Privacy Policy

At Gracie Furniture (“we,” “our,” or “us”), accessible via graciefurniture.com (“Website”), we are committed to safeguarding your personal data and upholding your privacy rights with the utmost diligence. This Privacy Policy outlines the types of personal data we collect, how we use and protect that data, and the rights and choices you have under applicable law, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).

1. Commitment to Privacy and Data Protection

Your privacy is of fundamental importance to us. We are committed to handling your personal data with transparency, integrity, and care. We collect only the data necessary for legitimate business purposes and implement robust security measures to protect that information. We strive to provide complete visibility and control over your data to ensure your trust and confidence in our services.

2. Scope of Policy and Data Controller Role

This Privacy Policy applies to all personal data collected through graciefurniture.com and any affiliated digital platforms. Gracie Furniture is the data controller for the purposes of GDPR and the “business” under CCPA. As such, we determine the purposes and means of processing your personal data in accordance with applicable privacy laws.

If you have any questions regarding this policy, or how your personal data is handled, you may contact us at [email protected].

3. Categories of Personal Data We Process

We process the following categories of personal data collected directly or indirectly from you:

a. Usage Data
Includes information about how you interact with the Website such as IP address, browser type and version, pages visited, time and date of visit, session duration, referral URLs, and other analytical data.

b. Account Data
Information provided when creating an account or placing an order, such as your full name, billing and shipping address, email address, and phone number.

c. Profile Data
Includes preferences, purchase history, wish-lists, saved settings, and behavioral data derived from your use of our services and Website.

d. Communication Data
Records of your communications with us including customer support inquiries, emails, chat messages, and feedback provided through the Website.

e. Technical Data
Device-specific information such as device type, operating system, screen resolution, mobile network information, and device identifiers.

f. Transaction Data
Includes payment details (processed via secure third-party vendors), order information, shipping records, and return history.

g. Preference Data
Marketing consents, product interests, notification settings, and communication preferences.

4. Legal Bases for Data Processing

We process your personal data based on the following legal grounds, as applicable:

– Contractual Necessity: To fulfill our obligations in delivering products or services you request, including account creation and support.
– Legitimate Interests: To improve our services, prevent fraud, ensure Website security, and understand user preferences.
– Consent: For email marketing, cookie preferences, and other optional services where your permission is legally required.
– Legal Obligation: To comply with tax, regulatory, or legal proceedings and obligations imposed by authorities.

5. Your Data Protection Rights

Under GDPR and CCPA, you have the following rights concerning your personal data:

– Right of Access: Request a copy of the personal data we hold about you.
– Right to Rectification: Request corrections to inaccurate or incomplete data.
– Right to Erasure: Request that we delete your data under certain circumstances.
– Right to Restriction: Request that we limit how your data is processed.
– Right to Data Portability: Request that your data be transferred to you or another provider in a structured, machine-readable format.
– Right to Object: Object to certain processing activities, including those based on legitimate interests or for marketing.
– Right to Opt Out: If a California resident, you have the right to opt out of the “sale” or “sharing” of personal data as defined by CCPA.

To exercise any of these rights, please email us at [email protected]. Requests will be handled within the timeframes established by applicable law.

6. Security Measures

We take the security of your personal data seriously. We implement appropriate technical and organizational measures including, but not limited to:

– Encrypted communication (HTTPS/TLS) for all Website traffic
– Role-based access controls with administrative oversight
– Secure payment gateways and tokenization for financial data
– Regular system audits, firewalls, and intrusion detection systems
– Staff training in data protection best practices
– Offsite backups and disaster recovery systems

Despite these efforts, no method of transmission over the internet or electronic storage is entirely secure. We encourage you to maintain strong passwords and exercise caution when sharing personal information online.

7. International Data Transfers

If you are located outside of the United States, please note that your data may be transferred to, processed, and stored in countries where data protection laws may differ from those in your jurisdiction. Where such international transfers occur, we implement appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, to ensure compliance with the GDPR and the privacy standards of your jurisdiction.

8. Data Retention

We retain personal data for no longer than is necessary for the purposes for which the data is processed. The following general retention periods apply:

– Account Data: Retained as long as your account is active and for up to 7 years after closure for legal and tax compliance.
– Transaction Data: Retained for 7 years to comply with financial and legal obligations.
– Communication Data: Retained for 2 years for support and conflict resolution purposes.
– Usage and Technical Data: Anonymous or aggregated data may be kept indefinitely. Identifiable logs are retained for a maximum of 12 months.
– Marketing Preference Data: Retained until you withdraw consent or for no more than 24 months without engagement.

9. Cookie Policy

The Website uses cookies and similar technologies to enhance your experience, analyze usage patterns, and support marketing efforts. We categorize cookies as follows:

– Essential Cookies: Necessary for website functionality such as logging in, shopping cart, and security.
– Functional Cookies: Remember your preferences such as language or location.
– Analytics Cookies: Help us understand how users interact with the site. Data collected is anonymized.
– Performance Cookies: Improve load times and ensure consistent delivery of services.

10. Cookie Management and Compliance

We comply with GDPR and CCPA requirements on consent and transparency regarding cookies. Upon your first visit, you will be prompted to set your cookie preferences through a Cookie Consent Manager. You may modify your preferences or withdraw consent at any time by accessing cookie settings through our Website footer or browser settings.

California residents may also opt out of cookie usage that constitutes a “sale” under the CCPA through the “Do Not Sell or Share My Personal Information” link provided on our Website.

11. Children’s Privacy

Gracie Furniture does not knowingly collect or solicit data from children under the age of 13. If you are a parent or guardian and believe your child has provided personal data to us, please contact us at [email protected]. We will promptly remove such data from our systems upon verification.

12. Updates to this Privacy Policy

We reserve the right to make changes to this Privacy Policy at our discretion and in response to legal, technical, or business developments. Any updates will be posted to this page and, where appropriate, you will be notified via email or Website notification. We encourage you to review this policy periodically to stay informed of how we protect your personal data.

13. Contacting Us

If you have any questions, concerns, or requests regarding this Privacy Policy, your data, or our data practices, please contact us directly at:

Email: [email protected]
Website: https://graciefurniture.com

Your privacy matters. Gracie Furniture is committed to complying with all applicable data protection laws and industry standards. Please contact us with any privacy concerns, and we will work diligently to address them.