Privacy Policy
This Privacy Policy governs the collection, use, storage, and protection of your personal information in connection with the sale of bath towels, bath curtains, and toilet paper holders, complying with the California Consumer Privacy Act (CCPA/CPRA) and U.S. federal data protection regulations. We do not sell, rent, or disclose your personal information to third-party marketers for commercial purposes.
Information We Collect
-
Personal & Contact InformationFull name, email address, phone number, shipping/billing address, and voluntary product preferences (e.g., bath towel material, bath curtain size, toilet paper holder finish) collected when you place an order, create an account, or subscribe to our marketing communications. We do not collect personal data from minors without parental consent.
-
Order & Product DataOrder details (model, size, quantity, customization requests), delivery instructions (e.g., porch drop-off), and product compliance records (e.g., FDA fabric safety certifications, CPSC hardware stability reports). This data is retained for 12 months post-order completion to meet CPSC traceability requirements and warranty obligations for bathroom hardware and soft goods.
-
Payment InformationAll payments are processed via PCI DSS-compliant gateways (Visa, Mastercard, PayPal, Apple Pay). We never store complete credit card numbers, CVV codes, or bank account details. Financial data is protected by end-to-end encryption throughout all transaction stages.
-
Device & Usage Data
- Website Data: IP address, browser type, browsing history (e.g., organic cotton bath towel sets, waterproof bath curtain designs), cookie data, and page interaction metrics. Used to optimize website performance and product recommendations for bathroom needs.
- Customer Feedback Data: Communications with our support team, product reviews, and feedback (e.g., towel absorbency, curtain water resistance, holder sturdiness) to improve product quality and customer service.
How We Use Your Information
- Fulfill orders, arrange specialized packaging (moisture-proof for curtains, breathable for towels, foam-padded for hardware), send order confirmations, delivery tracking updates, and post-purchase support (e.g., towel care guides, curtain installation tips, holder mounting instructions).
- Provide customer service, resolve product issues (e.g., frayed towel seams, leaky curtain liners, loose holder brackets), and address compliance inquiries (e.g., FDA fabric safety, CPSC hardware stability).
- With your explicit opt-in consent, send personalized marketing communications (new product launches, seasonal bathroom promotions, towel-curtain-holder bundle discounts). You may unsubscribe at any time without impacting your shopping experience.
- Comply with legal and regulatory requirements, including CPSC product recall notices, tax reporting, and FDA fabric safety audits.
- Improve product design and website experience by analyzing non-identifiable usage data (e.g., popular towel sizes, top-selling curtain patterns, preferred holder finishes).
Data Security & Third-Party Sharing
-
Data Security MeasuresAll personal data is transmitted via SSL/TLS encryption and stored on U.S.-based encrypted servers with restricted access. Only authorized staff (order processing, customer service, compliance teams) have access to limited non-sensitive information, with strict access audit trails in place.
-
Third-Party Service ProvidersWe share the minimum necessary data with trusted third parties solely to complete services on our behalf; all are bound by confidentiality agreements and U.S. data protection standards:
- Shipping Carriers: Shipping address and order details (handling notes for soft goods/hardware) for safe delivery.
- Payment Processors: Transaction amount and order ID (no sensitive financial data) to process payments.
-
Legal Disclosures
We may disclose personal information if required by law, court order, or government regulatory authority (e.g., FDA fabric safety investigations, FTC inquiries, CPSC hardware safety audits).
Your CCPA Privacy Rights
If you are a California resident, you have the following rights, which we will address within 45 calendar days of receiving your verified request:
- Right to Access: Request a free copy of all personal information we have collected about you.
- Right to Correction: Update your contact details, account preferences, and communication settings via your website account.
- Right to Deletion: Request permanent deletion of your personal data (excluding records required by law, CPSC compliance, or warranty tracking).
- Right to Opt-Out: Refuse non-essential data processing (e.g., personalized marketing) without affecting your ability to purchase products.