Privacy Policy

Protecting your private information is our priority. This Privacy Policy applies to www.royalcoven.com and Royal Coven ("ROCO") and governs data collection and usage. The ROCO website is an e-commerce site. By using the ROCO website, you consent to the data practices described in this statement.

In order to better provide you with products and services offered on our site, ROCO may collect personally identifiable information, including:

• First and last name
• Mailing / shipping address
• Email address
• Phone number
• Billing and payment information (processed securely — see Security section)
• IP address, browser type, and referring website addresses
• Purchase history and browsing activity on our site

We do not collect any personal information about you unless you voluntarily provide it. However, certain information may be required when you: register for an account; enter a sweepstakes or contest; sign up for special offers; send us an email; or submit payment information to complete a purchase.

Categories of personal information collected in the past 12 months: New

We do not knowingly collect sensitive personal information such as precise geolocation, health data, racial or ethnic origin, or biometric data.

If you directly disclose personally identifiable information through any public message boards or community features on our site, please be aware that information may be collected and used by others.

ROCO collects and uses your personal information to operate our website and deliver the services you have requested. Specific uses include:

• Processing and fulfilling your orders
• Communicating with you about your orders, account, or inquiries
• Sending marketing and promotional emails (where you have opted in)
• Improving our website and personalizing your experience
• Delivering targeted advertising on other websites based on your interests
• Detecting and preventing fraud or security incidents
• Complying with legal obligations

We will not use your personal information for materially different purposes without providing you notice and, where required, obtaining your consent.

ROCO does not sell or rent its customer lists to third parties for their own independent marketing purposes.

ROCO may share data with trusted service providers to help perform statistical analysis, send email or postal mail, provide customer support, process payments, or arrange deliveries. All such third parties are prohibited from using your personal information except to provide these services to ROCO, and they are required to maintain the confidentiality of your information.

Categories of third parties with whom we share information: New

• Shipping carriers (e.g., UPS, USPS) — to deliver your orders
• Payment processors (e.g., Shopify Payments, PayPal) — to process transactions securely
• Email marketing platforms — to send order confirmations and newsletters you have opted into
• Advertising partners (e.g., Meta, Google) — to serve relevant ads on other platforms based on your browsing and purchase activity
• Analytics providers — to understand how visitors use our site
• Fraud prevention services — to detect and prevent unauthorized transactions

ROCO may disclose your personal information without notice if required to do so by law, or in the good-faith belief that such action is necessary to: (a) comply with legal process; (b) protect and defend the rights or property of ROCO; or (c) protect the personal safety of users of ROCO or the public.

ROCO may keep track of the pages our users visit within our website in order to determine which services are most popular. This data is used to deliver customized content and advertising to customers whose behavior indicates interest in particular subject areas.

Our website may use cookies to help personalize your online experience. A cookie is a small text file placed on your device by a web server. Cookies cannot run programs or deliver viruses. They are uniquely assigned to you and can only be read by a web server in the domain that issued them.

Cookies help us remember your preferences, shopping cart contents, and login status so you don't have to re-enter information on each visit.

You have the ability to accept or decline cookies through your browser settings. If you choose to decline cookies, some features of our site may not function as intended.

Types of cookies we use: New

• Strictly necessary — Required for the site to function (e.g., shopping cart, checkout)
• Performance / analytics — Help us understand how visitors interact with our site
• Functional — Remember your preferences and settings
• Targeting / advertising — Used by us and our advertising partners to show you relevant ads on other platforms

Information automatically collected by ROCO may include: IP address, browser type, domain names, access times, and referring website addresses. This information is used to operate the service and provide general statistics regarding site usage.

Global Privacy Control (GPC): New If you visit our website with a GPC opt-out signal enabled in your browser, we will treat this as a request to opt out of the sale or sharing of your personal information for that browser and device.

ROCO secures your personal information from unauthorized access, use, or disclosure. When personal information such as payment details is transmitted to other websites, it is protected through encryption using the Secure Sockets Layer (SSL) protocol. Our site is hosted on Shopify, which maintains industry-standard security practices including PCI DSS compliance for payment data.

In the event of a data breach that affects your personal information, we will notify you as required by applicable law, including California's data breach notification law (Cal. Civ. Code § 1798.82). New

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Our general retention practices are:

• Order and transaction records — retained for up to 7 years for accounting, tax, and legal compliance purposes
• Account information — retained for as long as your account is active, or as needed to provide services
• Marketing preferences — retained until you unsubscribe or request deletion
• Website analytics data — retained in aggregated or anonymized form for up to 2 years

You may request deletion of your personal information at any time (see Right to Deletion below), subject to legal retention requirements.

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) grants you the following rights with respect to your personal information:

• Right to Know — You may request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources, our business or commercial purposes for collecting it, and the categories of third parties with whom we share it.
• Right to Delete — You may request that we delete personal information we have collected from you, subject to certain exceptions (see Right to Deletion below).
• Right to Correct — You may request that we correct inaccurate personal information we hold about you.
• Right to Opt Out of Sale / Sharing — You may direct us to stop selling or sharing your personal information with third parties for cross-context behavioral advertising. Visit our Your Privacy Choices page to submit this request.
• Right to Limit Use of Sensitive Personal Information — You may request that we limit our use of sensitive personal information to what is necessary to provide our services. (Note: we do not currently collect sensitive personal information as defined by the CPRA.)
• Right to Non-Discrimination — We will not deny you goods or services, charge you a different price, or provide a lower quality of service because you exercised any of your privacy rights.
• Authorized Agent — You may designate an authorized agent to submit requests on your behalf. We may require written proof of authorization and may verify your identity directly.

We are required to verify your identity before processing certain requests. We may ask you to confirm information associated with your account or order history. We will not retain the information you provide for verification for any purpose other than completing the verification.

"Shine the Light" (Cal. Civ. Code § 1798.83): California residents may also request information about personal information we have disclosed to third parties for direct marketing purposes during the preceding calendar year. To submit this request, please email hello@royalcoven.com with "Shine the Light Request" in the subject line.

Subject to certain exceptions, upon receipt of a verifiable request from you, we will delete your personal information from our records and direct any service providers to delete your personal information from their records.

We may not be able to comply with a deletion request if retaining the information is necessary to:

• Complete a transaction, fulfill a warranty, or perform a contract between you and us
• Detect security incidents, protect against malicious or fraudulent activity, or prosecute those responsible
• Debug to identify and repair errors that impair existing functionality
• Exercise or ensure free speech rights, or exercise another right provided by law
• Comply with the California Electronic Communications Privacy Act or other legal obligations
• Engage in lawful public interest research, with your informed consent, where deletion would seriously impair the research
• Enable solely internal uses that are reasonably aligned with your expectations based on your relationship with us

ROCO does not knowingly collect personally identifiable information from children under the age of 13. If you are under the age of 13, you must ask your parent or guardian for permission to use this website. If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at hello@royalcoven.com. New

From time to time, ROCO may contact you via email for the purpose of providing announcements, promotional offers, alerts, order confirmations, surveys, and other general communications.

If you would like to stop receiving marketing or promotional emails from ROCO, you may opt out at any time by clicking the Unsubscribe link found at the bottom of any marketing email, or by emailing hello@royalcoven.com. Please note that transactional emails (such as order confirmations and shipping notifications) are not subject to opt-out and will continue to be sent as needed to complete your transactions. New

We may store your data on servers provided by third-party hosting vendors with whom we have contracted, including Shopify (our e-commerce platform). These vendors are required to maintain appropriate security standards and may only use your data to provide services to us. Data may be stored or processed in the United States. New

ROCO reserves the right to change this Privacy Policy from time to time. We will notify you about significant changes in the way we treat personal information by sending a notice to the primary email address on your account, by placing a prominent notice on our site, and/or by updating the "Last Updated" date at the top of this page.

Your continued use of the site and/or services after such modifications constitutes your acknowledgment of the updated Privacy Policy and your agreement to be bound by it.

ROCO welcomes your questions or comments regarding this Privacy Policy. If you believe that ROCO has not adhered to this statement, or to submit a privacy rights request, please contact us:

We will acknowledge receipt of your request within 10 business days and respond substantively within 45 days.