Privacy policy

The short version

We collect what an order needs and very little else. We do not sell your personal information, advertising tags run only as your cookie choices allow, and we honor the Global Privacy Control signal your browser can send.

Cookies this site sets

Two exist so a cart survives from one page to the next: rfd_cart_token and rfd_cart_nonce. They are set by this site, marked httpOnly so no script on the page can read them, expire after fourteen days, and carry no advertising or profiling role.

Google Analytics sets its own cookies on this domain, named _ga and _ga_ followed by a stream id. They hold a randomly generated number that lets us count a return visit as one person rather than two. They are readable only on this domain and hold nothing you typed.

Our cookie banner asks before any Google cookie or advertising tag is set. If you visit from the European Economic Area, the UK or Switzerland, none of them load until you allow them. Elsewhere they load unless you choose “Opt out” or “Do not sell or share my info”. The two cart cookies are always on, because the cart does not work without them.

You can change your choice at any time from the “Your Privacy Choices” link at the bottom of every page. Changing it is as easy as giving it. Each choice is recorded with a random consent ID, the categories you chose, whether your browser sent a Global Privacy Control signal, the date and the page, and no IP address. We keep these records for 24 months, so we can show what each choice was.

Analytics

Two products, and both of them count how pages are used in aggregate.

Vercel Web Analytics counts page views and shows which pages people use. It sets no cookies and does not follow you between sites.

Google Analytics 4, loaded through Google Tag Manager, measures page views and basic site usage, and the steps of a purchase: which rugs are viewed, added to a cart and bought, with their prices and the order total. It never receives your name, email address, street address or payment details. It sets the Google cookies described above and sends that activity to Google. It is not linked to any advertising product, and we do not use it to build advertising audiences. It loads only as your cookie banner choice allows, and not at all if your browser sends a Global Privacy Control signal unless you turn it on yourself. You can also install Google’s browser add-on at tools.google.com/dlpage/gaoptout or block cookies for this site in your browser settings. If any of this changes, this page changes with it.

Advertising

We may use advertising tags from Google, Meta (Facebook and Instagram) and Pinterest, to see which of our ads bring visitors and orders and to show our ads to people who have visited the site. These companies can connect that activity to an account you hold with them, under their own privacy policies. Under California law this counts as sharing your personal information. We send them the page, the rugs and the order value. So they can tell which of their users saw our ads, we also send your email address and phone number, if you gave them, in a scrambled (hashed) form that they compare with the details on their own accounts. We never send your street address or payment details. They load only as your cookie banner choice allows, and not at all if your browser sends a Global Privacy Control signal unless you turn them on yourself.

What an order collects

Your name, email address, shipping and billing address, phone number if you give one, and what you bought. Payment card details go directly to Stripe and are never held by this site. Your delivery address is passed to the warehouse that ships your rug, because otherwise it cannot reach you. Order records live in our store system and are kept for the period tax and accounting rules require.

The newsletter

If you enter your email address in the footer signup, we store that address so we can send you size guides and new arrivals. It is held in ILLIXIS, the email platform we use, and it is filed under Rugs For Days so that it reaches you from this store and no other. Every email we send carries an unsubscribe link, and using it removes the address. You can also write to hello@rugsfordays.com and ask us to remove it.

Global Privacy Control

If your browser or an extension sends a Global Privacy Control signal, we treat it as an opt out of any sale or sharing of your personal information. The signal switches off Google Analytics, Google Tag Manager and any advertising tags for your visit: none of them is loaded, and none of their cookies are set, unless you turn them on yourself in our cookie banner.

Do not sell or share my personal information

We do not sell your personal information. Advertising tags, where we use them, count as sharing it for cross context behavioral advertising, as California defines that. To opt out, choose “Opt out” or “Do not sell or share my info” in our cookie banner, use the “Your Privacy Choices” link at the bottom of every page, or send a Global Privacy Control signal. You can also email hello@rugsfordays.com and we will reply.

Your choices

Write to hello@rugsfordays.com to ask what we hold about you, to have it corrected, or to have it deleted. We will need enough detail to find your order, which is usually the order number or the email address you used. Deleting an order record we are required to keep for tax purposes is the one request we may have to decline, and we will say so rather than ignore it.

Children

This site is meant for adults buying rugs. We do not knowingly collect information from anyone under 16.

Changes

When this policy changes the date at the top changes with it. Anything that alters what we collect will be reflected here at the time it takes effect, not after.

Contact

Rugs For Days is a trade name of ROI IQ LLC.
Mailing address: 425 W Colonial Dr, Ste 101 #323, Orlando, FL 32804
Email: hello@rugsfordays.com