Privacy policy

CFE DONUTS, LLC, operating the Urban Gems Studio website, respects the importance of privacy and understands that information provided during an online shopping experience can be personal and sensitive.

This Privacy Policy explains how we may collect, use, disclose, retain, and protect information when you browse or purchase women's apparel through our website.

1. Scope of This Policy

This Privacy Policy applies to information collected through:

  • Our website;
  • Online shopping activities;
  • Customer-service communications;
  • Order and return processing;
  • Email communications;
  • Website forms;
  • Promotional or marketing activities; and
  • Other interactions associated with Urban Gems Studio.

It does not necessarily apply to independent third-party websites, applications, payment processors, shipping providers, or social-media platforms that may be accessible through links on our website.

2. Information We May Collect

Depending on how you interact with us, we may collect several categories of information.

Information You Provide Directly

This may include:

  • Name;
  • Billing address;
  • Shipping address;
  • Email address;
  • Telephone number, if provided;
  • Order details;
  • Payment-related information;
  • Return information;
  • Customer-service communications;
  • Product preferences; and
  • Information voluntarily included in reviews, messages, or inquiries.

We generally rely on payment processors to handle payment credentials. We do not need to retain complete payment-card numbers merely to fulfill ordinary orders.

Automatically Collected Information

When you visit our website, certain technical information may be collected automatically, such as:

  • IP address;
  • Browser type;
  • Device type;
  • Operating system;
  • Approximate geographic information;
  • Referring webpage;
  • Pages visited;
  • Time spent on pages;
  • General interaction data; and
  • Technical error information.

3. Cookies and Similar Technologies

Our website may use cookies, pixels, tags, local storage, or similar technologies.

These technologies may help us:

  • Remember shopping preferences;
  • Maintain shopping-cart functionality;
  • Understand website traffic;
  • Improve navigation;
  • Detect technical problems;
  • Measure advertising performance;
  • Maintain security; and
  • Improve website functionality.

Depending on the technology used, users may be able to control certain cookies through browser settings or applicable website preference tools.

Disabling cookies may affect some website functions.

4. How We Use Personal Information

We may use personal information for legitimate business purposes, including:

  • Processing and fulfilling orders;
  • Confirming purchases;
  • Arranging delivery;
  • Processing returns and refunds;
  • Responding to customer inquiries;
  • Providing customer support;
  • Communicating about orders;
  • Preventing fraud;
  • Detecting security incidents;
  • Maintaining website functionality;
  • Improving products and services;
  • Understanding customer interactions;
  • Sending permitted marketing communications;
  • Administering promotions;
  • Complying with legal obligations;
  • Establishing or defending legal claims; and
  • Protecting our rights, property, customers, and business.

We seek to collect information that is reasonably appropriate for the purposes for which it is processed.

5. Information Sharing

We may disclose information to service providers that assist with our operations.

Depending on the services we use, these parties may include:

  • Payment processors;
  • E-commerce technology providers;
  • Website hosting providers;
  • Shipping and fulfillment companies;
  • Customer-support providers;
  • Email providers;
  • Analytics providers;
  • Fraud-prevention services;
  • Advertising or marketing providers; and
  • Professional advisers.

Service providers generally receive information necessary to perform services for us and are not authorized to use it for unrelated purposes except as permitted by law.

6. Business Transfers

If CFE DONUTS, LLC undergoes a merger, acquisition, restructuring, financing, sale of assets, bankruptcy proceeding, or similar business transaction, personal information may be transferred as part of that transaction, subject to applicable law.

7. Legal Disclosures

We may disclose information when reasonably necessary to:

  • Comply with applicable law;
  • Respond to lawful governmental requests;
  • Protect against fraud;
  • Investigate security incidents;
  • Enforce our agreements;
  • Protect our rights and property;
  • Protect customers or other individuals; or
  • Establish, exercise, or defend legal claims.

Tennessee's information-protection framework expressly recognizes circumstances in which processing may continue for legal compliance, governmental investigations, law enforcement cooperation, and legal claims.

8. Sale and Targeted Advertising

We do not intend to sell personal information merely because you purchase merchandise from our website.

Where applicable law defines certain advertising, analytics, or data-sharing practices as a "sale," "targeted advertising," or similar regulated activity, we will provide applicable rights and choices where legally required.

9. Tennessee Privacy Rights

The Tennessee Information Protection Act, where applicable to a covered business, provides consumers with rights that can include access, correction, deletion, portability, and certain opt-out rights concerning the sale of personal information, targeted advertising, and certain profiling activities.

The statute applies only when its statutory thresholds and other requirements are met.

Accordingly, if applicable law provides you with privacy rights, you may contact us using the information at the end of this Policy.

10. Verification of Privacy Requests

For privacy and security purposes, we may need to verify that a request genuinely comes from the individual whose information is involved.

We may request information reasonably necessary to authenticate a request.

We will avoid collecting unnecessary information merely for verification.

11. Timing of Privacy Requests

Where the Tennessee Information Protection Act applies, authenticated consumer requests generally must be addressed without undue delay and within 45 days, subject to legally permitted extensions. The statute also provides an appeal process for certain denied requests.

We may apply legally permitted exceptions where information must be retained or processed for legitimate legal, security, accounting, fraud-prevention, or other permitted purposes.

12. Appeals

If we decline a privacy request where an applicable law provides an appeal right, you may contact us and request review.

An appeal should identify:

  • The original request;
  • The date of the request;
  • The reason provided for the denial, if applicable; and
  • Any information you believe should be reconsidered.

Where legally required, we will provide an appeal determination within the applicable statutory period.

13. Data Minimization

We seek to limit personal information collection to information reasonably necessary for disclosed purposes.

Tennessee's Information Protection Act requires covered controllers to limit collection to information that is adequate, relevant, and reasonably necessary for the disclosed purposes and to maintain reasonable security practices.

14. Data Security

We use reasonable administrative, technical, and organizational safeguards intended to protect personal information.

These measures may include:

  • Access controls;
  • Authentication procedures;
  • Security monitoring;
  • Limited employee access;
  • Service-provider controls;
  • Encryption where appropriate; and
  • Operational safeguards.

No internet transmission or electronic storage system can be guaranteed to be completely secure.

15. Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Policy, including:

  • Completing transactions;
  • Maintaining business records;
  • Handling returns;
  • Resolving disputes;
  • Preventing fraud;
  • Meeting tax or accounting obligations;
  • Complying with legal requirements; and
  • Protecting legal interests.

Retention periods may differ depending on the type and purpose of information.

16. Children's Privacy

Our website is intended for general consumers and is not knowingly designed to solicit personal information from young children.

If we learn that personal information has been collected from a child in circumstances where applicable law requires parental involvement or deletion, we will take reasonable steps consistent with applicable law.

17. Third-Party Services

Third-party providers may operate independently from Urban Gems Studio.

Their privacy practices may differ from ours. When you use a payment service, social-media service, analytics provider, shipping platform, or other external service, that provider's own privacy policy may apply.

18. International Visitors

If you access the website from outside the United States, your information may be processed in the United States or other jurisdictions where our service providers operate.

Different jurisdictions may provide different privacy protections.

19. Changes to This Privacy Policy

We may update this Privacy Policy periodically.

Changes may reflect new website features, business practices, service providers, legal requirements, or security practices.

The revised version will be posted with an updated effective date.

20. Contact for Privacy Matters

Privacy questions and requests may be submitted to:

CFE DONUTS, LLC
Attn: OLIVER LASZLO HARMAT
Email: [email protected]
Business Address: 10457 County Line Rd, Spring Hill, FL 34609

Please identify the nature of your privacy request clearly so that we can route it appropriately.