Rome & Oak
Privacy policy
Updated 2026-09-17
Effective September 17, 2026. This notice explains how information is handled when you browse Rome & Oak or contact customer care.
Who is responsible
Rome & Oak operates this storefront. For questions about personal information, email support@romeandoak.com. Our business correspondence address is 950 New Jersey Avenue SE, Washington, DC 20003, United States.
Information we receive
When you visit, our hosting and security provider receives technical information such as your IP address, requested pages, browser details and request times. This information helps deliver the website, diagnose errors and protect it from misuse.
If you contact us, we receive your email address, message and any attachments you send. Include only information needed for your inquiry. Do not send card numbers, passwords or verification codes.
An available ordering flow may ask for your name, contact details, delivery address and selected items. A bag or incomplete checkout is not evidence that payment was taken. The payment step identifies any payment service actually offered.
How we use information
We use information to provide requested website features, answer questions, support available orders and investigate security or service problems. Relevant records may also be needed to meet legal obligations or resolve a dispute.
Where applicable law requires a legal basis, these purposes may involve your requested service, a legal obligation, legitimate operational interests or consent. Optional processing that requires consent must have a separate choice.
Browser storage and measurement
The bag uses session storage for product references and quantities. Checkout recovery and order-access features may use necessary browser storage when available. Privacy controls save the choices you make on your device.
Optional store analytics are disabled in the current configuration. We do not describe an analytics service as active merely because a settings page exists. Hosting requests and security logs still occur when optional measurement is off.
You can clear or restrict site storage through your browser. This may empty your bag or interrupt an order-access session. Clearing browser data does not delete information already sent to us or a service provider.
Service providers and disclosures
Cloudflare provides website hosting, content delivery and security. Its services process technical requests needed to display this storefront. Support correspondence is handled through the email services used to receive and answer your message.
Information may be disclosed where legally required or needed to investigate abuse, protect rights or resolve a transaction dispute. This notice does not authorize unrelated marketing use. Any additional provider enabled for payments or fulfillment must be reflected in this notice.
Retention
We keep information for the purpose for which it was collected, including support, security and applicable recordkeeping duties. The appropriate period depends on the record, unresolved issues and legal requirements. We do not promise one deletion period for every type of information.
Ask us about a particular record if you need more detail. A deletion request may not cover information we must retain for a legal obligation or an unresolved dispute.
Your choices and requests
Depending on the law that applies to you, you may have rights to access, correct, delete or obtain a copy of your information. You may also be able to object to certain processing, restrict its use or withdraw consent. These rights have conditions and exceptions.
Email support@romeandoak.com to make a request. We may ask for proportionate information to locate the relevant records and verify your request. We will explain any applicable reason that prevents us from fulfilling it. You may also contact your relevant privacy authority.
Security and international processing
We use HTTPS and access controls for available protected features. No system can promise complete security. Keep order-access links private and contact us if you believe information has been exposed.
Service providers may process information outside your location. Applicable transfer safeguards depend on the service and relevant law. Cloudflare describes its processing in the notice linked above.
Children and updates
This storefront is intended for adult shoppers. We do not ask children to provide personal information. Contact us if you believe a child has sent information that should be reviewed or removed.
We update this notice when the storefront’s data practices change. The effective date identifies this version. A new use that requires consent needs a separate choice.