Privacy policy

Privacy Policy – STOA HOME DESIGN

At STOA HOME DESIGN, your privacy comes first. We handle your information responsibly and transparently, ensuring that you always have full control over your personal data.

This policy explains how we collect, use, store, and protect your personal information. It applies to customers in the United States and the United Kingdom, and is designed to comply with applicable privacy laws in both markets, including the California Consumer Privacy Act (CCPA), other applicable U.S. state privacy laws, the UK General Data Protection Regulation (UK GDPR), and the Data Protection Act 2018.

Where a section applies only to one market, this is noted below.

🏢 Who We Are

STOA HOME DESIGN operates the website, online store, and all related digital services, serving customers in Brazil, the United States, and the United Kingdom. Our platform uses Shopify technology to ensure a secure, smooth, and personalized shopping experience.

For UK customers, STOA HOME DESIGN acts as the "data controller" of your personal information for the purposes of UK data protection law.

📦 Information We Collect

We only collect what's necessary to provide you with the best experience:

  • Contact information: name, email, phone number, shipping and billing addresses.
  • Payment details: card information, payment confirmations, and transaction records.
  • Account data: login, password, preferences, and saved items.
  • Purchase & browsing history: items viewed, added to cart, purchased, or returned.
  • Device information: IP address, browser type, operating system, and site interactions.
  • Communications: messages exchanged via email, chat, or customer support.

📥 How We Collect Information

  • Directly from you: when you create an account, make a purchase, or contact us.
  • Automatically: through cookies and similar technologies.
  • From trusted partners: such as payment processors, shipping carriers, and marketing platforms.

⚖️ Our Legal Basis for Processing (UK Customers)

If you are located in the UK, we only process your personal data where we have a valid legal basis to do so, which may include:

  • Performance of a contract — to process your order, deliver your products, and provide customer support.
  • Legitimate interests — to improve our website, prevent fraud, and operate our business, provided this does not override your rights.
  • Consent — for marketing communications, which you can withdraw at any time.
  • Legal obligation — where we must retain or disclose data to comply with the law.

💌 Marketing & Advertising

We may use your data to personalize your experience, send offers, and show relevant ads (e.g., via Google, Meta, or Pinterest). You can unsubscribe at any time through the links in our emails or by contacting us at hello@stoahomedesign.com.

  • U.S. customers: We do not sell personal information, in compliance with the CCPA.
  • UK customers: Marketing emails are only sent with your consent or where permitted under the "soft opt-in" rules for existing customers, and you can withdraw consent at any time.

🤝 Information Sharing

We only share data with essential service providers:

  • Shopify – store hosting and e-commerce operations.
  • Payment providers – such as PayPal, Stripe, and Shop Pay.
  • Shipping carriers – to fulfill deliveries to Brazil, the United States, and the United Kingdom.
  • Marketing and analytics partners – to improve our communication and ads.
  • Legal authorities – when required by law.

Your data is never sold, rented, or shared for unrelated commercial purposes. Where required under UK GDPR, we ensure any third party processing your data does so under a written data processing agreement.

🔒 Data Security

We use multiple layers of protection to safeguard your information:

  • SSL encryption for all online transactions.
  • Secure storage with limited access.
  • Anti-fraud and intrusion detection systems.

⚠️ Please note: No online system is 100% secure. Never share sensitive data through unofficial channels.

⏳ Data Retention

We retain data only for as long as necessary to provide our services or comply with legal obligations:

  • Purchase records: up to 5 years, as required for accounting, tax, and warranty purposes.
  • Account information: while your account remains active.
  • Marketing data: until you withdraw consent.
  • Cookies and browsing data: according to your browser settings.

After these periods, your data is securely deleted or anonymized.

🧭 Your Privacy Rights (United States)

Depending on your state of residence, you may have the right to:

  • Access your personal data.
  • Request correction of inaccurate information.
  • Request deletion of your data.
  • Receive a copy or request data portability.
  • Opt out of the sale or sharing of personal information.
  • Withdraw consent for marketing communications.
  • Not be discriminated against for exercising your privacy rights.

📩 To exercise any of these rights, please contact us at hello@stoahomedesign.com. We may verify your identity to protect your privacy and prevent unauthorized access.

🧭 Your Privacy Rights (United Kingdom)

If you are located in the UK, under the UK GDPR you have the right to:

  • Access the personal data we hold about you.
  • Rectify inaccurate or incomplete data.
  • Erasure ("right to be forgotten"), in certain circumstances.
  • Restrict how we process your data.
  • Data portability — receive your data in a structured, commonly used format.
  • Object to processing based on legitimate interests or for direct marketing.
  • Withdraw consent at any time, where processing is based on consent.
  • Lodge a complaint with the UK's data protection authority, the Information Commissioner's Office (ICO), at ico.org.uk, if you believe your data has been mishandled.

📩 To exercise any of these rights, please contact us at hello@stoahomedesign.com. We aim to respond to all requests within the timeframes required by applicable law and may verify your identity to protect your privacy.

👶 Children's Privacy

Our website and services are not directed to individuals under 16 years old (or under 13 for UK customers, in line with applicable data protection law). If we become aware that we have collected personal data from a minor without appropriate consent, we will delete it promptly.

🌎 International Data Transfers

Because we operate across Brazil, the United States, and the United Kingdom, and use Shopify and other global partners, your information may be processed in countries outside your own, including the United States, Canada, Brazil, or other jurisdictions.

For UK customers, where we transfer your data outside the UK, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement (IDTA), UK-approved Standard Contractual Clauses, or transfers to countries recognized as providing an adequate level of data protection.

🔄 Policy Updates

We may update this Privacy Policy periodically. The latest version will always be available on our website, with the date of the most recent revision indicated below.

📬 Contact

If you have any questions or requests related to privacy or data handling, please contact:

Email: hello@stoahomedesign.com

Last updated: 08/19/2026