Privacy Policy
Last updated:
1. Introduction
Sholrynneimrax ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website sholrynneimrax.world and use our services.
We operate in the United States and aim to comply with applicable U.S. federal and state privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA/CPRA"), the California Online Privacy Protection Act ("CalOPPA"), and similar state privacy laws where they apply to our processing. If you are in the European Economic Area ("EEA") or United Kingdom, the GDPR-based disclosures in Section 11 also apply to you.
By using our website, you acknowledge the data practices described in this policy. Where we rely on consent (for example, for certain cookies or marketing), you may withdraw it as described herein.
2. Data Controller / Business Contact
The business responsible for this website and your personal information is:
Sholrynneimrax
2519 Woodberry Dr
Nashville, TN 37214
United States
Email: ask@sholrynneimrax.world
3. Information We Collect
We may collect the following types of personal information:
- Personal Identification Information: Name, email address, phone number (if provided)
- Contact Information: Shipping address, billing address
- Transaction Information: Order details, payment information (processed by secure third-party payment processors)
- Technical Information: IP address, browser type, device information, operating system
- Usage Information: Pages visited, time spent on pages, click patterns, referring website
- Communication Information: Messages sent through our contact forms, customer service interactions
4. How We Collect Information
We collect information through:
- Direct Interactions: When you fill out forms, place orders, subscribe to newsletters, or contact us
- Automated Technologies: Cookies, web beacons, and similar tracking technologies (see our Cookie Policy)
- Third Parties: Payment processors, analytics providers, and marketing partners
CalOPPA / browser signals: Third parties may collect information through cookies and similar technologies on our Site as described in our Cookie Policy. For how we treat "Do Not Track" browser signals, see our Cookie Policy.
5. Legal Basis for Processing (GDPR)
We process your personal data based on the following legal grounds:
- Consent: Where you have given explicit consent for specific purposes (e.g., marketing communications)
- Contract Performance: To fulfill our contractual obligations when you place an order
- Legal Obligations: To comply with applicable laws and regulations
- Legitimate Interests: For purposes such as improving our services, fraud prevention, and website security
6. How We Use Your Information
We use your personal information for the following purposes:
- Processing and fulfilling your orders
- Communicating with you about your orders and inquiries
- Sending transactional emails (order confirmations, shipping updates)
- With your consent, sending marketing communications
- Improving our website and services
- Analyzing usage patterns and trends
- Preventing fraud and ensuring website security
- Complying with legal obligations
7. Data Sharing and Disclosure
We may share your information with:
- Service Providers: Companies that help us operate our business (shipping carriers, payment processors, email service providers)
- Analytics Partners: To help us understand website usage (with appropriate safeguards)
- Advertising Partners: When you enable marketing cookies, technology partners may collect or receive information from our site to measure ads or deliver relevant advertising on our behalf or across sites and apps
- Legal Authorities: When required by law or to protect our legal rights
- Business Transfers: In connection with a merger, acquisition, or sale of assets
Sale and sharing (U.S. state privacy laws): We do not sell your personal information for money. Certain uses of cookies and similar technologies for cross-context behavioral advertising may be considered "sharing" under the CCPA/CPRA and similar state laws. You can control non-essential cookies (including analytics and marketing) through our cookie banner and Cookie Settings, and you may use browser or platform opt-out tools (for example, the Digital Advertising Alliance or Global Privacy Control where supported).
8. International Data Transfers
We are based in the United States. Your information is primarily stored and processed in the United States. If you access our site from outside the United States, you understand that your information may be transferred to the U.S. and other countries that may not provide the same level of data protection as your jurisdiction.
If we transfer personal data from the EEA, United Kingdom, or Switzerland to countries not deemed adequate by the relevant authority, we rely on appropriate safeguards such as Standard Contractual Clauses or other lawful transfer mechanisms.
9. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:
- Customer Records: For the duration of our business relationship plus 7 years for legal and tax purposes
- Marketing Data: Until you withdraw consent or unsubscribe
- Website Analytics: Up to 26 months
- Customer Service Records: Up to 3 years after resolution
10. U.S. State Privacy Disclosures (Including California)
The following disclosures supplement the rest of this policy and apply to residents of U.S. states with comprehensive privacy laws (including California, Virginia, Colorado, Connecticut, Utah, and others) where those laws apply to our activities.
Categories of personal information we collect (examples; see Section 3 for detail): identifiers (such as name, email, phone); commercial information (such as order or product interests); internet or network activity (such as browsing or interactions on our site); geolocation (general, derived from IP); and communications you send us. We may also collect payment-related information, which is processed by our payment service providers.
Sources: Directly from you, automatically through cookies and similar technologies, and from service providers and partners as described in this policy.
Business or commercial purposes: Providing the Site and our products; processing orders and payments; customer support; security and fraud prevention; analytics and improvement; and, where permitted and with appropriate consent, marketing and advertising.
Retention: As described in Section 9.
10.1 California Residents (CCPA/CPRA)
If you are a California resident, you have the right to (subject to exceptions under law):
- Know and access: Request details about the categories and specific pieces of personal information we have collected about you
- Delete: Request deletion of personal information we collected from you, subject to certain exceptions
- Correct: Request correction of inaccurate personal information we maintain
- Opt out of sale or sharing: We do not sell personal information for monetary consideration. You may opt out of certain sharing for cross-context behavioral advertising via our Cookie Settings and by using browser signals or industry opt-out tools as described in Section 7
- Limit use of sensitive personal information: We do not use or disclose sensitive personal information for purposes that require a "limit" right under CPRA beyond permitted business purposes
- Non-discrimination: We will not discriminate against you for exercising these rights
How to submit a request: Email or write to us using the contact information in Section 16. We will verify your request in accordance with applicable law. You may designate an authorized agent to make a request on your behalf; we may require proof of authorization.
Appeals: If we deny a request and you disagree, you may appeal by replying to our decision email or contacting us again with "Privacy Request Appeal" in the subject line.
10.2 Other U.S. States
Residents of Virginia, Colorado, Connecticut, Utah, and other states with similar laws may have rights to access, delete, correct, obtain a copy of, or opt out of certain processing (including targeted advertising or profiling in some states). Submit requests using Section 16. If we refuse to act on a request, you may have the right to appeal under your state's law.
10.3 Nevada Residents (NRS 603A)
Nevada residents may opt out of the future sale of certain covered information as defined under Nevada law. We do not currently sell such information as defined by Nevada law. To inquire, contact us as set forth in Section 16.
10.4 California "Shine the Light" (Civil Code ยง 1798.83)
California residents may request once per calendar year certain information about personal information we disclosed to third parties for their direct marketing purposes in the prior calendar year, if any. To make such a request, contact us as set forth in Section 16 with "Shine the Light Request" in the subject line.
11. Your Rights Under GDPR (EEA, UK, and Switzerland)
If you are located in the EEA, United Kingdom, or Switzerland, you may have the following rights under applicable data protection law:
- Right to Access: Request a copy of the personal data we hold about you
- Right to Rectification: Request correction of inaccurate or incomplete data
- Right to Erasure: Request deletion of your personal data under certain circumstances
- Right to Restrict Processing: Request limitation of how we use your data
- Right to Data Portability: Receive your data in a structured, machine-readable format
- Right to Object: Object to processing based on legitimate interests or for direct marketing
- Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
To exercise these rights, please contact us using the information in Section 16. If you are not satisfied with our response, you have the right to lodge a complaint with a supervisory authority in your country of residence.
12. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- SSL/TLS encryption for data transmission
- Secure data storage with access controls
- Regular security assessments and updates
- Employee training on data protection
However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
13. Children's Privacy
Our website and services are not directed to children under 13, and we do not knowingly collect personal information from children under 13 in violation of the U.S. Children's Online Privacy Protection Act ("COPPA"). Our products are intended for adults. If you believe we have collected information from a child under 13, please contact us immediately so we can delete it.
14. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.
15. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Where required by law, we will obtain your consent or provide additional notice. We encourage you to review this policy periodically.
16. Contact Us
If you have questions about this Privacy Policy or wish to exercise U.S. state privacy rights, GDPR rights, or other rights described herein, please contact us:
Sholrynneimrax
2519 Woodberry Dr
Nashville, TN 37214
United States
Email: ask@sholrynneimrax.world
For GDPR-related complaints only, if you are in the EEA you may also lodge a complaint with your local supervisory authority.