Privacy policy

This Privacy Policy describes how Embraline collects, uses, discloses and protects personal information when individuals visit embraline.com, make a purchase, contact customer support, receive marketing communications or otherwise interact with the store.

Embraline is operated by Emeseven Marketing LLC, 30 N GOULD ST STE R, SHERIDAN, WY 82801, United States. For privacy questions or requests, contact support@embraline.com.

For purposes of applicable privacy law, Emeseven Marketing LLC is the business responsible for determining how personal information described in this Privacy Policy is processed, except where another party independently determines its own processing purposes.

1. Personal information we collect

Depending on how a customer interacts with Embraline, we may collect:

1. Identity information, including name.
2. Contact information, including email address, billing address, delivery address and telephone number when provided.
3. Order information, including products purchased, quantities, prices, order history and fulfillment information.
4. Transaction information, including payment status, transaction identifiers and limited payment information provided by payment processors. Full payment credentials may be processed directly by payment providers rather than stored by Embraline.
5. Customer service communications, including emails, refund requests, photographs submitted in connection with a claim and related correspondence.
6. Device and technical information, including IP address, browser type, device information, operating system and website interaction information.
7. Analytics information, including pages viewed, referral sources, approximate location derived from IP address, interactions with the website and conversion information.
8. Marketing information, including email marketing preferences, campaign interactions and advertising identifiers.
9. Cookie and similar technology information as described below.

2. How personal information is collected

Information may be collected:

1. Directly from the customer when an order is placed or information is submitted.
2. Automatically through the website and tracking technologies.
3. From Shopify and service providers involved in operating the store.
4. From payment processors.
5. From fulfillment and logistics providers.
6. From advertising, analytics and marketing technology providers.

3. Purposes for processing personal information

We may process personal information to:

1. Accept, process and fulfill orders.
2. Arrange shipment and delivery.
3. Provide order and tracking information.
4. Process payments and refunds.
5. Communicate with customers.
6. Investigate delivery, product and refund issues.
7. Prevent fraud, abuse and unauthorized transactions.
8. Maintain and improve the website.
9. Analyze website performance and customer interactions.
10. Measure advertising effectiveness.
11. Provide advertising and marketing where permitted.
12. Send email marketing where the customer has consented or where another lawful basis permits it.
13. Maintain business, tax, accounting and transaction records.
14. Comply with legal obligations.
15. Establish, exercise or defend legal claims.

4. United Kingdom legal bases

Where the UK GDPR applies, we process personal data under one or more of the following legal bases:

Contract. Processing necessary to accept an order, process payment, arrange fulfillment, deliver products, provide customer service or issue refunds.

Legal obligation. Processing required for tax, accounting, consumer protection, regulatory or other legal requirements.

Legitimate interests. Processing reasonably necessary for fraud prevention, network and website security, customer service, business administration and improvement of our services, provided those interests are not overridden by the individual's rights.

Consent. Processing based on consent where required, including certain marketing communications, advertising cookies and tracking technologies.

A person may withdraw consent at any time where processing is based on consent. Withdrawal does not affect the lawfulness of processing performed before withdrawal.

5. Order fulfillment and suppliers in China

Products sold by Embraline are fulfilled directly by a third party supplier in China.

To fulfill an order, Embraline may provide the supplier and relevant logistics providers with information reasonably necessary for delivery, including the customer's name, shipping address, telephone number where required, product ordered and order reference information.

These service providers may process information outside the customer's country of residence.

Emeseven Marketing LLC remains the operator of the Embraline store and the contracting seller to the customer. The use of a third party fulfillment supplier does not make that supplier the seller under this policy.

6. Service providers and disclosures

We may disclose personal information to service providers that assist with:

1. Shopify store hosting and ecommerce functionality.
2. Payment processing.
3. Order fulfillment.
4. Shipping and logistics.
5. Customer support.
6. Fraud prevention and security.
7. Analytics.
8. Advertising.
9. Email marketing.
10. Professional, legal, accounting and compliance services.

We may also disclose information where required by law, court order or lawful government request, or where reasonably necessary to protect legal rights.

If the business is reorganized, sold, merged or transferred, information may be transferred as part of that transaction subject to applicable law.

7. Cookies and tracking technologies

Embraline uses cookies, pixels, tags and similar technologies to operate the website, understand website usage, measure marketing and, where permitted, personalize advertising.

Strictly necessary technologies may be used where required for core website functionality, security, checkout, shopping cart operation and fraud prevention.

For visitors in jurisdictions where consent is legally required, nonessential advertising and analytics technologies should be activated only in accordance with the user's consent choices. UK rules generally require users to receive information about nonessential cookies and to provide valid consent before advertising and similar nonessential tracking technologies are used. ICO

Meta Pixel

Meta Pixel may be used to measure advertising performance, understand actions taken after viewing or clicking Meta advertisements, create advertising audiences and support advertising attribution.

Customers may refuse or limit this processing through available cookie preference controls, browser privacy controls, Meta advertising settings and applicable legally recognized opt out signals.

Google Analytics 4

Google Analytics 4 may be used to understand website traffic, page interactions, referral sources, device information and aggregated website performance.

Customers may refuse analytics cookies through available cookie preference controls or browser settings and may use privacy tools made available by Google where applicable.

TikTok Pixel

TikTok Pixel may be used for advertising measurement, attribution, audience creation and understanding interactions between TikTok advertising and the Embraline website.

Customers may refuse or limit TikTok advertising technologies using available cookie preferences, browser controls and TikTok privacy or advertising settings.

Google Tags

Google Tags may be used to deploy and manage measurement technologies, measure conversions and support analytics or advertising functionality depending on the configuration used on the website.

Customers may refuse nonessential Google tracking technologies through available cookie preferences, browser privacy controls and relevant Google advertising settings.

Klaviyo

Klaviyo may be used to manage email subscriptions, send marketing communications, measure email engagement, operate website signup features and understand customer interactions for marketing and customer communication purposes.

Customers may unsubscribe from marketing emails using the unsubscribe mechanism included in marketing communications. Where Klaviyo uses nonessential cookies or similar technologies, customers may reject those technologies through applicable cookie consent controls.

8. How to reject or control cookies

Customers may control tracking technologies by:

1. Rejecting nonessential categories through the website's cookie preference controls where available.
2. Changing browser settings to block or delete cookies.
3. Using privacy extensions or browser based tracking protection.
4. Adjusting advertising preferences with Meta, Google and TikTok.
5. Enabling a legally recognized opt out preference signal such as Global Privacy Control where applicable.
6. Unsubscribing from Klaviyo marketing emails through the unsubscribe link included in those messages.

Blocking strictly necessary cookies may prevent portions of the website or checkout from functioning correctly.

Cookie duration varies depending on the technology, provider, configuration and purpose. Customers can review cookies stored on their device, including their current expiration information, through their browser's storage and cookie settings.

9. Email marketing

Customers may receive promotional emails from Embraline where they have consented or where sending such communications is otherwise permitted by applicable law.

Marketing consent is not a condition of purchasing products.

A customer can stop promotional emails at any time by using the unsubscribe mechanism in a marketing email.

Transactional communications concerning orders, payments, shipping, customer service, security or refunds are not marketing communications and may continue where necessary.

10. International transfers

Emeseven Marketing LLC is located in the United States and uses service providers in multiple countries, including fulfillment providers in China.

Personal information may therefore be processed in countries other than the customer's country of residence.

Where applicable privacy law requires safeguards for international transfers, we will use legally permitted mechanisms appropriate to the transfer, such as contractual safeguards, adequacy mechanisms or another recognized transfer mechanism.

11. Data retention

Personal information is retained only for as long as reasonably necessary for the purposes for which it was collected and for applicable legal, accounting, tax, fraud prevention and dispute resolution requirements.

Order and transaction records may be retained for periods necessary to satisfy tax, accounting, chargeback and legal recordkeeping requirements.

Customer service records may be retained as necessary to resolve requests and protect legal rights.

Marketing information may be retained until consent is withdrawn, the customer unsubscribes or retention is no longer reasonably necessary.

Analytics and advertising information is retained according to applicable settings, provider configurations and legal requirements.

12. Security

We use reasonable administrative, organizational and technical measures appropriate to the nature of the information processed.

No system of electronic transmission or storage can be guaranteed to be completely secure.

13. United Kingdom privacy rights

Where the UK GDPR applies, individuals may have the right to:

1. Request access to their personal data.
2. Request correction of inaccurate personal data.
3. Request deletion in applicable circumstances.
4. Request restriction of processing.
5. Object to certain processing.
6. Request data portability where applicable.
7. Withdraw consent where processing is based on consent.
8. Object to direct marketing.
9. Lodge a complaint with the UK Information Commissioner's Office.

Requests may be submitted to support@embraline.com.

Emeseven Marketing LLC is established in the United States and does not currently maintain a separate establishment or separately appointed privacy representative in the United Kingdom. UK individuals may contact Emeseven Marketing LLC directly using the contact information in this policy.

14. California privacy rights

To the extent that the California Consumer Privacy Act, as amended by the California Privacy Rights Act, applies to Emeseven Marketing LLC, California residents may have rights including access, deletion, correction, opt out of sale or sharing, limitation of certain uses of sensitive personal information and protection from unlawful discrimination for exercising privacy rights. California also recognizes Global Privacy Control as an opt out mechanism for covered businesses that sell or share personal information. Justiça da Califórnia

During the preceding 12 months, depending on a customer's interaction with Embraline, categories of personal information collected may include identifiers, customer records information, commercial information, internet or other electronic network activity, approximate location information and inferences associated with advertising or customer activity.

Such information may be used for the business and commercial purposes described in this Privacy Policy.

Embraline does not sell personal information in exchange for monetary payment. However, the use of advertising technologies such as Meta Pixel, TikTok Pixel and certain Google technologies may involve disclosures that qualify as "sharing" for cross context behavioral advertising, or may otherwise fall within California's statutory definitions depending on how the technology is configured and applicable law.

Where the CCPA or CPRA requires an opt out, California residents may submit an opt out request through applicable website privacy controls, Global Privacy Control or by contacting support@embraline.com.

We do not knowingly sell or share the personal information of individuals under 16 years of age.

An authorized agent may submit a request where permitted by California law. We may take reasonable steps to verify the consumer or authorized agent where verification is legally permitted or required.

15. Canadian privacy rights

Where Canada's Personal Information Protection and Electronic Documents Act or applicable provincial privacy legislation applies, individuals may have rights concerning access to and correction of their personal information, withdrawal of consent where applicable and information about how personal information is used or disclosed.

PIPEDA establishes requirements concerning collection, use and disclosure of personal information in commercial activities, including principles relating to consent and reasonable purposes. Privacidade Canadá

Requests may be submitted to support@embraline.com.

16. Australian privacy rights

Where the Privacy Act 1988, the Australian Privacy Principles or other applicable Australian privacy requirements apply, individuals may contact Embraline to request access to or correction of their personal information or raise a privacy complaint.

Requests may be submitted to support@embraline.com.

17. Privacy requests

To submit a privacy request, contact:

support@embraline.com

We may request information reasonably necessary to verify identity and protect personal information from unauthorized disclosure.

We will respond within the period required by applicable law.

18. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, technologies, service providers or legal obligations.

The version published on embraline.com will govern from the date it becomes effective, subject to applicable law.

19. Business information

Brand: Embraline
Website: embraline.com
Data controller and legal entity: Emeseven Marketing LLC
Registered address: 30 N GOULD ST STE R, SHERIDAN, WY 82801, United States
Support and privacy email: support@embraline.com