Privacy policy

This Privacy Policy explains how personal information is collected, used, disclosed, retained, and protected when a person visits thebedroomstor.com, creates an account, places an order, contacts us, submits content, or otherwise interacts with The Bedroom Stor.

1. Controller and Contact Details

The controller of personal information covered by this Policy is:

Roger Stephen Hildick, an individual sole proprietor using “The Bedroom Stor” as the name of his online storefront.
6108 N Illinois St
Fairview Heights, IL 62208
United States
Telephone: +1 (618) 624-5200
Email: info@thebedroomstor.com
Customer-service hours: Monday–Friday, 9:00 AM–6:00 PM, Central Time (CT)

“The Bedroom Stor” is a storefront name and not a separate legal entity.

2. Scope

This Policy applies to personal information processed in connection with the website, checkout, customer accounts, orders, payments, delivery, returns, refunds, cancellations, warranties, product-safety communications, customer service, reviews, marketing subscriptions, and privacy requests.

It does not govern an independent third-party website or service that has its own privacy notice. Shopify can also process information in its own capacity when a customer uses Shopify consumer services such as Shop or Shop Pay; those activities are explained in Shopify’s consumer privacy notice.

3. Personal Information We Collect

A. Information provided by the customer

We collect information supplied when a person browses, creates an account, places an order, contacts us, requests support, starts a return, exercises a legal right, or submits content, including:

• name;

• billing and delivery address;

• email address and telephone number;

• account credentials and account preferences;

• products viewed, placed in a cart, ordered, returned, or reviewed;

• order number, transaction amount, currency, tax, shipping, tracking, delivery, return, refund, cancellation, and warranty information;

• payment status, card brand, last digits or token, and payment-verification result provided by the payment processor; we do not intentionally receive or store a complete card number on our own systems;

• customer-service messages and call or email records;

• photographs, videos, labels, serial or batch information supplied for a product issue, damage claim, warranty request, or safety report;

• reviews, comments, photographs, or other content submitted for publication;

• marketing preferences, consent choices, and opt-out requests; and

• information needed to verify and answer a privacy-rights request.

B. Information collected automatically

When a person uses the website, Shopify and configured technologies collect technical and activity information, including:

• IP address and approximate location derived from it;

• browser, device, operating system, language, and time zone;

• cookie and device identifiers;

• referring URL, landing page, pages and products viewed, search terms, cart activity, checkout activity, and time of interaction;

• consent and privacy preference signals;

• security, fraud, error, and diagnostic information; and

• interaction with emails or advertisements when the applicable technology is enabled and lawful consent or opt-out requirements have been satisfied.

C. Information received from service providers

We receive information from Shopify, payment and fraud-prevention providers, carriers, freight companies, customs brokers, tax providers, customer-support tools, marketing platforms, analytics providers, and other vendors used to operate the store. This can include payment authorization status, fraud signals, delivery status, customs status, marketing attribution, and website performance information.

4. Purposes and Legal Bases

For people in the EEA and other jurisdictions that require a legal basis, we process personal information as follows:

Purpose	Information involved	Legal basis
Provide the website, cart, account, checkout, order, payment, delivery, return, refund, cancellation, and warranty service	Identity, contact, account, order, payment status, delivery and service records	Performance of a contract or steps requested before entering a contract
Collect tax, maintain invoices and accounting records, respond to lawful requests, and meet product-safety or recall duties	Identity, contact, order, tax, payment, product and safety records	Compliance with legal obligations
Prevent fraud, secure accounts, diagnose errors, enforce terms, defend legal claims, and maintain service reliability	Technical, security, transaction, account and communication data	Legitimate interests in protecting customers, the store, and legal rights, balanced against individual rights
Answer questions, improve product information, analyze aggregate store performance, and improve customer service	Communications, order history, website activity and feedback	Contract performance or legitimate interests, depending on the request
Send promotional email or use non-essential analytics, personalization, or advertising cookies in opt-in regions	Email address, consent record, cookie identifiers and activity	Consent
Send permitted direct marketing to an existing customer where local law allows it	Contact and relevant purchase information	Legitimate interests or consent, as required by local law, with a clear opt-out
Handle a privacy request or product-safety report	Identity-verification, request, correspondence and relevant transaction data	Legal obligation and legitimate interests in documenting compliance

We do not use consent as a condition of buying a product when the processing is not necessary for the purchase. Consent can be withdrawn at any time without affecting processing that was lawful before withdrawal.

5. How We Disclose Personal Information

We disclose only the information reasonably necessary to the following categories of recipients:

• Shopify: ecommerce hosting, storefront, customer accounts, cart, checkout, order management, analytics, security, and platform services;

• payment and fraud-prevention providers: card authorization, payment processing, refunds, chargeback handling, identity or fraud review;

• carriers, freight providers, warehouses, customs brokers, and delivery partners: order fulfillment, customs clearance, tracking, delivery, collection, and returns;

• tax, accounting, and compliance providers: tax calculation, import processing, recordkeeping, legal compliance, and product-safety support;

• communication and customer-service providers: order messages, customer support, and service notifications;

• analytics and advertising providers: only for configured services and subject to the consent or opt-out choices required in the visitor’s region;

• professional advisers: accountants, insurers, auditors, consultants, and legal advisers bound by professional or contractual duties;

• authorities and legal recipients: courts, regulators, customs authorities, tax authorities, law enforcement, or another recipient when disclosure is legally required or necessary to establish, exercise, or defend legal rights; and

• a successor to the store: if ownership or assets are transferred, subject to appropriate confidentiality and continued protection of personal information.

Service providers must process information for authorized purposes and under applicable contractual and legal safeguards.

6. Shopify’s Role

The website is hosted on Shopify. Shopify generally processes merchant customer data as a processor or service provider on our behalf for core ecommerce functions. Shopify can act in its own capacity for certain Shopify consumer services, fraud, security, network, or enhanced services, as described in Shopify’s applicable privacy notices and terms.

Customers who use Shop, Shop Pay, or another Shopify consumer service should also review Shopify’s Consumer Privacy Policy at https://www.shopify.com/legal/privacy/consumers.

7. Payments

Visa and Mastercard transactions are processed through the payment service shown at checkout. The payment provider receives the card information needed to authorize and process the transaction. We receive payment status and limited transaction information but do not intentionally store complete payment card numbers on our own systems.

Payment providers and card networks can process information under their own legal obligations, including fraud prevention, anti-money-laundering, sanctions, and financial recordkeeping requirements.

8. Sale, Sharing, Targeted Advertising, and Privacy Signals

We do not sell personal information for money.

Use of advertising cookies, pixels, Shopify Network Intelligence, or similar services can qualify as “sale,” “sharing,” or “targeted advertising” under certain United States state privacy laws even when no money is exchanged. Where such a law applies, a visitor can opt out through the Your Privacy Choices link in the website footer. We honor a legally recognized Global Privacy Control signal for the browser and device from which it is sent where required.

In regions requiring prior consent, non-essential analytics, personalization, and advertising technologies are not activated until the visitor gives the relevant consent. A visitor can withdraw or change consent at any time through Cookie Preferences.

We do not knowingly sell or share the personal information of a person under 16 for targeted advertising.

9. Marketing Communications

We send promotional email only where permitted. A recipient can unsubscribe at any time by using the unsubscribe link in the message or contacting info@thebedroomstor.com.

Unsubscribing from marketing does not stop transactional or service communications such as order confirmations, shipping notices, recall notices, return updates, security messages, or replies to customer-service requests.

10. Cookies and Similar Technologies

The website uses cookies and similar technologies for essential ecommerce functions, privacy preferences, localization, security, reporting, analytics, and, when permitted, marketing. Detailed categories, current Shopify cookie names, purposes, durations, and controls are stated in the Cookie Policy.

11. International Transfers

The controller is located in the United States, and Shopify and other providers operate internationally. Personal information can therefore be transferred to and processed in the United States, Canada, and other countries that may have different data-protection laws from the customer’s country.

Where EEA personal data is transferred to a country without an adequacy decision, the transfer is protected by an approved mechanism such as the European Commission’s Standard Contractual Clauses, together with supplementary measures where required, or by another lawful transfer mechanism. Information about the applicable safeguard can be requested at info@thebedroomstor.com, subject to lawful redactions.

12. Retention

We apply the following retention schedule to records under our control:

Record	Normal retention period
Orders, invoices, payments, shipping, tax, customs, refunds, and accounting records	7 years after the end of the calendar year in which the transaction was completed
Return, warranty, legal-guarantee, chargeback, complaint, and dispute records	7 years after the matter is closed, or longer while a claim or legal hold remains active
Product-safety reports, recall communications, traceability, and corrective-action records	10 years after the relevant product was last supplied, or longer where applicable product-safety law requires
Ordinary pre-sale or customer-service inquiries not linked to a continuing claim	3 years after the inquiry is closed
Customer account profile	While the account remains active and for 2 years after closure or last activity; transaction records are retained separately for the periods above
Marketing subscription and consent record	Until consent is withdrawn or the address has been inactive for 24 months; a minimal suppression record is then retained to honor the opt-out
Cookie-consent and privacy-choice records	5 years after the last consent or preference event, unless a shorter period is required
Security, access, and fraud-prevention logs under our control	Normally 12 months, extended only for an active investigation, dispute, legal duty, or security incident
Cookie and analytics identifiers	For the duration stated in the Cookie Policy and consent tool; Shopify storefront analytics cookies are no longer than 1 year unless the user deletes them earlier

When a period expires, information is deleted or anonymized unless retention is required for law, tax, product safety, fraud prevention, a legal claim, or a documented legal hold. Backup copies are removed through the ordinary secure backup cycle.

13. Security

We use reasonable administrative, technical, and organizational measures appropriate to the nature of the information, including access controls, account protections, secure platform services, payment tokenization by payment providers, monitoring, and limited access based on business need.

No internet transmission or storage system is completely secure. A customer should use a unique password, protect account credentials, and contact us promptly if unauthorized activity is suspected.

14. Individual Rights

Depending on location and applicable law, an individual can have the right to:

• obtain confirmation of processing and access personal information;

• correct inaccurate or incomplete information;

• request deletion;

• restrict or object to processing;

• receive portable information in a structured, commonly used, machine-readable format;

• withdraw consent at any time;

• object to direct marketing;

• opt out of sale, sharing, or targeted advertising where applicable;

• limit use of sensitive personal information where a law grants that right;

• appeal a decision on a privacy request where applicable; and

• lodge a complaint with a competent data-protection or privacy authority.

To exercise a right, email info@thebedroomstor.com and state the right requested. We will acknowledge and respond within the period required by applicable law. We can request information reasonably necessary to verify identity and authority. An authorized agent must provide proof of authorization where the law permits an agent.

We do not discriminate against a person for exercising a privacy right. A request can be limited or refused where the law permits, including when identity cannot be verified, an exemption applies, or the request conflicts with another person’s rights. We will explain a refusal and available appeal or complaint options.

EEA individuals can lodge a complaint with the supervisory authority in their country of habitual residence, place of work, or place of the alleged infringement. Swiss individuals can contact the Federal Data Protection and Information Commissioner. Individuals in Türkiye can exercise applicable rights under Law No. 6698 and contact the Personal Data Protection Authority after using the required controller-request process.

15. Automated Processing

Payment and fraud-prevention providers use automated signals to authorize transactions and identify risk. A declined payment can prevent an order from being accepted. A customer who believes an automated fraud or payment result is incorrect can contact us and the applicable payment provider for review.

We do not intentionally make another decision based solely on automated processing that produces a legal or similarly significant effect on the individual.

16. Children

The website is intended for adults and is not directed to children under 13. We do not knowingly collect personal information directly from a child under 13. A person who has not reached the age of legal majority must not place an order without a parent or legal guardian.

If a parent or guardian believes a child supplied personal information, contact info@thebedroomstor.com so it can be reviewed and deleted where required.

17. Changes to This Policy

We can update this Policy to reflect changes in law, services, providers, or data practices. The updated version will be posted with a revised “Last updated” date. If a material change requires consent or direct notice, we will provide it as required before applying the change.

18. Contact

Privacy questions and requests should be sent to:

Roger Stephen Hildick — The Bedroom Stor
6108 N Illinois St
Fairview Heights, IL 62208
United States
Telephone: +1 (618) 624-5200
Email: info@thebedroomstor.com
Customer-service hours: Monday–Friday, 9:00 AM–6:00 PM, Central Time (CT)