Privacy Policy

Effective Date: 07/09/2025
Last Updated: 07/09/2025

At Almares, your privacy is important to us. This Privacy Policy outlines what personal data we collect, how we use it, and your rights regarding your information. By using our website https://almaresdesign.com, you agree to the practices described here.

Who We Are

Our website address is: https://almaresdesign.com.
We are Almares, LLC a design studio offering products and services online.
For privacy-specific concerns, please contact: almarescontact@gmail.com

What Personal Data We Collect and Why

We collect and process different types of personal data, including:

  • Account & Purchase Data: name, email, billing/shipping address, phone number, and order history (for order processing and customer service).
  • Payment Info: securely processed by third-party gateways (e.g., PayPal, Stripe) and not stored on our servers.
  • Technical Data: IP address, browser type, device, and location (to estimate taxes/shipping and improve user experience).
  • Cookies & Tracking: for cart tracking, login, analytics, and spam prevention.
  • Comments & Reviews: if submitted, we store comment content, name, email, and IP for moderation.

Legal bases for processing your data include your consent, contract fulfillment, legal obligations, and our legitimate business interests.

Comments

When visitors leave comments, we collect:

  • Data shown in the comment form
  • Visitor’s IP address and browser user agent (for spam detection)
  • An anonymized hash of your email may be sent to Gravatar to check for a profile picture.

Media

If you upload images, avoid including embedded location data (EXIF GPS). Visitors can extract such data from public images.

Contact Forms

When you submit a form through our website, we collect your name, email, and any message content. We retain submissions for up to 6 months for customer service purposes and do not use them for marketing without your explicit consent.

Cookies

We use cookies to:

  • Remember user login and display preferences
  • Track cart contents
  • Enable analytics and improve performance
  • Store session information for faster browsing

Cookies may persist for up to 1 year. You can manage cookie preferences via your browser settings.

Embedded Content from Other Websites

Some pages may include embedded content (e.g. YouTube videos, Instagram posts). These behave as if you visited the external site directly and may collect data, use cookies, and track interactions.

Analytics

We may use tools like Google Analytics to understand how visitors use our site. These tools use cookies and collect anonymized traffic data.
You can opt out of Google Analytics.

Who We Share Your Data With

We share necessary data with trusted third parties:

  • Payment processors (e.g., PayPal, Stripe) – for secure transactions
  • Shipping providers – to deliver your orders
  • Email services – for order confirmations or updates
  • QUIC.cloud / LiteSpeed Cache – to improve site speed and reliability (privacy policy)

We do not sell or rent your personal information.

How Long We Retain Your Data

We retain data as follows:

  • Contact form entries: 6 months
  • Order records: 7 years (for tax/legal obligations)
  • Comments: indefinitely, unless removed by user or admin
  • User accounts: as long as the account remains active

You may request deletion of your data at any time.

What Rights You Have Over Your Data

You have the right to:

  • Request a copy of your data
  • Correct inaccurate information
  • Request deletion of your personal data
  • Withdraw consent for data use (where applicable)

To exercise any of these rights, email almarescontact@gmail.com.

Where Your Data Is Sent

Some data may be processed outside the European Union (e.g., via our hosting provider, email service, or payment processors). We ensure all transfers are protected under GDPR-compliant mechanisms, such as Standard Contractual Clauses or Privacy Shield equivalents.

How We Protect Your Data

We use industry-standard security measures, including:

  • SSL encryption
  • Secure hosting
  • Limited admin access
  • Regular software updates
  • Strong passwords and 2FA on admin accounts

What Data Breach Procedures We Have in Place

In the event of a data breach, we will:

  • Notify affected users within 72 hours (if required)
  • Investigate and document the breach
  • Take corrective actions to secure our systems

What Third Parties We Receive Data From

We may receive anonymized usage data from analytics services or customer insights from payment processors, but we do not actively collect external data about users.

What Automated Decision-Making and/or Profiling We Do

We do not perform automated decision-making or profiling based on personal data.

Industry Regulatory Disclosures

If we become subject to further regulatory requirements in the future, we will update this policy accordingly.

Contact Information

For any questions or requests regarding your privacy, contact:

Almares
Email: almarescontact@gmail.com
Website: https://almaresdesign.com