Summary: We collect the minimum information needed to ship your order and improve our website. We never sell your personal information. You can request a copy of your data or have it deleted at any time by emailing [email protected].
1. Who we are
This Privacy Policy explains how CEENR ("CEENR," "we," "us," or "our") collects, uses, discloses, and protects information about you when you visit ceenr.com (the "Site") or purchase our products. CEENR operates out of the United States and ships from a US warehouse.
2. Information we collect
2.1 Information you provide to us
- Order information: name, shipping address, billing address, email address, phone number, and purchase history.
- Payment information: processed by our PCI-compliant payment processor (Shopify Payments / Stripe). We do not store full credit card numbers on our servers.
- Customer support: any information you share in emails, return requests, or warranty claims.
- Marketing preferences: if you subscribe to our newsletter, your email address and engagement data.
2.2 Information collected automatically
- Device & browser: IP address, user agent, operating system, screen size, referrer URL, time zone.
- Usage: pages viewed, links clicked, time on page, and approximate location (country/region).
- Cookies & similar: see Section 8 below for details.
2.3 Information from third parties
Shipping carriers (USPS, UPS, FedEx) share delivery status. Payment processors share authorization results. If you sign in via Google or Apple, we receive your name and email.
3. How we use your information
- Process and fulfill your orders, including shipping, returns, and warranty claims.
- Communicate with you about your order, customer support, and (with your consent) marketing.
- Improve our website, products, and customer experience.
- Detect, prevent, and address fraud or abuse.
- Comply with legal obligations (tax reporting, dispute resolution).
4. How we share your information
We do not sell your personal information. We share it only with:
- Service providers who help us run the business: Shopify (e-commerce), Stripe / Shopify Payments (payments), Cloudflare (hosting, security), Supabase (database), Klaviyo (email), shipping carriers, and analytics providers.
- Legal compliance: when required by law, court order, or government request, or to protect our rights or the safety of others.
- Business transfers: in the event of a merger, acquisition, or sale of assets, your information may transfer to the new owner. We will notify you of any such change.
5. Your privacy rights
5.1 All US residents
You can email [email protected] to:
- Request a copy of the personal information we hold about you.
- Correct inaccurate information.
- Delete your personal information (subject to legal retention requirements).
- Unsubscribe from marketing emails (also via the "unsubscribe" link in every email).
5.2 California residents (CCPA / CPRA)
California residents have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act:
- Right to know what categories of personal information we collect, the purposes for which we use it, and the categories of third parties with whom we share it.
- Right to delete personal information we have collected from you (with limited exceptions).
- Right to correct inaccurate personal information.
- Right to opt out of the "sale" or "sharing" of personal information. We do not sell personal information.
- Right to limit use of sensitive personal information.
- Right to non-discrimination for exercising these rights.
To exercise CCPA rights, email [email protected] with subject "CCPA request." We will verify your identity by confirming a recent order or other identifying details, then respond within 45 days.
5.3 Other US states
Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), Oregon (OCPA), Montana (MCDPA), and other states with comprehensive privacy laws have rights similar to those listed above. Submit requests via the same email address.
6. Data retention
We retain order records for 7 years for tax, accounting, and warranty purposes. Marketing data is retained until you unsubscribe. Inactive customer accounts may be archived after 3 years of inactivity.
7. Data security
We use industry-standard technical and organizational measures: TLS encryption in transit, encrypted storage at rest, access controls, regular security reviews, and PCI-DSS-compliant payment processing. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.
8. Cookies and tracking
We use cookies and similar technologies for essential site functionality, basic analytics, and (with your consent) marketing. Cookie categories:
| Category | Purpose | Opt out |
|---|---|---|
| Essential | Cart, checkout, login, security | Not optional — site won't work |
| Analytics | Anonymized usage stats (Cloudflare Web Analytics, GA4) | Browser "Do Not Track" + ad blockers |
| Marketing | Klaviyo email engagement, retargeting (if enabled) | Email unsubscribe + browser controls |
9. Children's privacy
The Site is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, email [email protected] and we will delete it.
10. International users
The Site is operated from the United States. By using the Site or placing an order, you consent to your information being processed in the US. If you are located outside the US, your information may be subject to less protective laws than those in your home jurisdiction.
11. Changes to this Policy
We may update this Policy from time to time. When we do, we will update the "Effective" date at the top. Material changes will be communicated by email to customers or a notice on the Site.
12. Contact
CEENR
Email: [email protected] (privacy) · [email protected] (general)
This Privacy Policy is provided as a starting template. CEENR recommends consultation with a licensed attorney before final publication, especially regarding state-specific requirements and any planned data-sharing arrangements.