Catori Life LLC ("Catori Life," "we," "us," or "our") respects your privacy. This Privacy Policy explains what personal information we collect when you visit the Site or purchase from us, how we use it, who we share it with, and the rights you have over it.

1. Who We Are

The data controller is Catori Life LLC, 174 Tesuque Village Rd #689, Tesuque, NM 87574, USA. For privacy questions or to exercise your rights, contact privacy@catorilife.com or +1 (505) 333-9358.

2. Information We Collect

We collect the following categories of personal information:

• Identifiers — name, email address, billing and shipping address, phone number, account login credentials, IP address, and device identifiers.
• Commercial information — purchase history, products viewed, items in your cart, returns, and exchanges.
• Internet and network activity — pages visited, time on pages, referring URL, browser type, and clickstream behavior collected through cookies and similar technologies.
• Approximate geolocation — derived from your IP address and the shipping address you provide. We do not collect precise GPS location.
• Communications — messages you send to customer care, product reviews, and survey responses.
• Inferences — preferences and characteristics drawn from the above (for example, product categories you may like).

We do not knowingly collect Social Security numbers, government ID numbers, precise geolocation, biometric data, health information, or other categories defined as "sensitive" under US state privacy laws or GDPR Article 9. Payment card numbers are entered directly into our payment processors and are not stored on our servers.

3. How We Collect It

• Directly from you — when you create an account, place an order, sign up for emails, contact us, or leave a review.
• Automatically — through cookies, pixels, and server logs when you browse the Site.
• From service providers — payment processors, shipping carriers, fraud-prevention tools, and our e-commerce platform.
• From social platforms — if you click through from an ad or interact with our content on Instagram, TikTok, Pinterest, or similar.

4. Why We Use It

• To process and ship your orders, manage returns and exchanges, and provide customer service.
• To process payments and prevent fraud.
• To create and manage your account and our rewards program.
• To send transactional emails (order confirmations, shipping updates).
• To send marketing emails or SMS messages, but only if you have opted in. You can unsubscribe at any time.
• To operate, secure, and improve the Site, including bot protection through hCaptcha.
• To analyze how the Site is used so we can improve it.
• To deliver relevant advertising on third-party platforms, where you have not opted out.
• To comply with legal obligations (tax, accounting, consumer-protection, and law-enforcement requests).

5. Legal Bases for Processing (EU, UK, and Swiss Customers)

If you are in the European Economic Area, the United Kingdom, or Switzerland, we rely on the following legal bases under the GDPR / UK GDPR:

• Contract — processing necessary to fulfill your order and manage your account.
• Legal obligation — tax, accounting, and regulatory recordkeeping.
• Legitimate interests — site security, fraud prevention, basic analytics, and improving our products and services. You have the right to object.
• Consent — marketing communications, non-essential cookies, and targeted advertising. You may withdraw consent at any time.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to make the Site work, remember your preferences, analyze traffic, and (where you consent) deliver relevant advertising. We use the following categories:

• Strictly necessary — required for the Site to function (cart, login session, hCaptcha, security). These cannot be disabled.
• Functional — remember your currency, language, and other preferences.
• Analytics — help us understand how the Site is used.
• Marketing and advertising — used by us and our advertising partners to show you relevant ads on third-party platforms.

You can manage your cookie preferences through the cookie banner displayed on your first visit and at any time through the "Cookie Preferences" link in our footer. You can also disable cookies in your browser settings. We honor the Global Privacy Control (GPC) signal as a valid opt-out of the sale or sharing of personal information for advertising purposes.

7. Who We Share Your Information With

We do not sell your personal information for money. We share your information only with the categories of recipients listed below, and only as necessary for the purposes described in Section 4. Some of these sharing arrangements may qualify as a "sale" or "sharing" under California, Colorado, Connecticut, and other US state privacy laws because they involve cross-context behavioral advertising. You may opt out at any time using the "Your Privacy Choices" link in our footer.

• Shopify Inc. — our e-commerce platform host.
• Payment processors — Shopify Payments, Klarna, PayPal, and similar providers, who process your payment under their own privacy policies. Klarna's privacy notice is available at klarna.com/international/privacy-policy.
• Shipping carriers — USPS, UPS, FedEx, DHL, and similar, to deliver your order.
• Returns and exchange providers — Corso, for processing returns.
• Marketing platforms — email and SMS marketing tools we use to send communications you have opted into.
• Loyalty program providers — Smile.io, for our rewards program.
• Bot-protection providers — hCaptcha (Intuition Machines, Inc.), to protect the Site from abuse.
• Advertising partners — Meta, Google, Pinterest, TikTok, and similar, where applicable and where you have not opted out.
• Professional advisors and government authorities — when required by law, court order, or to protect our legal rights.

If you would like a current list of the specific third parties to whom we have disclosed your personal information, you may request one by emailing privacy@catorilife.com. Rhode Island residents have a statutory right to receive this list.

8. Use of Personal Information for AI Training

We do not use your personal information to train large language models or other generative artificial intelligence systems, and we do not sell or share your personal information with third parties for that purpose.

9. International Data Transfers

We are based in the United States. If you are located outside the US, your information will be transferred to and processed in the US and other countries that may have data-protection laws different from those in your country. For transfers from the EEA, UK, or Switzerland, we rely on Standard Contractual Clauses or other lawful transfer mechanisms with our service providers. By using the Site, you understand that your information may be transferred to the US.

10. How Long We Keep Your Information

• Order and transaction records — at least 7 years, to comply with tax and accounting requirements.
• Account information — until you delete your account or request deletion.
• Marketing lists — until you unsubscribe or we determine the data is no longer current.
• Customer-service correspondence — typically 3 years from the date of last contact.

11. Your Privacy Rights

Depending on where you live, you may have the following rights:

• Right to know what personal information we collect, use, and share.
• Right to access a copy of your personal information.
• Right to correct inaccurate personal information.
• Right to delete personal information we hold about you, subject to legal exceptions.
• Right to data portability — to receive your information in a portable format.
• Right to opt out of the sale or sharing of personal information for cross-context behavioral advertising.
• Right to opt out of targeted advertising.
• Right to opt out of profiling that produces legal or similarly significant effects. We do not currently engage in such profiling.
• Right to limit the use of sensitive personal information. As noted in Section 2, we do not collect sensitive personal information.
• Right to non-discrimination for exercising your privacy rights.
• Right to appeal a denial of a privacy request.
• For EU, UK, and Swiss residents — right to withdraw consent, right to object to processing, and right to lodge a complaint with your local data-protection supervisory authority.

To exercise any of these rights, email us at privacy@catorilife.com or call +1 (505) 333-9358. We will verify your identity before responding and will respond within the timeframe required by applicable law (typically 30 to 45 days). You may also use an authorized agent, in which case we will require written proof of authorization.

If we deny your request, you may appeal by replying to our denial email or writing to privacy@catorilife.com with the subject line "Privacy Request Appeal."

12. "Do Not Sell or Share My Personal Information" / Your Privacy Choices

California, Colorado, Connecticut, and many other US states give residents the right to opt out of the sale or sharing of personal information for cross-context behavioral advertising. You can exercise this right in three ways:

• Click the "Your Privacy Choices" or "Do Not Sell or Share My Personal Information" link in our footer.
• Email privacy@catorilife.com with the subject line "Do Not Sell or Share."
• Enable Global Privacy Control (GPC) in your browser. We honor this signal automatically.

13. Children’s Privacy

The Site is not directed to children under 13 (or under 16 for residents of the EEA and UK), and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us at privacy@catorilife.com and we will delete it.

14. Security

We use industry-standard technical and organizational measures to protect your personal information, including encryption in transit (TLS/SSL), restricted access controls, and PCI-DSS-compliant payment processing through our payment providers. No method of transmission or storage is 100% secure, however, and we cannot guarantee absolute security.

15. SMS Marketing (if you opt in)

If you opt in to text messages from Catori Life, message and data rates may apply. Message frequency varies. Reply STOP to unsubscribe or HELP for help. Carriers are not liable for delayed or undelivered messages. Your phone number will not be sold or shared with third parties for their marketing purposes.

16. Notice for California Residents (CCPA/CPRA)

This Policy serves as our "Notice at Collection" under the California Consumer Privacy Act. The categories of personal information we collect, the purposes of collection, and the categories of recipients are described in Sections 2, 3, 4, and 7. We do not sell your personal information for money but may "share" it for cross-context behavioral advertising as defined by California law — you can opt out as described in Section 12. We retain personal information for the periods described in Section 10. California residents may also designate an authorized agent to act on their behalf.

17. Notice for EU, UK, and Swiss Residents

If you are in the EEA, UK, or Switzerland, you have the right to lodge a complaint with your local data-protection supervisory authority. A list of EU authorities is available at edpb.europa.eu. The UK supervisory authority is the Information Commissioner’s Office at ico.org.uk.

18. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. For material changes, we will provide additional notice (such as a banner on the Site or an email to registered customers).

19. Contact Us

Catori Life LLC
174 Tesuque Village Rd #689
Tesuque, NM 87574, USA
Email: customercare@catorilife.com
Phone: +1 (505) 333-9358