Your data, handled with the same care as your home.
We collect only what we need to serve you well, use it only for the purposes we describe, and give you clear rights to access, correct, or remove it.
What we collect.
When you shop with Decor Lane, certain information is necessary to fulfill your order and serve you. We collect it in two ways — what you provide directly, and what we receive automatically.
Name, billing and shipping address, email address, telephone number, payment information processed through our payment gateway, and any details you share when contacting our team.
IP address, browser type and operating system, device identifiers, pages viewed and time spent, referring URL, and interactions with our site — gathered to improve performance and personalize your experience.
If you opt into email or SMS communications, we collect the contact preferences and engagement signals (opens, clicks) necessary to deliver and improve those messages.
Order history, returns and exchanges, customer service correspondence, and preferences saved to your account, where applicable.
Why we collect it & on what legal basis.
We use the information we collect for the following purposes, each grounded in the legal basis described.
- To fulfill your order. Processing payments, arranging delivery, providing customer service, and managing returns. Legal basis: performance of a contract.
- To communicate with you. Order updates, delivery notifications, and customer support replies. Legal basis: performance of a contract and legitimate interest.
- To send marketing. Email and SMS updates about new products, offers, and inspiration — only with your consent. Legal basis: your consent, withdrawable at any time.
- To improve our store. Site analytics, performance optimization, and personalization. Legal basis: legitimate interest, balanced against your privacy.
- To prevent fraud and protect our business. Identity verification, fraud detection, and securing our systems. Legal basis: legitimate interest and legal obligation.
- To meet legal obligations. Tax records, regulatory reporting, and responding to lawful requests. Legal basis: legal obligation.
Who we share it with.
We do not sell your personal information. We share it only with the providers and parties necessary to operate our business, and only to the extent each one requires to perform its function.
Our store is hosted on Shopify Inc. Your data is stored within Shopify's infrastructure, secured by their firewall and encryption, and managed under their privacy and security commitments.
Payment information is processed through PCI‑DSS‑compliant gateways. Credit card data is encrypted to the Payment Card Industry Data Security Standard, stored only as long as needed to complete the transaction, and then deleted. PCI‑DSS standards are maintained by Visa, Mastercard, American Express, and Discover.
Shipping carriers, fulfillment warehouses, email and SMS service providers, customer service tools, and analytics platforms — each governed by their own privacy policies and contractually bound to handle your data only for the services we engage them to perform.
We may disclose information when required by law, in response to lawful requests by public authorities, to enforce our Terms of Service, or to protect our rights, property, or the safety of others.
Some service providers may be located in jurisdictions outside your own. Where required, we rely on standard contractual clauses or equivalent safeguards for international transfers of personal data. When you leave our site or are redirected to a third‑party website, our Privacy Policy no longer applies — we encourage you to review the privacy practices of any third-party site you visit.
Cookies & tracking technologies.
We use cookies and similar technologies (pixels, tags, local storage) to operate the site, remember your preferences, measure performance, and — with your consent — personalize advertising.
In addition, we may use third‑party analytics and advertising technologies (such as Google Analytics, the Meta Pixel, and similar tools) that set their own cookies or identifiers. These help us understand site performance and, where you have consented, deliver advertising relevant to your interests across other platforms.
You can opt out of non-essential cookies through your browser settings or our cookie preference center where available. Disabling cookies may limit certain site features. We currently do not respond to "Do Not Track" browser signals; you can manage tracking through the rights described in Vol. VI below.
Your rights & choices.
You have the right to control how your personal information is used. Depending on your location, you may have additional rights under California (CCPA/CPRA), European (GDPR), or other applicable laws.
You may request a copy of the personal information we hold about you, in a structured, commonly used format.
You may ask us to correct any inaccurate or incomplete information we hold about you.
You may request that we delete your personal information, subject to legal retention obligations.
You may unsubscribe from email at any time via the link in any message, or reply STOP to opt out of SMS.
We do not sell personal information. To opt out of sharing for cross-context behavioral advertising (as defined under CCPA/CPRA), contact us at the address below.
Where we rely on consent to process your data (such as marketing), you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
To exercise any of these rights, write to info@decorlane.com. We will verify your identity and respond within the timeframe required by applicable law (typically thirty days). You also have the right to lodge a complaint with your local data protection authority.
Security & retention.
We implement reasonable precautions and industry‑standard practices to safeguard your personal information from loss, misuse, unauthorized access, disclosure, alteration, or destruction. Credit card information is transmitted using Secure Socket Layer (SSL) technology and stored with AES‑256 encryption. We comply with PCI‑DSS requirements and generally accepted industry standards.
No method of transmission or electronic storage is entirely secure. In the unlikely event of a data breach affecting your personal information, we will notify you and the appropriate authorities in accordance with applicable law.
We retain personal information for as long as necessary to fulfill the purposes for which it was collected, including for the duration of our customer relationship, to comply with legal, accounting, or reporting obligations, and to resolve disputes. When personal information is no longer required, it is either deleted or anonymized.
Children, regional rights & policy updates.
Our store is not directed to children under the age of 13, and we do not knowingly collect personal information from anyone under 13. By using our site, you confirm that you are at least the age of majority in your state or country of residence, or that a parent or guardian has consented on behalf of a minor. If you believe we have collected information from a child under 13, please contact us and we will delete it.
California residents have specific rights under the CCPA and CPRA, including the right to know what personal information is collected, the right to delete, the right to correct, the right to opt out of sale or sharing, and the right not to be discriminated against for exercising these rights. Residents of other U.S. states with comprehensive privacy laws have substantially similar rights. To exercise them, contact us at the address below.
If you are located in the European Economic Area, the United Kingdom, or Switzerland, you may exercise the rights described in Vol. VI under GDPR and equivalent laws. You also have the right to lodge a complaint with a supervisory authority in the country of your residence.
We may modify this Privacy Policy from time to time. Updates take effect upon posting. Material changes will be communicated to you where reasonably possible. If our store is acquired or merged with another company, your information may be transferred to the new owner under the same protections set out here.
SMS communications.
By opting into Decor Lane SMS updates, you consent to receive automated marketing messages and notifications about deals, exclusive offers, and home decor inspiration. Message frequency varies. Consent is not a condition of purchase. Standard message and data rates may apply.
You may unsubscribe at any time by replying STOP to any message. For help, reply HELP. For further details, please refer to this Privacy Policy and our Terms of Service.
Reach our team directly.
For questions about this Privacy Policy — or to access, correct, delete, or otherwise act on the personal information we hold about you — please write to us. We respond within one business day to acknowledge, and within the timeframe required by applicable law to resolve.
