Privacy Policy – Iconoria

1. Introduction

This Privacy Notice for Iconoria (“we,” “us,” or “our”) describes how and why we access, collect, store, use, and share (“process”) your personal information when you use our services (“Services”), including when you:

Visit our website at https://iconoria.com or any website of ours linking to this Privacy Notice.
Use Iconoria – Hand-Painted Orthodox Icons, where we sell hand-painted Orthodox icons internationally.
Engage with us via marketing, events, or other communications.

If you do not agree with our policies, please do not use our Services. For questions or concerns, contact us at: [email protected] or WhatsApp +48 508 802 587.

2. Summary of Key Points

Personal Information Collected: Names, email addresses, mailing/billing addresses, contact preferences, payment information via Stripe or PayPal.
Sensitive Information: We do not process sensitive personal information.
Third-Party Data: We do not collect information from third parties.
Purpose of Processing: Order fulfillment, customer support, service improvement, marketing (with consent), fraud prevention, and legal compliance.
User Rights: Access, correction, deletion, objection, data portability, and withdrawal of consent depending on region (US, EU/UK, Australia, Canada, South Africa).

3. Information We Collect

Personal Information You Disclose

Name, email, address, phone number, payment details.
Contact form submissions and communications.

Automatically Collected Information

IP address, device and browser type, operating system, language preferences, referring URLs, location data, browsing behavior.

Payment Data

All payment data is handled securely by Stripe and PayPal.
Links to their privacy policies: Stripe, PayPal.

4. How We Process Your Information

We process information to:

Deliver and manage orders.
Respond to inquiries and provide customer support.
Send administrative information about products, policies, or services.
Comply with legal obligations and protect vital interests.

We rely on lawful bases for processing, including:

Consent
Contractual necessity
Legal obligations
Vital interests
Legitimate business interests

5. Sharing Your Information

We may share information with:

Vendors and Service Providers: Payment processors, analytics providers, website hosting, order fulfillment.
Business Transfers: Mergers, acquisitions, or sale of assets.

We do not sell personal information.

6. Cookies and Tracking

We use cookies and similar technologies for:

Security, crash prevention, and site functionality.
Analytics and advertising, including third-party providers like Google Analytics.

Opt-out options: Google Analytics Opt-Out

Cookie Policy: https://iconoria.com/cookie-policy/

We use Cloudflare Zaraz to manage and load third-party scripts (such as Google Analytics) server-side, which enhances site performance and user privacy by reducing the data processed directly in your browser.

7. International Data Transfers

Servers are in the United States; data may be processed globally.
GDPR/UK: We use Standard Contractual Clauses for transfers from EEA/UK.

8. Data Retention

Personal information is kept as long as necessary for business purposes and legal compliance.
Data no longer needed is securely deleted or anonymized.

9. Data Security

Organizational and technical safeguards are in place.
No system is 100% secure; use of Services is at your own risk.

10. Children’s Privacy

Services are for users 18+ (or local equivalent).
We do not knowingly collect or market to children under 18.

11. Your Rights

Depending on your location, you may have rights to:

Access, correct, or delete personal information.
Withdraw consent or object to processing.
Opt out of marketing communications.

How to Exercise Your Rights:

12. US State-Specific Rights

Residents of certain US states have additional rights under state law (e.g., California, Colorado, Connecticut, etc.).
Right to know, access, delete, and opt-out of sale or targeted advertising.
We recognize and respond to Global Privacy Control (GPC) signals.