Privacy Policy

RugZar ("we," "us," "our") is committed to protecting your privacy. This policy explains what personal data we collect, why we collect it, and how we handle it when you use rugzar.com or interact with our services.

Who We Are

RugZar is registered in Portugal and operates rugzar.com, selling handmade rugs to customers worldwide. For any privacy-related questions, you can contact us at info@rugzar.com.

What Personal Data We Collect

We collect personal data that you provide directly, including:

  • Name, email address, phone number, and postal address
  • Order details and purchase history
  • Payment information (processed securely by our payment providers - we do not store your full card details)
  • Communications you send us (customer service inquiries, reviews, etc.)

We also automatically collect some technical data through cookies and analytics tools, including your IP address, browser type, and browsing behavior on our site.

How We Collect Your Data

  • When you place an order
  • When you create an account
  • When you contact customer support
  • When you sign up for our newsletter or marketing emails
  • Automatically, through cookies and analytics tools when you browse our site

How We Use Your Data

  • Processing and fulfilling your orders
  • Managing your account (order history, tracking, wishlists)
  • Communicating with you about your orders or inquiries
  • Sending marketing emails, where you've opted in (you can unsubscribe anytime)
  • Preventing fraud and misuse of our services
  • Improving our website and services
  • Complying with legal obligations

Legal Basis for Processing (EU/UK Customers)

Under the General Data Protection Regulation (GDPR) and UK GDPR, we process your data based on: your consent (e.g., marketing emails), the necessity to fulfill a contract (processing your order), and our legitimate business interests (fraud prevention, service improvement).

Your Rights (US Customers)

Depending on your state of residence, you may have rights under the California Consumer Privacy Act (CCPA/CPRA) or similar comprehensive privacy laws now in effect in states including Virginia, Colorado, Connecticut, Utah, and others. These typically include the right to know what personal data we hold about you, request its deletion or correction, opt out of the sale or "sharing" of personal data for targeted advertising, and not be discriminated against for exercising these rights. To make a request, contact us at info@rugzar.com.

We also comply with the CAN-SPAM Act for marketing emails - every marketing email includes a working unsubscribe link, and we honor opt-out requests promptly.

Cookies and Analytics

We use cookies and similar technologies to operate our site and understand how it's used, including:

  • Google Analytics - to understand site traffic and usage patterns
  • Essential cookies - required for cart, checkout, and account functionality

You can control or disable cookies through your browser settings, though some site features may not work correctly without them.

Third-Party Service Providers

We share data with trusted third parties who help us operate our business, including:

  • Shopify - our e-commerce platform, which processes and stores order and customer data
  • Shopify Payments, PayPal, Shop Pay, Apple Pay, and Google Pay - to securely process payments (we do not see or store your full payment card details)
  • Email marketing service provider(s) - such as Mailchimp, Brevo, or similar platforms we may use from time to time - to send order confirmations and, where you've opted in, marketing emails
  • Google Analytics - for website analytics

These providers only access the data necessary to perform their services and are bound by their own privacy and security obligations.

International Data Transfers

As we operate internationally and use service providers based in different countries, your data may be transferred outside your home country, including outside the European Economic Area. Where this happens, we rely on appropriate safeguards required by law, such as Standard Contractual Clauses.

Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy, including legal, accounting, or reporting requirements.

Your Rights (EU/UK Customers)

If you are located in the EU or UK, you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data
  • Object to or restrict certain processing
  • Request a copy of your data in a portable format
  • Withdraw consent at any time (for marketing communications)

EU/UK residents can exercise these rights under GDPR/UK GDPR by contacting us at info@rugzar.com. For US customer rights, see the "Your Rights (US Customers)" section above.

Data Security

We use technical and administrative safeguards to protect your personal data against loss, misuse, and unauthorized access. However, no method of transmission over the internet is 100% secure.

Children's Privacy

Our services are not directed at children under 16, and we do not knowingly collect personal data from children.

Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated "last updated" date.

Contact Us

If you have questions about this policy or how we handle your data, contact us at info@rugzar.com.