Privacy policy

Last updated: March 3, 2026

IndochinaHomeDecor LLC, doing business as IndochinaLight ("IndochinaLight," "We," "Us," or "Our"), operates this store and website, including all related information, content, features, tools, products, and services, in order to provide you, the customer, with a curated shopping experience for handcrafted rattan pendant lights and related home décor products (the "Services"). IndochinaLight is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy describes how we collect, use, disclose, retain, and protect your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully: By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.

We serve customers worldwide, including in the United States, European Economic Area (EEA), United Kingdom (UK), and other jurisdictions. Certain sections of this Privacy Policy may apply only to residents of specific jurisdictions.

I. Personal Information We Collect

Category of Data Source of Data Purpose of Processing
Identifiers (name, postal/billing/shipping address, IP address, email, phone, unique personal identifier, online identifier) You (directly and through your devices); Our service providers; Our partners or third parties Respond to requests; Provide/tailor/improve Services; Process orders; Ensure security; Track website usage; Comply with legal requirements; Short-term transient use
Financial information (credit/debit card numbers, payment card info, transaction details, form of payment) You (directly) Process payments; Fulfill orders; Detect/prevent fraud; Comply with legal requirements
Account information (username, password, security questions, preferences, settings) You (directly) Create/maintain/manage your account; Provide personalized experiences
Commercial information (products purchased/considered/returned, items viewed/carted/wishlisted, purchasing histories) You (directly and through your devices) Provide/tailor/improve Services; Marketing and advertising; Conduct business
Internet or electronic network activity (browsing history, search history, device/browser info, network connection, interaction with website/ads) You (through your devices); Our service providers Provide/tailor/improve Services; Ensure security; Track website usage; Short-term transient use
Communications (customer support inquiries, product reviews, feedback) You (directly) Provide customer support; Maintain business relationship
Inferences drawn from the above categories You (through your devices); Our service providers Provide/tailor/improve Services; Marketing and advertising

Sensitive Personal Information

We collect certain financial information (such as payment card details) to process your transactions. This may be considered "sensitive" under certain state and international privacy laws. We process this sensitive personal information only for completing your transactions and as required by law. We do not "sell," "share," or use sensitive personal information for targeted advertising or profiling purposes.

II. How We Use Your Personal Information

  • Provide, Tailor, and Improve the Services: Process payments, fulfill orders, manage accounts, arrange shipping, facilitate returns, enable reviews, customize shopping experience.
  • Marketing and Advertising: Send promotional communications by email/text/postal mail; show online advertisements based on your activity.
  • Security and Fraud Prevention: Authenticate accounts, detect fraudulent/illegal activity, protect public safety.
  • Communicating with You: Customer support, responsiveness, maintain business relationship.
  • Legal Reasons: Comply with law, respond to legal process, enforce terms/policies.

III. How We Disclose Personal Information to Third Parties

Disclosures for Business Purposes (prior 12 months)

Category of Data Category of Recipients Purpose of Disclosure
Identifiers Shopify; Service providers (IT, payment, fulfillment, shipping, cloud, support); Government entities Process orders; Respond to requests; Ensure security; Comply with legal requirements
Financial information Shopify; Payment processors; Service providers Process payments; Fulfill orders; Detect/prevent fraud
Commercial information Shopify; Service providers (analytics, fulfillment) Provide/improve Services; Track website usage; Marketing
Internet/electronic network activity Shopify; Service providers (analytics) Provide/improve Services; Marketing
Inferences Shopify; Service providers Provide/improve Services; Marketing

Other disclosure circumstances: Your direction/consent, affiliates/corporate group, business transactions (mergers, bankruptcy), legal obligations, enforcement of terms.

Sale and Sharing of Personal Information

Category of Data Category of Recipients Business Purpose
Name, contact info, identifiers Advertisers/marketing partners; Data analytics providers; Social media networks Relevant advertising; Market understanding
Commercial information Advertisers/marketing partners; Data analytics providers; Social media networks Relevant advertising; Market understanding
Internet/electronic network activity Advertisers/marketing partners; Data analytics providers; Social media networks Relevant advertising; Market understanding

Our use of cookies and tracking technologies may also constitute a "sale" or "sharing" under state law.

IV. Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your use of the Services. Information will be transmitted to and shared with Shopify and third parties in other countries. For Shopify enhanced features, Shopify is responsible for processing your personal information.

Learn more: Shopify Consumer Privacy Policy | Shopify Privacy Portal

V. Use of Cookies and Other Tracking Technologies

What Are Cookies?

A cookie is a small text file sent to your browser from a web server and stored on your device. Cookies help us estimate audience size, analyze traffic, customize your experience, and improve our Services.

Types of Cookies We Use

Type Purpose Duration
Strictly Necessary Website functionality (cart, checkout, login) Session or persistent
Performance & Analytics Understand how visitors use site, track page views, identify errors Up to 2 years
Functional Remember preferences (language, region, display) Up to 1 year
Marketing & Advertising Deliver relevant ads, track campaign performance; may be set by advertising partners Up to 2 years

Other Tracking Technologies

  • Pixel tags / Web beacons — small graphic images tracking engagement
  • Local storage objects — similar to cookies, storing data locally
  • Device fingerprinting — device configuration data for identification

How to Control Cookies

Control cookies through your browser settings. You may also opt out via:

Our use of cookies may constitute a "sale" or "sharing" under state law. Opt out as described in Section VII.

VI. Retaining Your Personal Information

We retain personal information only as long as necessary for the purposes in this policy or to meet legal/regulatory/tax/accounting requirements.

Factors we consider: Types of information, ongoing relationship with you, automatic deletion controls, legal/contractual obligations, dispute resolution needs.

General retention guidelines:

  • Transaction records: minimum 7 years (tax/accounting obligations)
  • Account information: duration of account plus reasonable period thereafter
  • Marketing data: until you opt out or request deletion
  • Website usage data (cookies, analytics): up to 26 months

VII. Your Rights and Choices

Applicable laws include: CCPA/CPRA (California), VCDPA (Virginia), CPA (Colorado), CTDPA (Connecticut), GDPR (EEA), UK GDPR.

Your Rights

  • Right to Know and Access — request categories and specific pieces of personal information collected, sources, purposes, third-party recipients, and data sold/shared.
  • Right to Correct — request correction of inaccuracies.
  • Right to Delete — request deletion (subject to legal exceptions).
  • Right of Portability — receive a portable copy of your data.
  • Right to Opt Out of Sale, Sharing, and Targeted Advertising — opt out of: (i) sale; (ii) sharing for behavioral advertising; (iii) targeted advertising; (iv) profiling with legal/significant effects.
  • Right to Non-Discrimination — we will not discriminate against you for exercising these rights.

Global Privacy Control (GPC)

If you visit with GPC enabled, we automatically treat this as an opt-out request for that device/browser. If associated with a Shopify account, the opt-out applies to the account. Learn more: globalprivacycontrol.org. We do not recognize other "Do Not Track" signals.

We may require identity verification. You may designate an authorized agent (with proof of authorization).

VIII. Additional Rights for EEA and UK Residents

  • Objection to Processing and Restriction — right to stop/restrict processing for certain purposes.
  • Withdrawal of Consent — withdraw at any time; does not affect prior lawful processing.

Legal Basis for Processing (GDPR)

Legal Basis Examples
Performance of a contract Orders, payments, shipping, returns
Legitimate interests Improving Services, fraud prevention, security, analytics
Consent Marketing, non-essential cookies, targeted advertising
Legal obligation Tax records, government requests

International Transfers

Transfers outside EEA/UK rely on Standard Contractual Clauses or equivalent mechanisms, unless the destination provides adequate protection.

IX. Email, SMS, and Mailing Preferences

Email

Unsubscribe via the link in our emails or contact service@indochinalight.com. Allow up to 10 business days. We may still send non-promotional emails (account, orders).

SMS/Text Messages (tuân thủ TCPA)

Opt out by texting: STOP, QUIT, END, REVOKE, OPT OUT, CANCEL, or UNSUBSCRIBE in reply to any message. You will receive one confirmation message. Standard message and data rates may apply.

Postal Mail/Catalogs

Contact service@indochinalight.com or call +1 (307) 249-0594. Allow up to 90 days for postal opt-out.

Contact for Preferences

  • Phone: +1 (307) 249-0594
  • Email: service@indochinalight.com
  • Mail: IndochinaHomeDecor LLC, 30 N Gould St Ste N, Sheridan, WY 82801

X. Protecting Your Personal Information

We take reasonable steps including: SSL/TLS encryption, PCI-DSS compliant payment processing via Shopify, limiting access to authorized personnel, regular review of data practices. No method is 100% secure; we cannot guarantee absolute security. Keep your account credentials safe.

XI. Children's Privacy Protection

We do not knowingly collect information from children under 16. For purposes of COPPA, we do not knowingly collect from children under 13. If we learn a child has provided personal information, we will delete it. Parents/guardians may contact us to request deletion.

We do not "sell" or "share" personal information of individuals under 16.


XII. Third-Party Links and Add-Ins

Our website may link to or embed content from third-party platforms (Facebook, Instagram, Pinterest, TikTok, YouTube, Houzz, etc.). Our privacy practices do not apply to those sites. Review their privacy policies.


XIII. U.S. State-Specific Privacy Disclosures

California (CCPA/CPRA)

California residents have rights to know, delete, correct, opt out of sale/sharing, and limit use of sensitive personal information. See Sections I and III for data categories. Financial Incentive Notice: We do not offer financial incentives in exchange for retention or sale of personal information.

Virginia, Colorado, Connecticut, and Other States

Exercise rights as described in Section VII. Appeal denials as described in the Appeals Process.

XIV. Changes to This Privacy Policy

We may update this Privacy Policy for operational, legal, or regulatory reasons. We will post revised versions here and update the "Last Updated" date. Material changes will be notified as required by law.

XV. Complaints

Contact us below. EEA residents: edpb.europa.eu. UK residents: ico.org.uk. U.S. residents: your state Attorney General (see Section VII).

XVI. Contact Us

IndochinaHomeDecor LLC

For the purpose of applicable data protection laws, we are the data controller of your personal information.