1. Scope of this Policy

This Privacy Policy describes how Heritage by Sophia (“we,” “us,” “our”) collects, uses, shares, and protects personal information when you interact with:

• Our website
• Our sales and client service teams
• Our forms, newsletters, and marketing communications
• Our events and in-store experiences

Residents of California and the European Economic Area (EEA) have additional rights described in Sections 9 and 10.

2. Information We Collect

2.1 Information You Provide to Us

We collect and retain information you voluntarily provide, including:

• Name, email address, phone number, mailing address
• Inquiry and contact forms
• Collector preferences or items of interest
• Newsletter sign-ups and event registrations
• Communications with our sales team
• Purchase-related requests or questions

These submissions are stored in our internal CRM platforms (Salesforce and HubSpot) and retained according to applicable retention policies and legal requirements.

2.2 Transaction Information

When you make a purchase, we collect:

• Contact and order details
• Shipping and billing information
• Limited payment information (processed securely by Authorize.net)
• Purchase records and transaction history

This is used to fulfill orders and support customer service.

This is used to fulfill orders and support customer service. –2.3 Automatically Collected Information (Usage Data)

When you visit our website, we automatically collect:

• IP address, general location, device type
• Browser details and operating system
• Pages viewed and time spent
• Navigation paths and interaction behavior
• Cookies, tags, pixels, and identifiers
• Collected via tools such as:
• Google Analytics
• Google Ads tracking
• Meta Pixel (Facebook/Instagram)
• Programmatic advertising partners
• This helps us improve performance, personalize experiences, and understand customer behavior.

• This helps us improve performance, personalize experiences, and understand customer behavior. –2.4 Cookies and Tracking Technologies
• We use first-party and third-party cookies to:
• Operate the website
• Identify returning visitors
• Personalize experience and remember preferences
• Track viewed items
• Provide analytics and performance measurement
• Support advertising and retargeting
• Visitors in California and the EU are presented with cookie consent controls via our cookie banner.

• Visitors in California and the EU are presented with cookie consent controls via our cookie banner. –2.5 Customer List Uploads & Advertising Partners
• We may upload hashed customer information (email or phone number) to advertising platforms such as Google or Meta to:
• Reach existing customers
• Build similar audiences
• Improve ad relevance
• Where required, we rely on consent. Otherwise, processing may be based on our legitimate interest in marketing to existing customers. These platforms use the data only to provide advertising services to us.

• 2.6 Personalization
• We may use browsing behavior, viewed items, and provided preferences to recommend products or personalize your experience. Personalization is limited to marketing and browsing experience improvements; we do not use automated decision-making that produces legal or significant effects.

3. How We Use Your Information

We use information to:

• Respond to inquiries and provide customer service
• Process and fulfill orders
• Personalize your experience
• Send newsletters or updates (with consent where required)
• Improve website performance
• Conduct advertising and retargeting campaigns
• Maintain internal business records
• Protect against fraud or misuse
• Comply with legal obligations

4. Information We Share

We may share information with trusted service providers such as:

• CRM systems (Salesforce, HubSpot)
• Analytics tools (Google)
• Advertising partners
• Payment processors (Authorize.net)
• Shipping and logistics providers
• Professional advisors (legal, accounting, insurance)

We do not sell customer names or personal information for independent third-party marketing.

We may disclose data when legally required or necessary to protect rights and safety.

5. Data Retention

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by law.

For individuals in the EEA, we retain information only as long as necessary for the purposes described in this Policy or to meet legal obligations.

6. Security

We implement reasonable administrative, technical, and physical safeguards appropriate to the nature of the information we process. While no system is completely secure, we take steps designed to protect the data entrusted to us.

7. Your Choices

7.1 Email Opt-Out

You may unsubscribe from marketing emails at any time. Your email may remain in our records for administrative or legal purposes.

8. California Privacy Rights (CPRA)

California residents may request:

• Access to collected personal information
• Deletion of personal information
• Correction of inaccurate information
• Opt-out of the “sharing” of personal information for cross-context behavioral advertising
• Information about categories of data collected
• Non-discrimination for exercising privacy rights

To opt out of sale or sharing, California residents may email info@heritagebysophiaartantique.com

We do not collect sensitive personal information as defined by California law.