Privacy policy

Effective date: March 2026
Last updated: March 2026

This Privacy Policy describes how Demurae LLC ("we," "us," or "our") collects, uses, and shares your personal information when you visit or make a purchase from demurae.com (the "Site"). By using our Site, you agree to the collection and use of information in accordance with this policy.

For written requests: Demurae LLC, [address available upon request via contact@demurae.com].

Information We Collect

Information you provide directly:

  • Order information: Name, email address, shipping address, billing address, phone number, and payment information when you make a purchase.
  • Account information: Email address and name if you create an account or subscribe to our communications.
  • Communications: Any information you provide when you contact us via email, social media, or other channels.

Information collected automatically:

  • Device information: Browser type, operating system, IP address, and device identifiers.
  • Usage information: Pages viewed, time spent on pages, referring URLs, and browsing actions on our Site.
  • Location information: General geographic location based on your IP address.

How We Use Your Information

We use the information we collect to:

  • Process and fulfill your orders, including shipping and payment processing
  • Communicate with you about your order, including confirmations, updates, and tracking
  • Provide customer support
  • Send marketing communications (only with your consent -- you can opt out at any time)
  • Improve our Site, products, and services
  • Measure the effectiveness of our advertising campaigns
  • Prevent fraud and maintain security
  • Comply with legal obligations

Cookies, Tracking Pixels, and Analytics

We use cookies, tracking pixels, and similar technologies to operate our Site and measure advertising performance. Specifically, we use the following:

  • Meta Pixel (Facebook Pixel): Collects data about your interactions with our Site, including pages viewed, items added to cart, and purchases completed. This data is sent to Meta (Facebook/Instagram) to measure ad performance and deliver targeted advertising. Meta may combine this data with information from your Meta accounts and other websites.
  • Meta Conversions API (CAPI): A server-side connection that sends purchase and conversion events directly to Meta. This supplements the Meta Pixel and may include your name, email address, phone number, and IP address in hashed form.
  • Google Analytics: Collects anonymized data about Site usage, including pages viewed, session duration, traffic sources, and device information. This data is retained for 26 months. See Google's Privacy Policy.
  • Shopify cookies: Essential cookies for cart functionality, checkout, and Site operation.

You can control cookies through your browser settings. Disabling cookies may affect the functionality of our Site. To opt out of interest-based advertising, visit aboutads.info/choices or networkadvertising.org/choices.

Third-Party Services

We share your information with the following types of third-party services:

  • Shopify: Our e-commerce platform, which processes your order and payment data. See Shopify's Privacy Policy.
  • Payment processors: To securely process your payment. We do not store your full credit card information.
  • Shipping carriers: To deliver your order (name, address, and phone number shared for delivery purposes).
  • Google Analytics: To help us understand Site usage and improve our services. See Google's Privacy Policy.
  • Meta (Facebook/Instagram): To deliver and measure advertising campaigns via the Meta Pixel and Conversions API. See Meta's Privacy Policy.
  • Email marketing provider: To send you communications you have opted into.

Data Retention

We retain your personal information for the following periods:

  • Order records (name, address, purchase history, payment records): 7 years from the date of purchase, for accounting, tax, and legal compliance purposes.
  • Marketing data (email address, marketing preferences): Until you unsubscribe or request deletion.
  • Analytics data (Site usage, browsing behavior): 26 months (Google Analytics default retention).
  • Customer support communications: 3 years from the date of the last communication.

After the applicable retention period, data is deleted or anonymized. If deletion of specific data is required by law before the retention period expires, we will comply.

Your Rights

Depending on your location, you may have the following rights regarding your personal information:

  • Access: Request a copy of the personal information we hold about you.
  • Correction: Request that we correct inaccurate or incomplete information.
  • Deletion: Request that we delete your personal information, subject to legal obligations.
  • Opt-out: Unsubscribe from marketing communications at any time using the link in our emails.
  • Data portability: Request your data in a portable format.

To exercise any of these rights, contact us at contact@demurae.com. We will respond within 30 days.

California Residents (CCPA / CPRA)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).

Categories of personal information we collect:

  • Identifiers: Name, email address, shipping/billing address, phone number, IP address.
  • Commercial information: Purchase history, order details, products viewed.
  • Internet or electronic network activity: Browsing history on our Site, pages viewed, interactions with ads, device and browser information.
  • Geolocation data: Approximate location based on IP address.

Sources: We collect personal information directly from you (when you place an order or contact us), automatically through cookies and tracking technologies, and from third-party advertising platforms.

Business purposes for collection: Order fulfillment, customer service, marketing, advertising measurement, fraud prevention, and legal compliance.

Third parties we share data with: Shopify (e-commerce platform), payment processors, shipping carriers, Google (analytics), and Meta (advertising).

Sharing for behavioral advertising: We share identifiers and internet activity data with Meta and Google for the purpose of targeted advertising. Under the CCPA/CPRA, this may be considered "sharing" of personal information for cross-context behavioral advertising.

Your California rights:

  • Right to know: Request what personal information we have collected, the sources, the purposes, and the third parties we share it with.
  • Right to delete: Request deletion of your personal information, subject to exceptions.
  • Right to correct: Request correction of inaccurate personal information.
  • Right to opt out of sharing: Direct us to stop sharing your personal information for behavioral advertising. See the "Do Not Sell or Share" section below.
  • Right to non-discrimination: We will not discriminate against you for exercising your privacy rights.

To make a CCPA request, contact us at contact@demurae.com. We will verify your identity and respond within 45 days.

Do Not Sell or Share My Personal Information

We do not sell your personal information for monetary consideration. However, our use of tracking pixels (Meta Pixel, Google Analytics) for targeted advertising may constitute "sharing" under the CCPA/CPRA.

To opt out of the sharing of your personal information for behavioral advertising purposes, you may:

International Visitors (GDPR Notice)

Our products and services are available only within the United States. We do not intentionally collect personal data from individuals in the European Economic Area (EEA), United Kingdom, or Switzerland. If you are located outside the United States and choose to provide information to us, you acknowledge that your data will be transferred to and processed in the United States. If you are an EEA, UK, or Swiss resident and believe we have collected your personal data, contact us at contact@demurae.com to request access, correction, or deletion.

Children's Privacy

Our Site is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

Security

We use industry-standard security measures to protect your personal information, including SSL encryption for all data transmitted through our Site. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.

Contact Us

If you have questions about this Privacy Policy or your personal information, contact us at:

For our full terms governing Site use and purchases, see our Terms of Service.