Privacy Policy

Privacy Policy

Privacy Policy


The following Privacy Policy is intended to inform you about how we use your personal information. We process personal information in accordance with applicable privacy and data protection laws, including, where applicable, United States privacy laws and the EU General Data Protection Regulation (“GDPR”).


Data Controller

A “data controller” is a person or organization who alone or jointly determines the purposes for which, and the manner in which, personal data is processed. In this sense, Walkingdots LLC, 5830 E 2ND ST, STE 7000 #3630, Casper, 82609, WY, USA (“Hommage”, “we”, “us”, “our”) is the data controller.

If you want to contact us or if you have any questions about data protection at Hommage, please email us at info@hommagestore.com with “Data Protection” in the subject line.


Scope of the processing of personal information

As a matter of principle, we only collect and use personal information insofar as this is necessary to provide a functional website and our content, Products and services, for example when you subscribe to our newsletter, use customer-account functionality, contact us, or place an order for our Products.

The collection and use of your personal information takes place only where permitted by applicable law and on an appropriate legal basis, including where you have given your consent, where processing is necessary for the performance of a contract or steps taken before entering into a contract, where processing is necessary to comply with a legal obligation, or where processing is necessary for our legitimate interests or those of a third party and such interests are not overridden by your rights and interests.


Security

The security of your personal information is a high priority for us. We therefore use appropriate technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration or disclosure. Persons who process personal information on our behalf are subject to appropriate confidentiality and data-protection obligations.

Our website uses encrypted connections, including HTTPS/TLS, for the transmission of information between your browser and our website where applicable. We periodically review our technical and organizational security measures and adapt them where appropriate. These principles also apply, where relevant, to service providers that process personal information on our behalf.


Purposes of processing and legal basis

We collect, process and use your personal information for the following purposes:


  • Establishment and performance of contractual relationships;
  • Processing and fulfilling orders for our Products;
  • Payment processing;
  • Shipping, delivery and order fulfillment;
  • Processing returns, refunds, warranty claims and customer service requests;
  • Sending newsletters;
  • Marketing measures;
  • Customer satisfaction surveys and analyses;
  • Product evaluations;
  • Customer service and customer support;
  • Fraud prevention, security and enforcement of our rights where necessary.


The processing of your personal information may be based on the following legal grounds:


  • Consent: the individual has given clear consent to process personal information for a specific purpose (Art. 6 (1) a) GDPR).
  • Contract: the processing is necessary for a contract or because you have asked us to take specific steps before entering into a contract (Art. 6 (1) b) GDPR).
  • Legal obligation: the processing is necessary for us to comply with the law (not including contractual obligations) (Art. 6 (1) c) GDPR).
  • Legitimate interests: the processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal information which overrides those legitimate interests (Art. 6 (1) f) GDPR).


Duration of storage and routine deletion of personal information

We process and store your personal information only for the period of time required to fulfil the purpose of storage or if this has been provided for, in laws or regulations. After the purpose has ceased to exist or has been fulfilled, your personal information will be deleted or blocked.


In the case of blocking, deletion will take place as soon as legal, statutory, or contractual retention periods do not conflict with this, there is no reason to assume that deletion would impair your interests worthy of protection and deletion would not cause a disproportionately high expense due to the special nature of the storage.


Log files

If you visit our website for information purposes only, without providing personal information via registration or in any other way, Internet connection data that your browser transmits to our server may be processed. Our website may collect general data and information with each request, which may be temporarily stored in server log files. The following may be recorded:

  • Access to the website (date, time and frequency);
  • How you arrived at the website (previous page, hyperlink etc.);
  • Amount of data sent;
  • Which browser and browser version you are using;
  • The operating system you are using;
  • Which internet service provider you use; and
  • Your IP address.

The processing of this data is necessary for the operation, security and technical functionality of the website, including to deliver website content correctly, identify and prevent misuse, and maintain the security of our systems. The legal basis for this processing is our legitimate interest (Art. 6 (1) f) GDPR).

Log data is retained only for as long as reasonably necessary for these purposes, subject to any longer retention required for security investigations, legal obligations or the establishment, exercise or defense of legal claims.

Where we use technical or usage data for analytics, advertising, market research or the creation of pseudonymous usage profiles, such processing will take place only to the extent permitted by applicable law and, where required, subject to your consent or privacy preferences.


Shopify

We use the ecommerce platform Shopify to host and operate our online store and to provide related ecommerce, customer-account, checkout, order-management and other services.

In connection with these services, personal information may be processed by Shopify Inc., Shopify International Limited and other Shopify group companies and subprocessors, depending on the services used, your location and the nature of the processing.

Shopify may process personal information in countries other than the country in which it was originally collected. Where required by applicable data protection law, Shopify uses appropriate mechanisms for international data transfers, including adequacy decisions and contractual safeguards.

The legal basis for our use of Shopify is the performance of our contract with you where processing is necessary to operate and fulfil your order (Art. 6 (1) b) GDPR) and our legitimate interest in operating and providing a secure and functional online store (Art. 6 (1) f) GDPR).

Further information about Shopify’s processing of personal information is available in Shopify’s Privacy Policy.


Security and Anti-Bot Technologies

We use security and anti-bot technologies provided by Shopify and its service providers to protect our website, customer accounts and forms against spam, fraud, automated abuse and malicious traffic.

These technologies may include services such as Cloudflare and hCaptcha and may process technical information such as IP address, browser information, device information and interaction data for security and fraud-prevention purposes.

The legal basis for this processing is our legitimate interest in operating a secure, reliable and abuse-resistant website (Art. 6 (1) f) GDPR).

 

Use of cookies

We use cookies and similar technologies on our website. Cookies are small text files that are stored on your device and saved by your browser.

Some cookies and similar technologies are necessary for the operation, security and functionality of our website and may be used without consent where permitted by applicable law.

Other cookies and similar technologies may be used for purposes such as analytics, personalization or marketing, subject to applicable legal requirements and, where required, your consent.

You can manage your cookie preferences through the cookie settings available on our website. For further information about the cookies and similar technologies we use, please refer to our Cookie Policy.


Sending information

We may use your contact details to send you information about our Products, offers and other communications where permitted by applicable law.

a) Newsletter registration on our website

On our website, you have the option to subscribe to our newsletter. When you register, the information entered in the relevant form, including at least your email address, is transmitted to us and processed for this purpose.

Where required, registration may be carried out using a double opt-in or other confirmation procedure in order to verify the subscription and help prevent unauthorized use of email addresses.

If you subscribe to our newsletter, the personal information you provide in this context will be processed for the purpose of sending you information about our Products, offers, editorial content and services. The legal basis for this processing is your consent (Art. 6 (1) a) GDPR) where consent is required.

You may withdraw your consent or unsubscribe from marketing communications at any time with effect for the future by using the unsubscribe link contained in our emails or by contacting us at info@hommagestore.com.

We currently use Omnisend as a service provider for the management and distribution of email marketing and related communications. Omnisend may process personal information on our behalf as necessary to provide these services.

b) Communications in connection with purchases and shopping activity

Where permitted by applicable law, we may use contact details obtained in connection with the purchase or proposed purchase of our Products to send information about our own similar Products or services.

Such communications will only be sent where the applicable legal requirements are met. Where required, you will be given an opportunity to refuse or opt out of such communications when your contact details are collected and in each subsequent marketing communication.

We may also use services such as Omnisend to send communications relating to shopping activity, including reminders concerning items left in a shopping cart, where permitted by applicable law and subject to any consent or other requirements that apply.

You may object to the use of your personal information for direct marketing at any time. Once you object, we will cease processing your personal information for that purpose to the extent required by applicable law.

Email performance and analytics

Where permitted by applicable law and subject to your consent where required, we may measure information relating to our communications, such as whether an email was delivered, opened or interacted with, and which links were selected.

We use this information to evaluate and improve our communications and marketing activities. The applicable legal basis may include your consent (Art. 6 (1) a) GDPR) or our legitimate interests (Art. 6 (1) f) GDPR), depending on the circumstances and applicable law.

You may unsubscribe from marketing communications at any time by using the unsubscribe link provided in the relevant message or by contacting us at info@hommagestore.com.


Contacting us, customer accounts or placing orders

 

a) Contacting us

When you contact us by email, through our website, social media or another communication channel, we process the personal information you provide insofar as this is necessary to respond to your inquiry, provide customer service, process requests, or prepare for or perform a contract with you.

Depending on the nature of your request, the legal basis for this processing may be your consent (Art. 6 (1) a) GDPR), the performance of a contract or steps taken at your request before entering into a contract (Art. 6 (1) b) GDPR), compliance with a legal obligation (Art. 6 (1) c) GDPR), or our legitimate interests (Art. 6 (1) f) GDPR).

We may retain communications and related information for as long as reasonably necessary to deal with your request and for applicable legal, contractual, record-keeping, dispute-resolution or defense purposes.

b) Customer accounts

Where customer accounts are available, we process the personal information necessary to create, maintain and provide access to your customer account and its functions.

Customer accounts may allow you to view and manage orders, update certain profile or address information, access order status information, submit return requests or use other account-related services made available by us.

The processing of personal information in connection with customer accounts is necessary for the performance of our services and contractual relationship with you or for steps taken at your request before entering into a contract (Art. 6 (1) b) GDPR).

Depending on the account and checkout functions provided through our ecommerce platform, a customer profile may be created or associated with your email address when you place an order or use account functionality.


c) Storage of data in the customer account and customer profile

For the conclusion and processing of contracts, we may require information such as your name, delivery and billing address, email address, telephone number where applicable, and information concerning the payment method selected.

Depending on the services and account functions you use, your customer profile or account may also contain order history, delivery addresses, return information and other information relating to your transactions with us.

We use this information to process and fulfil orders, maintain our customer records, provide account functionality, communicate with you concerning your purchases and, where appropriate, verify the completeness or accuracy of information necessary for delivery and fulfillment.

Following an order, we may send you order confirmations, shipping or fulfillment information, payment-related notices, return information and other documents or communications necessary to perform the contract or comply with applicable legal obligations. The relevant legal bases include (Art. 6 (1) b) GDPR) and, where applicable, (Art. 6 (1) c) GDPR).

d) Orders without signing in

Where our checkout permits you to place an order without signing in to a customer account, we collect and process the personal information you provide in order to process, fulfil and administer your order.

Such information may include your contact details, billing and delivery information, order information and other information necessary to complete the transaction.

The processing is necessary for the performance of the contract with you (Art. 6 (1) b) GDPR) and, where applicable, for compliance with legal obligations (Art. 6 (1) c) GDPR).

Information relating to an order may be retained for as long as reasonably necessary for fulfillment, returns, refunds, warranty matters, accounting, tax, fraud prevention, dispute resolution, legal compliance and the establishment, exercise or defense of legal claims.

e) Order and dispatch communications

In order to process and perform our contract with you, we use your contact details to send communications such as order confirmations, payment information, shipping or dispatch confirmations, tracking information, customer-service communications, return or refund information and other transaction-related notices.

The processing of personal information for these purposes is necessary for the performance of our contract with you (Art. 6 (1) b) GDPR) and, where applicable, for compliance with our legal obligations (Art. 6 (1) c) GDPR)

f) Other purposes

    Based on our legal obligations (Art. 6 (1) c) GDPR) and our legitimate interests (Art. 6 (1) f) GDPR), we may process and retain personal and technical information to the extent necessary to detect, prevent, investigate or respond to fraud, misuse, unlawful activity, security incidents or attacks on our website or systems.

    We may also process and retain such information where necessary to comply with official, regulatory or court orders, to comply with applicable law, or for the establishment, exercise or defense of our rights and legal claims.


    Disclosure of personal information to third parties

    We disclose personal information only where this is necessary for the purposes described in this Privacy Policy, where required or permitted by applicable law, or to service providers and business partners that support the operation of our website, store and services. Where required by applicable law, such service providers are subject to appropriate contractual and data protection obligations.

    a) Disclosure within affiliated companies

    Where applicable, we may share personal information with affiliated companies to the extent necessary for the operation of our business, the conclusion and performance of contracts, customer service, administration, or the provision of our Products and services.

    Where an affiliated company receives access to personal information, such information may only be used for the relevant purposes and in accordance with applicable data protection requirements.


    b) Disclosure to service providers and business partners

    For the operation and optimization of our website and services and for the processing and fulfillment of orders, we use service providers and business partners in areas including:

    • ecommerce hosting and store operation;
    • payment processing;
    • production and order fulfillment;
    • shipping and logistics;
    • returns and warranty processing;
    • customer service;
    • email and marketing communications;
    • product reviews and customer feedback;
    • analytics, security and fraud prevention; and
    • other technical and administrative services.

    We provide these parties only with personal information reasonably necessary for the relevant purpose, subject to applicable law.

    Some service providers process personal information on our behalf and in accordance with our instructions. Other providers may process personal information under their own legal responsibilities where this is necessary to provide their services.


    In particular, and depending on the Product or service involved, personal information may be disclosed to:

    • Shopify and its relevant group companies and subprocessors for ecommerce hosting, customer accounts, checkout, order management, payments and related store services;
    • Gelato and its production and logistics partners for the production and fulfillment of made-to-order art prints;
    • our U.S. jewelry fulfillment partner and relevant shipping carriers for jewelry fulfillment, delivery and returns;
    • Omnisend for email marketing, customer communications and related marketing services;
    • Judge.me for product reviews, review requests and related customer-feedback services;
    • payment providers made available at checkout, including Shopify Payments and PayPal where available; and
    • postal, courier, logistics and other service providers necessary to deliver or return Products.
    • Google for website analytics and related measurement services where enabled;
    • Pinterest for advertising, audience, attribution and measurement services where enabled;

    Payment information is processed through the payment providers made available at checkout. We do not ordinarily receive or store full payment card numbers or complete bank account credentials. We may receive limited payment and transaction information necessary to administer an order, such as the payment method, transaction status and other payment-related details made available by the relevant payment provider.

    c) Disclosure to other third parties

    We may disclose personal information to third parties, courts, regulatory authorities, law-enforcement agencies or other government bodies where we are legally required or permitted to do so, including in response to valid official or court orders, for the prevention or investigation of fraud or criminal activity, for compliance with applicable law, or for the establishment, exercise or defense of our rights and legal claims.


    Data transfer to third countries

    If personal information is transferred to service providers or other recipients located outside the European Economic Area or another jurisdiction recognized as providing an adequate level of data protection, we take appropriate measures to ensure that such transfers comply with applicable data protection law.

    Where required, this may include reliance on adequacy decisions, Standard Contractual Clauses approved by the European Commission, or other recognized transfer mechanisms and safeguards under applicable law. Additional technical or organizational measures, such as encryption or other appropriate safeguards, may also be used where necessary.


    Google Analytics

    We use Google Analytics, a web analytics service provided by Google, to better understand how visitors use our website and to help us analyze and improve its performance, content and usability.

    Google Analytics may process information relating to your device, browser, approximate location and interactions with our website in accordance with Google's applicable settings and privacy practices.

    Where required by applicable law, Google Analytics and related analytics technologies are used only subject to your consent and privacy preferences. The legal basis for such processing is your consent (Art. 6 (1) a) GDPR) where consent is required. Where processing without consent is permitted by applicable law, processing may be based on our legitimate interest in analyzing and improving our website (Art. 6 (1) f) GDPR).

    You can manage or withdraw your analytics preferences through the cookie settings available on our website. Further information about Google's handling of information is available in Google's Privacy Policy.


    Social Media

    Based on our legitimate interest (Art. 6 (1) f) GDPR), we maintain profiles and a presence on social media platforms, including Facebook, Instagram and Pinterest, in order to communicate with customers, interested parties and users, provide information about our Products and brand, and promote our offers.

    When you visit or interact with these platforms, the respective platform provider may process personal information about you in accordance with its own privacy policies and terms. This may include information about your interactions, interests and usage behavior and may be used by the platform provider for analytics, market research, personalization or advertising purposes.

    Usage profiles may be created by the respective platform providers based on your interactions and interests, particularly where you are registered with and logged into the relevant platform.

    Where we use social-media pixels, tags or similar advertising and measurement technologies on our own website, such technologies are used subject to applicable legal requirements and, where required, your consent and cookie preferences.


    Links to other providers

    Our website may contain links to websites or services operated by third parties. Insofar as there are links to websites of other providers, we have no control over their content, privacy practices or availability. The respective provider or operator of the linked website is responsible for its content and processing of personal information.

    The linked pages were checked for recognizable legal violations at the time the links were created. However, permanent monitoring of linked content is not reasonable without concrete indications of a legal violation. If we become aware of unlawful content or other legal infringements, we will remove the relevant link where appropriate.


    Fonts

    Our website may use web fonts for the consistent display of text and design elements. Depending on the font and technical implementation used by our website or theme, fonts may be delivered through Shopify's infrastructure or, where applicable, through a third-party font provider.

    Where a third-party font provider is used, technical information such as your IP address and browser information may be transmitted to that provider as necessary to deliver the font. Such processing takes place subject to applicable data protection requirements.

     

    Your rights and privileges 

    a) Privacy rights

    Depending on the applicable law and the circumstances of the processing, you may have rights including:

      • the right to access your personal information;
      • the right to rectification of inaccurate or incomplete personal information;
      • the right to erasure;
      • the right to restrict processing;
      • the right to object to processing;
      • the right to data portability; and
      • rights relating to certain automated decision-making and profiling.

    These rights may be subject to conditions, limitations or exceptions under applicable law.

    b) Update your information and withdraw your consent

    If you believe that personal information we hold about you is inaccurate or incomplete, or if you wish to request rectification, deletion, restriction of processing, withdraw consent or object to processing, you may contact us using the details provided in this Privacy Policy.

    Where processing is based on consent, you may withdraw that consent at any time with effect for the future. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

    c) Access requests

    If you wish to exercise a privacy right or make a data subject access request, please contact us.

    We may request information reasonably necessary to verify your identity before processing your request.

    We will respond within the period required by applicable law. Under the GDPR, requests must generally be handled without undue delay and, in principle, within one month of receipt, subject to permitted extensions in certain circumstances.

    If we are unable to comply with a request in whole or in part, we will provide the information or explanation required by applicable law.


    d) What we do not do

    We do not knowingly request personal information directly from children in circumstances where such collection would be prohibited by applicable law.

    We do not intentionally process special category personal data unless there is an appropriate lawful basis and any additional conditions required by applicable law are satisfied.

    We do not currently make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you, unless otherwise permitted by applicable law.

    We do not sell personal information in the ordinary commercial sense of selling customer lists or personal information for money. Where applicable privacy law defines “sale” or “sharing” more broadly, including certain advertising-related disclosures, we will provide any rights or opt-out mechanisms required by that law.


    e) Competent data protection authority

    If you believe that the processing of your personal information is unlawful, you may have the right to lodge a complaint with the competent privacy or data protection authority applicable to you.

    In the United States, complaints may in appropriate circumstances be directed to the relevant state Attorney General or other competent authority. Individuals in the European Union or European Economic Area may lodge a complaint with the competent supervisory authority in their jurisdiction.

    We would, however, appreciate the opportunity to address your concerns before you contact a supervisory authority.


    f) Data Breaches and Notification

    In the event of a personal data breach, we will investigate and respond in accordance with applicable law. Where required, we will notify the competent supervisory or regulatory authority and affected individuals within the time and in the manner required by applicable law.

    We may also take appropriate technical, organizational and remedial measures to contain, investigate and mitigate the effects of the incident.


    USA Specific Provisions

    The following provisions apply to users in the United States to the extent required by applicable federal or state privacy law.

    Privacy and consumer data protection laws vary between U.S. states and may change over time. Where an applicable state privacy law provides you with specific rights concerning your personal information, we will process eligible requests and provide applicable rights in accordance with that law.

    Depending on the law that applies, such rights may include the right to access, correct or delete personal information, obtain a copy of certain personal information, or opt out of certain forms of targeted advertising, profiling, sale or sharing of personal information.

    The following additional provisions may also apply:

    i) California “Shine the Light”

    California Civil Code Section 1798.83 may provide California residents with certain rights concerning the disclosure of personal information to third parties for their own direct marketing purposes.

    Where this law applies to us, you may submit a request using the contact details provided in this Privacy Policy.

    ii) Children’s Privacy and COPPA

      Our website and Products are not directed to children under the age of 13, and we do not knowingly collect personal information online from children under 13 in circumstances subject to the Children’s Online Privacy Protection Act (“COPPA”).

      If we become aware that personal information has been collected from a child under 13 in violation of applicable law, we will take appropriate steps to address the matter.

        iii) CAN-SPAM Act

        Where we send commercial email communications subject to the CAN-SPAM Act, we will comply with applicable requirements relating to commercial email, including providing a means to unsubscribe from marketing communications.

        You may opt out of future marketing emails by using the unsubscribe link provided in the communication or by contacting us at info@hommagestore.com.

        Opting out of marketing communications does not prevent us from sending transactional or service-related communications that are necessary in connection with your orders, account, returns, warranty matters or other transactions.

          iv) Telephone Consumer Protection Act (TCPA)

          Where we offer SMS or other telephone-based marketing communications, we will process personal information and send such communications in accordance with applicable law and any consent requirements that apply.

          Where applicable, you may withdraw your consent to receive marketing text messages by replying STOP or by using another opt-out method provided in the message.

          Withdrawal from marketing communications does not affect necessary transactional communications where permitted by applicable law.

            v) Do-Not-Track and Opt-Out Preference Signals

            Some browsers and devices offer privacy preference signals, including “Do Not Track” (“DNT”) and opt-out preference signals such as Global Privacy Control (“GPC”).

            There is currently no universally applicable standard requiring all websites to respond to every DNT signal. However, where applicable law requires us to recognize an opt-out preference signal, including GPC or another legally recognized mechanism, we will process that signal in accordance with applicable legal requirements.

            Additional privacy choices may also be available through the cookie and privacy settings provided on our website.

            vi) Right to complain

            Where applicable U.S. privacy law provides a right to submit a complaint or exercise privacy rights through a state Attorney General or other competent authority, you may do so in accordance with the applicable law.

            We would appreciate the opportunity to address your concerns first, and you may contact us at info@hommagestore.com.

             

            Canada and Mexico Specific Provisions

            Users in Canada and Mexico may have additional rights under applicable privacy and data protection laws.

            In Canada, the Personal Information Protection and Electronic Documents Act (“PIPEDA”) and, where applicable, substantially similar provincial privacy laws may govern the collection, use and disclosure of personal information in the course of commercial activities. Where such laws apply, we will process personal information and eligible privacy requests in accordance with the applicable requirements.

            In Mexico, personal information may be subject to the Federal Law on Protection of Personal Data Held by Private Parties and other applicable privacy requirements. Where such laws apply, we will process personal information and eligible privacy requests in accordance with the applicable requirements.

            If you wish to exercise privacy rights or raise a concern, you may contact us using the details provided in this Privacy Policy. You may also have the right to complain to the competent privacy or data protection authority in your jurisdiction.

            In Canada, the federal supervisory authority is the Office of the Privacy Commissioner of Canada, subject to the jurisdiction of applicable provincial authorities.

            In Mexico, relevant federal privacy functions are currently exercised by the Secretaría Anticorrupción y Buen Gobierno, subject to applicable law and institutional responsibilities.


            Help and Complaints

            If you have any questions, requests or concerns about this Privacy Policy or about the way we process your personal information, you can contact us by email at info@hommagestore.com with “Data Protection” in the subject line.

            We will make reasonable efforts to address your request or concern in accordance with applicable law. Nothing in this section limits any right you may have to lodge a complaint with a competent privacy or data protection authority.


            Changes

            We may update this Privacy Policy from time to time to reflect changes in our business, website, Products, services, data-processing practices or applicable legal requirements.

            The current version will be published on our website with an updated effective or revision date. Where required by applicable law, we may provide additional notice of material changes or obtain consent where necessary.

            Last updated: September 2026.