Privacy Policy

Welcome to Chroma Elite. We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at chromaelitepaint.com and use our services.

By using our website or services, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our website or services.

This Privacy Policy applies to information we collect through our website, in email, text, and other electronic messages between you and our website, and through interactions with our advertising and applications on third-party websites and services, if those applications or advertising include links to this policy.

We use the information we collect for various purposes, including:

• Order Fulfillment: Processing and fulfilling your orders, managing payments, and providing shipping and delivery updates
• Account Management: Creating and managing your customer account, including authentication and account recovery
• Customer Service: Responding to your inquiries, providing customer support, and resolving issues or complaints
• Communication: Sending you order confirmations, shipping notifications, updates about your account, and responding to your requests
• Marketing: Sending you promotional emails, newsletters, and special offers (only if you have opted in to receive such communications)
• Website Improvement: Analyzing usage patterns to improve our website functionality, user experience, and product offerings
• Security: Detecting, preventing, and addressing technical issues, fraud, and security threats
• Legal Compliance: Complying with legal obligations, enforcing our terms and conditions, and protecting our legal rights
• Business Operations: Conducting internal research, analytics, and business planning

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your information in the following circumstances:

• Service Providers: We share information with trusted third-party service providers who assist us in operating our website, conducting our business, and serving our customers. These providers include:
  • Payment processing services (Stripe)
  • Hosting and infrastructure providers (Supabase, AWS)
  • Shipping and logistics companies
  • Email service providers
  • Analytics and performance monitoring services

  These service providers are contractually obligated to maintain the confidentiality and security of your information and may only use it to provide services to us.

• Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, subpoenas, or government agencies)
• Business Transfers: In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction
• Protection of Rights: We may disclose information when we believe it is necessary to protect our rights, your safety, or the safety of others, investigate fraud, or respond to government requests
• With Your Consent: We may share your information with third parties when you have given us explicit consent to do so

We use Stripe as our third-party payment processor. When you make a purchase, your payment information is transmitted directly to Stripe using secure encryption. Stripe is certified as a PCI Service Provider Level 1, the most stringent level of certification available in the payments industry.

We do not store your complete credit card information on our servers. We only retain the last four digits of your card number and expiration date for reference purposes. All sensitive payment data is handled exclusively by Stripe in accordance with their privacy policy and security standards.

For more information about how Stripe handles your payment information, please visit Stripe's Privacy Policy at stripe.com/privacy.

We use cookies and similar tracking technologies to enhance your experience on our website. Cookies are small data files stored on your device that help us recognize you, remember your preferences, and improve our services.

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies or alert you when cookies are being sent. Please note that disabling cookies may affect the functionality of our website and limit your ability to use certain features.

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using SSL/TLS protocols
• Secure authentication and password protection
• Regular security assessments and monitoring
• Access controls and employee training on data protection
• Secure cloud infrastructure provided by trusted partners (Supabase, AWS)

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but continuously work to maintain and improve our security practices.

Your account is protected by a password. You are responsible for maintaining the confidentiality of your password and account credentials. Please notify us immediately if you suspect any unauthorized access to your account.

You have certain rights regarding your personal information:

• Access: You may request access to the personal information we hold about you
• Correction: You may update or correct inaccurate or incomplete personal information through your account settings or by contacting us
• Deletion: You may request that we delete your personal information, subject to certain legal exceptions
• Opt-Out of Marketing: You may unsubscribe from promotional emails by clicking the "unsubscribe" link in any marketing email or by contacting us. Note that you will still receive transactional emails related to your orders and account
• Do Not Sell My Personal Information: We do not sell your personal information to third parties. If our practices change, we will update this policy and provide you with appropriate opt-out mechanisms as required by law
• Data Portability: You may request a copy of your personal information in a structured, commonly used, and machine-readable format
• Cookie Management: You can control cookie preferences through your browser settings

To exercise any of these rights, please contact us using the information provided at the end of this policy. We will respond to your request within a reasonable timeframe and in accordance with applicable laws.

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Specifically, we retain:

• Account information for as long as your account is active or as needed to provide services
• Order and transaction information for at least 7 years for tax, accounting, and legal compliance purposes
• Marketing communication preferences until you unsubscribe or request deletion
• Website usage data for analytics purposes for up to 26 months

When we no longer need your information, we will securely delete or anonymize it in accordance with our data retention and deletion policies.

Our website may contain links to third-party websites, services, or applications that are not operated by us. This Privacy Policy does not apply to those third-party websites or services.

We are not responsible for the privacy practices or content of third-party websites. We encourage you to review the privacy policies of any third-party sites you visit or services you use.

If you access our website through a third-party platform or social media service, that platform may collect information about your visit in accordance with their own privacy policies.

Our website and services are not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately.

If we become aware that we have collected personal information from a child under 13 without verification of parental consent, we will take steps to remove that information from our servers.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the "Last Updated" date at the top of this policy.

If we make material changes to this Privacy Policy, we will notify you by email (if you have provided an email address) or by posting a notice on our website prior to the changes taking effect.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our website and services after any changes to this policy constitutes your acceptance of those changes.

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

We will respond to your inquiries as promptly as possible and work to address any privacy concerns you may have.