Privacy Policy
Updated: August 1, 2026
Demurae ("we," "us," or "our") operates the website demurae.com (the "Site"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our Site or make a purchase.
By using our Site, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Site.
1. Information We Collect
Information You Provide Directly
When you place an order, create an account, opt in to marketing communications, or contact us, we may collect:
- Name
- Email address
- Shipping and billing address
- Phone number (if provided)
- Payment information (processed securely by our payment provider - we do not store full credit card numbers)
- Order history and transaction details
- Communications you send to us (emails, support requests)
Information Collected Automatically
When you visit our Site, we automatically collect certain information through cookies, pixels, and similar technologies:
- IP address
- Browser type and version
- Device type and operating system
- Pages visited, time spent on pages, and navigation paths
- Referring website or source
- Click behavior and interactions with our Site
- Location data (general, based on IP address)
2. How We Use Your Information
We use the information we collect to:
- Process and fulfill your orders
- Send order confirmations, shipping updates, and receipts
- Communicate with you about your account or purchases
- Send marketing emails (only if you have opted in - you can unsubscribe at any time)
- Improve our Site, products, and customer experience
- Run advertising campaigns and measure their effectiveness
- Detect and prevent fraud
- Comply with legal obligations
3. Cookies, Tracking, and Analytics
We use cookies and similar tracking technologies to operate, analyze, and improve our Site. These include:
- Essential cookies: Required for basic site functionality (cart, checkout, session management).
- Analytics cookies: We use Google Analytics to understand how visitors interact with our Site. Google Analytics collects anonymized usage data. You can learn more about how Google uses your data at Google's Privacy Policy.
- Advertising cookies: We use the Meta Pixel and Conversions API (CAPI) to measure the performance of our advertising campaigns on Facebook and Instagram, and to deliver relevant ads to you. This may involve sharing data such as your email address (in hashed form), IP address, and browsing behavior with Meta. You can learn more at Meta's Privacy Policy.
You can manage or disable cookies through your browser settings. Disabling cookies may affect Site functionality.
4. Third-Party Services
We use trusted third-party services to operate our business. These providers may have access to your personal information only to perform tasks on our behalf and are obligated not to disclose or use it for other purposes:
- Shopify: Our e-commerce platform. Shopify processes your order and payment data. See Shopify's Privacy Policy.
- Payment processors: We use Shopify Payments and/or third-party payment gateways to securely process transactions. We do not store your full credit card information.
- Shipping carriers: Your name and shipping address are shared with carriers to deliver your order.
- Email marketing: If you opt in to marketing communications, we may use a service provider to deliver those messages. You can unsubscribe at any time.
- Analytics and advertising: Google Analytics, Meta Pixel, and Conversions API (as described above).
5. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes described in this policy, including to comply with legal, accounting, or reporting requirements. Order records are retained for at least 7 years for tax and compliance purposes.
If you request deletion of your data, we will delete or anonymize it unless we are legally required to retain it.
6. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your personal data
- Opt out of marketing communications
- Opt out of the sale or sharing of your personal information (see below)
To exercise any of these rights, email us at contact@demurae.com. We will respond within 30 days.
7. California Residents (CCPA/CPRA)
If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with additional rights:
- Right to Know: You can request a copy of the personal information we have collected about you in the past 12 months.
- Right to Delete: You can request that we delete the personal information we have collected about you, subject to certain exceptions.
- Right to Correct: You can request correction of inaccurate personal information.
- Right to Opt Out:You can opt out of the "sale" or "sharing" of your personal information (see below).
- Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
To submit a request, email contact@demurae.com with the subject line "CCPA Request." We may need to verify your identity before processing your request.
8. Do Not Sell or Share My Personal Information
We do not sell your personal information in the traditional sense. However, under the CCPA/CPRA, the use of advertising cookies (such as Meta Pixel) may be considered "sharing" of personal information for cross-context behavioral advertising purposes.
To opt out of this type of sharing, you can:
- Email us at contact@demurae.com with the subject line "Do Not Sell or Share."
- Adjust your cookie preferences through your browser settings.
- Use the opt-out tools provided by the Digital Advertising Alliance or Network Advertising Initiative.
9. International Visitors (GDPR)
If you are visiting from the European Economic Area (EEA), United Kingdom, or other regions with data protection laws, you have additional rights under the General Data Protection Regulation (GDPR) or equivalent legislation, including the right to access, rectify, erase, restrict processing, and port your data.
Our legal bases for processing your data include: performance of a contract (order fulfillment), legitimate interest (improving our Site and marketing), and consent (where required, such as email marketing and non-essential cookies).
To exercise your GDPR rights, email us at contact@demurae.com.
10. Children's Privacy
Our Site is not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will delete that information promptly.
11. Security
We take reasonable measures to protect your personal information, including SSL encryption on all pages, secure payment processing through PCI-compliant providers, and restricted access to personal data within our organization. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically. Continued use of the Site after changes constitutes acceptance of the updated policy.
13. Contact Us
If you have questions about this Privacy Policy or your personal data, contact us at:
Demurae
Email: contact@demurae.com
See also: our Terms of Service, Refund Policy, and Shipping Policy.