Privacy Policy

1. Our Approach to Personal Information

At ivorialune (hereinafter referred to as “I”), I respect your privacy and handle personal information responsibly. This Privacy Policy explains how I collect, use, store, disclose, and protect information when you visit my website, browse home furnishings, place an order, contact customer support, or use the shopping services available through my website.

I aim to explain my privacy practices in clear, practical terms, including the types of information I collect, why I use it, the categories of third parties that may receive it, the countries in which it may be processed, and the choices and rights available to you.

The information involved depends on how you interact with my website, the services enabled on the store, the payment and delivery methods you select, and the privacy requirements that apply to your location.

This Privacy Policy applies to information processed in connection with my website and related shopping services. Where applicable, it also explains rights under U.S. state privacy laws and the General Data Protection Regulation (GDPR).

2. Categories of Personal Information I Collect

The personal information I collect may include the following categories.

Contact and identification information: This may include your name, email address, telephone number, billing address, shipping address, and other details you provide when placing an order or contacting me.

Order and transaction information: This may include the products you purchase, order numbers, quantities, transaction dates, purchase amounts, delivery instructions, shipping status, return or exchange requests, refund records, and communications relating to an order.

Payment information: This may include payment status, transaction identifiers, billing details, payment method, and information needed to confirm or reconcile a transaction. Payment card details may be collected and processed by the payment service selected at checkout. The information I can access depends on the payment method and service configuration. I do not intentionally retain payment card security codes for ongoing storage.

Customer service information: This may include the content of messages you send, the information you provide when reporting a product issue, and records needed to respond to your questions, cancellation requests, returns, exchanges, or complaints.

Device, usage, and technical information: Depending on the website functions and technologies enabled, this may include IP address, browser type, device information, approximate location inferred from technical information, pages viewed, referring pages, interactions with the shopping cart, checkout activity, and diagnostic or security logs.

Cookie and preference information: This may include cookie identifiers, consent choices, language or regional preferences, and information stored through essential website technologies or, where enabled and permitted, analytics and advertising technologies.

Information from service providers: I may receive limited information from payment processors, shipping carriers, fraud-prevention services, website service providers, or other third parties when needed to complete a transaction, verify its status, deliver an order, prevent fraud, or respond to a request.

I do not intentionally request sensitive personal information unless it is necessary for a specific purpose and permitted under applicable requirements. Please do not send payment card security codes, passwords, or unnecessary sensitive information in ordinary customer service messages.

3. How Information Is Collected

I collect information directly from you when you place an order, enter checkout details, contact customer support, request a cancellation, submit a return or exchange request, provide delivery instructions, or otherwise communicate with me.

Certain information is generated automatically when you browse the website, use the shopping cart, proceed through checkout, or interact with website settings. These records may support website functionality, security, performance monitoring, and troubleshooting.

I may also receive information from service providers involved in processing payments, delivering orders, maintaining the website, preventing fraud, or providing other services connected with a transaction.

Cookies and similar technologies may collect or store information according to their function, the website configuration, and your consent choices. Non-essential technologies that require consent will be used only after the required consent has been obtained.

I aim to collect information that is relevant and reasonably necessary for the purposes described in this policy. Where applicable, I will provide required notices and obtain consent before processing information for purposes that require it.

4. How I Use Personal Information

I use personal information for the following purposes.

Order processing and fulfillment: To confirm orders, verify payment status, prepare purchases for dispatch, arrange delivery, provide tracking details, and communicate about delivery problems.

Customer service and order administration: To respond to questions, review product concerns, process cancellation requests, manage returns and exchanges, and maintain records of communications relating to a purchase.

Payments and transaction verification: To facilitate payment processing, reconcile transactions, address payment disputes, and investigate suspected unauthorized or fraudulent activity.

Website operation and improvement: To maintain website functionality, remember necessary preferences, identify technical problems, improve navigation, and understand how visitors use the shopping experience, where permitted.

Security and fraud prevention: To protect customer accounts and order records, detect suspicious activity, prevent abuse, and support the security of transactions and website systems.

Marketing and advertising: If marketing or advertising tools are enabled, I may use permitted information to measure campaign performance, understand advertising effectiveness, or deliver relevant communications and advertisements. Where consent or an opt-out is required, I will respect the applicable choice. You may unsubscribe from marketing emails using the unsubscribe instructions provided in the message.

Legal, financial, and administrative purposes: To maintain appropriate accounting and transaction records, respond to valid legal requests, resolve disputes, exercise or defend legal claims, and meet applicable obligations.

I do not intentionally collect or use personal information for purposes materially incompatible with the purposes disclosed at collection unless an appropriate legal basis, notice, or consent permits the additional processing.

5. Cookies and Similar Technologies

My website may use cookies, pixels, tags, local storage, and similar technologies to operate the shopping experience, maintain cart information, remember preferences, protect website functions, and understand how visitors interact with the website.

Essential technologies may be used where necessary to provide a service you request, maintain website security, or support checkout and shopping cart functions.

Analytics technologies, advertising pixels, and other optional tracking tools may be used only if they are enabled on the website and their use is permitted under applicable requirements. Where consent is required, I will request consent before activating the relevant non-essential technologies.

Depending on the tools enabled, certain technical or browsing information may be made available to analytics, advertising, or platform providers for purposes such as measuring website performance, understanding traffic, preventing fraud, or evaluating advertising campaigns. The information and purposes involved depend on the specific tool and its configuration.

You can manage available cookie choices through the website's consent settings and can also delete or restrict cookies through your browser settings. Browser controls do not necessarily remove information already held by a service provider or automatically disable every form of tracking.

Changing cookie settings may affect cart continuity, saved preferences, or other website functions. If you use a different browser or device, you may need to set your preferences again.

6. Categories of Recipients and Information Disclosures

I may disclose personal information to the following categories of recipients when the disclosure is reasonably necessary for the relevant purpose, permitted by applicable requirements, or authorized by you. The information provided to each recipient is limited to what is reasonably necessary for its role.

Website hosting and ecommerce platform providers: I use Shopify to operate my online store and support website functions, checkout, order management, and related ecommerce services. Shopify and relevant affiliated entities or subprocessors may process contact details, order information, device and usage information, and other information needed to provide the platform services.

Payment processors and payment service providers: The payment provider selected at checkout may receive payment details, billing information, transaction amounts, identifiers, and information needed to authorize, process, verify, or refund a transaction. The particular recipient depends on the payment method and payment services enabled on the store.

Shipping carriers and delivery service providers: Carriers and delivery providers may receive your name, delivery address, telephone number where required, order or parcel reference, delivery instructions, and information needed to transport and deliver your purchase or investigate a delivery issue.

Returns, fulfillment, and logistics providers: If a separate fulfillment, warehouse, returns, or logistics provider is used, it may receive order details, contact information, product information, and return or delivery instructions needed to store, prepare, ship, inspect, or return goods.

Website analytics and performance providers: If analytics services are enabled, relevant providers may receive technical identifiers, device and browser information, browsing events, website interaction information, and related diagnostic data to measure traffic, troubleshoot problems, or evaluate website performance.

Advertising and marketing providers: If advertising pixels, audience tools, email marketing services, or similar services are enabled, the relevant providers may receive contact details, cookie or device identifiers, browsing or purchase events, and marketing preferences as necessary for the configured functions. Depending on the service and applicable law, certain disclosures for targeted advertising may constitute “sharing” or “selling” under a particular U.S. state privacy law, even if no money is exchanged directly for the information.

Customer support and communications providers: If I use a separate customer support, email, messaging, or communication service, that provider may process contact details and message contents to deliver communications, manage inquiries, and maintain service records.

Fraud prevention, security, and technical service providers: Relevant providers may receive transaction details, technical identifiers, device information, or activity logs to assess suspicious activity, protect systems, prevent abuse, and maintain service reliability.

Professional advisers and insurers: Where reasonably necessary, I may provide relevant records to legal advisers, accountants, auditors, insurers, or other professional advisers for advice, financial administration, insurance, dispute resolution, or the establishment, exercise, or defense of legal claims.

Government authorities, regulators, and other parties where required: I may disclose information to courts, regulators, law enforcement agencies, public authorities, or other parties when required by law, valid legal process, or an appropriate request, or when disclosure is reasonably necessary to protect rights, safety, property, or the integrity of the service.

Business transactions: If my store or relevant business assets are involved in a proposed or completed sale, restructuring, financing, or similar transaction, relevant information may be disclosed to the parties and advisers involved, subject to applicable confidentiality and privacy requirements.

I do not disclose personal information to every category listed above in every transaction. The actual recipients depend on the services enabled, the way you use the website, the payment and delivery options selected, and the circumstances of the disclosure.

Where a third party processes information on my behalf, I seek to use appropriate contractual and security measures for that relationship. A third party may separately process information under its own privacy policy when it acts as an independent controller or business. Please review the relevant provider's privacy notice for details about its own practices.

7. Data Retention

I retain personal information for as long as reasonably necessary to fulfill the purposes described in this policy, including processing orders, delivering purchases, responding to customer requests, managing returns and refunds, maintaining financial records, protecting the website, and resolving disputes.

The retention period depends on the type of information, the purpose for which it is used, whether a transaction or dispute remains active, and any applicable accounting, tax, recordkeeping, or other requirements.

Information may be retained for a longer period when necessary to establish, exercise, or defend legal claims, investigate suspected fraud, enforce relevant terms, or comply with a valid legal obligation.

When information is no longer needed for a legitimate purpose or required retention period, I aim to delete it, anonymize it, or otherwise dispose of it appropriately, subject to applicable requirements and reasonable technical limitations.

Service providers may retain information according to their contractual obligations, documented instructions, applicable legal requirements, and their own retention practices where they act as independent controllers. Cookie retention periods vary by technology and may be described in the relevant cookie settings or provider documentation.

You may contact me to ask about the retention of your personal information. I will provide information about the applicable criteria or period where required and reasonably possible.

8. Legal Bases for Processing Under GDPR

Where the GDPR applies, I process personal data on an appropriate legal basis, depending on the purpose and circumstances.

Performance of a contract: I process information when necessary to enter into or perform a purchase agreement, including processing orders, arranging payment and delivery, providing customer service, and handling returns or refunds.

Legal obligations: I may process or retain information to comply with applicable tax, accounting, recordkeeping, consumer protection, or other legal obligations.

Consent: Where consent is required, I will request it before processing the relevant information. This may include certain non-essential cookies, optional marketing activities, or other processing for which consent is the appropriate legal basis. You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Legitimate interests: Where permitted, I may process information to maintain website security, prevent fraud, improve website performance, administer records, respond to disputes, and protect my rights or the rights of others. I consider the nature of the processing and its likely impact on your rights and interests. Where required, I will not rely on legitimate interests if your interests or fundamental rights and freedoms override those interests.

The applicable legal basis depends on the specific processing activity. Where processing is necessary to perform a contract or meet a legal obligation, withdrawing consent for an unrelated activity does not necessarily prevent that processing.

9. Your Privacy Rights

The rights available to you depend on your location, the applicable privacy requirements, and the circumstances of the processing.

Rights Under GDPR

Where the GDPR applies, you may have the following rights, subject to applicable conditions and exceptions.

Right of access: You may request confirmation of whether I process your personal data and, where applicable, obtain access to that data and information about how it is used.

Right to rectification: You may request correction of inaccurate personal data or completion of incomplete data.

Right to erasure: You may request deletion of your personal data where the applicable requirements allow it. Certain information may need to be retained to comply with legal obligations or establish, exercise, or defend legal claims.

Right to restriction of processing: You may request restriction of processing in the circumstances provided for under the GDPR.

Right to data portability: Where the GDPR's portability requirements apply, you may request personal data you have provided to me in a structured, commonly used, machine-readable format, where the legal conditions are met. Where technically feasible and legally required, you may request direct transmission to another controller.

Right to object: Where processing is based on legitimate interests or another basis that provides an objection right under the GDPR, you may object on grounds relating to your particular situation. You have an unconditional right to object to the processing of your personal data for direct marketing, including related profiling, where the GDPR applies. I will stop the relevant processing where required.

Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before it.

Right to lodge a complaint: You may lodge a complaint with a competent data protection supervisory authority, particularly in the EU or EEA country where you habitually reside, work, or believe an infringement occurred, as applicable.

Rights Under Applicable U.S. State Privacy Laws

Depending on the state where you reside and the applicable requirements, you may have rights to:

Confirm whether I process your personal information and request access to it.
Obtain a copy of certain personal information in a portable format.
Request correction of inaccurate personal information.
Request deletion of personal information, subject to applicable exceptions.
Obtain information about the categories of personal information collected, the purposes of processing, and the categories of third parties to whom information is disclosed, where required.
Opt out of certain processing for targeted advertising, the sale of personal information, or profiling that produces legal or similarly significant effects, where the applicable law provides that right.
Appeal a refusal to act on a privacy request, where an appeal right is provided by applicable law.
Exercise applicable privacy rights without unlawful discrimination or retaliation.

Whether a specific right applies depends on the relevant state law, the nature of the information, the processing activity, and any applicable exemptions.

How to Exercise Your Rights

To submit a privacy request, contact me using the details in Section 15 and clearly describe the request you wish to make. I may need to verify your identity or request additional information reasonably necessary to confirm that the request is legitimate. I will not request more information than is reasonably needed for verification.

Where an authorized agent submits a request on your behalf, I may require evidence of authorization and, where permitted, verification of your identity.

I will respond within the time required by the applicable law. If I cannot fulfill a request in full, I will explain the reason where required and provide any available appeal or complaint options.

Where a right to appeal applies, you may submit an appeal by replying to my response or contacting me again with “Privacy Request Appeal” in the subject line. I will review the appeal and respond within the applicable period.

10. U.S. Disclosures, Targeted Advertising, and Opt-Out Choices

Certain U.S. state privacy laws require additional disclosures about the categories of personal information collected, the purposes for which information is used, and the categories of third parties to whom information may be disclosed.

The categories of information I may collect are described in Section 2. The purposes are described in Section 4. The categories of recipients are described in Section 6.

Depending on the services enabled on my website, information may be disclosed to analytics or advertising providers through cookies, pixels, or similar technologies. Under certain state privacy laws, such disclosures may qualify as “sharing” for cross-context behavioral advertising or as a “sale” of personal information, even if I do not receive money in exchange for the information.

Where applicable law grants you the right to opt out of a sale, sharing, or targeted advertising, you may exercise that right through the available privacy or cookie settings on my website or by contacting me using the details in Section 15. If my website provides a recognized opt-out preference signal, such as Global Privacy Control, I will process it as required by the applicable law.

If you opt out, I will apply the opt-out to the processing covered by the applicable requirement. You may need to make a separate choice for a different browser or device unless the relevant law or technical implementation requires otherwise.

I do not knowingly sell sensitive personal information or use sensitive personal information for purposes that require a separate limitation mechanism without providing the protections required by applicable law. I will not unlawfully discriminate against you for exercising a privacy right.

11. Third-Party Processing Locations and International Data Transfers

My store is operated from the United States and uses Shopify to provide ecommerce platform services. Personal information may be processed in the United States and in other countries where Shopify, its relevant affiliated entities, and its service providers operate.

Shopify and Its Service Providers

Shopify's published materials identify Canada as the location of its parent company and describe international processing involving the United States and other jurisdictions. Shopify's published subprocessor information also identifies providers or affiliated entities associated with countries including Ireland, India, Japan, New Zealand, the Netherlands, and other locations. The applicable providers, processing functions, and countries may change as Shopify updates its services and subprocessor arrangements.

These published locations do not mean that every provider receives information from my store or that every customer's information is processed in every listed country. The actual processing depends on the Shopify services used, the relevant technical arrangements, and the current subprocessor list.

Other Service Providers

Payment processors, shipping carriers, fulfillment providers, analytics services, advertising platforms, and customer support tools may process information in the countries where they or their relevant affiliates operate. The actual destinations depend on the services enabled and the providers selected.

For example, a payment processor may process transaction information in the country where its relevant entity or processing infrastructure operates. A shipping carrier may process delivery information in the countries involved in transporting and delivering a parcel. An analytics or advertising provider may process technical identifiers and website interaction information in the countries where its systems or service providers operate.

I do not represent that all personal information is processed exclusively in the United States or that every transfer follows the same transfer mechanism.

Transfers of Personal Data Subject to GDPR

Where personal data subject to the GDPR is transferred outside the European Economic Area (EEA), the transfer must comply with the GDPR's international transfer requirements.

Depending on the recipient, destination, and applicable legal framework, a transfer may rely on:

An applicable European Commission adequacy decision, where the destination and recipient fall within the scope of that decision.
Appropriate safeguards, such as the European Commission's Standard Contractual Clauses (SCCs), together with any supplementary measures required by the circumstances.
Another transfer mechanism or derogation permitted under the GDPR, where its specific conditions are satisfied.

Shopify's published transfer information states that it uses applicable transfer mechanisms for relevant international transfers, including the European Commission's adequacy decision for transfers covered by the Canada decision and Standard Contractual Clauses for certain transfers within its group and to subprocessors. These mechanisms apply according to Shopify's own contractual arrangements and the particular transfer involved; they do not automatically establish the transfer basis for every independent provider used by my store.

For transfers involving other providers, the applicable mechanism depends on the provider, recipient country, and processing arrangement. I will not represent that a particular adequacy decision, SCC, or derogation applies to a transfer unless the relevant arrangement supports that conclusion.

Where required, I will use an appropriate transfer mechanism and supplementary safeguards before transferring personal data to a destination without an applicable adequacy decision.

How to Obtain Further Information

You may contact me using the details in Section 15 to request further information about international transfers relevant to your personal information, including the applicable recipient categories and safeguards.

Where permitted and reasonably available, I will explain the relevant transfer mechanism or provide access to applicable safeguards or documentation. Information may be redacted where necessary to protect confidential information, security, or the rights of other parties.

Because service providers may update their processing locations and subprocessor arrangements, the current provider documentation and contractual terms should be consulted for the most recent destination and transfer details.

12. Information Security

I take reasonable technical, organizational, and administrative measures designed to protect personal information against unauthorized access, loss, alteration, disclosure, and misuse. The safeguards used depend on the nature of the information, the systems involved, and the risks associated with the relevant processing.

Measures may include limiting access to information, using service providers with appropriate security practices, maintaining operational safeguards, and reviewing relevant procedures.

No method of electronic transmission or storage can be guaranteed to be completely secure in every circumstance. I therefore work to manage privacy and security risks responsibly rather than promise that unauthorized access, loss, or disclosure can never occur.

If I become aware of a personal information incident that requires notification under applicable requirements, I will take appropriate steps to address it and provide any required notices.

You can help protect your information by keeping account credentials confidential, using accurate contact details, and contacting me promptly if you suspect unauthorized use of your information.

13. Updates to This Privacy Policy

I may update this Privacy Policy when my website, service providers, data processing practices, or applicable privacy requirements change.

When a significant change affects how personal information is handled, I will provide notice through an appropriate method where required. The revised policy will be published on this page, and the effective date will be updated where appropriate.

I encourage you to review this page periodically to remain informed about the privacy practices that apply when you use my website.

14. Contact Information and Privacy Requests

If you have questions about this Privacy Policy, wish to exercise a privacy right, want to appeal a privacy request decision, or would like further information about data recipients or international transfers, please contact me using the details below.

Address: 1200 Holden Ave #155, Orlando, FL 32839, United States

Phone: +1 (407) 628-9143

Email: team@ivorialune.com

Business Hours: Monday through Friday, 9:00 AM to 6:00 PM Eastern Time, excluding observed holidays.

When contacting me about an existing order, please include the order number if available. For privacy requests, explain the right you wish to exercise and provide only the information reasonably needed to understand and verify your request. Please do not include payment card security codes, passwords, or unnecessary sensitive information in your initial message.