Skip to content
Kova Atelier

Policies & Care

Privacy Policy

Effective date: October 2, 2026

This Privacy Policy explains how AB & S Enterprises LLC, doing business as KOVA Atelier ("KOVA," "we," "us," or "our"), collects, uses, shares, and protects personal information when you visit kova-atelier.com (the "Site"), create an account, place an order, download our catalog, or contact us. It also explains the rights you have under California law, including the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA").

We sell furniture to customers in the United States.

1. Information we collect

We collect the following categories of personal information. The CCPA category is shown in parentheses.

Information you give us

  • Contact details: name, email address, phone number, shipping and billing address (Identifiers; Customer records).
  • Account details: email address and password for your customer account (Identifiers; Sensitive personal information: account log-in).
  • Order details: products purchased, order history, deposit and balance payments for made-to-order pieces, delivery preferences, and cancellation or return requests (Commercial information).
  • Payment details: card information is entered directly into and processed by Stripe. We do not receive or store your full card number. We receive limited information such as card brand, last four digits, and payment status (Customer records).
  • Messages: anything you send us through contact forms, catalog request forms, product reviews, or email (Identifiers; Customer records).
  • Marketing preferences: whether you have agreed to receive marketing emails from us.

Information collected automatically

  • Device and usage data: IP address, browser type, device type, pages viewed, products viewed, items added to cart, referring page, and the date and time of your visit (Internet or other electronic network activity).
  • Approximate location derived from your IP address or the ZIP code you enter for a delivery quote (Geolocation data, not precise).
  • Cookies, pixels, and similar technologies, described in Section 5.

Information from others

  • Delivery status and delivery appointment details from our delivery partner.
  • Fraud and payment risk signals from Stripe.

We do not collect precise geolocation, government ID numbers, biometric data, or health information.

2. How we use your information

We use personal information to:

  • Process and deliver orders, collect deposits and balances on made-to-order pieces, calculate sales tax, and handle cancellations, returns, and refunds.
  • Provide shipping quotes and schedule delivery.
  • Create and manage your account, including password reset.
  • Send transactional emails such as order confirmations, payment receipts, production and shipping updates, and account notices.
  • Respond to questions and catalog requests.
  • Send marketing emails to people who signed up for them (see Section 10). You can unsubscribe at any time using the link in any marketing email.
  • Measure how the Site is used and how our advertising performs, and show you KOVA ads on other websites and apps.
  • Protect the Site and our customers, including preventing spam, bots, fraud, and abuse.
  • Comply with legal, tax, and accounting obligations, and enforce our terms.

3. How we share your information

We share personal information with service providers that act on our behalf and only for the purposes above:

  • Stripe: payment processing, fraud prevention, and sales tax calculation (Stripe Tax).
  • Amazon Web Services: website hosting, database storage, and delivery of transactional email (Amazon SES).
  • Metropolitan Warehouse: storage, delivery quotes, and delivery of your order. We share your name, delivery address, phone number, email, and order contents.
  • Cloudflare (Turnstile): protecting our forms from bots and spam. Turnstile may process your IP address and browser characteristics.
  • HubSpot: managing contact information and catalog requests.
  • Google (Google Analytics 4): measuring Site traffic and usage.
  • Meta Platforms (Meta Pixel and Conversions API): measuring and improving our advertising on Facebook and Instagram.

We may also disclose personal information to comply with the law or a legal process, to protect our rights or the safety of others, or as part of a merger, sale, or transfer of our business.

Selling and sharing under the CCPA. We do not sell personal information for money. However, our use of the Meta Pixel, Meta Conversions API, and Google Analytics allows those companies to receive information about your activity on the Site, such as pages viewed, products viewed, and purchases, together with identifiers like your IP address, cookie IDs, and, for the Conversions API, a hashed version of your email address or phone number. Under the CCPA this may be considered "selling" or "sharing" personal information for cross-context behavioral advertising. You can opt out as described in Section 6. In the past 12 months we have sold or shared the following categories in this way: Identifiers; Internet or other electronic network activity; Commercial information.

We do not knowingly sell or share the personal information of consumers under 16 years of age.

4. Sensitive personal information

The only sensitive personal information we collect is your account log-in (email and password), which we use only to provide your account. We do not use or disclose sensitive personal information to infer characteristics about you.

5. Cookies, pixels, and similar technologies

We and our partners use cookies and similar technologies on the Site:

  • Necessary cookies: keep your cart and order session working, keep you signed in, and protect forms. The Site does not work properly without them.
  • Analytics: Google Analytics 4 helps us understand how visitors use the Site. We also use Microsoft Clarity to understand how visitors use the Site, through behavioral metrics, heatmaps and session replay. Clarity masks the text you type into forms. Microsoft may use this data as described in the Microsoft Privacy Statement.
  • Advertising: the Meta Pixel helps us measure the results of our ads and show KOVA ads to people who visited the Site.

You can block or delete cookies in your browser settings. Blocking necessary cookies may prevent checkout from working. You can also limit ad personalization in your Meta and Google account settings.

6. Your California privacy rights

If you are a California resident, you have the right to:

  • Know what personal information we have collected about you, the categories of sources, the purposes, and the categories of third parties we disclose it to.
  • Access a copy of the specific personal information we hold about you.
  • Delete personal information we collected from you, subject to legal exceptions (for example, records we must keep for tax purposes).
  • Correct inaccurate personal information.
  • Opt out of the sale or sharing of your personal information.
  • Limit the use of sensitive personal information. We only use it for permitted purposes, so no further action is needed.
  • Not be discriminated against for exercising any of these rights.

How to opt out of sale or sharing. Email info@kova-atelier.com with the subject "Do Not Sell or Share My Personal Information," or use the "Do Not Sell or Share My Personal Information" link in the footer of the Site. We treat a Global Privacy Control (GPC) signal from your browser as a valid opt-out request for that browser. When we detect a GPC signal, the Site does not load the Meta Pixel or Google Analytics for that browser and does not send that visit to the Meta Conversions API.

How to make other requests. Email info@kova-atelier.com. To protect your information, we will verify your request by matching information you provide with information we have, such as the email address on your account or order. We will confirm receipt within 10 business days and respond within 45 calendar days. If we need more time, we will tell you why and may take up to an additional 45 days.

Authorized agents. You may use an authorized agent to make a request on your behalf. We may ask the agent for signed written permission from you and may ask you to verify your identity directly with us.

7. How long we keep information

We keep personal information only as long as needed for the purposes in this policy:

  • Order, payment, and tax records: 7 years, to meet tax and accounting requirements.
  • Account information: while your account is open, and up to 30 days after you ask us to close it, except order records we must keep as described above.
  • Catalog requests and marketing contacts: until you unsubscribe or ask us to delete them.
  • Analytics data in Google Analytics: 14 months.

8. Security

We use reasonable administrative, technical, and physical safeguards to protect personal information, including encrypted connections (HTTPS) across the Site and access controls on our systems. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Children

The Site is not directed to children under 13, and we do not knowingly collect personal information from them. You must be at least 18 to make a purchase. If you believe a child has given us personal information, contact us and we will delete it.

10. Marketing emails

When a form on the Site offers to sign you up for marketing emails, the box is checked by default. You can uncheck it before you submit the form, and you can unsubscribe at any time. Every marketing email includes an unsubscribe link. Transactional emails about your order or account are not marketing and will still be sent after you unsubscribe.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and change the effective date above. If we make a material change, we will notify you by email or by a notice on the Site.

12. Contact us

AB & S Enterprises LLC, doing business as KOVA Atelier
940 Third Ave, Chula Vista, CA 91911
Email: info@kova-atelier.com