Privacy Notice

Information Type

• Personal Identifiers (user name, postal address, phone number, email address, social media handle)

Purpose

• Maintaining and servicing your account.
• Providing customer service, including processing and fulfilling your orders and warranty claims.
• Responding to inquiries from you, to provide you with information, products, or services that you request from us.
• Advertising and marketing our products to you.
• Conducting analytics and research.
• Notifying you about changes to our Website or Apps or any products or services we offer or provide through them.
• Mailing issues of Cambria Style magazine to you.
• Providing enhanced functionality when accessing our Website and Apps, including identifying you and keeping track of your specific preferences, including in terms of the presentation of content on our Website and Apps.
• Fulfilling the purpose for which you provide it. For example, if you give us an email address to use the “email a friend” feature of our Website, we will transmit the contents of that email and your email address to the recipients.
• Following up with you about services or products provided by us or our business partners.

Service Providers

• Customer service providers
• Marketing and advertising services
• Appointment scheduling services
• Payment and chargeback processors
• Mailing and shipping services
• Third-party data brokers

Information Type

• User Contributions (including photos and your communication with us)

Purpose

• Allowing you to participate in interactive features on our Website and Apps, including Cambria Room Visualizer and other apps that may request photos.
• Improving our products, services, and related analytics.
• Fulfilling the purpose for which you provide it. For example, if you give us an email address to use the “email a friend” feature of our Website, we will transmit the contents of that email and your email address to the recipients.
• Developing and enhancing products or services which may incorporate artificial intelligence or machine learning.

Service Providers

• Third parties whose technology is embedded on the Website and Apps
• Marketing and advertising service providers
• Social media platforms

Information Type

• Payment Information (credit card information, checks)

Purpose

• Processing payments on your orders.
• Detecting security incidents and protecting against malicious, deceptive, fraudulent, or illegal activity.
• Following up with you about services or products provided by us or our business partners.

Service Providers

• Customer service providers
• Payment and chargeback processors
• Fraud prevention and site security

Information Type

• Commercial Information (purchase date, purchase totals, product types)

Purpose

• Providing customer service.
• Processing and fulfilling your orders, including payment processing.
• Analytics to improve our products and services.
• Advertising and marketing our products to you.
• Following up with you about services or products provided by us or our business partners.

Service Providers

• Order fulfillment vendors
• Customer service providers
• Payment and chargeback processors

Information Type

• Internet or Electronic Network Activity Information and Non-Specific Geolocation Information (IP address, cookies, website browsing and interaction activity, other device or browser identifiers)

Purpose

• Enhancing your user experience.
• Improving our products, services, and related analytics.
• Advertising and marketing our products to you.
• Detecting security incidents and protecting against malicious, deceptive, fraudulent, or illegal activity.
• Providing enhanced functionality when accessing our Website and Apps, including identifying you and keeping track of your specific preferences, including in terms of the presentation of content on our Website and Apps.
• Developing and enhancing products or services which may incorporate artificial intelligence or machine learning.

Service Providers

• Marketing and advertising service providers
• Website performance and analytics vendors
• Third-party data brokers
• Fraud prevention and site security

Information Type

• Website and App Login Credentials

Purpose

• Maintaining and servicing your account.
• Providing customer service.
• Processing and fulfilling your orders.
• Detecting security incidents and protecting against malicious, deceptive, fraudulent, or illegal activity.
• Carrying out our obligations and enforcing our rights arising from any contracts entered into between you and us, including for billing and collection.

Service Providers

• Third-party app creation and hosting companies—but only with your explicit permission

Information Type

• Inferences About User Preferences and Characteristics

Purpose

• Enhancing your user experience, including allowing you to participate in interactive features on our Website and Apps.
• Improving our products, services, and related analytics.
• Advertising and marketing our products to you.

Service Providers

• Marketing and advertising service providers
• Website performance and analytics vendors

Customer service providers and other fulfillment third parties: We sometimes use third-party service providers to act on our behalf, for example, to help us deliver our services, fulfill your product orders, process payments, enhance and personalize your shopping experience with us, deliver our advertisements, and provide professional, marketing, security, and information technology services. These service providers are only allowed to use your information in connection with the specific service they provide on our behalf.

Without limiting any other rights, User Contributions may be used without compensation to you for online and offline promotional or commercial uses in any and all media worldwide.

We may be required to share your personal information in other, limited circumstances. For example, we may be required to share certain information to respond to a subpoena or similar judicial process; to comply with state, federal, or local laws; to protect the security or integrity of our databases or website; to take precautions against liability, in the event of a corporate reorganization; or to the extent required by law, to provide information to law enforcement agencies. We may also disclose your personal information if we believe disclosure is necessary or appropriate to protect the rights, property, or safety of us, our customers, or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction.

We do not share your personal information with third parties for the third parties’ direct marketing purposes without your consent.

We may disclose aggregated, de-identified information about our users, User Contributions, and the nonpersonal information of any individual, without restriction.

4. HOW LONG DO WE RETAIN YOUR PERSONAL INFORMATION?

Cambria will retain your information only for as long as is necessary for the purposes set out in this Notice, for as long as you maintain an account, or as needed to provide the Website and Apps to you. Cambria will retain and use your information to the extent necessary to comply with our legal obligations (for example, if we are required to retain your information to comply with applicable tax laws), resolve disputes, perform and enforce our agreements, and as otherwise described in this Notice.

5. SOCIAL MEDIA

If you interact with content on our social media profiles (for example, if you “like” or share a post from Facebook, X, or Instagram accounts), those social media sites may share information about you with us, including your public profile, email address, and friend list. If you choose to “like” or share content, information about you may be publicly displayed on the social network, depending on your privacy settings. If you post information on a social media or another third-party service that references us or our products and services (for example, via an Instagram hashtag), we may publish your post on our social media accounts or websites. For more information about the privacy practices of any social media sites that you may use to log in to your account or to interact with us, you should review the privacy notice of that social media site and check your privacy settings through that site.

6. DO-NOT-TRACK DISCLOSURE

Some web browsers have “do-not-track” features that tell websites that you do not want to have your online activities tracked. Our Website and Apps do not currently recognize or respond to automated browser signals, which may include “do-not-track” instructions; however, we treat Global Privacy Control signals as requests to opt out of the “sale or sharing” of personal information pursuant to the California Privacy Rights Act.

7. CHILDREN UNDER 13

Our Website and Apps are not intended for children under the age of thirteen (13). We will not knowingly collect personally identifiable information from children. If we become aware that a child under the age of 13 has provided personal information through our Website or Apps, we will remove their personally identifiable information from our files. If you are the parent or guardian of a person under 13 and believe that person provided us with personal information, please contact us at CambriaPrivacy@CambriaUSA.com.

8. OPT OUT OF MARKETING COMMUNICATION

If you do not want personal information that we collect about you to be used for our marketing purposes, or for third-party marketing if you have consented to such sharing, you can opt out of such use and sharing by following instructions contained in the messages you receive, or by emailing your request to us at CambriaPrivacy@CambriaUSA.com. Please note that even if you opt out, we may still use and share your personal information with third parties for non-marketing purposes, such as service announcements and administrative messages (for example, communications related to a pending order, an unresolved customer service issue, or a Notice update). We do not offer you the ability to opt out of receiving those communications. 

9. CALIFORNIA PRIVACY RIGHTS

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides you with specific rights regarding your personal information. This section describes your rights and how to exercise them, and outlines the categories of personal information we collect, the purposes for which we use it, and the third parties with whom we may share it. This is also covered in the “Why Do We Collect and Use Your Information, and Who Do We Disclose Your Information To?” section of this Privacy Notice.

A.  Categories of Personal Information We Collect

We may collect the following categories of personal information, as defined under the CCPA:

• Identifiers (for example, name, email address, IP address, device identifiers)
• Personal records (for example, payment information, billing address)
• Commercial information (for example, transaction history)
• Internet or other electronic network activity information (for example, browsing history, interactions with our Website or Apps)
• Geolocation data
• Inferences drawn from other personal information (for example, preferences or behavior)
• Sensitive personal information, if applicable (for example, precise geolocation, account login credentials), which we process with heightened protections

We collect this information directly from you, automatically through your use of our services, and from third parties as described in this Notice.

B.   Purposes of Use

We use your personal information for the following business or commercial purposes:

• To provide and maintain our Website, Apps, and services
• To fulfill your requests and process transactions
• To improve our offerings and develop new features
• To provide advertising and marketing services
• To audit related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance
• Short-term, transient use, such as non-personalized advertising shown as part of your current interaction with us
• For security and fraud prevention
• For marketing and communications (with your consent, where required)
• To comply with legal obligations
   

C.   Sharing and Disclosure

We may disclose your personal information to service providers, contractors, or third parties for business purposes, including:

• Cloud hosting and IT service providers
• Payment processors
• Customer service platforms
• Advertising and analytics providers (where permitted)
• Legal or regulatory authorities, where required

We do not “sell” or “share” your personal information as defined under the CCPA/CPRA (for instance, for cross-context behavioral advertising), unless explicitly stated and with your right to opt out. If this changes, we will update this Notice and provide appropriate opt-out mechanisms.

D.  Your Rights Under the CCPA/CPRA

As a California resident, you have the following rights:

• Right to Know: Request the categories and/or specific pieces of personal information we have collected about you in the past 12 months.
• Right to Delete: Request the deletion of your personal information, subject to certain exceptions (for example, legal obligations or fraud prevention).
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt-Out of Sale or Sharing: Request that we do not sell or share your personal information, where applicable.
• Right to Limit Use of Sensitive Personal Information: If we collect sensitive personal information, you can limit its use to only necessary purposes.
• Right to Non-Discrimination: You will not be discriminated against for exercising your rights under the CCPA/CPRA.

You may submit a privacy rights request by contacting us at:

• CambriaPrivacy@CambriaUSA.com
• Or via phone number listed on our Website

You may only make a verifiable consumer request for access or data portability twice within a 12-month period.

Verification Process
Before responding to your request, we will verify your identity using information already in our possession. This may include matching details such as your name, email address, or phone number and using previously used channels of communication. We may contact you to confirm your request.

You may also designate an authorized agent to act on your behalf. To do so, we will require proof of your written authorization and may verify your identity directly. For more information on authorized agents, visit: OAG.ca.gov/Privacy/CCPA.

A.  California “Shine the Light” Law (Civil Code § 1798.83)
California residents may also request information regarding our disclosure of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing purposes without your explicit consent. You may opt out of such disclosures at any time by following the instructions in the “Opt-Out” section above.

B. Security
We maintain administrative, technical, and physical safeguards designed to protect your personal information from unauthorized access, disclosure, or use. While we work to protect your data, no method of transmission or storage can be guaranteed to be 100% secure.

C. Changes to This Privacy Notice
We may update this Privacy Notice periodically. When we make changes, we will post the updated notice on this page and revise the effective date at the top. If changes materially affect your rights, we will notify you directly or via a notice on our Website.

Supplemental Notice to Residents of Colorado
If you are a resident of Colorado, Cambria is required to disclose to you what information it collects and how it uses it. For more information, see the “Why Do We Collect and Use Your Information, and Who Do We Disclose Your Information To?” section of this Privacy Notice.

Supplemental Notice to Residents of Nevada
Nevada law gives Nevada consumers the right to request that a company not sell their personal information for monetary consideration to certain other parties.  This right applies even if their personal information is not currently being sold.  If you are a Nevada consumer and wish to exercise this right, please send an email with the subject line “Nevada Resident Do Not Sell Request” to  CambriaPrivacy@CambriaUSA.com.

10. INTERNATIONAL DATA TRANSFER

If you are located outside the United States, including in Switzerland or the European Economic Area (EEA), please be aware that your personal data may be transferred to, stored, and processed in the United States or other countries outside of your jurisdiction. These countries may not offer the same level of data protection as your home country.

Where we transfer your personal data outside the EEA, we do so in compliance with applicable data protection laws. This includes implementing appropriate safeguards such as:

• Standard Contractual Clauses approved by the European Commission under Article 46 of the GDPR;
• Ensuring the recipient is located in a country with an adequacy decision from the European Commission; or
• Other lawful transfer mechanisms approved under the GDPR.

For more information about the safeguards we use for international data transfers, or to obtain a copy of them, please contact us at CambriaPrivacy@CambriaUSA.com.

By using our Website or Apps, you acknowledge that such transfers may occur, and that we will handle your personal data in accordance with this Notice.

A. Your Data Protection Rights Under the GDPR

If you are located in the European Union, United Kingdom, Switzerland, or another jurisdiction that provides similar rights, you have the following rights under the GDPR, subject to certain exceptions:

• Right of access: You have the right to request access to the personal data we hold about you.
• Right to rectification: You have the right to request that we correct or complete your personal data if it is inaccurate or incomplete.
• Right to erasure (“right to be forgotten”): You can request the deletion of your personal data where legally applicable.
• Right to restrict processing: You can request that we restrict the processing of your personal data in certain circumstances.
• Right to data portability: You may request a copy of your data in a structured, commonly used, and machine-readable format and, where possible, that it be transmitted to another controller.
• Right to object: You can object to the processing of your personal data based on our legitimate interests, including for direct marketing purposes.
• Right to withdraw consent: If processing is based on your consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, please contact us at CambriaPrivacy@CambriaUSA.com. We may need to verify your identity before fulfilling your request.

We retain personal data only as long as necessary for the purposes outlined in this Privacy Notice or as required by law. You may request deletion of your personal data at any time.

Please note that User Contributions you submit may be publicly accessible, and we may not be able to delete or retrieve this data once it enters the public domain or is redistributed by third parties.

B. Legal Bases for Processing

We rely on the following legal bases under the GDPR to process your personal data:

• Consent: Where you have given us explicit permission to process your data for specific purposes.
• Contract: Where processing is necessary to enter into or perform a contract with you.
• Legal obligation: Where we are legally required to process your data.
• Legitimate interests: Where processing is necessary for our legitimate interests, such as improving our services, communicating with users, and securing our systems, provided those interests are not overridden by your data protection rights.

If we rely on consent as a legal basis, you may withdraw it at any time by contacting us at CambriaPrivacy@CambriaUSA.com. If we continue to process your data based on another legal ground, we will inform you accordingly.

Complaints
If you have any questions, concerns, or complaints about our handling of your personal data, we encourage you to contact us at CambriaPrivacy@CambriaUSA.com so we can address your concerns.

If you are located in the EEA and are not satisfied with our response, you have the right to lodge a complaint with your local Data Protection Authority (DPA). You can find contact details for your national DPA at:

Commission.Europa.eu/Law/Law-Topic/Data-Protection_en