Privacy Policy
Depothollowly LLC ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit depothollowly.christmas or make a purchase from us. It is designed to comply with the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
1. Data Controller
Depothollowly LLC14 Pinecrest Depot Lane
Asheville, NC 28801, United States
Email: [email protected]
2. Information We Collect
- Information you provide: name, billing and shipping address, email address, telephone number, and order details when you make a purchase or contact us.
- Payment information: processed securely by our payment providers; we do not store full card numbers.
- Automatically collected data: IP address, browser type, device information, and pages visited, gathered via cookies and analytics tools.
3. How We Use Your Information
- To process and deliver your orders and provide customer support.
- To send transactional communications and, with consent, marketing emails.
- To improve our website, products, and services through aggregated analytics.
- To comply with legal obligations and prevent fraud.
4. Legal Bases for Processing (GDPR)
We process personal data on the basis of contract performance (fulfilling your order), legitimate interests (improving our services and securing our site), consent (marketing and non-essential cookies), and legal obligation (tax and accounting requirements).
5. Cookies & Analytics
We use cookies to operate the website, remember preferences, and understand how visitors use our depot. You can manage your cookie preferences through our consent banner at any time. For full details, see our Cookie Policy.
6. Data Sharing
We share data only with trusted service providers necessary to operate our business — payment processors, shipping carriers, and analytics providers — all bound by data protection agreements. We never sell your personal data.
7. International Transfers
Where data is transferred outside your jurisdiction, we rely on appropriate safeguards such as Standard Contractual Clauses to ensure your information remains protected.
8. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes described here, including legal, accounting, or reporting requirements. Order records are typically retained for seven years to satisfy tax obligations.
9. Your Rights
Under the GDPR and CCPA, you have the right to access, correct, delete, or restrict processing of your personal data; to data portability; to object to processing; and to withdraw consent at any time. California residents may request disclosure of collected data and opt out of any sale of personal information (we do not sell data). To exercise any right, contact [email protected].
10. Security
We implement appropriate technical and organisational measures — including encryption in transit, access controls, and secure hosting — to protect your data against unauthorised access, alteration, or disclosure.
11. Children's Privacy
Our website is not directed at children under 16, and we do not knowingly collect personal data from children.
12. Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be posted on this page with a revised update date.
13. Contact & Complaints
For any privacy question, contact us at [email protected]. EU residents also have the right to lodge a complaint with their local data protection authority.
Last Updated: July 2026