Privacy policy

Treendoraa (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy describes how we collect, use, store, share, and protect your personal information when you visit treendoraa.shop or make a purchase from us. This policy is designed to comply with applicable U.S. federal and state privacy laws, including the California Consumer Privacy Act (CCPA), California Privacy Rights Act (CPRA), and other relevant regulations.

By accessing or using our website, you acknowledge that you have read and understood this Privacy Policy and agree to our collection and use of your information as described herein.

1. Information We Collect

1.1 Personal Information You Provide

When you create an account, place an order, contact us, or subscribe to our communications, we may collect:

• Identity Information: Full name, username, account password
• Contact Information: Email address, phone number, billing and shipping addresses
• Payment Information: Credit/debit card details, billing address (processed securely by third-party payment providers; we do not store full card numbers)
• Transaction Data: Order history, purchased products, payment confirmation details
• Communication Records: Customer service inquiries, feedback, survey responses
• Marketing Preferences: Opt-in/opt-out preferences for promotional emails

1.2 Automatically Collected Information

When you browse our website, we automatically collect certain information using cookies, web beacons, and similar technologies:

• Device Information: IP address, browser type and version, operating system, device type, screen resolution
• Usage Data: Pages visited, time spent on pages, links clicked, products viewed, search queries, referral sources
• Location Data: General geographic location derived from your IP address (city/state level, not precise GPS)
• Cookie Data: Information stored in cookies and local storage (see Section 6 — Cookies & Tracking)

2. How We Use Your Information

We use your personal information for the following purposes:

Purpose	Legal Basis
Processing and fulfilling your orders	Performance of a contract
Processing payments and preventing fraud	Performance of a contract / Legitimate interest
Providing customer support and responding to inquiries	Performance of a contract / Legitimate interest
Sending order confirmations, shipping updates, and delivery notifications	Performance of a contract
Improving our website, products, and services	Legitimate interest
Sending marketing communications (with your consent)	Consent
Complying with legal obligations	Legal obligation
Protecting our rights and preventing misuse	Legitimate interest

3. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your information with trusted service providers (“processors”) who assist us in operating our business:

• Shopify Inc.: Our e-commerce platform provider that hosts our store and processes data on our behalf.
• Payment Processors: Secure third-party payment gateways (e.g., Stripe, PayPal, Shop Pay) that handle transaction processing.
• Shipping & Logistics Partners: Carriers such as USPS, UPS, and FedEx who deliver your orders.
• Analytics Providers: Google Analytics and similar services that help us understand website usage patterns (data is anonymized where possible).
• Marketing Service Providers: Email marketing platforms (e.g., Klaviyo) that deliver our newsletters and promotional emails (only when you have opted in).

All service providers are contractually bound to use your information only for the specific services they provide to us and to maintain appropriate security measures.

Legal Disclosures

We may disclose your information if required by law, court order, or governmental regulation, or if we believe disclosure is necessary to protect our rights, property, or safety, or the rights, property, or safety of our users or others.

4. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including:

• Maintaining your account and order history
• Complying with tax, accounting, and legal record-keeping requirements (typically 7 years)
• Resolving disputes and enforcing our agreements

When your information is no longer needed, we securely delete or anonymize it in accordance with our data retention schedule.

5. Your Privacy Rights

Depending on your state of residence, you may have the following rights regarding your personal information:

• Right to Know: Request disclosure of the specific personal information we have collected about you.
• Right to Access: Request a copy of your personal information in a portable format.
• Right to Correction: Request that we correct inaccurate or incomplete personal information.
• Right to Deletion: Request deletion of your personal information, subject to certain legal exceptions.
• Right to Opt-Out: Opt out of the sale or sharing of your personal information (we do not sell your data).
• Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights.

To exercise these rights, please contact us at support@treendoraa.shop. We will respond within 45 days as required by applicable law.

6. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and personalize content. The types of cookies we use include:

• Essential Cookies: Required for the website to function properly (e.g., shopping cart, authentication).
• Functional Cookies: Remember your preferences and settings (e.g., language, region).
• Analytics Cookies: Help us understand how visitors interact with our website (e.g., Google Analytics).
• Marketing Cookies: Used to deliver relevant advertisements and track their performance (only with your consent).

You can manage your cookie preferences through your browser settings or our cookie consent banner. Disabling certain cookies may affect the functionality of our website.

7. Data Security

We implement a comprehensive set of administrative, technical, and physical security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your browser and our servers
• PCI-DSS compliant payment processing (we never store full credit card numbers)
• Regular security audits and vulnerability assessments
• Access controls and employee training on data protection
• Secure data storage with Shopify's enterprise-grade infrastructure

While we strive to protect your information, no method of transmission over the internet is 100% secure. We encourage you to use strong, unique passwords for your account.

8. Children's Privacy

Our website is not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you believe we have inadvertently collected information from a child under 16, please contact us immediately and we will take steps to delete such information.

9. Third-Party Links

Our website may contain links to third-party websites (e.g., social media platforms, partner sites). We are not responsible for the privacy practices, content, or security of these external websites. We encourage you to review the privacy policies of any third-party sites you visit.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Material changes will be notified to you via email or a prominent notice on our website at least 30 days before they take effect. The “Effective Date” at the top of this policy indicates when it was last revised.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: