Privacy Policy

This site is operated by RUGLAB, registered at 26 Bailey Street, Newtown, NSW 2042, Australia, company number [À COMPLÉTER — company / registration number]. We are the data controller for the personal data described here. Contact for any data question: ruglabcontact@gmail.com.

• Identity and contact data: name, email address, phone number.
• Order data: shipping and billing address, order history, delivery status.
• Payment data: processed directly by Shopify and its payment providers. We receive only the transaction result and the last digits and card type — never the full card number.
• Custom rug requests: the description, images and files you upload, plus the size and budget you indicate.
• Technical data: IP address, device and browser type, pages viewed, and referring source.
• Marketing data: your email address if you subscribe to our newsletter.

• To process, produce, ship and track your order (performance of a contract).
• To answer your messages and custom rug enquiries (legitimate interest).
• To handle returns, refunds, warranty and carrier claims (contract / legal duty).
• To prevent fraud and secure the site (legitimate interest).
• To send newsletters and offers, only with your consent — you can unsubscribe at any time.
• To keep accounting and tax records (legal obligation).

We do not sell your personal data.

We share data only with providers who need it to deliver our service:

• Shopify — e-commerce platform, cart, checkout and order management.
• Payment processors — card and wallet payments, fraud checks.
• Production partners and carriers — to manufacture and deliver your rug.
• Email and hosting providers — transactional emails and site infrastructure.
• Analytics providers — aggregated site usage.
• Authorities or advisers — where required by law.

Some of these providers are located outside the European Economic Area. In that case transfers are covered by appropriate safeguards such as the European Commission's Standard Contractual Clauses.

We use strictly necessary cookies to run the cart, checkout and security features — these cannot be disabled. We may also use analytics and marketing cookies to understand how the site is used and measure advertising. Non-essential cookies are only set with your consent where required, and you can clear or block cookies in your browser settings at any time.

If you are in the European Union, the United Kingdom or another region with equivalent law, you have the right to access your data, to have it corrected, to have it erased, to restrict or object to processing, to data portability, and to withdraw consent at any time for processing based on consent.

To exercise any of these rights, email ruglabcontact@gmail.com. We reply within 30 days. You also have the right to lodge a complaint with the data protection authority of [À COMPLÉTER — country / applicable jurisdiction].

• Order and invoice records: 10 years, to meet accounting and tax obligations.
• Customer account and contact data: as long as the account is active, then 3 years.
• Custom rug requests and uploaded artwork: 24 months after the last exchange.
• Newsletter data: until you unsubscribe, then removed within 30 days.
• Analytics data: 14 months maximum.

Traffic is encrypted with HTTPS, payments run on PCI-DSS compliant infrastructure, and access to customer data is restricted to those who need it. No method of transmission is completely secure, but we take reasonable measures to protect your data and will notify you and the competent authority of any breach as required by law.

This site is not intended for children under 16. We do not knowingly collect their data; if you believe we have, contact us and we will delete it.

We may update this policy; the current version is always published on this page. Questions about your data: ruglabcontact@gmail.com, RUGLAB, 26 Bailey Street, Newtown, NSW 2042, Australia.