Privacy Policy

Effective date: October 11, 2026
Last updated: October 11, 2026

This policy explains what personal information Casa De Oro Resortwear LLC ("Casa de Oro", "we", "us") collects when you visit shopcasadeoro.com, shop with us, sign up for our emails or texts, or write to us. It explains what we do with it, who receives it, and the choices you have.

We are a resortwear brand based in Los Angeles, California. Our store runs on our own website. Shopify runs the bag, the checkout, accounts and orders for us.

1. The short version

We measure how people use our site, for every visitor, so we can run and improve it.
We work with advertising partners, such as Meta and Google. They collect information to help us reach people who would love Casa de Oro on other sites and apps, and to measure our ads there. You can say no to them.
You can say no at any time: choose "Only necessary" in the privacy bar, use "Do Not Sell or Share My Personal Information", or turn on Global Privacy Control in your browser.
We do not sell your personal information for money.
Our site is for adults. We do not knowingly collect information from children under 13.

2. What we collect

Information you give us

Contact details: your name, email address, phone number and postal address.
Order details: what you buy, your billing and shipping addresses, and a record that you paid. Shopify and its payment processors handle your card. We never see or keep your full card number.
Account details: your email and password, if you create an account. Shopify stores your password; we never see it.
Sign-up details: your email, and your phone number if you agree to texts, when you join our list. We record when you signed up, which form you used, your browser type, and whether you agreed to texts.
Messages: what you write to us, and our answers.

Information collected automatically when you visit

Device and browser information: your browser type, device type, operating system, screen size and language.
Activity on our site: the pages you view, the site that sent you to us, and how fast our pages load for you.
Your IP address and the approximate location it shows, such as your city or region.
Cookies: small files in your browser that remember your bag, your sign-in and your privacy choice. Section 6 lists them.
A record of your privacy choice. We write an entry when we first show you the privacy bar, and each time you make a choice. Each entry holds the time, a random visitor number kept in a cookie, what you chose and how, which wording you saw, whether your browser sent Global Privacy Control, and your IP address. When you sign up or sign in, we link that visitor number to your email address, so we can show what you chose.

Your precise location, only if you allow it

Our menu can greet you with your local weather. It asks your browser for your location only if you choose to share it. We send those coordinates to a weather service and a place-name service to make the greeting, and we do not store them.

Information from others

Shopify and our payment processors, about your orders and payments.

3. Why we use it

To run the store: show products, keep your bag, take payment, ship your order, handle returns, and send order and shipping updates.
To run your account, if you create one.
To send you emails and texts you agreed to, and to apply your sign-up reward.
To answer what you write to us.
To measure and improve our site: how many people visit, which pages they view, and how fast pages load.
To advertise: to reach people who would love Casa de Oro on other sites and apps, and to measure which ads work. This uses advertising partners. You can say no to them (section 5).
To keep a record of your privacy choice, so we can show what you chose.
To keep the site and our customers safe, and to stop fraud.
To follow the law, and to protect our rights.

4. Who receives it

Service providers, who work for us:

Shopify, for our product catalog, bag, checkout, accounts and orders. Shopify hosts our checkout, and it collects and uses your information there. Shopify also uses your information for its own purposes, together with what it knows about you from other shops and from its own services. One of those purposes is advertising. Shopify and the companies it works with may be in other countries. Shopify's policy for shoppers says more: shopify.com/legal/privacy/consumers. You can tell Shopify not to use your information for advertising at privacy.shopify.com.
Payment processors, through Shopify's checkout.
Amazon Web Services, which hosts our website and stores our backups in the United States.
Cloudflare, which delivers our website, protects it from attacks, and gives us visit statistics.
Google, for our business email; and email delivery services (SendGrid, Amazon, Shopify) that send our emails.
Shipping carriers, to deliver your order.
Weather and place-name services, only for the location greeting, only if you share your location.

Advertising partners. Our privacy bar calls them "Marketing partners". You can say no to them (section 5). They are the advertising companies whose Shopify sales channels we use: Meta (Facebook and Instagram) and Google (including YouTube).

Where they run today: on our checkout, thank-you and order-status pages, which Shopify runs for us. No advertising partner's tool runs on our other pages today. If we add one there, the same choice in section 5 controls it.
What they may receive: your device and browser information, your IP address, their own cookie and advertising IDs, and what you do at checkout, such as that you started checkout, what you bought and what it cost.
What Meta also receives: your name, email address, phone number and location. Shopify shares these with Meta for us, and sends Meta a record of your purchase from its own servers. Meta says it uses your name, email address and phone number only to match you to an account on its services, that they reach it in scrambled (hashed) form, and that it deletes them after the match. Section 5 gives your ways to say no.
What they never receive from us: your payment details, your password, your precise location, your text consent, or the visitor number and record of your privacy choice.
They may combine what they receive with what they know about you from other sites and apps, and use it for their own purposes too. These partners can collect information about your activity over time and across different websites when you use ours.

Others, when needed: if the law requires it, to protect our rights or someone's safety, or as part of a sale or merger of our business.

We do not sell your personal information for money.

5. Your choices

The privacy bar. When you first visit, a bar at the bottom of the page explains how we use cookies.

"Accept all" keeps advertising partners on.
"Only necessary" is your "no" to advertising partners. Our own measurement still runs, because the site needs it to work and improve.
After you choose, "Your Privacy Choices", in our site's footer or in the menu on your phone, shows your choice, with the "Marketing partners" switch.
If you keep browsing without choosing, advertising partners stay on until you choose. If your browser sends the Global Privacy Control signal, your "no" counts from the start (see below).

Your choice at checkout. The checkout pages are Shopify's, so there your choice works through Shopify. We pass your choice to Shopify with your bag. Shopify's rule is that advertising tools set up as a sale of data do not run for a shopper who said no, unless the tool has a limited-data mode, which sends less. Shopify also sends information from its own servers. Shopify says those sends are "subject to" the store's privacy settings and "might be restricted". It does not say that your "no" stops them.

Change your choice at any time with "Your Privacy Choices" in our site's footer, or in the menu on your phone. Its "Marketing partners" switch shows your choice. To change it, set the switch and choose "Save".

Do Not Sell or Share My Personal Information. This link, in our site's footer, or in the menu on your phone, is your "no" to advertising partners for your browser, at once. It then shows your choice, with the "Marketing partners" switch off.

Global Privacy Control. If your browser sends the Global Privacy Control signal, we honor it: it counts as your "no" to advertising partners until you say yes on our site. Our bar then shows "Browser privacy on", and the "Marketing partners" switch starts off. You can turn it on and save it, or choose "Accept all": that is your yes, and a yes you gave before your browser sent the signal does not count. We pass your choice to Shopify with your bag. Your browser still sends its signal to Shopify's checkout, and Shopify says it honors the signal automatically in the regions where a store has set its opt-out. Learn more at globalprivacycontrol.org.

"Do Not Track." Some browsers send a "Do Not Track" signal. There is no common standard for it, so our site does not respond to it. We honor Global Privacy Control instead.

Marketing emails. Every marketing email has an unsubscribe link. If you have an account, you can also turn email updates off there. We stop within 10 business days. We still send emails about your orders.

Texts. See section 7.

Cookies in your browser. Your browser settings can block or delete cookies. If you block necessary cookies, your bag and sign-in may not work.

6. Cookies

Necessary (always on)

Name	What it does	How long it lasts
cdo_cart	Remembers your bag	2 weeks
cdo_customer	Keeps you signed in	Until you sign out or your sign-in expires
cdo_email	Remembers that you signed up, so we don't ask again	1 year
cdo_disc	Carries your sign-up reward to checkout	1 year
cdo_exp	Shows the phone or desktop layout, for testing only	Until you close your browser
cdo_consent	Remembers your privacy choice	13 months from your choice
cdo_vid	Holds a random visitor number, so we can keep a record of your privacy choice	13 months, renewed each visit
Shopify's checkout cookies	Run the checkout and payment	See shopify.com/legal/cookies

Our own measurement (always on). We count visits and measure page speed with Cloudflare Web Analytics, which Cloudflare says "does not collect or use your visitors' personal data", and with our own speed records, which keep the page address and browser type but not your IP address. Shopify also measures how its checkout is used, for every shopper.

Advertising (on unless you say no). Our advertising partners' tools on the checkout pages may set their own cookies. Each partner's own policy lists them.

7. Text messages

We text you only if you agree, by turning on the text switch and entering your number. Agreeing is not a condition of buying anything.
If you agree, you agree to recurring automated marketing texts from Casa de Oro at that number. How often varies.
Message and data rates may apply.
Reply STOP to stop. We honor STOP, or any other reasonable way you tell us to stop, within 10 business days. Reply HELP for help.
We do not give your text consent to anyone. We do not sell your mobile number for money. Shopify holds it with our customer list. Meta receives it for matching, as section 4 says.

8. How long we keep it

Orders and payment records: as long as tax and accounting law requires.
The record of your privacy choice, with its IP address: two years after your last entry.
The cookies: as section 6 lists.
Privacy requests and our answers: we keep them as our record.
Everything else: as long as we need it for the purposes in section 3.

9. Requests

Ask us not to sell your information. We do not sell your personal information for money. You can still tell us not to: email privacy@shopcasadeoro.com from the email address your request is about. We answer within 60 days. If we need up to 30 more days, we tell you.

Stop our emails or texts. Use the unsubscribe link in any marketing email, reply STOP to any text, or email privacy@shopcasadeoro.com. We stop within 10 business days.

Nevada residents. privacy@shopcasadeoro.com is our designated address for requests under Nevada law not to sell your information.

Questions. For any other question about your information, email privacy@shopcasadeoro.com.

10. Children

Our site is for adults. We do not knowingly collect personal information from children under 13. If you believe a child has given us information, email privacy@shopcasadeoro.com.

11. Keeping your information safe

We use encrypted connections and limit who can reach your information. No system is perfectly secure.

12. Where your information is stored

We are in the United States. Our own systems, our website server and its backups, are in the United States. Our service providers, such as Shopify, Google and Cloudflare, may store or process your information in other countries under their own safeguards. If you visit from another country, your information comes to the United States.

13. Other sites

Our site links to other sites, such as Instagram and TikTok. Their own privacy policies apply there.

14. Changes to this policy

When we change this policy, we post the new version here and update the date at the top.

15. California residents

California residents have more information in our California Privacy Notice.

16. Contact us

Questions about this policy or our privacy practices:
privacy@shopcasadeoro.com
Casa De Oro Resortwear LLC, a Nevada limited-liability company registered to do business in California.