Privacy Policy

Effective Date: October 7, 2025

This Privacy Policy explains how Ateca Decoracion Store By Twentytwenty Finance Services LLC collects, uses, shares, and protects your personal information when you visit our website or purchase decorative ornaments and home décor items from us.

We value trust as much as craftsmanship. Your data is handled with care, used only for clear purposes, and never sold.

Data Controller

Ateca Decoracion Store
By Twentytwenty Finance Services LLC

2480 Sierra Bella Dr
Corona, CA 92882
United States

📧 [email protected]
☎️ (951) 340-9505

CA Entity File Number: 202016110499

1) Information We Collect

We collect only the information necessary to operate an online ornament and décor store effectively.

a) Identity & Contact Information

Full name
Shipping and billing address
Email address
Phone number

b) Order & Support Information

Products purchased and order numbers
Messages sent to customer support
Return, replacement, or damage claims
Photos or videos you voluntarily provide for issue resolution

c) Payment Information

Payments are processed securely by Stripe
We receive transaction status and confirmation only
We do not store full card numbers, CVV codes, or bank details

d) Technical & Usage Data

IP address
Browser and device type
Pages viewed and session activity
Cookies and similar tracking technologies

2) How We Use Your Information

We use your information only for legitimate business purposes, including:

Processing orders and delivering products safely
Handling returns, refunds, or replacements
Providing customer support and responding to inquiries
Processing payments and preventing fraud
Sending order confirmations and shipping updates
Improving website performance and usability through aggregated analytics
Sending marketing emails only if you explicitly opt in

We do not use your data for profiling or automated decision-making that affects your rights.

3) Consent

By placing an order, submitting a support request, or contacting us, you consent to the use of your information only for that specific purpose.

Marketing communications are strictly opt-in. You may withdraw consent at any time by:

clicking the Unsubscribe link in our emails, or
contacting [email protected]

4) When We Share Information

We do not sell or rent personal data.

We share information only with trusted parties when necessary:

Payment processors: Stripe (PCI DSS Level 1 compliant)
Shipping carriers: USPS, UPS, or similar services for delivery and tracking
Service providers: website hosting, email delivery, analytics, and IT support
Legal authorities: when required by law or to protect our legal rights

All service providers are contractually limited to using data solely for the intended purpose.

5) Data Retention

We retain data only as long as needed:

Order and transaction records: at least 7 years (tax and accounting compliance)
Customer support records: up to 24 months after last activity
Marketing data: until you unsubscribe
Inactive customer data: deleted or anonymized when no longer required

6) Data Security

Data transmission is protected using SSL/TLS encryption
Internal access is restricted and role-based
Payment data is handled exclusively by Stripe

While we use reasonable and industry-standard safeguards, no system can be guaranteed 100% secure.

7) Cookies & Similar Technologies

We use cookies to ensure basic site functionality and smooth checkout.

Common cookies include:

session_id – maintains your browsing session
cart – remembers items in your cart (typically stored for ~2 weeks)
login/storefront cookies – support secure access where applicable

You may disable cookies in your browser, but doing so may limit features such as cart and checkout.

8) Your Privacy Rights

You have the right to:

Access, update, or correct your personal information
Request deletion of your data
Withdraw marketing consent
Request a copy of the data we hold about you

California residents have additional rights under CCPA/CPRA, including the right to know, delete, and not be discriminated against for exercising privacy rights.

Requests can be sent to [email protected].
We may verify your identity before fulfilling a request.

9) International Data Transfers

Our operations are based in the United States. Your data may be stored or processed in the U.S. or by service providers with servers in other jurisdictions, where local laws may apply.

10) Links to Third-Party Sites

Our website may contain links to third-party websites. We are not responsible for their privacy practices. Once you leave our site, their policies apply.

11) Minimum Age Requirement

By using this site, you confirm that you are at least the age of majority in your state or have permission from a parent or legal guardian.

12) Changes to This Policy

We may update this Privacy Policy to reflect changes in law or business practices. Updates become effective when posted with a revised Effective Date. Material changes may be announced on the site or via email.

13) Contact Us

Questions about privacy or data protection?