This Privacy Policy explains how Ciao Bella Tile ("Ciao Bella," "we," "us," or "our") collects, uses, shares, and protects personal information when you visit our website at https://ciaobellatile.com (the "Website"), shop with us, create an account, sign up for our emails or text messages, chat with us, apply to our Trade Program, or otherwise interact with us (together, the "Services").

Please read this Privacy Policy carefully. By using the Services, you acknowledge the practices described here. If you do not agree with this Privacy Policy, please do not use the Services.

1. Who We Are

Ciao Bella Tile is owned and operated by Century Tile, LLC, a United States limited liability company.

Ciao Bella is the online outlet for discounted, first-quality Lunada Bay Tile. Orders ship from our warehouse in Harbor City, California, and our online store is hosted on Shopify. Century Tile, LLC is the business responsible for the personal information described in this Privacy Policy.

The Services are intended for customers in the United States, and we process and store information in the United States.

2. Information We Collect

2.1 Information You Provide to Us

We collect information you give us directly, including when you:

• Place an order: your name, email address, phone number, billing and shipping addresses, order details, and payment information. Payments are handled by our payment processors; we do not store full payment card numbers on our systems.
• Create an account: your name, email address, password, saved addresses, and order history.
• Sign up for our emails: your email address, for example when you subscribe to our newsletter or request a discount code for free Sample Cards.
• Sign up for text messages: your mobile phone number and a record of your consent, if you choose to opt in.
• Contact us or chat with us: your name, email address, and the content of your messages, including live chat conversations.
• Apply to our Trade Program: contact and business information, such as your name, company name, email address, phone number, and details about your trade business.
• Write a product review: your name, rating, review text, and any photos you choose to submit.
• Save items to a wishlist: the products you save and related preferences.

You may choose not to give us certain information, but some features, such as placing an order, require it.

2.2 Information Collected Automatically

When you use the Website, we and our service providers automatically collect certain information, including:

• Device information: device type, operating system, browser type, and language settings.
• Usage information: pages and products viewed, searches, items added to your cart, links clicked, and the time spent on pages.
• Log data: IP address, access times, and referring website addresses.
• Approximate location: general location (such as city or state) derived from your IP address.
• Website interaction data: clicks, scrolls, mouse movements, and form interactions collected by session recording and heatmap tools, which help us understand how visitors use the Website and fix problems.
• Cookies, pixels, and similar technologies: as described in Section 4.

2.3 Information from Third Parties

We may receive information about you from:

• Shopify and our payment processors, such as transaction confirmations and fraud-screening results
• Shipping carriers, such as delivery status and address corrections
• Analytics and advertising partners, such as information about how you found the Website and how our ads perform
• Affiliate and referral partners, such as the referral link that brought you to the Website
• Social media platforms, when you interact with our pages or content on those platforms

2.4 Sensitive Personal Information

We do not intentionally collect sensitive personal information, such as Social Security numbers, health information, or precise geolocation. When you create an account or make a purchase, your account password and payment card details are used only to secure your account and complete your transaction, not to infer characteristics about you.

3. How We Use Your Information

We use personal information to:

• Process, ship, and deliver your orders, including sample orders, and send order confirmations and shipping updates
• Create and manage your account
• Respond to your questions and provide customer support, including through live chat
• Review and manage Trade Program applications and memberships
• Send marketing emails and text messages you have agreed to receive, including discount codes and new-collection announcements
• Collect and display product reviews
• Operate, maintain, and improve the Website, our products, and the shopping experience
• Understand how visitors use the Website and measure the performance of our advertising, subject to your choices described in Section 4
• Detect, prevent, and address fraud, spam, security incidents, and technical problems
• Comply with legal, tax, and accounting obligations, and enforce our Terms of Service
• Carry out any other purpose we describe to you when we collect the information, or with your consent

4. Cookies and Tracking Technologies

We and our partners use cookies, pixels, web beacons, and similar technologies to run the Website, remember your preferences, understand how the Website is used, and measure and improve our marketing. Cookies are small data files stored on your device.

Types of technologies we use:

• Strictly necessary: required for the shopping cart, checkout, account login, security, spam protection, and remembering your cookie choices. These are provided mainly by Shopify.
• Analytics and performance: help us understand how visitors use the Website, such as Shopify analytics, Google Analytics, and Lucky Orange session recording and heatmaps.
• Functional: support features such as product reviews (Judge.me), wishlists (Swym), live chat (Shopify Inbox), and other on-site widgets.
• Advertising and marketing: help us measure our ads and show you relevant ads on other websites and platforms, such as the Meta (Facebook and Instagram) pixel, Google tags, and Microsoft Advertising (Bing) tags, as well as affiliate tracking by ShareASale and UpPromote.

Live chat: If you use live chat, your messages are recorded and stored by us and our chat provider so we can respond to you and keep a record of our conversation.

How to control cookies and tracking:

• Cookie banner: use the cookie banner on the Website to accept or decline non-essential cookies.
• Browser settings: most browsers let you block or delete cookies. If you block strictly necessary cookies, parts of the Website, such as the cart and checkout, may not work.
• Google Analytics: you can install the Google Analytics opt-out browser add-on at https://tools.google.com/dlpage/gaoptout.
• Interest-based ads: you can adjust your ad settings on platforms such as Meta and Google, and opt out of interest-based advertising from participating companies at https://optout.aboutads.info and https://optout.networkadvertising.org.
• Global Privacy Control: see Section 14.

5. How We Share Your Information

We share personal information only as described in this Privacy Policy. Mobile information and text messaging opt-in data and consent are not included in any of the sharing described in this Section 5. They are handled only as described in Section 6 (Text Messaging (SMS)).

We may share personal information as follows:

• Service providers: with companies that perform services for us, such as e-commerce hosting (Shopify), payment processing (such as Shopify's payment services, Shop Pay, and PayPal), shipping and delivery, email delivery, customer service and live chat, product reviews, wishlists, analytics, website security, and IT support. They may use your information only to provide services to us.
• Advertising, analytics, and affiliate partners: through the cookies and pixels described in Section 4, partners such as Meta, Google, Microsoft, ShareASale, and UpPromote may collect information about your activity on the Website. See Section 12.2 for how this is treated under California law and how to opt out. We do not provide mobile phone numbers or text messaging opt-in data to these partners.
• Affiliated companies: with companies under common ownership or control with Century Tile, LLC, only to help us operate the Services (such as order fulfillment and customer service) and consistent with this Privacy Policy. We do not share mobile information with affiliates for marketing or promotional purposes.
• Legal and safety: when we believe in good faith that disclosure is required by law, subpoena, or other legal process, or is necessary to protect the rights, property, or safety of Ciao Bella, our customers, or others, including to prevent fraud.
• Business transfers: in connection with a merger, acquisition, financing, reorganization, or sale of all or part of our business, subject to this Privacy Policy.
• At your direction: when you ask us to share information or choose to make it public, such as a product review posted on the Website.
• De-identified or aggregated data: information that cannot reasonably be used to identify you.

7. Email Marketing

If you subscribe to our newsletter, request a discount code, or opt in at checkout or when creating an account, we will send you marketing emails about new collections, promotions, and offers. You can unsubscribe at any time by clicking the "unsubscribe" link in any marketing email or by contacting us. After you unsubscribe, we may still send transactional messages, such as order confirmations, shipping updates, and responses to your requests.

8. Data Retention

We keep personal information only as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer period is required or permitted by law. To decide how long to keep information, we consider the amount and sensitivity of the information, why we collected it, whether we still need it to serve you, and our legal, tax, accounting, and warranty obligations.

For example:

• Order and transaction records: kept as long as needed for order support, returns, warranty questions, and tax and accounting requirements.
• Account information: kept while your account is active and for a reasonable period after you ask us to close it.
• Email marketing information: kept until you unsubscribe; we then keep your email address on a suppression list so we can honor your choice.
• Mobile numbers and SMS consent records: kept as described in Section 6.
• Customer service and chat messages, and Trade Program applications: kept as long as needed to respond to you, manage your membership, and keep business records.
• Cookie and analytics data: kept for the periods set by the cookie or tool, which you can manage as described in Section 4.

When we no longer need personal information, we delete it, de-identify it, or securely store it until deletion is possible.

9. Data Security

We use reasonable administrative, technical, and physical safeguards to protect personal information from unauthorized access, use, disclosure, alteration, or destruction. For example, our checkout is hosted by Shopify and payment information is encrypted in transit and handled by our payment processors.

No method of transmission over the internet or electronic storage is 100% secure, so we cannot guarantee absolute security. Please use a strong, unique password for your account and keep it confidential.

10. Children's Privacy

The Services are intended for adults and are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has given us personal information, please contact us and we will delete it. We do not knowingly sell or share the personal information of consumers under 16.

11. Your Choices

• Account information: you can review and update your account information by logging in to your account.
• Marketing emails: click "unsubscribe" in any marketing email.
• Text messages: reply STOP to any text message.
• Cookies and ads: use the cookie banner, your browser settings, and the tools described in Section 4.
• Privacy requests: depending on where you live, you may request access to, correction of, or deletion of your information, as described in Sections 12 and 13.

12. California Privacy Rights

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the "CCPA"), gives you the rights described in this Section. This Section also serves as our notice at collection for California residents.

12.1 Categories of Personal Information We Collect

In the past 12 months, we have collected the following categories of personal information, from the sources and for the purposes described in Sections 2 and 3:

• Identifiers: such as name, email address, postal address, phone number, account name, IP address, and cookie or device identifiers.
• Customer records: such as billing and shipping details and payment information (processed by our payment processors).
• Commercial information: such as products viewed, purchased, saved, or returned, and order history.
• Internet or other electronic network activity: such as browsing and search activity on the Website and interactions with our emails and ads.
• Approximate geolocation: such as city or state derived from your IP address.
• Audio, electronic, or similar information: such as chat transcripts, messages you send us, and recordings of website sessions.
• Professional or employment-related information: such as business details you give us in a Trade Program application.
• Inferences: such as product preferences drawn from your activity.
• Sensitive personal information: limited to account login credentials and payment card details, used only as described in Section 2.4.

We disclose these categories for business purposes to the recipients described in Section 5, and we keep them for the periods described in Section 8.

12.2 Sale and Sharing of Personal Information

We do not sell personal information for money. However, we allow advertising, analytics, and affiliate partners (such as Meta, Google, Microsoft, ShareASale, and UpPromote) to collect information through cookies and pixels on the Website. Under the CCPA, this may be considered a "sale" of personal information or "sharing" for cross-context behavioral advertising. The categories involved are identifiers (such as cookie IDs and IP address), internet activity, commercial information (such as products viewed or purchased), and inferences. We do not sell or share mobile phone numbers or text messaging opt-in data, and we do not knowingly sell or share the personal information of consumers under 16.

You can opt out of the sale or sharing of your personal information by using our "Your Privacy Choices" link [PLACEHOLDER: "Your Privacy Choices" link URL], by declining non-essential cookies in our cookie banner, or by enabling Global Privacy Control in your browser (see Section 14).

12.3 Your California Rights

Subject to certain exceptions, California residents have the right to:

• Know: request the categories and specific pieces of personal information we have collected about you, the categories of sources, our purposes, and the categories of third parties to whom we disclose it.
• Delete: request that we delete personal information we collected from you.
• Correct: request that we correct inaccurate personal information.
• Opt out of sale or sharing: direct us not to sell or share your personal information, as described in Section 12.2.
• Limit use of sensitive personal information: we use sensitive personal information only for purposes permitted by the CCPA (such as completing your transactions and securing your account), so we do not offer a separate right to limit.
• Non-discrimination: we will not deny you goods or services, charge you different prices, or provide a different level of quality because you exercised your privacy rights, except as permitted by law (see Section 12.5).

12.4 How to Submit a Request

To exercise your rights to know, delete, or correct, email us at sales@ciaobellatile.com with the subject line "California Privacy Request," or write to us at the address in Section 17. To opt out of sale or sharing, use the methods in Section 12.2.

We will verify your request by matching information you provide (such as your name, email address, and order details) with information we have on file. You may use an authorized agent to submit a request on your behalf; we may require proof of the agent's authority and ask you to verify your identity directly. We will respond within 45 days, or tell you if we need up to 45 additional days.

12.5 Notice of Financial Incentive

We offer a discount code for free Sample Cards and other exclusive offers when you subscribe to our email newsletter. To take part, you give us your email address. This offer may be considered a "financial incentive" under the CCPA. You opt in by submitting the signup form, and you can withdraw at any time by unsubscribing from our emails. We estimate the value of your email address to us based on the expenses we incur for the offer and the revenue we expect from email marketing, which is reasonably related to the value of the offer [PLACEHOLDER: attorney to confirm the good-faith estimate and method of calculation].

12.6 California "Shine the Light"

California Civil Code Section 1798.83 lets California residents ask for information about personal information we disclosed to third parties for their own direct marketing purposes in the prior calendar year. We do not disclose personal information to third parties for their own direct marketing purposes. To make a request, email sales@ciaobellatile.com or write to us at the address in Section 17.

13. Other U.S. State Privacy Rights

Residents of certain other states, such as Colorado, Connecticut, Oregon, Texas, Virginia, and others with comprehensive privacy laws, may have similar rights, depending on applicable law. These may include the right to confirm whether we process your personal information, access it, correct it, delete it, obtain a copy of it, and opt out of targeted advertising, sale, or profiling.

To make a request, email sales@ciaobellatile.com or write to us at the address in Section 17. If we deny your request, you may appeal by replying to our decision with the subject line "Privacy Request Appeal." We will respond to your appeal within the time required by law. If you are not satisfied with the outcome, you may contact your state attorney general.

14. Do Not Track and Global Privacy Control

Some browsers send "Do Not Track" signals. Because there is no common industry standard for these signals, the Website does not respond to them.

We honor Global Privacy Control (GPC) signals. If your browser sends a GPC signal, we will treat it as a request to opt out of the sale or sharing of personal information for that browser, and for your account if you are logged in. You can learn more at https://globalprivacycontrol.org.

15. Third-Party Links and Services

The Website may link to or include content from third-party websites and services, such as Lunada Bay Tile, Driftwood Design Lab, social media platforms, and payment services like Shop Pay and PayPal. We are not responsible for their privacy practices. Please review the privacy policies of any third-party sites or services you use.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or the law. When we do, we will update the "Last Updated" date below. If we make material changes, we will provide notice as required by law, such as by posting a notice on the Website or emailing you. We encourage you to review this Privacy Policy periodically.

17. Contact Us

If you have questions about this Privacy Policy or want to exercise your privacy rights, please contact us:

Last Updated: September 30, 2026