Privacy policy

Last updated: 8 August 2026

This Privacy Policy explains how Horizon Rugs (“we”, “us”, “our”) collects, uses and discloses your personal information when you visit horizonrugs.com, make a purchase, or otherwise communicate with us (collectively, the “Services”).

Data controller: Rome Media Group B.V., Pastoor Jacobsweg 100, 6226 HA Maastricht, the Netherlands, company registration number 92806686.
Contact: contact@horizonrugs.com

Personal information we collect

Information you give us

  • Order information: name, billing address, shipping address, email address, phone number, and order contents.
  • Payment information: payment card details are collected and processed by our payment providers. We do not store full card numbers ourselves.
  • Account information: if you create an account, your username, password and saved addresses.
  • Customer support information: anything you include when you email us or complete a contact form.
  • Marketing preferences: your email address if you subscribe to our newsletter.

Information collected automatically

  • Device and usage information: IP address, browser type and version, operating system, referring URLs, pages viewed, and the dates and times of your visits.
  • Advertising and analytics identifiers: cookies, pixels, device identifiers and similar technologies that record how you interact with our site — for example which products you viewed, what you added to your cart, and whether you completed a purchase.

Information from third parties

We receive information from service providers who support our Services, including our ecommerce platform, payment processors, fulfilment partners, shipping carriers, and analytics and advertising providers. Advertising platforms may also provide us with aggregated reporting about how our ads perform.

How we use your personal information

  • To process, fulfil and deliver your orders, including arranging shipping and sending order confirmations and tracking updates.
  • To handle returns, exchanges and refunds.
  • To respond to your enquiries and provide customer support.
  • To send marketing communications where you have consented, and to allow you to withdraw that consent at any time.
  • To operate, maintain, secure and improve our website.
  • To advertise our products — including showing you our products on other websites and platforms based on pages you viewed here, measuring whether our advertising works, and reaching people with similar interests. See the section on advertising below.
  • To detect, investigate and prevent fraudulent transactions, abuse and other unlawful activity.
  • To comply with our legal and tax obligations.

Advertising, analytics and tracking technologies

We work with advertising and analytics platforms — currently Meta (Facebook and Instagram) and Google — to show our products to people who may be interested in them and to measure how our advertising performs.

To do this we place cookies and similar technologies on your device and share limited information with these platforms. This may include:

  • Pages and products you viewed on our site, items added to your cart, and whether you completed a purchase
  • Your IP address, browser and device information
  • A hashed (scrambled) version of your email address or phone number where you have provided one, so the platform can recognise you as an existing customer or leave you out of certain ads

What this means in practice. If you look at a rug on our site and later see that same rug in an ad on Instagram, that is this technology at work. It also means we can avoid showing you ads for something you have already bought.

We do not sell your personal information for money. However, under the California Consumer Privacy Act and several other US state privacy laws, this kind of sharing with advertising platforms may be classed as a “sale” or as “sharing for cross-context behavioural advertising” even though no money changes hands. We therefore treat it as such, and you can opt out at any time — see Your rights below.

Controlling this. You can opt out using the “Do Not Sell or Share My Personal Information” link in our footer, through the cookie banner shown when you first visit, or by emailing us. You can also control cookies through your browser settings, and manage ad personalisation directly in your Meta and Google account settings. Blocking essential cookies may prevent parts of the site, including checkout, from working correctly.

We honour Global Privacy Control (GPC) signals where your browser sends them.

Legal bases for processing (EEA/UK visitors)

Where the General Data Protection Regulation applies, we rely on the following legal bases:

  • Performance of a contract — to process and deliver your order and handle returns.
  • Legitimate interests — to secure and improve our Services, prevent fraud, and understand how our site is used.
  • Consent — for marketing emails, for non-essential cookies, and for advertising and analytics technologies. You may withdraw consent at any time, and we do not place these technologies on your device before you have consented.
  • Legal obligation — to meet tax, accounting and consumer law requirements.

How we share your personal information

We share personal information only with parties who need it to run our business:

  • Ecommerce platform: Shopify Inc., which hosts our online store and processes orders on our behalf.
  • Payment processors: to take payment and to prevent and investigate fraud.
  • Fulfilment and print partners: to produce and pack your order.
  • Shipping carriers: to deliver your order and provide tracking.
  • Email and marketing providers: to send transactional and, where consented, marketing emails.
  • Advertising and analytics providers including Meta Platforms and Google, as described in the advertising section above.
  • Professional advisers and authorities: where required by law, or to establish, exercise or defend legal claims.

If our business is sold or reorganised, personal information may be transferred as part of that transaction.

International transfers

Our fulfilment operations and several of our service providers are located in the United States, and our business is established in the Netherlands. Your personal information may therefore be transferred outside your country of residence. Where such transfers are subject to GDPR, we rely on appropriate safeguards including the European Commission’s Standard Contractual Clauses.

Data retention

We retain order and transaction records for as long as necessary to fulfil the purposes described above and to meet our legal, tax and accounting obligations — typically seven years from the date of the transaction. Marketing contact details are retained until you unsubscribe. Support correspondence is retained for up to three years. Advertising and analytics identifiers are retained for no longer than 24 months.

Your rights

All visitors

You may unsubscribe from marketing emails at any time using the link in any marketing message, or by emailing us. You may opt out of advertising cookies at any time using the “Do Not Sell or Share My Personal Information” link in our footer.

EEA and UK residents

You have the right to access, correct, delete or receive a portable copy of your personal information; to object to or restrict certain processing; and to withdraw consent where processing is based on consent. To exercise these rights, email contact@horizonrugs.com. You also have the right to lodge a complaint with your local data protection authority. In the Netherlands this is the Autoriteit Persoonsgegevens.

California residents

Under the California Consumer Privacy Act as amended by the CPRA, you have the right to know what personal information we collect and how we use and disclose it; to request deletion or correction of your personal information; to opt out of the sale or sharing of your personal information for cross-context behavioural advertising; and to be free from discrimination for exercising these rights.

As explained above, we share personal information with advertising platforms in a way that may be classed as sharing for cross-context behavioural advertising. The categories involved are identifiers, internet activity information, and commercial information. To opt out, use the “Do Not Sell or Share My Personal Information” link in our footer or email us.

We do not knowingly collect, sell or share the personal information of consumers under 16 years of age.

To submit a request, email contact@horizonrugs.com. We will verify your identity by matching the information in your request against the details we hold, typically your email address and order details. You may use an authorised agent, in which case we may require written proof of authorisation.

Other US state residents

Residents of states with comprehensive privacy legislation, including Colorado, Connecticut, Virginia, Utah, Texas, Oregon and Montana, hold similar rights of access, correction, deletion and portability, and the right to opt out of targeted advertising. Requests can be made using the same email address above, and the footer opt-out link applies equally.

Children’s privacy

Our Services are not directed at children and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, please contact us and we will delete it.

Security

We use appropriate technical and organisational measures to protect personal information, including encryption of data in transit. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for legal reasons. The revised version takes effect when posted, and the date at the top of this page will be updated.

Contact

Questions about this policy or about how we handle your personal information: contact@horizonrugs.com, or write to Rome Media Group B.V., Pastoor Jacobsweg 100, 6226 HA Maastricht, the Netherlands.