1. Introduction
This Privacy Policy explains how Liliya Garipova, doing business as Garipova Design & Decor (“we,” “us,” “our”), collects, uses, shares, and protects information about you when you visit garipova.com (the “Site”) or place an order through the Site. We are a sole proprietor based in Hamden, Connecticut, USA.
We have written this policy in plain language. It is meant to be read, not just acknowledged. If anything is unclear, please email us at info@garipova.com.
Your use of the Site is also governed by our Terms and Conditions. If anything in this Privacy Policy conflicts with the Terms and Conditions, the Terms and Conditions prevail.
2. Information we collect
2.1 Information you provide to us
- Order and billing details — your name, shipping address, billing address (if different), email address, and phone number, when you place an order.
- Payment information — payment is processed by Stripe and PayPal, who handle your card or bank details directly. We do not see, store, or have access to your full credit card or bank account numbers. We do receive a confirmation that payment succeeded along with the last four digits of the card and the cardholder name for our records.
- Email subscriber information — your email address (and optionally a name) if you sign up for our newsletter or any other email list through the Site.
- Contact form submissions — any information you include when you contact us through a form on the Site.
- Customer service correspondence — emails you send us about an order, returns, or questions, along with our replies.
2.2 Information we collect automatically
- Usage data — pages you visit on the Site, the time of your visit, the browser and device you use, and the referring website (if any).
- IP address — collected as part of normal web server logs and used for security and abuse prevention.
- Cookies and similar technologies — see Section 5 for details.
3. How we use your information
We use the information described in Section 2 for the following purposes:
- To accept and fulfill your orders, including arranging production with our fulfillment partner and shipping to the address you provide.
- To send order-related emails — order confirmation, shipping notification, defect resolution, refund confirmation. These are transactional emails and are sent regardless of marketing-email preferences.
- To respond to your customer service inquiries.
- To send marketing emails (newsletter, new release announcements, occasional promotions) only if you have specifically subscribed. You can unsubscribe at any time from the link in any marketing email.
- To improve the Site — diagnose technical issues, understand which products and pages are most useful, fix problems with the buying flow.
- To prevent fraud, abuse, and security incidents.
- To comply with our legal obligations, such as retaining tax and order records as required by U.S. and Connecticut law.
4. Who we share information with
We do not sell your personal information. We share information with a small number of trusted service providers who help us operate the Site and fulfill your orders:
4.1 Printify (production and shipping)
When you place an order, we send your order details — your name, shipping address, the artwork and size you selected, and any production notes — to Printify, our fulfillment partner. Printify, in turn, shares the shipping address with their carrier partners (USPS, UPS, or regional carriers) so that your print can be delivered. Printify’s privacy practices are governed by their own privacy policy at https://printify.com/legal/privacy-policy/.
4.2 Stripe and PayPal (payment processing)
When you make a payment, your card or bank details are collected and processed by Stripe or PayPal directly, depending on which method you choose. We receive a confirmation of the transaction but do not handle your full payment details. Stripe’s privacy policy is at https://stripe.com/privacy. PayPal’s privacy policy is at https://www.paypal.com/us/legalhub/privacy-full.
4.3 MailPoet (email delivery)
Marketing emails and newsletters are managed and delivered through MailPoet, a WordPress plugin and sending service. If you subscribe to our newsletter, MailPoet receives your email address (and any name you provide) for the purpose of sending you the emails you signed up for. MailPoet’s privacy policy is at https://www.mailpoet.com/privacy-notice/.
4.4 SiteGround (hosting and email)
Our website and email mailbox are hosted by SiteGround. SiteGround processes data necessary to deliver hosting services, including server logs and email storage. SiteGround’s privacy policy is at https://www.siteground.com/privacy.htm.
4.5 Jetpack (security and analytics)
We use Jetpack, a WordPress plugin from Automattic, for site security, performance monitoring, and basic visitor statistics. Jetpack may collect aggregated, non-identifying analytics data about visits to the Site. Jetpack’s privacy policy is at https://automattic.com/privacy/.
4.6 Other disclosures
- We may disclose information if required by law, court order, or valid legal process.
- We may disclose information to protect our rights, the rights of others, or the security of the Site.
- In the unlikely event of a sale of the business or a substantial portion of its assets, customer information may transfer to the acquiring entity, subject to the protections of this Privacy Policy.
5. Cookies and tracking
A cookie is a small text file that a website places on your device to remember things between visits — for example, what you have in your shopping cart or whether you are logged in. We use cookies for the following purposes:
- Strictly necessary cookies — for cart functionality, checkout, and account login. These cannot be turned off without breaking core Site features.
- Functional cookies — for remembering preferences, such as a chosen color filter on the shop archive.
- Analytics cookies — set by Jetpack to count visits and understand which content is most useful. These do not personally identify you.
Most browsers allow you to refuse cookies or alert you when one is being set. Refer to your browser’s help documentation if you would like to adjust these settings. Disabling strictly necessary cookies will prevent core Site features from working.
6. Your rights
Depending on where you live, you may have specific legal rights regarding your personal information.
6.1 Rights for all customers
- You can request a copy of the information we hold about you.
- You can ask us to correct inaccurate information.
- You can ask us to delete your information, subject to limited exceptions (for example, we are required to retain order records for tax purposes).
- You can unsubscribe from marketing emails at any time using the unsubscribe link in any marketing email, or by emailing info@garipova.com. Transactional emails (order confirmations, shipping notifications) cannot be unsubscribed from while you have an active order.
6.2 California residents (CCPA / CPRA)
If you are a California resident, you may have additional rights under the California Consumer Privacy Act and the California Privacy Rights Act, including the right to know what personal information we collect, the right to request deletion, the right to correct inaccurate information, and the right to opt out of the sale or sharing of personal information. We do not sell personal information.
6.3 Connecticut residents (CTDPA)
If you are a Connecticut resident, you may have additional rights under the Connecticut Data Privacy Act, including the right to access, correct, delete, and obtain a copy of your personal data, and the right to opt out of certain processing. We do not currently engage in targeted advertising or sale of personal data.
6.4 How to exercise these rights
To exercise any of the rights described above, email us at info@garipova.com with the subject line “Privacy request” and a description of what you would like us to do. We may need to verify your identity (for example, by confirming details of a recent order) before acting on the request. We will respond within 30 days, or sooner where required by applicable law.
7. How long we keep your information
- Order records — we retain customer name, address, order details, and payment confirmation for as long as required by U.S. and Connecticut tax and business-records law (typically seven years).
- Email subscribers — until you unsubscribe, after which your address is removed from active mailing lists. We may retain a record of the unsubscribe request itself to honor it.
- Customer service correspondence — typically retained for two years after the last interaction, then deleted.
- Server and security logs — typically retained for 30 to 90 days.
8. Security
We use industry-standard measures to protect your information, including HTTPS encryption for data in transit, access controls on the WordPress admin, and reputable third-party services for payment, hosting, and email. However, no method of transmission over the Internet or storage is 100% secure. We cannot guarantee absolute security and we do not promise it.
If we ever experience a data breach affecting your personal information, we will notify you as required by applicable law.
9. Children’s privacy
The Site is not directed to children under 16, and we do not knowingly collect information from children under 16. If you believe we have inadvertently collected information from a child under 16, please email info@garipova.com and we will delete it promptly.
10. Visitors outside the United States
We currently sell only to customers in the United States. The Site is hosted in the United States and your information is processed in the United States. If you are visiting from outside the United States, please understand that your information will be transferred to and processed in the United States, which may have different data-protection laws than your home country.
11. Updates to this Privacy Policy
We may update this Privacy Policy from time to time. The current version is always posted on this page, and the “Last updated” date at the top reflects the most recent revision. If we make material changes that affect how we use your information, we will provide reasonable notice — typically via email to recent customers and a prominent notice on the Site.
12. Contact
Questions about this Privacy Policy or how we handle your information? Please reach us:
- Email: info@garipova.com
Last updated: 2026-04-25.