Privacy policy

Effective Date: April 10, 2026 Last Updated: April 10, 2026

Durca Chocolate ("we," "us," or "our") operates the durcachocolate.com website, including all related information, content, features, tools, products, and services (the "Services"), to provide you with a curated shopping experience for premium Ecuadorian cacao products. Our store is powered by Shopify, which enables us to provide these Services to you.

This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase using the Services, or otherwise communicate with us. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand our practices.

1. Personal Information We Collect or Process

When we use the term "personal information," we mean information that identifies or can reasonably be linked to you. We may collect or process the following categories of personal information:

Contact Details: Name, billing address, shipping address, phone number, and email address.
Financial Information: Payment card information, transaction details, and form of payment. (Note: Payment processing is handled securely through Shopify or our payment gateways; we do not store full credit card numbers).
Account Information: Username, password, preferences, and settings.
Transaction Information: Items you view, add to your cart, purchase, return, or cancel, and your past transactions.
Communications: Information included in customer support inquiries or other communications with us.
Device Information: Browser type, network connection, IP address, and unique device identifiers.
Usage Information: How and when you interact with or navigate our Services.

2. Personal Information Sources

We collect personal information from the following sources:

Directly from you: When you create an account, make a purchase, or contact us.
Automatically through the Services: From your device and through the use of cookies and similar tracking technologies.
From our Service Providers: Such as Shopify, who collects or processes data on our behalf.
From Partners or Third Parties: Including marketing partners.

3. How We Use Your Personal Information

We use personal information for the following purposes:

Provide, Tailor, and Improve the Services: To fulfill orders, process payments, arrange shipping, facilitate returns, manage your account, and remember your preferences.
Marketing and Advertising: To send promotional communications by email, text, or mail, and to show you targeted online advertisements based on your activity.
Security and Fraud Prevention: To authenticate accounts, secure payments, and detect or investigate fraudulent or illegal activity.
Communicating with You: To provide customer support and respond to inquiries.
Legal Reasons: To comply with applicable laws, respond to legal requests, and enforce our terms and policies.

4. How We Disclose Personal Information

We may disclose your personal information to third parties in the following circumstances:

Service Providers: With Shopify, payment processors, fulfillment centers, IT managers, and customer support tools who perform services on our behalf.
Business and Marketing Partners: To provide marketing services and targeted advertising. You have the right to opt-out of these disclosures.
With Your Consent: When you direct us to share information (e.g., social media integrations).
Corporate Affiliates: Within our corporate group.
Legal Obligations and Business Transfers: In connection with a merger, bankruptcy, legal subpoena, or to protect our rights and the safety of our users.

5. Relationship with Shopify

Our store is hosted by Shopify. Information you submit to the Services will be transmitted to and shared with Shopify. Shopify may use personal information collected about your interactions with our store, along with other merchants, to provide enhanced features. In these instances, Shopify is a data controller. To learn more about how Shopify uses your data, please visit the Shopify Consumer Privacy Policy.

6. Cookies and Tracking Technologies

We use cookies to power our site and enhance your experience. You can choose to accept or decline cookies through your browser settings. For detailed information on the specific cookies Shopify uses, please see their Cookie Policy.

7. Security and Retention

No security measures are perfect. We recommend you do not use unsecure channels to send sensitive information. We retain your personal information for as long as necessary to provide the Services, fulfill legal obligations, resolve disputes, and enforce our contracts.

8. Children's Data

The Services are not intended for children. We do not knowingly collect personal information from children under the age of majority in your jurisdiction (or under 16 years of age regarding the "sale" or "sharing" of data). If you are a parent or guardian and believe your child has provided us with personal information, contact us to request deletion.

9. International Data Transfers

Your personal information may be transferred, stored, and processed outside the country you live in, including in the United States, Canada, and Ecuador.

For European Economic Area (EEA) and UK Residents: When transferring data outside the EEA or UK, we rely on recognized transfer mechanisms, such as the European Commission's Standard Contractual Clauses or an adequacy decision.

10. Your Rights and Choices

Depending on where you live (such as California under the CCPA or the European Union under the GDPR), you may have the following rights:

Right to Access / Know: Request access to the personal information we hold about you.
Right to Delete: Request that we delete your personal information.
Right to Correct: Request correction of inaccurate information.
Right of Portability: Request a copy of your data to transfer to a third party.
Right to Opt-Out of Sale/Sharing: Request to opt out of the processing of your data for targeted advertising. We honor Global Privacy Control (GPC) signals where applicable.

Managing Communication Preferences: You may opt out of promotional emails at any time using the "unsubscribe" link. Non-promotional emails (e.g., order confirmations) will still be sent.

We will not discriminate against you for exercising these rights. To exercise your rights, or if you wish to use an authorized agent, please contact us using the details below. We may need to verify your identity prior to processing a request.

11. Complaints

If you have complaints about how we process your personal information, please contact us. Depending on your jurisdiction, you may have the right to lodge a complaint with your local data protection authority.

12. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or for regulatory reasons. We will post the revised policy on this website and update the "Last Updated" date.