Privacy Policy

Introduction

Welcome to Whims Decor ("we," "our," or "us"). This Privacy Policy explains how we collect, use, and protect information when you visit our website. We are committed to transparency about our data practices and your privacy rights.

Information We Collect

Automatically Collected Information

When you visit our website, we automatically collect certain technical information through Google Analytics and our hosting infrastructure:

• IP Address: Your device's internet protocol address
• Browser Information: Browser type, version, and language preferences
• Device Information: Device type (mobile, desktop, tablet), operating system
• Usage Data: Pages visited, time spent on pages, click patterns, referral sources
• Geographic Information: General location (country, state, city level)
• Timestamps: Date and time of your visit

Information You Provide

We do not collect any personal information from visitors browsing our website. You can browse our decor collections without creating an account or providing any personal details.

How We Collect Information

We collect information through the following methods:

• Automatically: Through Google Analytics when you visit our website
• Cookies: Small text files stored on your device (see Cookies section below)
• Server Logs: Our hosting provider (Supabase) automatically logs technical information about requests to our website
• Affiliate Links: When you click on Amazon product links, Amazon may set cookies and collect information

How We Use Your Information

We use the collected information for the following purposes:

• Website Analytics: To understand how visitors use our site and improve user experience
• Performance Optimization: To identify and fix technical issues, optimize loading times
• Content Improvement: To understand which content is most popular and valuable to visitors
• Affiliate Marketing: To earn commissions on qualifying purchases through Amazon Associates
• Security: To protect against fraud, abuse, and unauthorized access

Third Parties Who Receive Your Information

We share information with the following third-party service providers to operate our website:

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience and analyze website traffic.

What Are Cookies?

Cookies are small text files stored on your device that help us remember your preferences and understand how you use our site.

Cookies We Use

• _ga: Google Analytics - Distinguishes unique users (expires after 2 years)
• _gid: Google Analytics - Distinguishes unique users (expires after 24 hours)
• _gat: Google Analytics - Throttles request rate (expires after 1 minute)
• Amazon Cookies: Set by Amazon when you click affiliate links (managed by Amazon)

How to Control Cookies

You can control and delete cookies through your browser settings:

• Chrome: Settings → Privacy and security → Cookies
• Firefox: Settings → Privacy & Security → Cookies and Site Data
• Safari: Preferences → Privacy → Cookies and website data
• Edge: Settings → Cookies and site permissions

Note: Disabling cookies may affect your ability to use certain features of our website.

Amazon Associates Program Disclosure

We are a participant in the Amazon Services LLC Associates Program, an affiliate advertising program designed to provide a means for us to earn fees by linking to Amazon.com and affiliated sites. When you click on our product links and make a purchase, we may earn a commission at no additional cost to you. This helps support our website and allows us to continue providing valuable content.

Data Retention

We retain information for the following periods:

• Google Analytics Data: Automatically deleted after 26 months
• Server Logs: Retained for up to 90 days for security and troubleshooting
• Amazon Affiliate Data: Managed by Amazon according to their retention policies

Your Privacy Rights (California Residents - CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

Right to Know

You have the right to request information about the personal information we have collected about you in the past 12 months, including:

• Categories of personal information collected
• Sources from which the information was collected
• Business purposes for collecting the information
• Categories of third parties with whom we share the information

Right to Delete

You have the right to request deletion of your personal information, subject to certain exceptions required by law.

Right to Opt-Out

We do not "sell" your personal information as defined by the CCPA. However, our use of Google Analytics and affiliate links may be considered "sharing" under California law. You can opt-out of Google Analytics tracking using the opt-out link provided above, and you can disable cookies in your browser settings.

Right to Non-Discrimination

We will not discriminate against you for exercising any of your CCPA rights.

How to Exercise Your Rights

To exercise any of these rights, please contact us using the information in the Contact Us section below. We will respond to your request within 45 days.

Do Not Sell My Personal Information

We do not sell your personal information to third parties for monetary consideration. However, we do use:

• Google Analytics for website analytics (you can opt-out using browser settings or the Google Analytics opt-out add-on)
• Amazon affiliate links (you can avoid sharing data by not clicking on product links)

To limit data sharing, you can disable cookies in your browser or use the opt-out methods mentioned throughout this policy.

Data Security

We take reasonable measures to protect your information from unauthorized access, disclosure, or destruction. Our security measures include:

• HTTPS encryption for all data transmitted between your browser and our servers
• Secure authentication for admin access
• Row-level security policies on our database to prevent unauthorized data access
• Regular security updates and monitoring
• Use of SOC 2 certified hosting provider (Supabase)

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Children's Privacy (COPPA)

Our website is not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take steps to delete that information as soon as possible. If you believe we have collected information from a child under 13, please contact us immediately.

Links to External Websites

Our website contains links to external websites, including Amazon.com and other retailers. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any website you visit through our links.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this Privacy Policy periodically. Your continued use of our website after changes are posted constitutes your acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact us: