Privacy Policy

1.Information We Collect

We only collect the information we need to run our shop and fulfill your orders. This includes:

• Account details: your name, email address, and a password that we store only in encrypted (hashed) form.
• Order details: shipping and billing address, phone number, order history, and product preferences.
• Payment details: card payments are processed by Stripe. We never see or store your full card number on our servers.
• Messages you send us: contact form submissions and any email you send to our support address.
• Newsletter signups: the email address you give us when you choose to subscribe.
• Basic technical data: server logs that record IP address and browser type, kept for security and troubleshooting.

2.How We Use Your Information

We use the information above for these purposes only:

• Processing, making, and shipping your orders.
• Sending order confirmations and delivery updates.
• Answering your questions and providing customer support.
• Sending newsletters and offers, but only if you opted in. You can unsubscribe at any time.
• Preventing fraud and keeping your account secure.
• Understanding how the site is used so we can improve it.

3.We Do Not Sell or Share Your Data

We do not sell your personal information, and we do not share it for targeted advertising. We do not run advertising trackers or cross-site tracking pixels on this website.

Because we do not sell or share your personal data for targeted advertising in the first place, any opt-out of sale or sharing — including one signaled by a Global Privacy Control (GPC) browser setting — is already satisfied by default. There is nothing for us to stop doing.

4.Cookies and Analytics

We keep tracking to the bare minimum. Here is exactly what runs on this site:

• Essential cookie: a single secure, signed login cookie (named auth-token) that keeps you signed in. It is required for accounts and checkout and cannot be turned off while you are logged in.
• Analytics: if we measure site traffic, we use privacy-first, cookieless analytics that sets no advertising cookies and does not identify you personally or follow you across other websites.
• No third-party advertising cookies, no Google Analytics, and no social media tracking pixels are loaded on this site.

Because we do not use tracking or advertising cookies, no cookie consent banner is required to browse our store.

5.How We Protect Your Information

We take reasonable steps to keep your information safe:

• All traffic between your browser and our website is encrypted with SSL/TLS.
• Payments are handled by Stripe, a PCI-DSS Level 1 certified payment processor. Card numbers never touch our servers.
• Passwords are stored in hashed form, never as plain text.
• Access to personal data is limited to the people who need it to run the shop.

6.Who We Share Data With

We share your information only with the service providers we rely on to run the store, and only for the purposes listed here:

• Stripe: secure payment processing when checkout is live.
• Shipping carriers (such as USPS, UPS, and FedEx): delivering your order.
• Our hosting provider (Hetzner): we run our own servers on dedicated hardware located in the European Union.
• Our email provider: sending order confirmations and newsletters you opted into.

Each of these providers is required to protect your data and use it only for the service we ask them to perform.

7.How Long We Keep Your Data

We keep personal information only as long as we need it. Order and transaction records are kept as long as required for tax, accounting, and legal reasons. Newsletter data is kept until you unsubscribe. When you ask us to delete your data, we remove what we are not legally required to retain.

8.Your Privacy Rights

Under the Texas Data Privacy and Security Act (TDPSA) and similar laws, you have the right to:

• Access: request a copy of the personal data we hold about you.
• Correct: ask us to fix data that is wrong or incomplete.
• Delete: ask us to delete your personal data.
• Portability: request your data in a portable, machine-readable format.
• Opt out: opt out of any sale of your data or targeted advertising. We do not do either.
• Appeal: if we decline a request, you may appeal our decision.

To exercise any of these rights, email us at support@storyhomedecor.com. We will respond within 45 days, as required by Texas law. We will not charge you or deny you service for making a request.

9.Children

Our website and products are intended for adults. We do not knowingly collect personal information from children under 13. If you believe a child has given us their information, please contact us and we will delete it.

10.Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will change the effective date below. Significant changes will be posted clearly on this page.