Privacy Policy
Last updated: May 5, 2026
This Privacy Policy explains how ABC Decorative Rugs (referred to in this policy as “we,” “us,” or “our company”) collects, uses, shares, and protects information about you when you visit our website, create an account, place an order, contact customer service, or otherwise interact with us. By using our website, you agree to the practices described below. If you do not agree, please discontinue use of the site.
We serve customers across the United States and Canada and aim to align our practices with applicable privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), the California Online Privacy Protection Act (CalOPPA), Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws, and where relevant the European Union’s General Data Protection Regulation (GDPR).
1. Information We Collect
We collect information that you provide directly, information collected automatically when you use the site, and information from third parties. Categories include:
- Identifiers and contact data: name, email address, phone number, billing and shipping addresses, and account credentials.
- Order and transaction data: products purchased, order history, return and refund information, and customer service communications.
- Payment information: processed by our PCI-compliant payment providers; we do not store full card numbers on our servers.
- Device and usage data: IP address, browser type, operating system, referring URLs, pages viewed, time on site, and approximate location derived from IP.
- Cookies and similar technologies: see our Cookie Policy for details.
- Marketing preferences: email subscription status, SMS opt-in (where offered), and survey responses.
- Information from third parties: analytics providers, advertising partners, fraud prevention services, and shipping carriers.
2. How We Use Your Information
We use personal information for the following purposes:
- Process orders, payments, shipments, returns, and warranty claims.
- Create and maintain your account and provide customer support.
- Send transactional communications (order confirmations, shipping updates, return notices).
- Send marketing communications where you have opted in, and let you unsubscribe at any time.
- Personalize the website, recommend products, and improve site performance.
- Detect, investigate, and prevent fraudulent transactions, security incidents, and abuse.
- Comply with legal obligations, enforce our Terms of Use, and resolve disputes.
3. Legal Bases for Processing
Where required by law, we rely on one or more of the following legal bases: performance of a contract with you (such as fulfilling an order), our legitimate interests (such as fraud prevention and improving our services), your consent (for marketing email and certain cookies), and compliance with legal obligations.
4. How We Share Information
We do not sell your personal information for money. We may share information with:
- Service providers who perform functions on our behalf, including payment processing, hosting, order fulfillment, shipping, email delivery, analytics, customer support, and fraud prevention. These providers are contractually limited to using your information for the services they perform for us.
- Advertising and analytics partners that may collect or receive certain information through cookies and similar technologies. Some of this sharing may be considered a “sale” or “sharing” for cross-context behavioral advertising under California law. You can opt out as described in Section 7.
- Business transfers: if we are involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction.
- Legal requirements: to comply with applicable law, lawful requests by public authorities, or to protect our rights, property, or safety, and that of our customers or others.
5. Data Retention
We keep personal information only as long as necessary to fulfill the purposes described in this policy, including providing our services, maintaining business records, resolving disputes, and complying with our legal, tax, accounting, and reporting obligations. Retention periods vary based on the type of data and the applicable legal requirements.
6. Data Security
We use reasonable administrative, technical, and physical safeguards intended to protect your personal information, including TLS/SSL encryption for data in transit, restricted access controls, and use of PCI-compliant payment processors. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. See our Security Policy for additional information.
7. Your Privacy Rights
Depending on where you reside, you may have the following rights regarding your personal information:
- Right to access the personal information we hold about you and to obtain a copy.
- Right to correction of inaccurate or incomplete information.
- Right to deletion of personal information we hold about you, subject to legal exceptions.
- Right to portability of your information in a structured, commonly used format.
- Right to opt out of the sale or sharing of personal information for cross-context behavioral advertising (California).
- Right to limit the use of certain sensitive personal information (California).
- Right to withdraw consent at any time where we rely on consent (Canada, EU/EEA).
- Right to non-discrimination for exercising your privacy rights.
- Right to lodge a complaint with a supervisory authority (Canada: Office of the Privacy Commissioner; EU/EEA: your local data protection authority).
How to Exercise Your Rights
To submit a request, email sales@rugsville.ca or use the contact information at the end of this policy. We will verify your identity before processing your request and will respond within the time required by applicable law. You may use an authorized agent to submit a request on your behalf, subject to verification.
California Notice (CCPA/CPRA)
In the past 12 months, we have collected the categories of personal information described in Section 1 for the business and commercial purposes described in Section 2. We do not knowingly sell or share the personal information of consumers under 16. California consumers have the rights described above and may submit verifiable requests to know, delete, correct, and opt out.
Canadian Notice (PIPEDA)
For Canadian customers, we comply with PIPEDA and applicable provincial privacy legislation. Our designated Privacy Officer can be contacted using the details below. You have the right to challenge the accuracy of your information and to file a complaint with the Office of the Privacy Commissioner of Canada.
8. Children’s Privacy
Our website is intended for adults. We do not knowingly collect personal information from children under 13 (or under 16 in jurisdictions that require a higher age). If you believe a child has provided us with personal information, please contact us so we can take appropriate steps to remove it.
9. International Data Transfers
We are based in North America, and our service providers may be located in the United States, Canada, or other countries. When we transfer personal information across borders, we take steps to ensure the data receives an adequate level of protection consistent with applicable law.
10. Third-Party Links
Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties, and we encourage you to read their privacy policies before sharing any information.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The “Last updated” date at the top indicates when the policy was last revised. Material changes will be communicated through the website or by other reasonable means.
12. How to Contact Us
If you have questions or wish to exercise your rights, please contact us:
- Email: sales@rugsville.ca
- Mailing address: please refer to the “Contact Us” page on our website.
This policy is provided as our standard practice statement and is intended to be a plain-language description of our privacy practices. It is not legal advice. For specific legal questions, please consult qualified counsel or contact us directly.