safety of others.

5. Data Retention

• Order and Transaction Information: Retained for 7 years from the date of the transaction, in compliance with U.S. tax and accounting laws (e.g., Internal Revenue Service (IRS) requirements).
• Account Information: Retained for as long as your account is active, and for 7 years after account closure, to comply with legal obligations and resolve any potential disputes.
• Marketing Information: Retained until you withdraw your consent to receive marketing communications, at which point we will delete your marketing contact information within 30 days.
• Customer Service Communications: Retained for 3 years from the date of the last communication, to resolve any future inquiries or disputes.
• Automatically Collected Information: Retained for 12 months from the date of collection, to analyze website traffic and improve our Services. After this period, the data is anonymized and used for statistical purposes only.
• Biometric Information (If Applicable): Retained only for the purpose for which it was collected, and destroyed within 1 year of the purpose being fulfilled, in compliance with BIPA.

6. Data Security

• Encrypted website connections using Secure Sockets Layer (SSL) / Transport Layer Security (TLS) technology to protect data transmitted between your device and our servers.
• Secure storage of sensitive information (e.g., encrypted passwords) using industry-standard encryption algorithms.
• Restricted access to personal information, limited only to employees, contractors, and third-party service providers who need access to perform their job duties.
• Regular security audits and updates to our website and systems to address potential vulnerabilities.
• Compliance with PCI DSS for the processing of payment card information.

7. Your Privacy Rights

• Right to Access: You may request access to the personal information we hold about you, including a copy of the information in a machine-readable format.
• Right to Rectification: You may request that we correct any inaccurate or incomplete personal information we hold about you.
• Right to Deletion: You may request that we delete your personal information, subject to legal obligations (e.g., tax and accounting requirements) and our legitimate business interests.
• Right to Restrict Processing: You may request that we restrict the processing of your personal information in certain circumstances (e.g., if you dispute the accuracy of the information).
• Right to Opt-Out: You may opt out of receiving marketing communications from us at any time by clicking the “unsubscribe” link in our marketing emails or by contacting us at hello@aceora.shop. You may also opt out of non-essential cookie tracking (see Section 8).
• Right to Withdraw Consent: If you have provided consent for the processing of your personal information (e.g., for marketing or biometric data collection), you may withdraw that consent at any time by contacting us at hello@aceora.shop.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights (e.g., we will not deny you access to our Services or charge you higher prices).
• BIPA-Specific Rights (Illinois Residents): If you are an Illinois resident, you have additional rights under BIPA, including the right to access, delete, and obtain a copy of any biometric information we hold about you, and the right to be informed about the purpose and retention period of such information.

8. Cookies and Similar Technologies

• Essential Cookies: These cookies are necessary for the operation of our website and cannot be disabled. They enable basic functions such as cart management, checkout, and user authentication.
• Analytical/Performance Cookies: These cookies collect information about how you use our website (e.g., which pages you visit, how long you stay on each page) to help us improve our website design and user experience. The data collected is anonymous and cannot be used to identify you.
• Marketing/Targeting Cookies: These cookies are used to track your browsing activity and personalize marketing content and advertisements. They may be set by us or by third-party advertising partners. These cookies are only activated if you have consented to their use.

9. Children’s Privacy

10. Third-Party Links

11. Changes to This Policy

12. Contact Us