Privacy Policy

Privacy Policy

This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit or use xaliworiaroth.com, browse our products, purchase furniture, or interact with our website services.

We are committed to handling personal information transparently and responsibly. This Policy describes the types of information we may process, the purposes for which we use that information, the circumstances in which we may share it, and the privacy choices and rights you may have under applicable laws.

1. Scope of This Privacy Policy

This Privacy Policy applies to personal information processing activities associated with your access to and use of xaliworiaroth.com, including browsing products, shopping for office furniture, living room furniture, and bedroom furniture, placing orders, making payments, arranging delivery within the United States, requesting returns or refunds, and contacting customer support.

Depending on the features actually offered by the website and the services you use, this Policy may also apply to information associated with account creation, if such functionality is available, and other interactions you have with the website.

This Policy applies to personal information that we or our authorized service providers may process in connection with these activities. It does not automatically apply to the independent information processing practices of third-party websites, payment services, delivery services, or other external services.

If a third party processes information under its own privacy policy, that policy may govern its independent processing activities. We encourage you to review the relevant privacy notices and terms of service before providing information directly to a third party.

This Policy does not exclude or restrict any rights or protections granted to you under applicable privacy laws. If the law imposes additional requirements or grants you additional rights, those requirements and rights will apply to the extent required by law.

2. Information We Collect

The categories of personal information we collect depend on how you interact with the website, the features available, the services you request, and the actual technical configuration of our systems.

2.1 Information You Voluntarily Provide

When you contact us, place an order, request assistance, or use other available website features, you may provide us with the following personal information:

Contact Information: Your name, email address, phone number, and any other contact details you choose to provide.

Billing and Delivery Information: Your billing address, shipping address, recipient information, and delivery instructions.

Order Information: Details of the furniture or other products you purchase, order numbers, order status, delivery-related information, and information relating to returns, refunds, or exchanges.

Customer Support Communications: Messages, questions, feedback, complaints, and other communications you submit when contacting us.

Account Information: Information associated with an account, if the website offers account registration or account-related features.

Please avoid providing unnecessary sensitive personal information in messages or other submissions.

2.2 Order and Payment Information

When you make a purchase, we may need to process relevant information to complete payment authorization, confirm transactions, manage orders, and process refunds where applicable.

Depending on the payment methods and services actually used, we may process payment status, transaction reference numbers, payment method details, billing information, and transaction-related information returned by payment service providers.

The payment information we actually receive and retain depends on the payment processing arrangements in place. We do not represent that we directly collect or store full payment card numbers, card security codes, or other complete payment credentials.

Payment service providers may independently collect and process information under their own privacy policies, applicable terms, and relevant laws.

2.3 Technical and Usage Information

When you visit the website, we may automatically collect certain technical or usage information, depending on the website configuration and the technologies actually used. This information may include:

Internet Protocol (IP) address;

Browser type and version;

Device type, operating system, and technical identifiers;

Dates and times of access;

Pages viewed, referring pages, or exit pages;

Website navigation and interaction records;

Technical information relating to website performance, errors, or security incidents.

The information actually collected depends on the systems we use, hosting arrangements, logging mechanisms, and other technical configurations. We do not represent that all of these categories of information are collected during every visit.

2.4 Cookies and Similar Technologies

Depending on the website's technical configuration and your choices, cookies and similar technologies may collect or store information relating to your browser, device, preferences, and interactions with the website.

These technologies may support essential website functions and, where actually implemented, may be used to remember preferences, analyze visits, or conduct marketing activities. For more information about the purposes, retention periods, and available controls for cookies, please see the section titled "Cookies and Similar Technologies" below.

2.5 Information from Service Providers and Other Sources

Where applicable, we may receive information from service providers involved in payment processing, order fulfillment, delivery, customer support, website operations, or security.

For example, relevant service providers may return transaction confirmations, delivery status updates, technical error information, or other information necessary to complete the services you request.

The information we actually receive depends on the services used and the scope of information the relevant providers are authorized to share with us.

2.6 Information We Do Not Actively Request

We do not actively request sensitive personal information unless it is genuinely necessary for a lawful and reasonable purpose associated with a particular interaction.

If sensitive personal information is processed, we will comply with applicable legal requirements and provide appropriate notices or obtain any required consent where necessary.

The categories of personal information processed may change as website features and service arrangements evolve. We will address significant changes in accordance with applicable legal requirements, including providing additional notices or obtaining consent when required by law.

3. Cookies and Similar Technologies

3.1 What Are Cookies?

Cookies are small text files that a website may store in your browser or on your device. Similar technologies may include local storage, pixels, tags, scripts, and other tools used to identify browsers or record website interactions.

These technologies may differ in how they operate, the types of information they collect, and how long that information is retained.

Our actual use of cookies and similar technologies depends on the website's technical configuration. The categories below describe potential uses and do not mean that we have implemented every category or related technology.

3.2 Types of Cookies

Strictly Necessary Cookies

Where used, these cookies support website operations or functions necessary to provide services you actively request. Depending on the features available, they may support security, page navigation, shopping cart functionality, checkout, or order processing.

Where applicable law permits strictly necessary cookies to operate without prior consent, we may use them in accordance with the relevant legal requirements. Their use must still comply with applicable law.

Preference Cookies

If these cookies are implemented, they may be used to remember your selected language, region, or other website settings to provide a more consistent experience when you return.

Analytics and Performance Cookies

If analytics technologies are implemented, they may help us understand website traffic, page performance, navigation patterns, and how users interact with website features. The relevant information may be used to evaluate website performance and identify opportunities for improvement.

Where required by law, these technologies will only be enabled after the necessary consent has been obtained.

Advertising and Marketing Cookies

If advertising or marketing technologies are actually used, they may be used to measure advertising effectiveness, understand interactions with promotional content, or support relevant advertising based on users' interests or browsing activities.

Depending on the technologies involved and applicable law, these activities may involve third-party service providers or the disclosure of certain identifiers and browsing information to them. For such activities, we will comply with applicable notice, consent, or opt-out requirements based on our actual processing practices and applicable law.

Unless the relevant technologies have been confirmed as deployed, we do not claim to use any specific analytics platform, advertising network, tracking pixel, or third-party cookie.

3.3 Cookie Retention Periods

Cookies may be classified as session cookies or persistent cookies.

Session cookies generally expire when you close your browser or when the relevant session ends. Persistent cookies remain for a specified period or until they are deleted.

The actual retention period of each cookie depends on its configuration and purpose. We do not establish a single retention period for all cookies.

3.4 Managing Cookie Preferences

You can manage or delete cookies through your browser settings. The available controls may vary by browser and device.

Where applicable law requires consent for non-essential cookies or similar technologies, an appropriate consent mechanism should be provided before the relevant technologies are enabled. Where required by law, you should also be able to adjust your preferences or withdraw consent through a reasonable and convenient mechanism.

We will not make consent to non-essential cookies a condition of accessing the website unless the relevant practice is legally permitted and adequately justified.

Disabling certain cookies may affect website functionality, including shopping cart features, checkout, preferences, or other functions that depend on those cookies.

Deleting cookies or adjusting your browser settings does not necessarily delete personal information already stored in website systems or by service providers. If you wish to exercise your rights to access, correct, or delete personal information under applicable law, you may submit a separate privacy rights request.

3.5 Cookie-Related Privacy Choices Under Applicable Law

Depending on the technologies actually used and applicable law, you may have the right to consent to, refuse, or opt out of certain data processing activities involving cookies, targeted advertising, or disclosures of personal information.

Where required by law, we will provide appropriate notices and choice mechanisms. The scope and availability of these choices depend on our actual data processing activities and applicable law.

4. How We Use Your Information

Where the relevant service involves the purpose in question and an appropriate legal basis exists, we may use personal information for the following purposes.

4.1 Order Processing and Fulfillment

We may use contact information, billing information, delivery information, and transaction information to:

Process and confirm purchase orders;

Manage order details and order status;

Coordinate payment processing and product delivery;

Send order-related notifications;

Handle returns, refunds, and related requests;

Maintain records necessary to manage transactions.

4.2 Customer Support

We may use your contact details and communications to respond to questions, investigate complaints, provide order-related assistance, resolve service issues, and follow up on requests you submit.

4.3 Website Operations and Improvement

Where relevant information is available and its use is lawful, we may use technical and usage information to maintain website functionality, troubleshoot errors, improve navigation, evaluate product presentation, and enhance the shopping experience.

Analytics or similar data processing will depend on the technologies actually implemented and any applicable consent or other legal requirements.

4.4 Security, Fraud Prevention, and Dispute Resolution

We may process relevant information to protect website security, investigate suspicious transactions, identify potential fraud or misuse, address technical or security incidents, resolve disputes, and protect our legitimate interests and those of other relevant parties.

Such processing should be proportionate to its purpose and comply with applicable law.

4.5 Legal and Regulatory Obligations

Where necessary, we may use or retain relevant information to comply with applicable laws, respond to lawful requests, maintain legally required transaction records, resolve disputes, establish or defend legal claims, or cooperate with relevant authorities to the extent permitted or required by law.

4.6 Marketing and Promotional Communications

Where permitted by law and supported by an appropriate legal basis, we may use relevant contact information to send promotional communications or provide information about products and services.

Where consent is required by law, we will obtain the necessary consent before conducting the relevant activities.

You may choose to stop receiving marketing emails through an available unsubscribe mechanism or by contacting us. Opting out of promotional communications will not affect necessary transactional notifications or service-related messages.

4.7 Cookies, Analytics, and Advertising

If the relevant technologies are actually used, we may process information to remember your preferences, understand website usage, measure website performance, or support advertising and marketing activities.

The specific purposes, data categories, recipients, and available choices will depend on the technologies actually deployed and applicable legal requirements.

5. How We Share Your Information

We may disclose personal information to third parties where necessary to achieve the purposes described in this Policy, where a service you request involves a third party, or where disclosure is permitted or required by law.

The following categories describe recipients that may be involved in common e-commerce operations. They do not mean that we currently have relationships with service providers in every category.

5.1 Payment Service Providers

Where applicable, payment service providers may receive information necessary to authorize, process, verify, or refund payments. The information actually shared depends on the payment method and the requirements of the service provider.

5.2 Delivery and Logistics Service Providers

Where applicable, delivery and logistics service providers may receive the recipient's name, shipping address, phone number, order reference information, delivery instructions, and other information reasonably necessary to fulfill orders and complete delivery.

5.3 Website Hosting, Technical Support, and Security Service Providers

If external service providers supply website infrastructure, maintenance, technical operations, or security support, they may process necessary technical information or personal information to perform the relevant services.

5.4 Customer Service and Order Management Service Providers

If we use external tools or service providers to manage customer inquiries, orders, returns, refunds, or related communications, we may share information necessary to provide that support.

5.5 Analytics and Marketing Service Providers

If analytics or marketing services are actually deployed, we may disclose certain usage information, identifiers, contact information, or other relevant data to the applicable service providers, depending on the service configuration.

If such disclosures constitute the sale or sharing of personal information, targeted advertising, or another regulated activity under applicable law, we will comply with the relevant notice, consent, or opt-out requirements based on the actual circumstances.

5.6 Legal, Regulatory, and Security-Related Disclosures

We may disclose information to courts, regulatory bodies, law enforcement agencies, or other relevant parties where required or authorized by law, or where reasonably necessary to establish or defend legal claims, protect legitimate interests, or address security issues.

5.7 Other Disclosures

If new business arrangements or operational changes require personal information to be disclosed for additional purposes, we will provide any notices or obtain any consent required by applicable law before carrying out the relevant processing.

5.8 Limitations on Information Sharing

We do not treat a commercial relationship with a service provider as authorization to disclose all personal information. Disclosures should be limited to the scope reasonably relevant to the applicable purpose and, where required by law, subject to appropriate contractual, operational, or legal restrictions.

We do not broadly claim that personal information is never shared with third parties, nor do we unconditionally claim that all transfers of information to third parties fall outside the legal definitions of "sale" or "sharing."

Whether an activity constitutes a sale, sharing, or targeted advertising depends on the actual data processing practices, the roles of the parties involved, and applicable law.

6. Data Storage, Retention, and Security

6.1 Where Personal Information Is Stored

Depending on our actual technical arrangements, personal information may be stored or processed in systems we operate or in systems operated by service providers authorized to support the website and related services.

The locations of these systems and whether international transfers occur depend on the infrastructure and service providers actually used. We do not assume that all personal information is stored in any particular country.

If international data transfers occur and applicable law requires additional safeguards, those transfers should rely on an appropriate lawful mechanism and include the safeguards required by law in the specific circumstances.

6.2 Personal Information Retention Periods

We retain personal information only for as long as reasonably necessary to fulfill the purposes for which it was collected, while complying with applicable legal requirements and other legitimate needs.

Retention periods may depend on the following factors:

The type and sensitivity of the information;

The purpose of processing;

The status of an order or customer support request;

Applicable accounting, tax, consumer protection, or other recordkeeping requirements;

The need to resolve disputes or establish or defend legal claims;

Applicable data protection requirements.

Different categories of information may therefore have different retention periods. We do not establish a single fixed retention period for all personal information.

When information is no longer reasonably necessary to retain and no statutory retention requirement or other valid legal basis applies, we should delete the information, anonymize it, or otherwise handle it appropriately in accordance with applicable law and our actual data retention procedures.

6.3 Cookie Retention Periods

Cookie retention periods are separate from the retention periods for personal information stored on servers.

Session cookies generally expire when the browsing session ends. Persistent cookies remain for a specified period according to their actual configuration or until they are deleted.

The validity period of each cookie depends on its purpose, technical settings, and applicable legal requirements. The expiration of a cookie does not mean that related records already stored in other systems will automatically be deleted.

6.4 Information Security

We recognize the importance of protecting personal information against unauthorized access, disclosure, alteration, loss, or misuse.

Depending on the systems and services involved, we should implement reasonable technical and organizational measures appropriate to the nature of the information and the risks associated with its processing.

The specific measures actually used depend on the real technical environment and operational arrangements. Unless the relevant facts have been confirmed, this Policy does not represent that we have implemented any particular security certification, encryption method, audit, or security system.

No method of transmitting or storing information can guarantee absolute security. Accordingly, we cannot promise that personal information will never be affected by security risks.

If a security incident involving personal information occurs, we will address applicable notification obligations and remedial measures in accordance with the law.

7. Your Privacy Rights and Choices

The privacy rights available to you depend on your place of residence, the nature of the relevant information, the specific data processing activities, and the laws applicable to those activities.

Depending on the circumstances, you may have some or all of the following rights.

7.1 Right to Know and Access

You may have the right to request access to personal information we hold about you and to learn how that information is collected, used, disclosed, or otherwise processed.

Where required by law, this may include information about the categories of personal information collected, the purposes of processing, the categories of recipients, and relevant information about disclosures or other regulated data processing activities.

7.2 Right to Correct

You may request the correction of inaccurate personal information or the updating of incomplete information, subject to applicable legal requirements and the nature of the information concerned.

7.3 Right to Delete

Where applicable law grants this right, you may request the deletion of your personal information.

However, deletion requests may be subject to legally permitted exceptions, such as when information must be retained to complete transactions, provide requested services, maintain legally required records, resolve disputes, detect security incidents, prevent fraud, or establish or defend legal claims.

If certain information cannot legally be deleted, we will handle the request in accordance with applicable law.

7.4 Right to Data Portability

Where applicable law grants this right, you may request a copy of certain personal information in a portable format or, where the relevant legal and technical conditions are satisfied, request that the information be transferred to another recipient.

7.5 Right to Withdraw Consent

If we conduct a data processing activity based on your consent, you may withdraw that consent where permitted by applicable law.

Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal. It also does not necessarily require the deletion of information processed under another valid legal basis or information that must be retained by law.

If the use of non-essential cookies or similar technologies is based on consent, the relevant consent mechanism should allow you to adjust your preferences or withdraw consent where required by law.

7.6 Right to Opt Out of Certain Data Processing Activities

Depending on applicable law and our actual data processing practices, you may have the right to opt out of:

The sale of personal information as defined by applicable law;

The sharing of personal information for cross-context behavioral advertising;

Targeted advertising;

Certain profiling activities that produce legal or similarly significant effects;

Other data processing activities for which applicable law grants an opt-out right.

These rights do not necessarily apply to every disclosure or processing activity. Their scope depends on the relevant legal definitions, statutory exemptions, and actual data processing practices.

Where an opt-out mechanism is required by law, we should provide it in an appropriate and accessible manner. We will not determine whether an activity constitutes a sale or sharing without assessing the actual processing practices and applicable legal definitions, and we will not claim that no sale or sharing occurs without an adequate basis.

7.7 Sensitive Personal Information

If applicable law grants you the right to limit certain uses or disclosures of sensitive personal information, you may exercise that right to the extent the relevant processing activity is subject to that law.

Whether this right applies depends on the categories of information involved, the purposes of processing, and any applicable statutory exceptions.

7.8 Right to Object to Processing or Request Review

Where provided by applicable law, you may object to certain personal information processing activities or request a review of certain decisions made through automated processing or profiling.

Whether these rights apply depends on the specific processing activities and the conditions established by the relevant laws.

7.9 Right to Non-Discrimination

To the extent protected by applicable law, you have the right not to be unlawfully discriminated against for exercising your privacy rights.

This does not prevent service differences permitted by law, such as differences reasonably related to the value of data where legally permitted or otherwise authorized under applicable law.

7.10 How to Submit a Privacy Rights Request

You may submit a privacy rights request by emailing client@xaliworiaroth.com. Please describe your request and provide sufficient information for us to understand and process it.

To protect your personal information, we may take reasonable steps to verify your identity before disclosing, correcting, or deleting personal information. The verification method will depend on the nature of the request and the information involved.

Where permitted or required by law, we may ask you to provide additional information reasonably necessary to verify your identity or authorization. Please do not send full payment card numbers, security codes, passwords, or other unnecessary sensitive information when submitting a request.

We will respond within the time limits established by applicable law. Where permitted by law, if we cannot fully satisfy your request, we may explain the relevant reasons, including applicable legal exceptions or recordkeeping obligations.

If we cannot fully satisfy a deletion request, we will handle the remaining information in accordance with applicable law rather than assuming that all records must be deleted.

7.11 Authorized Agents and Appeals

Certain privacy laws allow you to authorize an agent to submit a request on your behalf. Where applicable law requires an authorized agent procedure, we will comply with the relevant requirements, which may include verifying your identity, confirming the agent's authorization, or requesting additional documentation.

Certain laws also grant you the right to appeal decisions concerning the handling of privacy requests. If an appeal procedure is required by law, we will provide the applicable instructions and submission method in accordance with the relevant legal requirements.

Whether authorized agent procedures, appeal processes, or specific opt-out mechanisms apply depends on the legal requirements relevant to the request and the actual data processing activities.

7.12 Marketing Preferences

You may choose to stop receiving promotional emails through an available unsubscribe mechanism or by emailing client@xaliworiaroth.com.

Even if you opt out of marketing communications, we may continue to send messages reasonably necessary to manage orders, respond to requests, provide important service information, or comply with applicable legal obligations.

8. Legal Basis for Processing and Applicable Privacy Laws

8.1 Applicable U.S. Privacy Laws

Our processing of personal information is subject to the federal, state, and other laws that apply to the relevant activities, individuals, information being processed, and specific transaction circumstances.

Depending on our actual business operations and the applicable legal requirements, relevant laws may include:

The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), where the applicable requirements are satisfied;

Other state privacy laws applicable to the relevant consumers, data processing activities, and covered entities or businesses;

Federal and state consumer protection laws;

Laws relating to data security, electronic communications, and marketing activities;

Other privacy and data protection laws applicable to specific transactions or data processing activities.

Whether a particular law applies may depend on statutory thresholds, the nature and volume of personal information processed, relevant business activities, and applicable statutory exemptions.

We do not represent that all U.S. privacy laws apply to every activity described in this Policy, nor does publishing this Policy alone establish compliance with all legal requirements.

If applicable law requires additional notices, consent, or opt-out mechanisms, we will comply with those requirements in connection with the relevant data processing activities.

8.2 California Privacy Rights

If the CCPA, as amended by the CPRA, applies to our relevant activities and your personal information, you may have the following rights, subject to applicable legal conditions and exceptions:

The right to know about and access specific personal information and information about how it is processed;

The right to request correction of inaccurate personal information;

The right to request deletion of personal information;

The right, where applicable, to obtain certain personal information in a portable format;

The right, where the relevant activity occurs and the applicable legal right applies, to opt out of the sale or sharing of personal information;

The right, where applicable, to limit certain uses and disclosures of sensitive personal information;

The right not to be unlawfully discriminated against for exercising privacy rights.

The CCPA establishes specific legal definitions for "sale," "sharing," "sensitive personal information," and other regulated activities. Depending on the circumstances, certain disclosures may be subject to these requirements even when no money is exchanged. Conversely, not every disclosure of information to a service provider constitutes a sale or sharing.

The rights actually available to you and any applicable exceptions depend on the specific data processing activities and applicable law. You may submit a relevant request using the contact information provided in the "Contact Us" section.

8.3 Other State Privacy Laws

Residents of other U.S. states may have additional or different rights under applicable state privacy laws. Depending on the relevant laws and circumstances, these rights may include access to, correction of, deletion of, or obtaining personal information; opting out of targeted advertising or certain profiling activities; and appealing decisions concerning privacy requests.

Applicable rights, response deadlines, identity verification requirements, and exceptions vary by jurisdiction. We will handle requests in accordance with the laws applicable to the relevant individuals and data processing activities.

8.4 International Data Transfers

If personal information is transferred across borders and applicable law imposes specific requirements on the transfer, the transfer must rely on an appropriate legal mechanism and include the necessary safeguards.

Depending on the circumstances, these safeguards may include applicable adequacy decisions, standard contractual clauses, or other legally recognized data transfer mechanisms.

The mechanism that applies depends on the transfer destination, the parties involved, the data being transferred, and applicable legal requirements. This Policy does not represent that we currently use any particular international data transfer mechanism.

9. Third-Party Services

Depending on the services actually used, our website may rely on external services to support payment processing, delivery, website hosting, technical operations, customer support, analytics, or marketing.

Third-party services may directly collect or process personal information or receive information necessary to provide the requested services. Their handling of information may be governed by their own privacy policies, terms of service, and legal obligations.

We do not represent that we have independently verified the security measures, privacy commitments, certifications, or legal compliance of every third-party service provider.

When you follow a link to an external website or use a third-party service, we encourage you to review its privacy policy and applicable terms before providing personal information.

The presence of a third-party service on the website does not mean that every category of information described in this Policy is shared with that service. Any disclosure should be assessed based on the actual service arrangements, the information involved, and applicable law.

10. Changes to This Privacy Policy

We may update this Privacy Policy in response to changes in website features, operational practices, service arrangements, technology, or applicable legal requirements.

Once published, an updated Policy will replace the previous version from the effective date stated in the Policy or from another date specified in the notice.

If applicable law requires additional notice of material changes or renewed consent before implementing changes that require consent, we will follow the relevant legal requirements.

We will not treat publication of an updated Privacy Policy as a substitute for any other notices, consent, or procedures required by law.

We encourage you to review this page periodically to stay informed about how your personal information may be processed.

11. Contact Us

If you have any questions about this Privacy Policy, would like further information about how your personal information is processed, or wish to submit a privacy rights request concerning access to, correction of, or deletion of personal information, consent, or cookies, please contact us using the information below.

Email: client@xaliworiaroth.com

Phone: +1 (341) 821-3746

Mailing Address: 2555 International Blvd #232, Oakland, CA 94601, United States

Customer Support Hours: Monday through Friday, 9:00 AM to 6:00 PM Pacific Time (America/Los_Angeles).