At ISADORA, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website [WEBSITE_URL] and make purchases from our online jewelry store.

Please read this Privacy Policy carefully. By using our website, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our website.

1. Information We Collect

We collect several types of information from and about users of our website, including:

1.1 Personal Information

Personal information is data that can be used to identify you. We collect personal information that you voluntarily provide to us when you:

• Create an account or place an order
• Subscribe to our newsletter
• Contact us with inquiries or requests
• Participate in surveys or promotions
• Leave reviews or testimonials

This personal information may include:

• Full name
• Email address
• Shipping and billing addresses
• Phone number
• Payment information (processed securely by our payment providers)
• Order history and preferences

1.2 Automatic Information Collection

When you visit our website, we automatically collect certain information about your device and browsing behavior through cookies and similar tracking technologies:

• IP address and location data
• Browser type and version
• Device type and operating system
• Pages viewed and time spent on pages
• Referring website or source
• Clickstream data and navigation patterns
• Shopping behavior and preferences

1.3 Cookies and Tracking Technologies

We use cookies, web beacons, and similar technologies to enhance your experience, analyze site usage, and assist in our marketing efforts. Cookies are small data files stored on your device.

Types of cookies we use:

• Essential Cookies: Necessary for the website to function properly (e.g., shopping cart, security)
• Performance Cookies: Help us understand how visitors interact with our website (e.g., Google Analytics)
• Functionality Cookies: Remember your preferences and settings
• Marketing Cookies: Track your browsing habits to deliver targeted advertising (e.g., Facebook Pixel)

You can control cookie settings through your browser preferences. However, disabling cookies may limit your ability to use certain features of our website.

2. How We Use Your Information

We use the information we collect for various purposes, including:

2.1 Order Processing and Fulfillment

• Process and complete your orders
• Send order confirmations and shipping updates
• Handle returns, exchanges, and refunds
• Communicate about your purchases

2.2 Customer Service

• Respond to your inquiries and support requests
• Provide customer assistance
• Resolve disputes and troubleshoot problems

2.3 Website Improvement and Analytics

• Analyze website usage and performance
• Improve our products, services, and user experience
• Conduct research and testing
• Monitor and prevent fraud and security issues

2.4 Marketing and Communications

• Send promotional emails and newsletters (with your consent)
• Display personalized advertisements
• Inform you about new products, special offers, and updates
• Conduct surveys and gather feedback

You can opt out of marketing communications at any time by clicking the "unsubscribe" link in our emails or contacting us directly.

2.5 Legal Compliance

• Comply with legal obligations and regulations
• Enforce our Terms and Conditions
• Protect our rights, property, and safety
• Respond to legal requests and prevent fraud

3. Third-Party Services and Data Sharing

We work with trusted third-party service providers who assist us in operating our business. These parties may have access to your personal information only to perform specific tasks on our behalf and are obligated to protect your information.

3.1 Service Providers We Use

3.2 Google Analytics

We use Google Analytics to understand how visitors use our website. Google Analytics collects information anonymously and reports website trends without identifying individual visitors. Google Analytics uses cookies to track visitor interactions. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

3.3 Facebook Pixel and Social Media

We use Facebook Pixel and other social media tracking tools to measure the effectiveness of our advertising campaigns and deliver personalized ads to you on social media platforms. These tools collect information about your browsing behavior and may be used to create custom audiences for targeted advertising.

3.4 When We May Disclose Information

We may disclose your information in the following circumstances:

• With your consent: When you explicitly agree to share your information
• Service providers: To trusted third parties who perform services on our behalf
• Business transfers: In connection with a merger, acquisition, or sale of assets
• Legal requirements: To comply with legal obligations, court orders, or government requests
• Protection of rights: To protect the rights, property, or safety of ISADORA, our customers, or others
• Fraud prevention: To prevent, detect, or investigate fraud and security issues

4. Data Security

We take the security of your personal information seriously and implement appropriate technical and organizational measures to protect it against unauthorized access, alteration, disclosure, or destruction.

Security measures include:

• SSL/TLS encryption for data transmission
• Secure payment processing through PCI-DSS compliant providers
• Regular security assessments and updates
• Access controls and authentication measures
• Employee training on data protection

However, please note that no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

5. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Retention periods:

• Account information: Retained while your account is active or as needed to provide services
• Order information: Retained for at least 7 years for legal and accounting purposes
• Marketing data: Retained until you unsubscribe or request deletion
• Analytics data: Typically retained for 26 months (Google Analytics default)

When we no longer need your information, we will securely delete or anonymize it.

6. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

6.1 General Rights

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Objection: Object to the processing of your information for certain purposes
• Restriction: Request restriction of processing in certain circumstances
• Portability: Request transfer of your information to another service
• Withdraw consent: Withdraw consent for processing based on consent

6.2 European Union (GDPR) Rights

If you are located in the European Union, you have additional rights under the General Data Protection Regulation (GDPR), including the rights listed above and the right to lodge a complaint with a supervisory authority.

6.3 How to Exercise Your Rights

To exercise any of these rights, please contact us at [CONTACT_EMAIL]. We will respond to your request within the timeframe required by applicable law (typically within 30 days).

6.4 Marketing Preferences

You can manage your marketing preferences by:

• Clicking "unsubscribe" in any marketing email
• Adjusting your account settings
• Contacting us directly

6.5 Cookie Preferences

You can control cookies through your browser settings. Most browsers allow you to refuse cookies or delete existing cookies. Please note that disabling certain cookies may impact website functionality.

7. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from your jurisdiction.

When we transfer your information internationally, we ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable law. This may include:

• Standard contractual clauses approved by relevant authorities
• Adequacy decisions recognizing equivalent data protection
• Other lawful transfer mechanisms

8. Children's Privacy

Our website and services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will delete such information from our systems.

9. Third-Party Links

Our website may contain links to third-party websites, such as social media platforms, payment processors, or partner sites. This Privacy Policy does not apply to those external sites, and we are not responsible for their privacy practices.

We encourage you to review the privacy policies of any third-party sites you visit. Clicking on third-party links or enabling connections may allow third parties to collect or share data about you.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated policy on our website with a new "Last Updated" date
• Sending an email notification (for significant changes)
• Displaying a notice on our website

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our website after changes are posted constitutes your acceptance of the updated policy.

11. Legal Basis for Processing (GDPR)

If you are located in the European Union, we process your personal information based on the following legal grounds:

• Contract performance: Processing necessary to fulfill our contract with you (order processing, delivery)
• Consent: You have given explicit consent for specific processing activities (marketing emails)
• Legitimate interests: Processing necessary for our legitimate business interests (fraud prevention, analytics)
• Legal obligations: Processing required to comply with legal requirements (tax records, consumer protection laws)

12. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information (with certain exceptions)
• Right to opt-out of the sale of personal information
• Right to non-discrimination for exercising your privacy rights

To exercise these rights, contact us at [CONTACT_EMAIL]. We do not sell personal information as defined by CCPA.