Privacy Policy

Effective date: November 2025
This privacy policy explains what we collect, how we use your data, and the choices you have. We keep your information only as long as we need it to run our store, meet legal duties, and support you.

Quick summary

What we collect: order and account details (name, addresses, email, phone), purchase information, site activity (IP address, device, viewed items), and messages you send us.
Why we use it: to fulfill orders, prevent fraud, improve our site, and—if you opt in—send marketing.
Sharing: with payment processors (e.g., PayPal) and service providers that help us run the business. We do not sell your personal data.
Your choices: you can access, correct, delete, or export your data where the law allows.
Cookies: used for cart/checkout, analytics, and (with consent where required) marketing.
Transfers: your data may be processed outside your country with safeguards.
How to contact us: [email protected] or Contact Us.

What we collect

Order & account info: name, shipping/billing address, phone, email.
Purchase details: items ordered, subtotal, taxes, payment status. (We do not store full card numbers.)
Site activity: viewed products, cart contents (cookies), IP address, device and browser type, approximate location for tax/shipping estimates.
Voluntary messages: product reviews and inquiries sent via Contact Us.

Personal data categories and purposes

Identifiers (name, email, phone, addresses): order processing, support, fraud prevention.
Commercial information (purchases, totals): fulfillment, tax, and accounting.
Internet activity (IP addresses, devices, pages viewed): security, analytics, service improvements.
Approximate geolocation: shipping estimates, fraud prevention.
Communications content (reviews, inquiries): support and quality control.
We share only what is necessary with payment processors, analytics, email, hosting, and fulfillment providers.

How we use your data

Fulfill orders and provide support (contract).
Fraud prevention and security (legitimate interests).
Improve services and analytics (legitimate interests).
Marketing with consent (email opt-in; unsubscribe anytime).
Legal compliance (tax, accounting, and regulatory duties).

Cookies & similar tech

Essential cookies for cart, checkout, and login.
Analytics cookies to understand performance and improve experience.
Use marketing cookies only with consent, where required.
You can manage preferences in Cookie Settings (if available) or in your browser.
We do not respond to Do Not Track (DNT) signals. Where required, we honor browser-based Global Privacy Control (GPC) signals.

Payments & third parties

We share necessary data with payment processors (e.g., PayPal) to process transactions. See the  PayPal US data practices↗ for their practices.
We also use service providers (email, hosting, fulfillment) under agreements that limit the use of your data to the services we request.
We do not sell personal data.

International transfers

Your data may be processed outside your country. We use appropriate safeguards (for EEA/UK users, this may include Standard Contractual Clauses).

Data retention

Orders and transaction records (including receipts): retained for the period required by applicable tax and accounting laws in the relevant jurisdiction (typically 3–10 years).
Account identifiers: kept while the account is active or until you request deletion, subject to legal holds.
Logs, reviews, and support messages: kept for the time needed for security, audit, and service quality.

Your rights

Where applicable, you may access, correct, delete, restrict, object, or export your data. You can also withdraw marketing consent.

US state privacy rights (California and others)

Depending on your state, you may have additional rights, including the right to:
know, access, and correct specific pieces of personal information;
delete personal information;
opt out of the “sale” or “sharing” of personal information and of targeted advertising;
limit the use and disclosure of sensitive personal information;
appeal our decision on your request.
To exercise these rights, visit Privacy Choices or Contact Us. We do not sell personal information for money. Where required by law, we honor Global Privacy Control (GPC) signals for opt-out choices.

How to exercise your rights

Email [email protected] or use Contact Us.. We respond within 15 business days. We may ask you to verify your identity to protect your account.

Security

We use reasonable technical and organizational measures. However, no method of transmission or storage is 100% secure.

Children

Our site is not intended for children under 13. We do not knowingly collect their data.

Embedded content & links
Pages may include embedded content or links to other sites. Those sites have their own privacy practices.
Shipping & Delivery
Returns & Refunds
Discounts & Coupons

Changes to this policy

We may update this policy. We will post the new version and update the “Effective date.”

Data controller & contact

Data controller: Shenzhen Congmingmao Cross-Border Trading
Brand: Smart Cat
Operating website: festaldecor.com (“Festal Decor”)
Registered address: Room 105, No.25, Hebin Residential Compound (Sha-2), Shapu Community, Songgang Subdistrict, Bao’an District, Shenzhen, Guangdong 518000, China
Email: [email protected]
Privacy contact: Alex Miller — [email protected]
EU/UK representative: Not designated