TEAKMOORWICK · PRIVACY & DATA PROTECTION

GDPR & Data Protection Policy

Your Privacy Matters. Your Personal Data Deserves Respect.

Trust Begins with Transparency.

At Teakmoorwick, we respect your privacy and recognize the importance of protecting personal information. This GDPR & Data Protection Policy explains how we collect, use, store, disclose, and protect personal data when you visit our website, browse our furniture collections, place an order, or communicate with our customer service team.

01. About This Policy

This policy describes our approach to personal data protection and explains the rights that may be available to individuals under the European Union General Data Protection Regulation (EU) 2016/679, commonly known as the GDPR, and other applicable data protection laws.

The GDPR generally applies to the processing of personal data of individuals in the European Economic Area (EEA) under the conditions established by the regulation. Certain provisions may also apply to businesses outside the EEA that offer goods or services to individuals in the EEA or monitor their behavior there.

Where applicable, this policy should be read together with our Privacy Policy, Cookie Policy, Terms of Service, and other relevant website policies.

02. Who Is Responsible for Your Personal Data?

For questions concerning personal data processed through our online store, you may contact the business using the following information:

The applicable data controller and any other responsible parties will depend on the specific processing activity and relevant legal arrangements. This contact information is provided for privacy inquiries and does not represent an appointment of an EU representative or Data Protection Officer.

03. Personal Information We May Collect

Depending on how you interact with our website, we may collect different categories of personal information.

A. Identity & Contact Information

• First and last name.
• Billing and shipping addresses.
• Email address.
• Telephone number.
• Other contact details voluntarily provided to us.

B. Order & Transaction Information

• Products purchased or added to an order.
• Order numbers and transaction records.
• Billing and delivery details.
• Order status, shipping, and delivery information.
• Return, exchange, and refund records.

C. Payment Information

Payment transactions may be processed through third-party payment service providers. We may receive limited transaction-related information, such as payment status, transaction references, or billing details, as necessary to manage orders and related inquiries.

Full payment card details are generally handled by the relevant payment provider rather than stored directly by our store. The actual information collected depends on the payment method and provider used.

D. Technical & Usage Information

• IP address and approximate location derived from network information.
• Browser type, operating system, and device information.
• Website access times and browsing activity.
• Pages viewed, referring websites, and interaction data.
• Cookie identifiers and similar online technologies, where applicable.

E. Customer Communications

When you contact us, we may process the information you provide, including emails, support requests, order-related questions, attachments, and other communications necessary to respond to your inquiry.

04. How We Use Personal Data

We process personal information only for purposes that are relevant to our business activities and permitted under applicable law.

05. Legal Bases for Processing

Where the GDPR applies, we process personal data only when an appropriate legal basis exists under Article 6 of the GDPR.

The applicable legal basis depends on the specific processing activity. We do not assume that consent is required or appropriate for every type of processing.

06. Cookies & Similar Technologies

Our website may use cookies, pixels, and similar technologies to support website functionality, remember preferences, understand website usage, and, where permitted, provide relevant marketing.

These technologies may include:

• Essential cookies: Support core website functions, shopping cart operations, security, and checkout processes.
• Preference cookies: Help remember settings and browsing preferences.
• Analytics cookies: Help understand how visitors interact with the website, where enabled.
• Advertising cookies: May support advertising measurement or personalization where applicable and legally permitted.

Where required by applicable law, non-essential cookies and similar technologies will only be activated after the necessary consent has been obtained.

You may manage your cookie preferences through available website controls or your browser settings. Disabling certain cookies may affect some website functions.

For further details, please refer to our Cookie Policy.

07. Sharing Personal Information

We may share personal data with third parties when necessary for legitimate business operations, contractual fulfillment, or compliance with applicable law.

Depending on the services used, these parties may include:

• Shopify and website service providers: To operate the online store, maintain hosting, and support website functionality.
• Payment processors: To securely process transactions and payment-related requests.
• Shipping and logistics providers: To arrange order fulfillment, shipment, and delivery.
• Technical and analytics providers: To support website maintenance, performance analysis, and security where enabled.
• Customer service providers: To help manage customer communications and support requests.
• Professional advisers and authorities: Where necessary for legal compliance, dispute resolution, or the protection of legal rights.

We do not authorize service providers to use personal data for purposes unrelated to the services they provide, except where otherwise permitted or required by law.

We do not sell personal information in exchange for money. Certain disclosures or advertising-related data sharing may nevertheless be considered a sale or sharing under specific U.S. privacy laws, depending on the circumstances.

08. International Data Transfers

Teakmoorwick operates from the United States. Depending on the services used to operate our store, personal information may be processed or accessed in the United States and other countries outside the European Economic Area.

Where personal data originating from the EEA is transferred to a country that does not benefit from an applicable adequacy decision, we will rely on an appropriate transfer mechanism where required by the GDPR.

Such mechanisms may include:

• Standard Contractual Clauses adopted by the European Commission.
• An applicable adequacy decision.
• Other lawful transfer mechanisms permitted under applicable data protection law.

Additional safeguards may be considered where required based on the nature of the transfer and the relevant legal circumstances.

09. Data Retention

We retain personal information only for as long as reasonably necessary to fulfill the purposes for which it was collected, including order fulfillment, customer support, legal compliance, dispute resolution, and legitimate business administration.

Retention periods may vary depending on:

• The type and sensitivity of the information.
• The purpose for which the information was collected.
• Applicable accounting, tax, and legal recordkeeping requirements.
• The existence of ongoing orders, disputes, or legal claims.
• Whether continued retention is necessary for security or fraud prevention.

When personal data is no longer necessary, we will take reasonable steps to delete it, anonymize it, or otherwise dispose of it in accordance with applicable requirements.

10. Your Rights Under the GDPR

If the GDPR applies to the processing of your personal data, you may have the following rights, subject to applicable legal conditions and exceptions:

You may also have the right to withdraw consent at any time when processing is based on consent. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Where applicable, you may have the right not to be subject to certain decisions based solely on automated processing, including profiling, that produce legal effects or similarly significant effects, subject to GDPR exceptions.

These rights are not absolute. We may need to retain certain information to comply with legal obligations, establish or defend legal claims, or exercise other lawful rights.

11. How to Exercise Your Privacy Rights

To submit a request relating to your personal data, contact us using the email address provided in this policy.

For your protection, we may request reasonable additional information to verify your identity before responding to a privacy request.

Where the GDPR applies, we generally respond to valid requests within one month of receipt. This period may be extended by up to two additional months where necessary, taking into account the complexity and number of requests. If an extension is needed, we will inform you within the initial one-month period and explain the reason.

Requests are generally handled free of charge. However, applicable law may permit a reasonable fee or refusal in the case of manifestly unfounded or excessive requests.

12. Right to Lodge a Complaint

If you believe that our processing of your personal data violates applicable data protection law, you may have the right to lodge a complaint with the competent supervisory authority.

For individuals in the EEA, this may be the data protection authority in the country of your habitual residence, place of work, or the location of the alleged infringement, as provided under the GDPR.

We encourage you to contact us first so that we can review your concern, although doing so does not limit your right to contact a supervisory authority.

13. Marketing Communications

We may use your contact information to send promotional emails or other marketing communications where permitted by applicable law.

Where prior consent is required, we will obtain it before sending the relevant marketing communications.

You may unsubscribe from promotional emails at any time by using the unsubscribe link included in the message or by contacting us directly.

Unsubscribing from marketing communications will not prevent us from sending necessary non-promotional messages, such as order confirmations, shipping updates, security notices, or responses to customer service requests.

14. Data Security

We take reasonable technical and organizational measures designed to protect personal information against unauthorized access, accidental loss, misuse, alteration, and disclosure.

Depending on the nature of the information and the services involved, safeguards may include:

• Secure website connections where supported.
• Access controls and appropriate account permissions.
• Use of established payment service providers.
• Reasonable procedures for handling customer information.
• Review of relevant service providers and data protection practices.

No method of electronic transmission or storage can be guaranteed to be completely secure. We therefore cannot promise absolute security, but we aim to apply safeguards appropriate to the risks involved.

15. Children's Privacy

Our online store is intended for general consumers and is not specifically directed toward children.

We do not knowingly collect personal information directly from children in circumstances where parental consent is required by applicable law.

If you believe that a child has provided personal information to us inappropriately, please contact us so that we can review the matter and take appropriate action where required.

16. Data Breach Management

In the event of a personal data breach, we will assess the incident and take reasonable steps to contain, investigate, and address the issue.

Where the GDPR applies, we will notify the relevant supervisory authority within the applicable legal timeframe when the breach is likely to result in a risk to individuals' rights and freedoms. Where required by law, affected individuals will also be informed without undue delay when the breach is likely to result in a high risk.

Notifications will be handled in accordance with the applicable legal requirements and the circumstances of the incident.

17. U.S. Privacy Rights

Although this policy addresses GDPR requirements, certain U.S. state privacy laws may also provide additional rights to eligible residents, depending on the nature of the business and the applicable legal thresholds.

These rights may include, where applicable:

• The right to know or access certain personal information.
• The right to correct inaccurate personal information.
• The right to request deletion of certain personal information.
• The right to obtain a portable copy of certain personal information.
• The right to opt out of certain sales, targeted advertising, or profiling activities where covered by applicable law.
• The right not to receive unlawful discriminatory treatment for exercising applicable privacy rights.

The availability and scope of these rights depend on the relevant state law and individual circumstances. Please contact us to submit a privacy-related request.

18. Changes to This Policy

We may update this GDPR & Data Protection Policy from time to time to reflect changes in our business practices, website services, data processing activities, or applicable legal requirements.

Any revised version will be published on this page. We encourage visitors to review this policy periodically to stay informed about how personal information is handled.

Where legally required, we will provide additional notice or obtain renewed consent before implementing relevant changes.

19. Contact Us About Data Protection

If you have questions about this policy, wish to exercise your privacy rights, or have concerns about the processing of your personal information, please contact us.

For faster assistance, please use the email subject line "GDPR Data Protection Request" and briefly describe your inquiry. Please avoid sending payment card numbers, passwords, or other unnecessary sensitive information by email.

Your Trust Is Part of Our Promise.

At Teakmoorwick, we believe that a thoughtful shopping experience begins with transparency, responsible information practices, and respect for every customer's privacy.

TEAKMOORWICK

Timeless Living · Thoughtful Craftsmanship