Privacy Policy

Last updated: 10/09/2025

This policy explains how we collect, use, share, and protect personal information from customers and visitors to our Site.
By using the Site, creating an account, or purchasing from us, consent is given to this policy.

Information provided: name, email, phone, billing and shipping address, payment method details (processed by our payment provider), order details, messages to support.
Automatic data: device/browser type, IP address, approximate location, pages viewed, referring site, and actions on the Site (e.g., adding to cart).
Cookies and similar tech: used for essential site features, preferences, analytics, and marketing (see our Cookie Policy).

To process orders, payments, delivery, returns, and customer service.
To operate, secure, and improve the Site (analytics, troubleshooting, testing).
To personalize content, remember preferences, and recommend products.
To send service messages (order confirmations, shipping updates) and—with consent or as allowed—marketing emails that can be unsubscribed at any time.
To comply with legal obligations and prevent fraud.

Service providers: payment processing, warehousing/fulfilment, shipping carriers, email/SMS tools, analytics, IT/security, and support tools—only as needed to provide services.
Legal and compliance: when required by law, to protect rights, prevent fraud, or respond to lawful requests.
Business transfers: as part of a merger, acquisition, or asset sale, subject to appropriate safeguards.
We do not sell personal information. If applicable local law defines “share” for advertising, opt‑out choices are provided.

Payments are processed by third‑party providers. We do not store full card numbers. Providers handle card data in line with industry standards.
Orders may be declined or flagged if payment authorization fails or fraud is suspected.

Essential cookies run to provide the Site. Non‑essential cookies (analytics/ads) only run with consent where required.
Choices can be managed via “Cookie Settings” on the Site or browser settings. See our Cookie Policy for details.

With consent or as permitted, marketing messages may be sent about products and offers.
Unsubscribe via links in messages or by contacting us. Service and transactional emails will continue.

Depending on location, rights may include: access, correction, deletion, portability, restriction/objection to processing, and withdrawal of consent.
Requests can be made by emailing [privacy email]. Identity verification may be required.
A complaint can be lodged with a local data protection authority where applicable.

Reasonable technical and organizational measures protect personal information (encryption in transit, access controls, limited retention).
No method is 100% secure; prompt notice will be given of certain breaches as required by law.

Personal information is kept only as long as needed for the purposes in this policy, including legal, accounting, and reporting requirements.
Typical retention: order records and invoices for [e.g., 6 years]; marketing preferences until consent is withdrawn; cookies per their expiry.

If data is transferred to other countries, appropriate safeguards (such as standard contractual clauses) are used where required by law.

The Site is not directed to children. Do not knowingly collect personal information from children under the age set by local law. If this occurs, contact us to delete it.

The Site may link to external websites or services with their own privacy practices. Review those policies; responsibility for third‑party practices is not assumed.

This policy may be updated to reflect changes in law, technology, or our practices. The “Last updated” date will be adjusted, and material changes may be highlighted on the Site.

Privacy contact: vintagewoolrugs@gmail.com.
If a Data Protection Officer or representative is appointed, include their details here.