PRIVACY POLICY

POPBLINDS Privacy Policy (GDPR & CCPA Compliant)

Effective Date: [2024.09.25]
Last Updated: [2025.01.12]

At POPBLINDS, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect your information under the requirements of the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

1. Information We Collect

We collect the following types of personal information:

a. Information You Provide

  • Full name

  • Shipping and billing addresses

  • Email address

  • Phone number

  • Payment method (processed via secure third-party services)

  • Order details and communications

b. Automatically Collected Data

  • IP address

  • Browser type and version

  • Device type

  • Referring URLs

  • Pages visited and time spent

c. Cookies and Tracking Technologies

We use cookies and tracking tools to improve your user experience. For more details, please refer to our [Cookie Policy].

2. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your data based on:

  • Contractual necessity – to fulfill orders

  • Legitimate interests – site improvement, fraud prevention

  • Legal obligations – tax and accounting compliance

  • Consent – for optional marketing communications

3. Your Rights (GDPR & CCPA)

Depending on your location, you may have the right to:

Right GDPR (EU/EEA) CCPA (California)
Access your personal data ✅ ✅
Correct or update your data ✅ ✅
Request deletion (right to be forgotten) ✅ ✅
Opt-out of data sale ❌ (we don’t sell data) ✅ (opt-out link provided)
Data portability ✅ ✅
Restrict processing ✅ ❌ (not applicable)
Object to marketing ✅ ✅
Non-discrimination for exercising rights ✅ ✅

To exercise your rights, please contact us at privacy@popblinds.com. If you're located in California, you may designate an authorized agent to make requests on your behalf.

4. Data Use

We use your data to:

  • Fulfill and manage your orders

  • Send order confirmations and shipping updates

  • Provide customer support

  • Improve website performance and functionality

  • Send promotional emails (with your consent)

  • Detect fraud or misuse of our platform

  • Comply with legal and tax regulations

5. Data Sharing

We only share your personal data with trusted third parties who perform services on our behalf, such as:

  • Payment processors (e.g., Stripe, PayPal)

  • Shipping providers (e.g., USPS, UPS)

  • Email marketing providers

  • Website analytics platforms (e.g., Google Analytics)

We do not sell or rent your personal data to third parties.

6. Data Retention

We retain your personal data only as long as needed for the purposes stated in this policy, unless a longer retention period is required by law (e.g., for tax or legal obligations).

7. Data Security

We apply appropriate technical and organizational measures to secure your personal information, including:

  • SSL encryption

  • Secure checkout via certified payment gateways

  • Firewalls and access controls

  • Regular system monitoring and staff training

8. International Transfers

If you are located outside of the United States, please note that your data may be processed and stored on servers located in the U.S. By using our services, you consent to this transfer, storage, and processing.

We ensure all transfers comply with GDPR through mechanisms such as Standard Contractual Clauses (SCCs).

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via our website or by email (if applicable).

10. Contact Information

If you have questions about this Privacy Policy or your data rights, contact us:

📧 privacy@popblinds.com
🌐 www.popblinds.com
🏢 [Insert Company Address Here]

If you are in the EEA and believe we have not properly addressed your data rights, you may lodge a complaint with your local Data Protection Authority (DPA).