Privacy Policy

ORENVA MERCANTILE LLC ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website orenvamercantile.com. We operate in compliance with the Colorado Privacy Act (CPA), the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), and the General Data Protection Regulation (GDPR).

1. Information We Collect

Personal Information You Provide

• Contact Information: Name, email address, phone number, shipping address.
• Account Information: Email, password (encrypted), account preferences.
• Order Information: Purchase history, payment details (processed via secure third-party payment processors; we do not store full card numbers).
• Communication: Messages you send via our contact form or email.

Information Collected Automatically

• Device & Usage Data: IP address, browser type, operating system, pages visited, time spent, referring URLs.
• Cookies & Tracking Technologies: See our Cookie Policy for details.

Information from Third Parties

We may receive information from third-party services such as payment processors, shipping carriers, and analytics providers.

2. How We Use Your Information

• Process and fulfill orders, including shipping and returns.
• Provide customer support and respond to inquiries.
• Send order confirmations, shipping notifications, and important account alerts.
• Send marketing emails (only if you opt in; you may unsubscribe at any time).
• Improve our website, products, and services through analytics.
• Detect, prevent, and address fraud, security issues, and technical problems.
• Comply with legal obligations under Colorado and federal law.

3. Legal Basis for Processing (GDPR)

For users in the European Economic Area, we process your personal data based on:

• Consent: When you provide consent (e.g., marketing emails).
• Contract Performance: To fulfill orders and provide services.
• Legal Obligation: To comply with applicable laws.
• Legitimate Interest: For fraud prevention and service improvement.

4. Information Sharing & Disclosure

We do not sell your personal information. We may share data with:

• Service Providers: Payment processors (Stripe, PayPal), shipping carriers (USPS, UPS, FedEx), email service providers, and analytics platforms.
• Legal Authorities: When required by law, court order, or government regulation.
• Business Transfers: In the event of a merger, acquisition, or asset sale.
• With Your Consent: When you explicitly authorize sharing.

5. Your Privacy Rights

Under Colorado Privacy Act (CPA) & CCPA/CPRA

You have the right to:

• Access: Request a copy of the personal information we hold about you.
• Correct: Request correction of inaccurate or incomplete data.
• Delete: Request deletion of your personal information (with certain exceptions).
• Data Portability: Receive your data in a portable, machine-readable format.
• Opt-Out of Sale: We do not sell your data, but you may opt out of any future sale.
• Opt-Out of Targeted Advertising: Request that we not use your data for targeted ads.
• Limit Processing of Sensitive Data: Request restrictions on sensitive personal data.
• Appeal: Appeal our decision regarding any privacy rights request.

Exercising Your Rights

To exercise any of these rights, contact us at [email protected]. We will respond within the period required by applicable privacy law.

Do Not Sell or Share: To opt out of the sale or sharing of your personal information, visit our Do Not Sell My Info page.

Global Privacy Control (GPC): We automatically detect and honor GPC browser signals.

Children's Privacy (COPPA)

Our website is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately and we will delete it.

6. Data Security

We implement industry-standard security measures including SSL/TLS encryption, secure payment processing, access controls, and regular security audits. However, no method of transmission over the internet is 100% secure.

7. Data Retention

We retain personal information only as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Order records are retained for 7 years for tax and accounting purposes.

8. International Users

If you access our website from outside the United States, please be aware that your information will be transferred to and processed in the United States. By using our website, you consent to this transfer.

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on this page and updating the "Last updated" date. We encourage you to review this page periodically.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact:

ORENVA MERCANTILE LLC
353 N 4th Ave Suite 100
Pocatello, ID 83201
Bannock County
Email: [email protected]