Privacy Policy

Introduction and Scope

This Privacy Policy describes the privacy practices of Al Zuni Heritage, including how we collect, process, disclose, retain, and safeguard personal information. It applies when you visit or purchase from our website, create an account, visit a physical retail location, communicate with customer service, enroll in a loyalty or marketing program, attend an event, or otherwise interact with us through an online or offline channel.

In this policy, "Al Zuni Heritage," "we," "us," and "our" refer to Al Zuni Heritage and its applicable affiliates. "Services" refers collectively to our websites, online store, physical retail operations, mobile experiences, customer support, marketing programs, events, and related services.

This policy does not govern independently operated websites, applications, or services that may be linked from our Services. Their privacy practices are governed by their own notices. If a separate notice is presented for a particular service or promotion, that notice may supplement this policy.

Information We Collect

We collect information directly from you, automatically through your use of the Services, from transactions in our retail channels, and from service providers or other lawful sources. The information collected depends on how you interact with us.

Personal Information You Provide

We may collect your name, email address, telephone number, billing address, shipping address, gift recipient details, account credentials, communication preferences, and information included in messages, reviews, surveys, appointment requests, or other submissions.

When you make a purchase, payment card and related financial information is generally collected and processed by our payment service providers. We may receive limited payment details, such as payment type, authorization status, billing address, and the last digits of a payment card. We do not intend to store complete payment card numbers unless expressly required and permitted for a specific service.

Point of Sale Data

At our physical retail locations, events, or other point of sale environments, we may collect purchase history, products viewed or purchased, transaction dates, order values, returns, exchanges, discounts, payment methods, receipts, associate notes, and loyalty or customer profile identifiers. We may connect this information with your online account or customer profile when you identify yourself.

eCommerce Data

When you use our online store, we may collect browsing activity, search terms, product views, cart activity, abandoned cart information, wishlist selections, saved items, account preferences, referral pages, promotion interactions, checkout activity, and order history. This information helps us operate the store, remember your preferences, and improve the shopping experience.

Customer Relationship Management Data

We may maintain customer profiles that include purchase history, preferences, communication history, consultation notes, support tickets, returns, repair or care inquiries, event participation, and responses to marketing. This allows us to provide consistent service across online, retail, telephone, email, and messaging channels.

Device and Technical Data

We and our service providers may automatically collect IP address, browser type, operating system, device identifiers, language, approximate region, network information, cookie identifiers, pages visited, referring URLs, interaction events, access times, and diagnostic data. We use cookies, pixels, software development kits, local storage, and similar technologies for these purposes.

Location Data

We may collect delivery and billing addresses, store locations selected or visited, and approximate location inferred from an IP address. With your permission, a website or mobile device may provide more precise geolocation to support location-based features. You can manage precise location permissions through your browser or device settings.

Information From Other Sources

We may receive information from payment processors, shipping carriers, fraud prevention providers, marketing partners, social platforms, analytics providers, public sources, and other service providers. We may combine such information with information already associated with you where permitted by law.

How We Use Your Information

Order Processing and Fulfillment

We use information to process payments, confirm orders, arrange shipment or pickup, deliver purchases, provide receipts, manage returns and exchanges, handle repairs, communicate order status, and fulfill other transaction-related requests.

Customer Service and Support

We use information to respond to questions, authenticate customers, provide product and care guidance, manage support tickets, resolve complaints, document communications, and maintain service quality across our retail and digital channels.

Marketing Communications

Subject to applicable law and your choices, we may use contact details and engagement information to send email, SMS or text messages, direct mail, push notifications, product updates, event invitations, and other promotional communications. Where required, we obtain consent before sending such messages.

Personalization and Recommendations

We may use purchase, browsing, wishlist, and preference information to tailor content, suggest products, remember selections, provide relevant offers, and create a more consistent experience across channels. You may be able to limit certain forms of personalization through cookie controls, account settings, or privacy requests.

Loyalty and Rewards Programs

If we offer a loyalty, rewards, clienteling, or membership program, we may use information to enroll members, track qualifying activity, calculate benefits, communicate program status, prevent misuse, and administer program terms.

Analytics and Business Improvement

We analyze information to understand demand, measure campaign performance, improve website usability, evaluate products and services, forecast inventory, train personnel, conduct research, and support strategic business decisions. Where practical, we may aggregate or de-identify information for these purposes.

Fraud Prevention, Security, and Legal Compliance

We use information to authenticate transactions, detect and prevent fraud, protect accounts and systems, enforce our terms, investigate suspicious activity, maintain records, comply with tax and accounting duties, respond to lawful requests, and establish or defend legal claims.

Legal Bases Where Applicable

Where data protection law requires a legal basis, we process information as necessary to perform a contract, comply with legal obligations, pursue legitimate interests that are not overridden by your rights, protect vital interests, or act with your consent. You may withdraw consent at any time, but withdrawal does not affect prior lawful processing.

SMS and Text Message Marketing

If you provide express consent to receive marketing text messages from Al Zuni Heritage, we may send recurring automated or non-automated promotional messages to the mobile number you provided. Consent to marketing texts is not a condition of purchasing any goods or services. Message frequency may vary based on your interactions, preferences, and active campaigns.

Message and data rates may apply. Mobile carriers are not liable for delayed or undelivered messages. You represent that you are the subscriber or customary user of the number provided and agree to notify us if the number changes or is reassigned.

We maintain consent and opt-out records as reasonably necessary to comply with the Telephone Consumer Protection Act, related Federal Communications Commission rules, and other applicable laws. Transactional messages concerning an order or service may be governed separately and will be sent only as permitted by law.

Email Marketing

We may send promotional email when you subscribe, when another lawful basis applies, or as otherwise permitted by applicable law. Marketing emails identify Al Zuni Heritage as the sender, include a valid business mailing address, and provide a clear unsubscribe mechanism in accordance with the CAN-SPAM Act and similar requirements.

You may unsubscribe by selecting the unsubscribe link included in a marketing email or by contacting [Contact Email]. We will process requests within the time required by law. Even after opting out of marketing, you may continue to receive non-promotional communications concerning orders, account security, policy updates, customer service, or other transactions.

Cookies and Tracking Technologies

We use cookies and similar technologies to operate the Services, recognize browsers or devices, remember preferences, measure performance, understand engagement, protect transactions, and support advertising. Cookies may be set by us or by third parties that provide services to us.

Types of Cookies

• Strictly necessary cookies: Support checkout, account access, security, fraud prevention, shopping carts, and core site functions.
• Preference cookies: Remember selections such as language, region, saved items, and display preferences.
• Analytics cookies: Help us understand traffic, navigation, interactions, errors, and the performance of our Services.
• Advertising cookies and pixels: Support campaign measurement, audience development, frequency controls, and more relevant advertising where permitted.

Third-Party Analytics and Advertising

Analytics providers may use cookies and device information to produce reports about how visitors use our Services. Advertising and social media partners may use pixels, tags, or similar technologies to measure campaigns and, where permitted, associate activity across websites or devices.

Your Cookie Choices

You may manage non-essential cookies through any cookie preference tool we make available and through your browser settings. Blocking cookies may affect functionality, including account access, cart persistence, and checkout. Browser privacy signals are handled as described in the California Privacy Rights section where legally required.

Third-Party Sharing and Service Providers

We may disclose personal information to vendors and service providers that perform services on our behalf. These parties may include:

• Payment processors, banks, financing providers, and fraud prevention services.
• Shipping carriers, fulfillment partners, address verification services, and logistics providers.
• Website hosting, cloud storage, cybersecurity, database, and technology providers.
• Customer relationship management, customer support, email, SMS, and marketing platforms.
• Analytics, advertising, social media, and campaign measurement providers.
• Professional advisers, including auditors, insurers, accountants, and legal counsel.

Service providers are authorized to process information only for contracted purposes and subject to appropriate obligations. We may also disclose information to comply with law, respond to valid legal process, protect rights and safety, investigate fraud, or enforce agreements.

If Al Zuni Heritage is involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction, information may be disclosed as part of due diligence and transferred as a business asset, subject to applicable law.

We may disclose information at your direction or with your consent. We may also disclose aggregated or de-identified information that cannot reasonably be used to identify you, and we will not attempt to re-identify such information except as permitted by law.

Data Retention and Deletion

We retain personal information for as long as reasonably necessary to fulfill the purposes described in this policy, provide requested services, maintain accurate business and transaction records, comply with legal and regulatory obligations, resolve disputes, prevent fraud, and enforce agreements.

Retention periods vary according to the type and sensitivity of information, the nature of our relationship, legal limitation periods, tax and accounting requirements, security needs, and whether information is required for an active account or unresolved request. When information is no longer required, we take reasonable steps to delete, destroy, or de-identify it.

Backup copies may remain for a limited period in protected systems before routine deletion. We may retain information necessary to document and honor an opt-out, suppression, or deletion request. Certain records may be exempt from deletion when retention is required or permitted by law.

Data Security Measures

Al Zuni Heritage uses administrative, technical, and physical safeguards designed to protect personal information against accidental or unlawful destruction, loss, alteration, disclosure, or access. Depending on the nature of the information and system, these measures may include encryption in transit, access controls, authentication, network protections, vendor review, employee training, monitoring, backups, and incident response procedures.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of account credentials and for notifying us promptly if you suspect unauthorized access. Do not send complete payment card details or other highly sensitive information through ordinary email or unsecured messages.

If we determine that a security incident requires notice under applicable law, we will provide notice using an appropriate method and within the legally required period.

Your Rights and Choices

Depending on where you reside and subject to legal exceptions, you may have the right to request:

• Access to or confirmation of personal information we process about you.
• Correction of inaccurate personal information.
• Deletion of personal information.
• A portable copy of certain personal information.
• Restriction of or objection to certain processing.
• Withdrawal of consent where processing relies on consent.
• Opt-out from certain targeted advertising, sale, sharing, or profiling activities.

You may also manage account details through your account, unsubscribe from email, reply STOP to marketing texts, adjust browser or device permissions, and use available cookie preference controls.

To submit a privacy request, contact [Privacy Request Email] or use [Privacy Request Form URL]. We may need to verify your identity by matching information you provide with our records or requesting additional documentation. We will use verification information only for the request. If we cannot verify a request, we may be unable to fulfill it.

An authorized agent may submit a request where permitted by law. We may require proof of authorization and may ask you to verify your identity directly. You have the right not to receive unlawful discriminatory treatment for exercising a privacy right. If we deny a request, you may have a right to appeal by contacting [Appeal Contact].

California Privacy Rights

This section supplements the rest of this policy for California residents and provides disclosures under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, collectively referred to as the CCPA.

Categories of Personal Information

During the preceding 12 months, we may have collected identifiers; customer records information; commercial information; internet or electronic network activity; approximate geolocation; audio, electronic, or visual information; professional information provided in communications; and inferences drawn from preferences or activity. Sources and business purposes are described in the Information We Collect and How We Use Your Information sections.

We may collect limited sensitive personal information, such as account credentials, precise location when specifically enabled, or payment-related information handled by payment providers. We use sensitive information only for permitted purposes, including providing requested goods or services, processing payments, maintaining security, and preventing fraud, unless we provide additional notice.

Disclosure, Sale, and Sharing

We may disclose the categories listed above to service providers, contractors, payment processors, carriers, analytics providers, marketing providers, professional advisers, government authorities, and transaction counterparties for the purposes described in this policy.

We do not sell personal information for money in the ordinary meaning of "sell." Certain uses of advertising cookies or pixels may be considered "selling" or "sharing" personal information for cross-context behavioral advertising under California law. Where applicable, you may opt out through [Cookie Preferences Link] or by contacting [Privacy Request Email].

California Consumer Rights

Subject to verification and exceptions, California residents may request to know the categories and specific pieces of personal information collected, the sources, purposes, and categories of recipients; request correction or deletion; receive portable information; opt out of sale or sharing; and limit certain uses of sensitive personal information where such a right applies.

We process recognized opt-out preference signals, such as Global Privacy Control, as required by applicable law. A signal generally applies to the browser or device from which it is sent. If you use multiple browsers or devices, you may need to communicate the preference separately for each.

Financial Incentives

If we offer a loyalty program, discount, or other financial incentive related to the collection or retention of personal information, we will provide material terms at enrollment, including how to withdraw. Any value assigned to information will be reasonably related to the value of the program or benefit provided, considering relevant expenses and program activity.

California Shine the Light

California Civil Code Section 1798.83 may permit California residents to request certain information concerning disclosures of personal information to third parties for their own direct marketing. Requests may be sent to [Contact Email] with "California Shine the Light Request" in the subject line.

Children's Privacy

Our Services are intended for a general audience and are not directed to children under 13. We do not knowingly collect personal information online from children under 13 without verifiable parental consent as required by the Children's Online Privacy Protection Act.

We also do not knowingly sell or share the personal information of consumers under 16 without legally required authorization. If you believe a child has provided personal information to us inappropriately, contact [Privacy Request Email]. We will review the matter and take reasonable steps to delete the information where required.

International Data Transfers

Al Zuni Heritage and its service providers may process personal information in the United States and other countries that may have privacy laws different from those in your jurisdiction. When legally required, we use safeguards designed to support lawful transfers, such as contractual protections, adequacy mechanisms, or other approved transfer methods.

Regardless of processing location, we handle personal information according to this policy and applicable law. You may contact [Data Protection Officer Email] to request additional information about applicable transfer safeguards.

Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, technologies, legal requirements, or Services. When we update it, we will revise the "Last updated" date. If changes are material, we may provide additional notice through the website, account communications, email, or another appropriate channel.

Unless otherwise stated, an updated policy becomes effective when posted. We encourage you to review this page periodically. Your continued use of the Services after an update is subject to the revised policy to the extent permitted by law.

Contact Information and Data Protection Officer

Questions about this Privacy Policy, our privacy practices, or a privacy request may be directed to Al Zuni Heritage using the information below.

• Company: Al Zuni Heritage
• Privacy email: [Contact Email]
• Data Protection Officer: [Data Protection Officer Name or Title]
• DPO email: [Data Protection Officer Email]
• Telephone: [Contact Phone]
• Mailing address: [Company Mailing Address]

Please include sufficient detail for us to understand your inquiry. For a privacy rights request, identify the right you wish to exercise and the jurisdiction in which you reside. Do not include complete payment card details, government identification numbers, account passwords, or other highly sensitive information in an ordinary email.

If you are located in a jurisdiction that permits complaints to a data protection authority, you may also contact the authority in your place of residence or work. We encourage you to contact us first so we can attempt to address your concern.