Privacy Policy

Information We Collect

Information You Provide

When you place an order, contact us, or otherwise interact with the website, we may receive information such as:

• Your name
• Email address
• Phone number
• Billing and shipping addresses
• Order and cart information
• Messages or other information you send us

Payment card information is collected and processed by our payment provider, Stripe. We do not directly store your full payment card details.

Information Collected Automatically

When you use the website, we may collect limited technical and usage information, such as:

• Device and browser information
• IP address and approximate location derived from it
• Pages viewed and interactions with the website
• Referral source
• Advertising or campaign information
• Cart and checkout events
• Purchase events

We do not intentionally include information such as your name, email address, phone number, or shipping address in analytics or advertising events.

How We Use Your Information

We may use information to:

• Process payments and fulfill orders
• Reserve and manage inventory
• Arrange shipping and delivery
• Send order confirmations, receipts, shipping updates, and other transactional communications
• Respond to questions and provide customer support
• Prevent fraud and protect the security of the website
• Troubleshoot and improve the website and shopping experience
• Maintain business, accounting, and transaction records
• Comply with applicable legal and tax obligations
• Measure website performance and marketing effectiveness where required consent has been provided

We do not use information collected for one purpose in ways that are materially incompatible with that purpose without appropriate notice or consent.

Payments

Payments are processed by Stripe. Payment information you provide during checkout is transmitted to and processed by Stripe according to its own privacy practices.

We may receive limited information from Stripe relating to your transaction, such as payment status, transaction identifiers, and limited payment-method information necessary to manage your order.

Service Providers

We use service providers to help operate our website and business. Depending on the services enabled on the website, these may include:

• Stripe for payment processing
• Supabase for website, store, customer, and order data
• Resend for transactional email
• Website hosting and infrastructure providers
• Shipping and delivery providers
• Google, Meta, and TikTok for optional analytics or advertising measurement when those services are configured and the required consent has been provided

We share information with these providers only as reasonably necessary for them to perform services on our behalf or as otherwise described in this policy.

Some providers may process information in locations outside your state or country.

Cookies, Browser Storage, and Measurement

We use essential browser storage and similar technologies where necessary for functions such as maintaining your cart, checkout, security, and basic session state.

Optional analytics or advertising measurement is disabled until you choose “Allow measurement” where consent is required.

If enabled, measurement technologies may collect information about how you reached and interacted with the website and whether certain actions, such as a purchase, occurred.

You can decline optional measurement when presented with the privacy choices on the website. You can also remove stored information by clearing this website's cookies or browser storage through your browser.

Where supported, Global Privacy Control (GPC) signals are treated as a request to decline optional measurement.

Advertising and Sale or Sharing of Personal Information

We do not sell personal information for money.

If advertising or measurement services from companies such as Google, Meta, or TikTok are enabled, certain device, browser, advertising, or website-interaction information may be transmitted to those services. Depending on applicable privacy law, some of these activities may be considered “sharing,” “targeted advertising,” or a “sale” even when no money is exchanged.

Where required, these technologies are not enabled until the appropriate consent or privacy choice has been provided.

How Long We Keep Information

We retain information for as long as reasonably necessary for the purposes described in this policy.

For example, order and transaction records may be retained to fulfill orders, provide customer service, maintain accounting and tax records, resolve disputes, prevent fraud, and comply with legal obligations.

Information that is no longer reasonably required will be deleted, anonymized, or otherwise handled in accordance with applicable law and our operational requirements.

Your Privacy Choices and Rights

Depending on where you live, you may have rights regarding your personal information, which may include the right to:

• Request access to information we hold about you
• Request correction of inaccurate information
• Request deletion of certain information
• Request a copy of certain information
• Object to or opt out of certain uses of your information
• Withdraw consent where processing is based on consent

These rights may be subject to exceptions under applicable law. For example, we may need to retain certain order information for accounting, tax, fraud-prevention, dispute-resolution, or other legal purposes.

To make a privacy request, contact us at gemmadunjo@gmail.com.

We may need to verify your identity before completing certain requests.

Data Security

We use reasonable administrative and technical measures designed to protect information handled through the website.

However, no method of transmission or electronic storage can be guaranteed to be completely secure, and we cannot guarantee absolute security.

Children's Privacy

This website and our products are intended for a general adult audience and are not directed to children under 13.

We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, please contact us so that we can review and, where appropriate, delete it.

Third-Party Websites and Services

Our website may contain links to websites or services operated by third parties. Their privacy practices are governed by their own policies, and we are not responsible for their privacy practices or content.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our website, services, providers, or legal requirements.

When we update it, we will revise the “Last updated” date at the top of this page.

Contact Us

If you have questions about this Privacy Policy, how your information is handled, or would like to make a privacy request, contact:

The Yellow Door Atelier
gemmadunjo@gmail.com