1

This Policy Governs

• Our e-commerce website and all related services
• Customer interactions via email, phone, and social media
• Our B2B wholesale program
• Newsletter and marketing communications
• Any other way you interact with Attar Emporium

Agreement: By using our services, making a purchase, or engaging with our website, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use our services.

2

• Create an Account: Name, email address, phone number, password, and account preferences
• Make a Purchase: Billing address, shipping address, payment information (processed securely through our payment processors), order history, and product preferences
• Contact Customer Support: Your inquiry details, communication history, and any information you choose to share about your experience
• Subscribe to Our Newsletter: Email address and communication preferences
• Join Our B2B Program: Business name, tax ID, business address, and authorised representative information
• Leave Product Reviews: Name, review content, ratings, and any photos you upload
• Participate in Promotions: Contact information and any details required for contest or promotion entry

• Device Information: Browser type, operating system, device type, screen resolution, IP address, and unique device identifiers
• Usage Data: Pages visited, time spent on pages, products viewed, items added to cart, search queries, referral sources, and click patterns
• Location Information: General geographic location based on IP address (we do not collect precise geolocation without your permission)
• Cookie Data: Information stored in cookies to remember your preferences and provide personalised experiences

• Payment Processors: Transaction confirmation and fraud detection information
• Shipping Carriers: Delivery status and tracking information
• Social Media Platforms: If you interact with us on Instagram or other social platforms, we may receive public profile information
• Analytics Providers: Aggregated website usage statistics
• Marketing Partners: Information about how you found us and your advertising preferences

3

4

• Shopify: Our e-commerce platform that hosts our website and processes transactions
• Payment Processors: Stripe, PayPal, and other payment gateways that securely process your payment information
• Shipping Companies: USPS, UPS, FedEx, and international carriers that deliver your orders
• Email Service Providers: Companies that help us send newsletters and marketing emails
• Analytics Services: Google Analytics and similar tools that help us understand website usage
• Customer Support Tools: Platforms that help us manage customer inquiries efficiently
• Fraud Prevention Services: Tools that help us detect and prevent fraudulent transactions

Important: You can opt out of targeted advertising at any time. See Section 9 for details on how to submit a California opt-out request by email.

• To comply with court orders, subpoenas, or legal processes
• To respond to requests from law enforcement or government agencies
• To protect our rights, property, or safety, or that of our customers
• To prevent fraud or investigate security incidents
• In connection with a business transaction such as a merger, acquisition, or sale of assets

5

Protections by Region

6

Important Note: While we implement strong security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we continuously work to protect your information using industry best practices.

7

Type of Information	Retention Period	Reason
Account Information	Until deletion or 3 years of inactivity	To maintain your account and provide services
Order History	7 years	Tax compliance and warranty claims
Payment Information	Not stored — processed by payment processors	Security best practices
Marketing Communications	Until you unsubscribe	To send promotional content
Customer Support Records	3 years	Quality assurance and dispute resolution
Website Analytics	26 months (Google Analytics default)	Website improvement

8

• Right to Access: You can request a copy of the personal information we hold about you
• Right to Correction: You can ask us to correct inaccurate or incomplete information
• Right to Delete: You can request deletion of your personal information (subject to legal obligations)
• Right to Opt-Out of Marketing: You can unsubscribe from marketing emails at any time using the unsubscribe link in any email

• Right to Know: Request detailed information about the personal information we have collected, used, disclosed, and sold
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out of Sale/Sharing: Opt out of the "sale" or "sharing" of your personal information for targeted advertising
• Right to Correct: Request correction of inaccurate personal information
• Right to Limit Sensitive Data Use: Limit our use of sensitive personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

California Privacy Notice: We do not "sell" personal information in the traditional sense, but we do share information with advertising partners for targeted advertising, which may be considered a "sale" under California law. See Section 9 to submit an opt-out request by email.

• Right to Access: Obtain confirmation of whether we process your data and access to that data
• Right to Rectification: Correct inaccurate personal data
• Right to Erasure: Request deletion of your personal data ("Right to be Forgotten")
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or for marketing purposes
• Right to Withdraw Consent: Withdraw consent where processing is based on consent
• Right to Lodge a Complaint: File a complaint with your local data protection authority

Canadian Residents (PIPEDA): You can access your personal information, challenge its accuracy and completeness, request withdrawal of consent for certain uses, and file a complaint with the Privacy Commissioner of Canada.

Australian Residents (Privacy Act): You have the right to access and correct your personal information, make a complaint about privacy breaches, and opt out of direct marketing.

• Email us: info@attaremporium.com with "Privacy Rights Request" in the subject line
• California residents: See Section 9 to submit your opt-out request via a pre-filled email link
• Mail us: 4001 Inglewood Avenue, Bldg 101 Ste 313, Redondo Beach, CA, 90278, USA
• We will verify your identity before processing requests and respond within the timeframe required by applicable law (typically 30–45 days)

9

Do Not Sell or Share My Personal Information

To submit your opt-out request, click the button below. This will open a pre-addressed email in your email app with the subject line and request details already filled in. Simply add your name, confirm your details, and send.

What You Can Include in Your Request

• Opt out of the sale of your personal information
• Opt out of the sharing of your personal information for targeted advertising
• Opt out of all marketing communications
• Request deletion of your account and personal data
• Request a copy of the personal information we hold about you

Alternative method: If the button above does not work on your device, you can send a manual email directly to info@attaremporium.com with the subject line "Do Not Sell My Personal Information" and include your full name, email address, and the specific opt-out actions you are requesting.

10

Types of Cookies We Use

• Essential Cookies: Required for the website to function (shopping cart, checkout, account login). These cannot be disabled.
• Performance Cookies: Help us understand how visitors use our website (Google Analytics) to improve the site experience.
• Functionality Cookies: Remember your preferences such as language, currency, and location settings.
• Advertising Cookies: Show you relevant advertisements based on your browsing interests on our site and other platforms.

11

• Instagram: When you visit our Instagram profile or interact with our posts, Instagram's own privacy policy applies
• Payment Processors: PayPal, Stripe, and other payment services have their own separate privacy policies
• Shipping Carriers: USPS, UPS, and FedEx track packages according to their own policies
• Google Services: Google Analytics, Google Ads, and other Google services have separate privacy policies

No Liability for Third-Party Sites

We recommend reviewing the privacy policies of any third-party sites you visit. We are not responsible for the privacy practices of external websites and cannot be held liable for how they handle your data.

12

If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information immediately. If you believe we have collected information from a child, please contact us at info@attaremporium.com.

13

When We Make Material Changes, We Will

• Update the "Last Updated" date at the top of this page
• Notify you via email if you have an account with us
• Display a prominent notice on our website
• For significant changes, request your renewed consent where required by law

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our website after any update constitutes your acceptance of the revised policy.

14

Privacy Contact Details

15

Before Filing a Complaint: We encourage you to contact us directly at info@attaremporium.com first. In most cases, we are able to resolve privacy concerns promptly and fairly without the need for regulatory involvement.