1. Introduction

Welcome to Grain & Frame Furniture ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website your-domain.com and use our services.

By using our website, you consent to the data practices described in this policy. If you do not agree with the terms of this Privacy Policy, please do not access our site.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Register for an account
• Place an order or make a purchase
• Subscribe to our newsletter
• Contact us via email, phone, or contact forms
• Participate in surveys, promotions, or contests
• Leave reviews or testimonials

This information may include:

• Full name
• Email address
• Phone number
• Billing and shipping addresses
• Payment information (processed securely through third-party payment processors)
• Account credentials (username and encrypted password)

2.2 Automatically Collected Information

When you visit our website, we automatically collect certain information about your device and browsing behavior, including:

• IP address
• Browser type and version
• Operating system
• Referring URLs
• Pages viewed and time spent on pages
• Date and time of visits
• Device identifiers
• Geographic location (country/region level)

2.3 Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to enhance your experience, analyze site traffic, and personalize content. For detailed information, please see our Cookie Policy section below.

3. How We Use Your Information

We use the collected information for the following purposes:

• Order Processing: To process and fulfill your orders, arrange delivery, and provide customer support
• Account Management: To create and manage your account, including authentication and security
• Communication: To send order confirmations, shipping updates, newsletters, promotional offers, and respond to inquiries
• Personalization: To customize your experience and provide product recommendations
• Analytics: To analyze website usage, monitor performance, and improve our services
• Marketing: To conduct promotional campaigns, surveys, and contests (with your consent)
• Security: To protect against fraud, unauthorized access, and ensure website security
• Legal Compliance: To comply with legal obligations and enforce our terms and conditions

4. Cookie Policy

4.1 What Are Cookies

Cookies are small text files stored on your device that help websites remember your preferences and improve functionality. We use both session cookies (temporary) and persistent cookies (stored long-term).

4.2 Types of Cookies We Use

• Essential Cookies: Required for website functionality, including shopping cart and checkout processes
• Performance Cookies: Collect anonymous data about how visitors use our site to improve performance
• Functionality Cookies: Remember your preferences and personalize your experience
• Marketing Cookies: Track your browsing to deliver relevant advertisements and measure campaign effectiveness

4.3 Managing Cookies

You can control cookies through your browser settings. However, disabling certain cookies may limit your ability to use some website features. Most browsers allow you to:

• View and delete cookies
• Block third-party cookies
• Block cookies from specific sites
• Block all cookies
• Delete all cookies when closing the browser

5. Third-Party Services and Disclosure

5.1 Service Providers

We share your information with trusted third-party service providers who assist us in operating our website and business, including:

• Payment Processors: Secure payment gateways (Stripe, PayPal) to process transactions
• Shipping Partners: Delivery services to fulfill orders and provide tracking
• Email Service Providers: Platforms for sending newsletters and transactional emails
• Analytics Providers: Google Analytics and similar services for website performance analysis
• Cloud Hosting: Secure servers to store website data and customer information
• Marketing Platforms: Social media and advertising networks for promotional campaigns

These third parties are contractually obligated to protect your information and use it only for specified purposes.

5.2 Legal Requirements

We may disclose your information if required by law, court order, or governmental request, or to:

• Comply with legal processes
• Enforce our terms and conditions
• Protect our rights, property, or safety
• Prevent fraud or security threats
• Protect the rights and safety of our users

5.3 Business Transfers

If we undergo a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred to the new entity. You will be notified of any such change via email or prominent notice on our website.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for data transmission
• Secure servers with firewall protection
• Encrypted storage of sensitive data
• Regular security audits and vulnerability assessments
• Access controls and authentication protocols
• Employee training on data protection practices

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Specific retention periods include:

• Account Information: Retained while your account is active and for a reasonable period after account closure
• Transaction Records: Kept for 7 years for tax, accounting, and legal purposes
• Marketing Data: Retained until you unsubscribe or withdraw consent
• Analytics Data: Typically aggregated and anonymized after 26 months
• Customer Support: Retained for up to 3 years for quality assurance and legal compliance

After the retention period, we securely delete or anonymize your information in accordance with applicable data protection laws.

8. Your Privacy Rights

Under the General Data Protection Regulation (GDPR) and other applicable privacy laws, you have the following rights regarding your personal information:

• Right to Access: Request a copy of the personal information we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete information
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restriction: Request limitation of processing your information under certain circumstances
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing of your information for direct marketing or legitimate interests
• Right to Withdraw Consent: Withdraw previously given consent at any time
• Right to Lodge a Complaint: File a complaint with your local data protection authority

To exercise any of these rights, please contact us using the information provided in the Contact section below. We will respond to your request within 30 days.

9. Children's Privacy

Our website is not intended for children under the age of 16. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will take steps to delete such information from our systems.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws different from your jurisdiction. We ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the European Commission
• Privacy Shield certification (where applicable)
• Adequacy decisions by relevant authorities

By using our website, you consent to the transfer of your information to these countries.

11. Third-Party Links

Our website may contain links to third-party websites, plugins, and applications. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

12. Marketing Communications

With your consent, we may send you promotional emails about new products, special offers, and other information we think you may find interesting. You can opt out at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Updating your communication preferences in your account settings
• Contacting us directly using the information below

Please note that even if you opt out of marketing communications, we will still send you transactional emails related to your orders and account.

13. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated policy on this page with a new "Last Updated" date
• Sending an email notification to registered users
• Displaying a prominent notice on our website

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our website after changes are posted constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We are committed to resolving privacy concerns promptly and will respond to all inquiries within 30 days.