Alora Pillow operates this website and online store, including all related information, content, features, tools, products, and services, in order to provide you with a curated shopping experience (the "Services"). Alora Pillow is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand how your information is collected, used, and disclosed.

1. Personal Information We Collect

When we use the term "personal information," we mean information that identifies or can reasonably be linked to you or another person. Personal information does not include information collected anonymously or that has been de-identified. Depending on how you interact with the Services and as permitted by applicable law, we may collect the following categories of personal information:

Contact Details

•       Your name, address, billing address, shipping address, phone number, and email address.

Financial Information

•       Credit card, debit card, and financial account numbers, payment card information, transaction details, form of payment, payment confirmation, and other payment details.

Account Information

•       Your username, password, security questions, preferences, and settings.

Transaction Information

•       Items you view, add to your cart, add to your wishlist, purchase, return, exchange, or cancel, and your past transactions.

Communications

•       Information you include when contacting us, such as customer support inquiries.

Device & Usage Information

•       Information about your device, browser, or network connection, your IP address, unique identifiers, and how and when you interact with or navigate the Services.

2. How We Collect Your Personal Information

We may collect personal information from the following sources:

•       Directly from you — when you create an account, use the Services, communicate with us, or otherwise provide us with your personal information.

•       Automatically through the Services — from your device when you visit our website, and through the use of cookies and similar technologies.

•       From our service providers — when we engage them to enable certain technology and when they collect or process your personal information on our behalf.

•       From our partners or other third parties.

3. How We Use Your Personal Information

Depending on how you interact with us, we may use your personal information for the following purposes:

Providing and Improving the Services

We use your personal information to process payments, fulfill orders, manage your account, arrange shipping, facilitate returns and exchanges, remember your preferences, send account-related notifications, enable product reviews, and create a personalized shopping experience — including recommending products based on your activity.

Marketing and Advertising

We use your personal information to send you marketing, advertising, and promotional communications by email, text message, or postal mail, and to show you relevant online advertisements based on your browsing and purchase history.

Security and Fraud Prevention

We use your personal information to authenticate your account, secure our payment systems, detect and investigate potentially fraudulent or illegal activity, and protect the safety of our users and our Services. You are responsible for keeping your account credentials secure and should not share them with others.

Customer Communications

We use your personal information to respond to your inquiries, provide customer support, and maintain our business relationship with you.

Legal Compliance

We may use your personal information to comply with applicable law, respond to valid legal process or requests from law enforcement or government agencies, participate in civil or legal proceedings, and enforce or investigate potential violations of our terms or policies.

4. How We Disclose Your Personal Information

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes, including:

•       With Shopify, vendors, and third-party service providers who perform services on our behalf (e.g., IT management, payment processing, data analytics, customer support, cloud storage, fulfillment, and shipping).

•       With business and marketing partners to provide marketing services and advertise to you. Our partners will use your information in accordance with their own privacy notices. Depending on where you reside, you may have the right to opt out of sharing for targeted advertising purposes. You can exercise this right here.

•       When you direct us, request us, or otherwise consent to disclosing your information to third parties — for example, to ship you products or through social media widgets or login integrations.

•       With our affiliates or within our corporate group.

•       In connection with a business transaction such as a merger or bankruptcy, to comply with legal obligations, enforce applicable terms of service or policies, or protect the rights of our users or others.

5. Our Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve them for you. Information you submit to the Services will be transmitted to and shared with Shopify, as well as with third parties that may be located in countries other than where you reside.

To help protect, grow, and improve our business, we use certain Shopify-enhanced features that incorporate data from your interactions with our store, other merchants, and Shopify. In these circumstances, Shopify is responsible for the processing of your personal information, including responding to requests to exercise your rights. To learn more, visit the Shopify Consumer Privacy Policy or the Shopify Privacy Portal.

6. Third-Party Websites and Links

The Services may contain links to websites or online platforms operated by third parties. If you follow links to sites not affiliated with or controlled by us, you should review their privacy and security policies independently. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy or reliability of information found there.

Information you share on public or semi-public venues, including third-party social networking platforms, may be viewable by other users without limitation as to its use by us or any third party. Our inclusion of such links does not imply any endorsement of the content or owners of those platforms.

7. Children's Privacy

The Services are not intended for use by children. We do not knowingly collect personal information from anyone under the age of majority in their jurisdiction. If you are the parent or guardian of a child who has provided us with their personal information, please contact us using the details below to request its deletion.

As of the effective date of this Privacy Policy, we do not have actual knowledge that we "share" or "sell" (as defined in applicable law) personal information of individuals under 16 years of age.

8. Security and Retention

We take reasonable steps to protect your personal information; however, no security measures are perfect or impenetrable, and we cannot guarantee absolute security. We recommend that you do not use unsecured channels to communicate sensitive or confidential information to us.

How long we retain your personal information depends on factors such as whether we need it to maintain your account, provide you with Services, comply with legal obligations, resolve disputes, or enforce applicable contracts and policies.

9. Your Privacy Rights and Choices

Depending on where you live, you may have some or all of the rights listed below. These rights are not absolute, may apply only in certain circumstances, and we may decline your request as permitted by applicable law.

•       Right to Access / Know — You may request access to the personal information we hold about you.

•       Right to Delete — You may request that we delete personal information we maintain about you.

•       Right to Correct — You may request that we correct inaccurate personal information.

•       Right of Portability — You may request a copy of your personal information and ask that we transfer it to a third party, subject to certain conditions.

•       Right to Opt Out of Sale or Targeted Advertising — Depending on where you reside, you may opt out of the "sale" or "sharing" of your personal information, or opt out of targeted advertising. You can exercise this right here. If you visit our website with the Global Privacy Control signal enabled, we will treat it as an opt-out request for that device and browser.

•       Managing Communication Preferences — You may opt out of promotional emails at any time using the unsubscribe link in those emails. We may still send non-promotional communications, such as order confirmations.

You may exercise any of these rights by contacting us using the details below. We may need to verify your identity before processing your request. You may designate an authorized agent to make requests on your behalf, subject to verification.

We will not discriminate against you for exercising any of these rights. We will respond to your request in a timely manner as required under applicable law.

10. International Data Transfers

We may transfer, store, and process your personal information in countries other than where you live. If we transfer your personal information out of the European Economic Area or the United Kingdom, we will rely on recognized transfer mechanisms such as the European Commission's Standard Contractual Clauses, or any equivalent contracts issued by the relevant authority of the UK, unless the transfer is to a country already deemed to provide an adequate level of protection.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for operational, legal, or regulatory reasons. We will post the revised Privacy Policy on this website, update the "Last Updated" date, and provide notice as required by applicable law.