PRIVACY POLICY

Last updated: February 22, 2026

This Privacy Policy describes how The Paint Loft Inc. (doing business as The Paint Loft) ("The Paint Loft," "we," "us," or "our") collects, uses, discloses, and protects your information when you visit thepaintloft.com or otherwise interact with us (collectively, the "Services"). If you do not agree with this Privacy Policy, please do not use our Services. If you have questions, contact us at info@thepaintloft.com.

SUMMARY OF KEY POINTS

What personal information do we collect?

We may collect personal information you provide directly (such as name, email, shipping address, and payment-related details) and information collected automatically (such as device, browser, and usage data).

Do we collect sensitive information?

We do not intentionally collect sensitive personal information unless needed for a transaction, legal compliance, fraud prevention, or where permitted by law.

Do we receive information from third parties?

We may receive information from service providers who help us operate our website and process orders (such as payment processors, shipping carriers, and advertising platforms). We do not buy customer lists.

How do we use your information?

To operate our Services, fulfill orders, provide customer support, improve our website, prevent fraud, and comply with legal requirements. Where required, we will obtain consent.

When do we share information?

We share data with trusted service providers only as needed to run the store (payments, shipping, analytics, marketing tools). We do not sell your personal information.

What are your privacy rights?

Depending on where you live (Canada, the U.S., EU/UK), you may have rights to access, delete, correct, or limit certain uses of your personal information.

How do you exercise your rights?

Email us at info@thepaintloft.com with your request. We will respond as required by applicable law.

TABLE OF CONTENTS

1. Information We Collect

2. How We Use Your Information

3. Legal Bases for Processing (where applicable)

4. When and With Whom We Share Information

5. Cookies and Tracking Technologies

6. Social Logins

7. International Transfers

8. Data Retention

9. Children's Privacy

10. Your Privacy Rights

11. Do Not Track

12. California Privacy Notice

13. Virginia Privacy Notice

14. Updates to This Notice

15. Contact Us

16. Requests to Access, Update, or Delete Your Data

A. Personal information you provide to us

We collect personal information that you voluntarily provide when you:

• Place an order or create an account
• Subscribe to emails or request information
• Contact customer support
• Participate in promotions, surveys, or reviews

This may include:

• Name
• Email address
• Phone number
• Billing and shipping address
• Account login details (if you create an account)
• Order and purchase history
• Contact preferences

B. Payment information

Payments are processed through third-party payment processors (such as Shopify Payments, PayPal, or other available payment options shown at checkout). We do not store full credit card numbers on our servers. Payment processors handle your payment details according to their own privacy policies.

C. Information collected automatically

When you use our Services, we may automatically collect:

• IP address
• Device type and identifiers
• Browser type and settings
• Pages viewed, clicks, and time spent
• Approximate location (based on IP)
• Referring/exit pages

This helps us operate the site, improve performance, and prevent fraud.

We may use personal information to:

• Fulfill and manage orders (payments, shipping, returns, exchanges)
• Provide customer support and respond to inquiries
• Operate and improve the website (analytics, troubleshooting, testing)
• Send transactional messages (order confirmations, shipping updates)
• Send marketing communications (if you opt in; you can unsubscribe anytime)
• Prevent fraud and maintain security
• Comply with legal obligations (tax, recordkeeping, lawful requests)

Depending on your location, we rely on one or more of the following:

• Performance of a contract (to process and deliver your orders)
• Legitimate interests (to improve our Services, prevent fraud, secure systems)
• Consent (for marketing communications and certain cookies where required)
• Legal obligations (tax, compliance, record retention)

For Canada, consent may be express or implied as permitted by applicable law, and you may withdraw consent at any time by contacting us.

We may share information with third parties that help us run our business, such as:

• Payment processors
• Website hosting and ecommerce platform providers
• Shipping carriers and delivery providers
• Customer service and email tools
• Analytics providers
• Advertising and marketing partners (where enabled)

We share only what is necessary and require service providers to protect your information.

Business transfers

If we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction in accordance with law.

Affiliates and partners (limited)

We may share information with affiliates or partners only where necessary to operate the Services (for example, for fulfillment, customer support, or service enablement). We do not share personal information for their independent marketing unless you have consented or applicable law allows.

We use cookies and similar technologies (pixels, tags) to:

• Keep the site functioning
• Remember preferences
• Analyze traffic and performance
• Support advertising and measurement (where enabled)

You can control cookies through your browser settings. If you disable cookies, some site features may not work properly.

If we offer social login (e.g., using a social media account), we may receive limited profile information from that provider depending on your settings. We use it only to provide login functionality and account access.

Your information may be processed in countries other than where you live, including the United States and Canada, depending on where our service providers operate. We take reasonable steps to protect information in accordance with applicable law.

We keep personal information only as long as needed for:

• Order fulfillment and customer service
• Legal, tax, accounting, and recordkeeping requirements
• Fraud prevention and dispute resolution

When no longer required, we securely delete or anonymize information where feasible.

Our Services are not intended for individuals under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us at info@thepaintloft.com.

Depending on your location, you may have rights to:

• Access your personal information
• Correct inaccurate information
• Request deletion (subject to legal exceptions)
• Withdraw consent (where processing is based on consent)
• Opt out of marketing emails anytime using the unsubscribe link or by contacting us

To exercise rights, email info@thepaintloft.com. We may need to verify your identity.

Some browsers offer "Do Not Track" signals. Because there is no universal standard, we do not respond to DNT signals at this time.

If you are a California resident, you may have rights under applicable California privacy laws, which may include the right to request access, deletion, or correction of personal information, and to opt out of certain data sharing used for targeted advertising.

We do not sell your personal information.

To submit a request, email info@thepaintloft.com with the subject line: "California Privacy Request."

If you are a Virginia resident, you may have rights under the Virginia Consumer Data Protection Act (VCDPA), including access, deletion, correction, and the right to opt out of targeted advertising. To submit a request, email info@thepaintloft.com with the subject line: "Virginia Privacy Request."

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "Last updated" date.

The Paint Loft Inc. (doing business as The Paint Loft)

43073 Peacock Market Plaza

Chantilly, VA 20152

United States

Email: info@thepaintloft.com

Website: thepaintloft.com

To request access, correction, or deletion of your personal information, email info@thepaintloft.com from the email address associated with your order/account. We will respond in accordance with applicable privacy laws.