The plain-language summary. The full detail follows in §3 to §15.

• We collectWhat you give us, what your browser sends, what our partners report
• We use it toProcess orders, ship, support you, prevent fraud and improve the site
• We sell data?No. We do not sell your personal information
• We share withCarriers, payment processors, fraud and analytics providers — only as needed
• Your controlAccess, correct, delete, port, opt out of marketing or ad tracking
• ChildrenNot intended for children; purchases require 18+ or a supervising guardian

The data controller responsible for your personal information is EOS Trading Corp., dba Sale Stores USA, 3910 Pembroke Rd, Pembroke Park, FL 33021, USA.

This policy applies to salestoresusa.com and to every way you interact with us: browsing, creating an account, placing an order, contacting support, subscribing to emails, or leaving a review. It does not apply to third-party websites we link to, which have their own policies.

A. Information you give us

• Identity and contact data: name, company name, email address, telephone number and, where applicable, resale or tax identification numbers.
• Order and delivery data: billing address, shipping address, order contents and history, gift messages and delivery instructions.
• Account data: your email, password (stored encrypted), saved addresses and preferences.
• Support data: the content of messages, emails, chat transcripts, photographs you send us, and RMA documentation.
• Review data: any review, rating, photograph or comment you submit publicly.

B. Information collected automatically

• Device and connection data: IP address, approximate location derived from it, browser type and version, operating system, device type, screen size and language.
• Usage data: pages viewed, products viewed, referring URL, search terms used on the site, time on page and click paths.
• Cookie and similar identifiers as described in §5.

C. Information from payment and fraud partners

• Payment confirmation data: the last four digits of the card, card brand, result of the transaction and a token — never your full card number or security code.
• Fraud signals: risk scores, address verification results and chargeback records returned by our payment and fraud-prevention providers.

We do not use automated decision-making that produces legal effects concerning you, and we do not build profiles that would significantly affect you, other than the transaction-risk scoring described above, which you can contest by contacting us.

We use cookies, pixels, tags and similar technologies. Some are set by us, others by the third parties named below. They fall into four groups:

Where the law requires it, non-essential cookies are only set after you give consent through our cookie banner, and you can change or withdraw that consent at any time from the cookie settings link in the footer. You can also block or delete cookies from your browser settings; blocking strictly necessary cookies will prevent checkout from working.

Current providers: Google Analytics, Google Ads, Meta Pixel, Bing/Microsoft Advertising, and any review, chat or email platform used by the store.

We do not sell your personal information, and we do not rent or trade it. We share it only with the service providers and authorities listed below, and only the minimum needed for the purpose in §4.

We may also disclose information as part of a merger, acquisition, financing or sale of assets, in which case we will tell you before your data becomes subject to a different privacy policy, and any acquirer will remain bound by this policy as it applies to data collected before the transfer.

Service providers are bound by contract to use your information only for the purposes we specify and to protect it confidentially. They may engage their own sub-processors, and they may process data outside your country as described in §11.

• Encryption in transit: the whole Site is served over HTTPS. You should always see a padlock and “https://” in your address bar before entering personal data.
• Card data: payments are captured on infrastructure operated by our PCI-DSS-compliant payment providers. We receive only a token and the card's last four digits; we never store full card numbers or security codes on our servers.
• Access control: internal access to customer data is limited to staff who need it, with individual accounts, strong passwords and role-based permissions.
• Technical safeguards: firewalls, monitoring, rate limiting and routine software updates.
• Staff and vendor obligations: confidentiality and data-handling requirements apply to everyone who can access customer data.

When a retention period ends we delete the data or irreversibly anonymise it. If we must keep a record because of a legal obligation, a tax rule or an open dispute, we keep only that record and only for as long as required.

Depending on where you live, you may have some or all of the following rights. We honour these requests for everyone who asks us, regardless of where you are — we do not treat you differently for exercising a privacy right.

1. Send your request
   Email info@salestoresusa.com with the subject "Privacy request", or write to us at 3910 Pembroke Rd, Pembroke Park, FL 33021, USA.
2. Tell us what you want
   State which right you are exercising and, if it helps, the email address, order number or account you are asking about.
3. We verify your identity
   We match your request against our records — typically by confirming control of the email address on the account or by asking for the order number and delivery address. We will never ask for your full card number, password or government ID.
4. We respond within 30 days
   Usually much sooner. If a request is complex we may extend by a further 30 days and will tell you why.
5. Authorised agents
   You may use an authorised agent to make a request on your behalf. We may ask for written permission signed by you, and we may still verify your identity directly.

Deletion and access requests are free. We may charge a reasonable fee, or decline a request, only where the law allows — for example where a request is manifestly unfounded or repetitive. Where we must keep data to complete a transaction in progress, to honour a return or warranty, or to comply with tax law, we will delete everything else and tell you what we retained and why.

We are based in the United States, and our servers and those of our service providers are located mainly in the United States. If you access the Site from outside the US, your personal information will be transferred to and processed in the United States, where privacy laws may differ from those in your country.

Where we transfer personal information out of the European Economic Area, the United Kingdom or Switzerland, we rely on appropriate safeguards — including the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or a provider's certification under an approved framework — together with additional technical and organisational measures where required. You may request a copy of the relevant safeguards by writing to info@salestoresusa.com.

The Site is intended for adults. We do not knowingly collect personal information from children under 13, in line with the US Children's Online Privacy Protection Act, and we do not knowingly collect personal information from anyone under 18.

• Purchases require you to be 18 or older, or to act under the direct supervision of a parent or legal guardian who agrees to our Terms of Service and who is responsible for the order and its payment. This is the same rule stated in the Terms of Service.
• We do not direct advertising or marketing to children, and we do not sell or share personal information of consumers we know to be under 16.
• If you believe a child has provided us with personal information without the appropriate supervision, contact info@salestoresusa.com and we will delete it promptly.

Some browsers offer a "Do Not Track" (DNT) signal. There is still no common industry standard for interpreting DNT, so our Site does not currently respond to it. We do honour Global Privacy Control (GPC) signals where they are transmitted by your browser, and we treat them as a valid request to opt out of the sharing of personal information for targeted advertising. You can also opt out directly through the cookie settings and the ad network links in §5.

We may update this policy to reflect changes in our practices, our providers or the law. When we do, we publish the new version on this page and change the effective date at the top. Where a change is material, we will also notify account holders by email or by a notice on the Site.

Please check this page periodically. The version in force is always the one published here.