Privacy Policy

1. Information We Collect

Personal Information You Provide

• Name, email address, and password for your account
• Billing and shipping addresses
• Payment information (processed securely by our payment providers)
• Communication preferences and marketing consent

Payment and Transaction Information

When you make a purchase through PayPal, we collect and store the following transaction data for order fulfillment, fraud prevention, financial reconciliation, and legal compliance:

• PayPal Transaction Details: PayPal order ID, capture ID, transaction status, and processing timestamps
• Payer Information: PayPal payer ID, PayPal email address (which may differ from your account email)
• Financial Details: Transaction amount, currency, PayPal processing fees, net amount received
• Geographic Information: Buyer country/region for tax compliance and fraud detection
• Payment Metadata: Payment method type, transaction creation and update timestamps

Note: We do not store your actual PayPal login credentials or payment card details. These are processed securely by PayPal and never transmitted to our servers.

Information Collected Automatically

• Device and browser information (IP address, browser type, operating system)
• Website usage data (pages visited, time on site, clicks)
• Cookies and similar tracking technologies

2. How We Use Your Information

• Order Processing: Process and fulfill your orders, including digital product delivery
• Payment Processing: Verify payments, prevent fraud, and maintain accurate financial records
• Legal Compliance: Meet tax reporting, accounting, and legal record-keeping requirements (7-year retention)
• Customer Support: Provide customer support and respond to inquiries about orders and payments
• Communication: Send order confirmations, payment receipts, and delivery notifications
• Fraud Prevention: Detect and prevent fraudulent transactions using transaction patterns and geographic data
• Financial Reconciliation: Reconcile payments, fees, and refunds with our payment processors
• Marketing: Send promotional communications (with your consent - you can opt out anytime)
• Service Improvement: Improve our website, checkout process, and customer experience
• Security: Maintain security and prevent unauthorized access

3. Information Sharing

We share your information with:

• Payment Processors: PayPal, Stripe, and other payment providers to process transactions securely
• PayPal Transaction Data: We receive transaction details from PayPal including payer ID, transaction fees, and payment status for order fulfillment and reconciliation
• Service Providers: Shipping companies, email services, and website hosting providers
• Analytics: Google Analytics for website performance (anonymized when possible)
• Tax Authorities: Transaction records may be shared with tax authorities as required by law
• Legal Requirements: When required by law, court order, or to protect our rights and prevent fraud
• Business Transfers: In the event of a merger, acquisition, or sale of assets, customer data may be transferred

We do not sell your personal information to third parties for marketing purposes.

4. Data Security & Storage

• Encryption: SSL/TLS encryption for all data transmission
• Secure Storage: Encrypted cloud storage with access controls and monitoring
• Payment Security: PCI-compliant payment processing through certified providers
• Access Controls: Limited employee access on a need-to-know basis
• Regular Updates: Security patches and system monitoring
• Backup Systems: Encrypted backups with geographic redundancy

While we implement industry-standard security measures, no system is 100% secure. We cannot guarantee absolute security but continuously work to protect your data.

5. Data Retention

• Account Data: While your account is active, or 3 years after inactivity
• Order and Payment Records: 7 years for tax compliance, accounting, and legal requirements
• PayPal Transaction Data: 7 years including payer IDs, transaction fees, and payment details for financial audit and compliance purposes
• Marketing Data: Until you unsubscribe or request deletion
• Analytics Data: Automatically deleted after 26 months (Google Analytics retention setting)
• Security Logs: 1 year for fraud prevention and security monitoring

Legal Basis: The 7-year retention for financial records is required by tax law and business regulations in most jurisdictions. You may request earlier deletion for marketing data and non-essential personal information.

6. Your Rights

You have the right to:

• Access: Request a copy of all personal information we hold about you, including transaction history
• Correct: Update or correct inaccurate personal information in your account
• Delete: Request deletion of your personal data (subject to legal retention requirements)
• Restrict: Request restriction of processing for specific types of data
• Portability: Download your account data in a commonly used format
• Withdraw Consent: Opt out of marketing communications and non-essential data processing
• Object: Object to processing based on legitimate interests

How to Exercise Your Rights: Contact us at privacy@livingspacegreens.com or through your account settings. For data access requests, we'll provide your information within 30 days. For deletion requests, we'll delete eligible data within 30 days while preserving records required for legal compliance.

Verification: We may need to verify your identity before processing certain requests to protect your privacy and security.

7. Cookies

We use cookies for:

• Essential: Website functionality and security
• Analytics: Understanding website usage
• Marketing: Personalized advertising (with consent)

You can manage cookies through your browser settings.

8. International Transfers

Your information may be transferred to and processed in the United States, where our servers are located. We ensure appropriate safeguards are in place for international transfers.

9. Children's Privacy

Our services are not intended for children under 13. We do not knowingly collect personal information from children under 13.

10. Updates to This Policy

We may update this policy from time to time. Material changes will be communicated via email or a prominent notice on our website.

11. Contact Us

12. State-Specific Rights

California Residents (CCPA)

• Right to know what personal information we collect and how it's used
• Right to delete personal information
• Right to opt-out of the sale of personal information (we don't sell your information)
• Right to non-discrimination for exercising these rights

European Residents (GDPR)

• Right to access, rectify, or erase your personal data
• Right to restrict or object to data processing
• Right to data portability
• Right to lodge a complaint with your data protection authority