CEDARGRAIN · PRIVACY & TRUST

Privacy Policy

Your privacy matters to us. At Cedargrain, we believe that creating a comfortable home should come with a transparent and trustworthy shopping experience. This Privacy Policy explains how personal information may be collected, used, disclosed, stored, and protected when you visit our website, purchase furniture or home décor products, or communicate with our customer service team.

1. Introduction and Scope

This Privacy Policy applies to personal information processed in connection with Cedargrain's online furniture and home décor retail activities, including website browsing, product inquiries, order placement, payment-related administration, shipping, returns, refunds, and customer support.

For purposes of this policy, "personal information" means information that identifies, relates to, describes, or can reasonably be associated with an individual or household, as defined by applicable law.

This policy describes the categories of information that may be involved in operating our online store. The specific information collected and the technologies used depend on your interactions with our website and the services actually enabled.

Cedargrain respects the privacy rights available to consumers under applicable United States federal and state laws. Where additional legal requirements apply, those requirements take precedence over any inconsistent provision of this policy.

2. Categories of Personal Information

Depending on how you use our online store, the following categories of personal information may be collected or processed.

2.1 Contact and Identification Information

This may include your name, email address, telephone number, billing address, shipping address, and other contact details provided during checkout or customer service communications.

2.2 Order and Transaction Information

This may include purchased products, order numbers, order values, transaction dates, shipping selections, delivery information, payment status, return requests, refund records, and communications concerning your purchase.

2.3 Payment-Related Information

Payment processing may involve payment method details, transaction references, authorization status, and information necessary to complete purchases, issue refunds, or investigate payment-related concerns.

Depending on the payment service used, sensitive payment credentials may be collected and processed directly by the payment provider rather than by Cedargrain.

2.4 Website and Technical Information

When supported by our website infrastructure, technical information may include IP addresses, browser type, device information, operating system, referring pages, website activity, session information, and technical records necessary for website functionality and security.

2.5 Customer Service Communications

When you contact us, we may process the information contained in your messages, product questions, complaints, return requests, photographs voluntarily supplied to document product issues, and related correspondence.

2.6 Voluntarily Provided Information

You may choose to provide additional information when requesting assistance or explaining a product-related issue. We encourage customers not to submit sensitive personal information unless it is necessary for the specific request.

3. How Personal Information Is Collected

Personal information may be obtained through several sources, depending on the nature of your interaction with Cedargrain.

• Directly from you: When you provide information during checkout, submit an inquiry, request a return, or contact customer service.
• Through website interactions: When technical systems record information necessary to display pages, maintain website functionality, or protect the website.
• From transaction and delivery service providers: When information is returned to us for payment confirmation, order fulfillment, shipment status, or refund administration.
• From communications: When you provide information in emails or other supported customer service channels.

We aim to limit the information requested to what is reasonably necessary for the relevant service or legitimate business purpose.

4. How We Use Personal Information

Personal information may be used for the following purposes, as applicable to our operations:

• Order fulfillment: To receive, review, process, and manage purchases.
• Payment administration: To coordinate payment authorization, transaction confirmation, refunds, and payment-related inquiries.
• Shipping and delivery: To arrange product delivery, communicate shipping details, and resolve delivery concerns.
• Returns and refunds: To review return requests, process withdrawals, and administer applicable refunds.
• Customer support: To respond to questions, provide product information, and assist with after-sales concerns.
• Website operation: To maintain website functionality, identify technical problems, and support a reliable shopping experience.
• Security and fraud prevention: To identify suspicious activity, investigate potential misuse, and protect transactions.
• Legal compliance: To meet applicable recordkeeping, tax, accounting, consumer protection, and other legal obligations.
• Business administration: To maintain records reasonably necessary for customer service, dispute resolution, and the operation of our online store.

Personal information should not be used for purposes materially unrelated to those disclosed at collection without providing any additional notice or obtaining consent required by applicable law.

5. Order Processing and Payment Privacy

When you place an order, personal information necessary to process the purchase may be used to verify order details, coordinate payment, arrange delivery, and provide customer support.

Payment transactions may involve third-party payment processors. Such providers may process payment credentials and transaction information under their own applicable privacy and security practices.

Payment-related information may also be processed when necessary to investigate transaction errors, address payment disputes, or complete refunds.

We encourage customers to use the designated checkout process and avoid sending complete payment card details or other sensitive financial credentials through ordinary email.

6. Shipping and Delivery Information

Cedargrain serves customers in the United States. To fulfill an order, information such as the recipient's name, shipping address, telephone number, and relevant order details may need to be disclosed to delivery and logistics service providers.

These providers may use the information necessary to arrange transportation, coordinate delivery, communicate shipment information, and address delivery-related issues.

We aim to limit such disclosures to information reasonably necessary for fulfilling the order and providing related services.

7. Cookies and Similar Technologies

Cookies are small data files that websites may place on a visitor's device. Similar technologies may be used to support website functionality and understand interactions with online services.

Depending on the features and services enabled on our website, these technologies may support:

• Essential functionality: Maintaining shopping sessions, supporting checkout operations, and remembering necessary website settings.
• Performance: Identifying technical errors and understanding how website functions operate.
• Preferences: Remembering selected website settings where available.
• Analytics or advertising: Measuring website interactions or advertising effectiveness, only where the relevant services are enabled and their use is permitted by applicable law.

Some cookies are necessary for website functionality, while others may be optional and subject to applicable consent or opt-out requirements.

Most browsers provide controls for managing or deleting cookies. Disabling certain cookies may affect shopping cart functions, checkout sessions, or other website features.

Where required, additional information and privacy choices must be made available through the website's actual cookie or privacy preference mechanisms.

8. Disclosure of Personal Information

Personal information may be disclosed to third parties when reasonably necessary to provide our services, operate our website, or comply with legal requirements.

Depending on the services used, recipients may include:

• Payment processing and transaction service providers.
• Shipping, transportation, and delivery providers.
• Website hosting and technical service providers.
• Customer support and order management service providers.
• Professional advisers or other service providers where necessary for lawful business administration.
• Government authorities or other parties where disclosure is legally required.

Where service providers process personal information on our behalf, appropriate contractual, confidentiality, and data protection requirements should apply as required by law.

This section describes potential operational disclosures. It does not represent that Cedargrain uses every category of service provider listed above.

9. Sale, Sharing, and Targeted Advertising

Some United States privacy laws distinguish between disclosing personal information to a service provider for business operations and selling or sharing information for advertising purposes.

Depending on the technologies actually enabled, certain analytics or advertising activities may qualify as a sale, sharing, or processing for targeted advertising under applicable state privacy laws, even when no money is exchanged for personal information.

If Cedargrain engages in activities covered by these definitions, applicable consumers will be provided with the required disclosures and a means to exercise their opt-out rights.

Where legally required, recognized opt-out preference signals, including Global Privacy Control, must be honored.

Customers may contact us at lumaria@cedargrain.com to inquire about applicable advertising-related privacy choices. This email contact does not replace any additional opt-out mechanism required by law.

10. Data Retention

Personal information should be retained only for as long as reasonably necessary to fulfill the purposes for which it was collected, subject to applicable legal requirements.

Relevant retention considerations may include:

• The time necessary to process and complete an order.
• The period required to address returns, refunds, and customer service matters.
• Applicable tax, accounting, and recordkeeping requirements.
• The need to investigate fraud, resolve disputes, or establish or defend legal claims.
• The nature and sensitivity of the information and the risks associated with continued retention.

When information is no longer reasonably necessary and no legal requirement supports its continued retention, it should be deleted, de-identified, or otherwise handled in accordance with applicable requirements.

11. Data Security

Protecting customer information is an important part of operating an online store.

Personal information should be handled using safeguards appropriate to its sensitivity and the risks associated with processing it. Such safeguards may include reasonable administrative, technical, and organizational measures designed to reduce unauthorized access, disclosure, alteration, or loss.

Access to customer information should be limited to individuals and service providers who have a legitimate need to use it for authorized purposes.

No internet transmission or electronic storage method can be guaranteed to be completely secure. Customers should exercise care when sharing account, payment, or identification information online.

If you believe personal information relating to your interaction with Cedargrain may have been compromised, please contact us using the information at the end of this policy.

12. Your Privacy Rights and Choices

Depending on your state of residence and applicable law, you may have certain rights concerning your personal information.

These may include:

• Access: Request information about personal data collected or processed about you.
• Correction: Request correction of inaccurate personal information.
• Deletion: Request deletion of personal information, subject to applicable exceptions.
• Portability: Request a copy of certain personal information in a portable format where legally required.
• Opt-out: Opt out of certain sales, sharing, targeted advertising, or profiling activities where applicable.
• Consent withdrawal: Withdraw consent for processing that relies on consent, where applicable.
• Non-discrimination: Exercise applicable privacy rights without unlawful discriminatory treatment.
• Appeal: Appeal certain privacy request decisions where state law provides that right.

These rights are not identical in every state. Their availability and the exceptions that apply depend on the relevant law and circumstances.

To submit a privacy-related request, email lumaria@cedargrain.com with a description of your request.

13. California Privacy Rights

California residents may have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), when those laws apply to the relevant business and processing activities.

13.1 Right to Know and Access

Eligible California consumers may request information about the categories and specific pieces of personal information collected, the sources of that information, the purposes of collection and use, and the categories of third parties to whom information is disclosed.

13.2 Right to Delete

Eligible consumers may request deletion of personal information, subject to legal exceptions, including certain transaction completion, security, and recordkeeping needs.

13.3 Right to Correct

Eligible consumers may request correction of inaccurate personal information, taking into account the nature of the information and the purposes for which it is processed.

13.4 Right to Opt Out

Where Cedargrain engages in activities legally classified as selling or sharing personal information, eligible consumers have the right to opt out. Applicable opt-out preference signals must be processed in accordance with legal requirements.

13.5 Sensitive Personal Information

Where sensitive personal information is collected or used in ways that trigger additional statutory protections, eligible consumers may have the right to limit certain uses and disclosures.

13.6 Equal Treatment

Consumers are entitled to protection against unlawful discrimination or retaliation for exercising rights provided by the CCPA/CPRA.

13.7 Exercising California Rights

California residents may contact lumaria@cedargrain.com or use any additional privacy request method made available on the website. Applicable verification, response, authorized-agent, and appeal procedures will be governed by relevant legal requirements.

14. Privacy Rights in Other U.S. States

Residents of certain U.S. states may have additional privacy rights under applicable comprehensive state privacy laws.

Depending on the state and the law's applicability, these rights may include access, correction, deletion, data portability, and the ability to opt out of certain targeted advertising, personal information sales, or qualifying profiling activities.

Some state laws also provide procedures for appealing a denied privacy request.

Cedargrain will consider privacy requests in accordance with the laws applicable to the requesting consumer and the relevant processing activity.

15. How to Submit a Privacy Request

If you wish to exercise an applicable privacy right or ask a question about your personal information, please contact our customer service team.

To help us identify and respond to your request, please explain the privacy right you wish to exercise and provide sufficient information to locate the relevant records.

We may need to verify your identity or authority before fulfilling certain requests. Any verification information requested should be reasonably necessary and proportionate to the nature of the request.

Requests will be reviewed and addressed within the timeframes required by applicable law. If an extension is legally permitted and necessary, any required notice will be provided.

Where permitted by law, we may decline a request in whole or in part if a valid legal exception applies. When required, we will explain the decision and available next steps.

16. Marketing Communications

If Cedargrain offers optional marketing communications, personal information used for those communications must be handled in accordance with applicable consent, disclosure, and opt-out requirements.

Customers may request that optional promotional communications stop by contacting us or using an unsubscribe method provided in the relevant message, where available.

Opting out of promotional communications does not necessarily prevent messages needed to complete an order, administer a refund, address a customer service request, or provide legally required information.

Marketing preferences do not override any mandatory rights provided under applicable privacy or consumer protection laws.

17. Children's Privacy

Cedargrain's online furniture and home décor shopping services are intended for general consumers and are not directed toward children under the age of 13.

We do not intend to solicit personal information directly from children under 13 through child-directed services.

If a parent or legal guardian believes that a child has provided personal information to Cedargrain, they may contact us so the matter can be reviewed and any legally required action taken.

Additional protections concerning minors' personal information will be observed where applicable law requires them.

18. International Data Processing

Cedargrain provides an international contact address in Japan and serves customers in the United States.

Depending on the location of the systems and service providers involved, personal information may be processed or accessed outside the customer's state or country of residence.

Privacy and data protection requirements may differ between jurisdictions. Where international processing or transfers occur, applicable legal requirements concerning transparency, security, and appropriate transfer safeguards must be observed.

This section does not indicate that customer information is transferred to any particular country or service provider in every transaction.

19. Additional Rights Under Applicable International Laws

Although Cedargrain's online store is intended for customers in the United States, certain international privacy laws may apply to particular processing activities depending on the circumstances.

Where the European Union or United Kingdom data protection framework applies, individuals may have rights relating to access, rectification, erasure, restriction, portability, objection, and withdrawal of consent, subject to applicable conditions and exceptions.

Where legally required, personal information will be processed on an appropriate lawful basis, and relevant international transfer requirements will be observed.

Nothing in this section represents that every international privacy framework applies to every customer or transaction.

20. Third-Party Websites and Services

Our website may include links or integrations involving third-party services, such as payment providers, delivery-related services, or other independently operated websites.

When you interact directly with an independent third-party service, that provider may process information under its own privacy notice and applicable terms.

We encourage customers to review the privacy information provided by third-party services before submitting personal information directly to them.

This policy governs Cedargrain's own processing activities and does not replace the privacy notices of independently operated third parties.

21. Automated Processing and Profiling

Website and transaction systems may use automated processes to support functions such as order administration, technical security, and transaction review.

Where any automated processing constitutes profiling or automated decision-making regulated by applicable privacy law, the relevant notice, assessment, access, and opt-out requirements must be observed.

Customers may contact us to ask whether an applicable automated processing activity affects their personal information or legal rights.

22. Changes to This Privacy Policy

Cedargrain may revise this Privacy Policy when necessary to reflect changes in website operations, information processing practices, service arrangements, or applicable legal requirements.

Material changes will be communicated in a manner appropriate to the nature of the changes and any applicable legal notice requirements.

Where required by law, additional consent or other legally necessary steps will be obtained before implementing changes to the processing of personal information.

23. Relationship to Other Store Policies

This Privacy Policy concerns the collection, use, disclosure, and protection of personal information.

Information concerning product purchases, shipping charges, delivery estimates, order withdrawals, returns, and refunds is addressed in the applicable store policies.

If a privacy-related matter is subject to mandatory legal requirements, those requirements will govern to the extent applicable.

24. Contact Us

If you have questions about this Privacy Policy, wish to inquire about the handling of your personal information, or need assistance with a privacy request, please contact Cedargrain using the information below.

Thank you for choosing Cedargrain. We value your trust and are committed to communicating clearly about how personal information is handled throughout your shopping experience.