Privacy Policy

Last updated: January 2025

Introduction

LUNTO BISTRO LLC, doing business as LUNTO BISTRO Store ("we," "us," or "our"), respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains what information we collect, how we use and protect it, and the choices you have regarding your data when you visit acesuppliesllc.com or make a purchase from us.

Information We Collect

When you visit or shop at LUNTO BISTRO Store, we may collect the following categories of information:

• Contact information: your name, email address, phone number, and shipping/billing address
• Order information: items purchased, order value, size and color selections, and order history
• Payment information: processed securely by PayPal — we never see or store your full card number on our servers
• Account information: if you create an account, your login credentials and saved preferences
• Communications: messages you send us through our contact form, email, or customer support channels
• Automatically collected data: IP address, browser type, device type, referring URL, pages viewed, and time spent on our site

How We Use Your Information

We use the information we collect to:

• Process and fulfill your orders, including payment processing, shipping, and returns
• Send order confirmations, shipping updates, and customer service communications
• Respond to your questions, comments, and support requests
• Detect and prevent fraud, unauthorized transactions, and other illegal activities
• Improve our website, product catalog, and overall shopping experience
• Send you marketing emails and newsletters, if you have opted in to receive them

We do not sell your personal information to third parties for their own marketing purposes.

Cookies and Tracking Technologies

We use cookies and similar technologies to keep items in your shopping cart between visits, remember your login and preferences, and understand how visitors use our site so we can make improvements. Cookies may also be used by analytics providers to measure aggregate traffic patterns.

Third-Party Services

We work with a small number of trusted third-party service providers to operate our business:

• PayPal — processes payments securely; PayPal's own privacy policy governs information you provide directly to them during checkout
• Shipping carriers (USPS, UPS, FedEx) — receive your shipping address to deliver your order
• Analytics providers such as Google Analytics — help us understand aggregate site traffic and usage patterns

These providers only receive the information necessary to perform their specific function and are not permitted to use your data for unrelated purposes.

Data Security

We use industry-standard security measures, including SSL encryption on all pages that collect personal or payment information, to protect your data from unauthorized access, alteration, or disclosure. While no method of transmission over the internet is 100% secure, we work continuously to protect your information using commercially reasonable safeguards.

Data Retention

We retain order records for as long as necessary to comply with tax, accounting, and other legal obligations, which is typically up to 7 years. Account and marketing information is retained until you request deletion or close your account, whichever comes first.

Your Rights (GDPR / CCPA)

Depending on where you live, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your personal data, subject to legal recordkeeping requirements
• Opt out of marketing communications at any time, using the unsubscribe link in every email we send
• Request a copy of your data in a portable format

To exercise any of these rights, contact us using the information below. We will respond to verified requests within a reasonable timeframe as required by applicable law.

Children's Privacy

Our website is not directed at children under the age of 13, and we do not knowingly collect personal information from children. If we learn that we have inadvertently collected information from a child under 13, we will delete it promptly.

International Visitors

Our site is hosted and operated in the United States. If you are visiting from outside the U.S., please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will post the updated policy on this page with a revised "Last updated" date.

How We Protect Payment Information

All payment transactions on our site are processed through PayPal's secure, PCI-compliant payment infrastructure. When you enter your card details during checkout, that information is transmitted directly and securely to PayPal — it never passes through or is stored on our own servers. This means our team never has access to your full card number, expiration date, or security code at any point in the transaction.

Marketing Communications and Opt-Out

If you subscribe to our newsletter or opt in to marketing emails at checkout, we may send you information about new arrivals, promotions, and seasonal collections. You can unsubscribe at any time by clicking the unsubscribe link at the bottom of any marketing email, or by emailing us directly at [email protected] with "unsubscribe" in the subject line. Opting out of marketing emails will not affect transactional emails, such as order confirmations and shipping updates, which are necessary to fulfill your order.

Do Not Track Signals

Some browsers offer a "Do Not Track" (DNT) signal that lets you indicate your preference regarding tracking across websites. Because there is currently no uniform industry standard for how to respond to DNT signals, our site does not currently respond differently based on DNT settings. We encourage privacy-conscious visitors to manage cookies directly through their browser settings.

Social Media

We may maintain profiles on third-party social media platforms. Any information you share with us through those platforms, such as comments or direct messages, is subject to that platform's own privacy policy in addition to this one. We do not control how third-party platforms use the information you provide to them directly.

Accessibility of This Policy

We want this policy to be easy to find and easy to understand. It is available at all times on our website footer, and we are happy to answer any questions about our data practices directly — just reach out using the contact information below.