Privacy Notice

Last updated: September 4, 2026

This privacy notice for Michael Roger, Inc. (doing business as decomposition.com) ("decomposition.com," "we," "us," or "our"), describes how and why we might collect, store, use, and/or share ("process") your information when you use our services ("Services"), such as when you:

• Visit our website at decomposition.com, or any website of ours that links to this privacy notice
• Purchase products or make a payment through our Services
• Sign up for our email or SMS marketing
• Engage with us in other related ways, including any sales, marketing, or events

Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at info@michaelroger.com.

Summary of Key Points

• What personal information do we process? We process personal information you provide, such as contact and payment details, as well as information collected automatically, like device and usage data. See Section 1.
• Do we receive information from third parties? No, we do not receive information about you from third parties.
• How do we process your information? We process it to provide, improve, and administer our Services, communicate with you, prevent fraud, and comply with the law, and — with your consent — for advertising. See Section 2.
• In what situations do we share personal information? We share information with service providers who help us run our store, marketing, and analytics, and in certain legal or business situations. See Section 4.
• Do we use cookies and advertising tracking? Yes. We and our partners use cookies, pixels, and similar technologies, and you have choices about this. See Section 5.
• How do we keep your information safe? We use organizational and technical safeguards, though no system is 100% secure. See Section 7.
• What are your rights? Depending on where you live, you may have rights to access, correct, delete, or opt out of certain uses of your information. See Section 8 and Section 10.
• How do you exercise your rights? Fill out our data subject request form at https://decomposition.com/contact-us/, or contact us using the details in Section 12.

---

Table of Contents

1. What Information Do We Collect?
2. How Do We Process Your Information?
3. What Legal Bases Do We Rely On to Process Your Information?
4. When and With Whom Do We Share Your Personal Information?
5. Do We Use Cookies and Other Tracking Technologies?
6. How Long Do We Keep Your Information?
7. How Do We Keep Your Information Safe?
8. What Are Your Privacy Rights?
9. Controls for Do-Not-Track Features
10. Do California and Other US State Residents Have Specific Privacy Rights?
11. Do We Make Updates to This Notice?
12. How Can You Contact Us About This Notice?
13. How Can You Review, Update, or Delete the Data We Collect From You?

---

1. What Information Do We Collect?

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, make a purchase, participate in activities on the Services, or otherwise when you contact us.

Personal information provided by you. The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include:

• Names
• Phone numbers
• Email addresses
• Mailing addresses
• Usernames
• Passwords
• Billing addresses
• Debit/credit card numbers
• Contact preferences
• Job titles
• Contact or authentication data

Sensitive information. We do not process sensitive information.

Payment data. We may collect data necessary to process your payment if you make purchases, such as your payment instrument number (such as a credit card number) and the associated security code. All payment data is stored by Stripe, PayPal, and Google Pay. You may review their privacy notices here: stripe.com/privacy, paypal.com/us/webapps/mpp/ua/privacy-full, and Google Pay's privacy notice.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

Information automatically collected

In Short: Some information — such as your Internet Protocol (IP) address and/or browser and device characteristics — is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes.

Like many businesses, we also collect information through cookies and similar technologies — see Section 5 for details.

The information we collect includes:

• Log and Usage Data. Service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services, recorded in log files. This may include your IP address, device information, browser type and settings, and information about your activity in the Services (such as timestamps, pages and files viewed, searches, and features used), as well as device event information (system activity, crash reports, hardware settings).
• Device Data. Information about the computer, phone, tablet, or other device you use to access the Services, such as IP address (or proxy server), device and application identification numbers, location, browser type, hardware model, internet service provider and/or mobile carrier, operating system, and system configuration information.
• Location Data. Information about your device's location, which can be either precise or imprecise, depending on the type and settings of your device. We may use IP-based geolocation to estimate your general location. You can opt out by refusing access to this information or disabling location settings on your device; note that opting out may limit certain features of the Services.

---

2. How Do We Process Your Information?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.

We process your personal information for a variety of reasons, depending on how you interact with our Services, including to:

• Facilitate account creation and authentication and otherwise manage user accounts.
• Process and fulfill your orders, including payment processing, order confirmations, shipping, and returns.
• Deliver and facilitate delivery of services requested by you.
• Respond to your inquiries and offer support or troubleshoot problems.
• Send you marketing and promotional communications, such as emails or texts about products, sales, and promotions, in accordance with your marketing preferences. You can opt out of marketing communications at any time (see Section 8).
• Send administrative information, such as changes to our terms, technical issues, or security updates.
• Personalize your experience on the Services, including remembering your preferences and understanding how you use our Services.
• Evaluate and improve our Services, products, marketing, and customer experience.
• Identify usage trends and understand how you use our Services to improve them.
• Determine the effectiveness of our marketing and promotional campaigns.
• Protect our Services, including as part of our efforts to maintain security, prevent fraud, and troubleshoot.
• Comply with our legal obligations, respond to legal requests, and to establish, exercise, or defend our legal rights.

---

3. What Legal Bases Do We Rely On to Process Your Information?

In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason to do so, such as with your consent, to comply with laws, to provide you services, to fulfill our contractual obligations, to protect your rights, or to fulfill our legitimate business interests.

If you are located in the EEA, UK, or Switzerland, applicable data protection law requires us to identify the legal bases on which we rely to process your personal information. We may rely on the following:

• Consent. We may process your information if you have given us permission to use your personal information for a specific purpose (for example, marketing emails or non-essential cookies). You can withdraw your consent at any time.
• Performance of a contract. We may process your information to fulfill the terms of a contract with you, such as processing an order you place with us.
• Legitimate interests. We may process your information when it is reasonably necessary to achieve our legitimate business interests, such as improving our Services, understanding how people use our website, and marketing our products, as long as those interests are not outweighed by your rights.
• Legal obligations. We may process your information where necessary to comply with our legal obligations, such as cooperating with a law enforcement body or regulatory agency, or as necessary for us to defend legal claims.
• Vital interests. We may process your information where necessary to protect your vital interests or those of a third party.

If you are located in Canada, we may process your information if you have given specific permission (express consent) or in situations where your permission can be inferred (implied consent). You can withdraw consent at any time.

---

4. When and With Whom Do We Share Your Personal Information?

In Short: We may share information in specific situations described in this section and/or with the categories of third parties described below.

We may need to share your personal information in the following situations:

• Service providers and vendors. We share information with third-party companies who perform services for us — for example, payment processing (Stripe, PayPal, Google Pay), store and checkout hosting (Shopify), email/SMS marketing (Klaviyo), and analytics and advertising partners (see the table in Section 5 for a full list). These providers are only permitted to use your information as necessary to provide services to us.
• Business transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
• Legal obligations. We may disclose your information where we are legally required to do so in order to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process, such as in response to a subpoena.
• Vital interests and legal rights. We may disclose your information where we believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, situations involving potential threats to the safety of any person, or as evidence in litigation.
• With your consent. We may disclose your personal information for any other purpose with your consent.

We do not sell your personal information to third parties for money. As discussed in Section 5, some data sharing with advertising partners may be considered a "sale" or "sharing" under certain state privacy laws, and you have the right to opt out of that.

---

5. Do We Use Cookies and Other Tracking Technologies?

In Short: Yes. We and our advertising and analytics partners use cookies, pixels, and similar technologies to run the site, understand how it is used, and show you relevant ads on other platforms. You can opt out.

What we use. We use cookies (small files stored in your browser), pixels (small pieces of code or invisible images on a page), SDKs, and similar technologies ("tracking technologies") on decomposition.com and in our emails. Some are set by us; others are set by third parties listed below.

Third-party tracking technologies we use.

Categories of cookies.

• Strictly necessary — required for the site, cart, checkout, and security to work. Cannot be switched off.
• Analytics / performance — help us understand how visitors use the site so we can improve it.
• Functional — remember your preferences (e.g., country/currency, login).
• Advertising / targeting — set by us and our advertising partners to build a profile of your interests and show you relevant ads on other sites and apps, and to measure whether those ads led to a visit or purchase.

How to control tracking technologies.

• Cookie preferences on our site. Click "Cookie Settings" in the footer at any time to accept or reject non-essential cookies by category. Visitors in the EEA, UK, and Switzerland are asked for consent before non-essential cookies are set.
• US state opt-out ("Do Not Sell or Share"). Visit Your Privacy Choices to opt out of the sale or sharing of your personal information for targeted advertising. We also honor the Global Privacy Control (GPC) browser signal as an opt-out request.
• Platform controls. You can manage ad personalization directly with Meta and Google using the links in the table above.
• Browser controls. Most browsers let you block or delete cookies. Blocking strictly necessary cookies will prevent checkout from working.
• Email pixels. Our marketing emails contain a pixel that tells us whether the email was opened. Disabling image loading in your email client prevents this. Unsubscribe at any time via the link in any email.

"Sale" and "sharing." We do not sell your personal information for money. However, allowing advertising partners such as Meta and Google to collect information through tracking technologies on our site may be considered a "sale," "sharing," or "targeted advertising" under California and certain other US state privacy laws. You can opt out as described above.

---

6. How Long Do We Keep Your Information?

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this notice, unless a longer retention period is required or permitted by law.

We will only keep your personal information for as long as it is necessary for the purposes set out in this notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). No purpose in this notice will require us to keep your personal information for longer than the period of time in which you have an account with us, or as needed to complete a transaction, provide a service you requested, or as needed to comply with legal obligations, resolve disputes, and enforce our agreements.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it, or, if this is not possible (for example, because your information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

---

7. How Do We Keep Your Information Safe?

In Short: We aim to protect your personal information through a system of organizational and technical security measures.

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process, such as encryption of payment data in transit and access controls limiting who at our company (and our service providers) can view your information. However, despite our safeguards and efforts to secure your information, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.

---

8. What Are Your Privacy Rights?

In Short: Depending on your state of residence in the US or if you are located in the EEA, UK, Switzerland, or Canada, you may have rights that allow you greater access to and control over your personal information. You may review, change, or terminate your account at any time.

Withdrawing your consent. If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time. You can do this by contacting us using the details in Section 12, or by using the cookie preference tool described in Section 5. Withdrawing consent will not affect the lawfulness of processing before the withdrawal, nor affect processing based on lawful grounds other than consent.

Opting out of marketing. You can unsubscribe from our marketing and promotional emails at any time by clicking the unsubscribe link in the emails we send, replying "STOP" to our marketing texts, or by contacting us. You will then be removed from marketing lists, though we may still send you service-related communications necessary for the administration of your account or fulfillment of your orders.

Account information. If you would at any time like to review or change the information in your account, or terminate your account, you can contact us using the information in Section 12. Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases, though some information may be retained to prevent fraud, troubleshoot problems, assist with investigations, enforce our legal terms, and/or comply with legal requirements.

Cookies and similar technologies. See Section 5 for how to manage cookies and tracking technologies.

Depending on your location, you may also have rights to:

• Request access to and receive a copy of your personal information
• Request rectification or erasure of your personal information
• Restrict or object to our processing of your personal information
• If applicable, request portability of your personal information
• Not be subject to automated decision-making, including profiling
• Lodge a complaint with your local data protection authority, if you believe we have violated your privacy rights

To exercise these rights, please fill out our data subject request form at https://decomposition.com/contact-us/ or contact us as described in Section 12. We will consider and act upon any request in accordance with applicable data protection laws.

---

9. Controls for Do-Not-Track Features

Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized, so we do not currently respond to DNT browser signals. However, we do honor the Global Privacy Control ("GPC") signal, as described in Section 5. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this notice.

---

10. Do California and Other US State Residents Have Specific Privacy Rights?

In Short: Yes, if you are a resident of California, Colorado, Connecticut, Virginia, Utah, or certain other US states, you may be granted specific rights regarding access to and use of your personal information.

California residents. California Civil Code Section 1798.83, also known as the "Shine The Light" law, permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year.

Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"), and similar comprehensive privacy laws now in effect in states including Colorado, Connecticut, Virginia, and Utah, eligible residents generally have the right to:

• Know what personal information we have collected about you and how it has been used and shared
• Access and receive a copy of your personal information
• Correct inaccurate personal information
• Request deletion of your personal information
• Opt out of the "sale" or "sharing" of your personal information, and out of targeted advertising or certain profiling
• Not be discriminated against for exercising any of your privacy rights

To exercise any of these rights, please submit a request through our data subject request form at https://decomposition.com/contact-us/, or use the cookie/ad-tracking controls described in Section 5. We will not discriminate against you for exercising your rights. An authorized agent may make a request on your behalf, subject to our ability to verify the agent's authority and your identity.

---

11. Do We Make Updates to This Notice?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this privacy notice from time to time. The updated version will be indicated by an updated "Last updated" date at the top of this notice, and the updated version will be effective as soon as it is accessible. If we make material changes to this notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this notice frequently to stay informed of how we are protecting your information.

---

12. How Can You Contact Us About This Notice?

If you have questions or comments about this notice, you may contact us by email at info@michaelroger.com, or by submitting a request through our contact form at https://decomposition.com/contact-us/.

Mailing address: Michael Roger, Inc. (d/b/a decomposition.com) [Insert street address] [Insert city, state, ZIP]

---

13. How Can You Review, Update, or Delete the Data We Collect From You?

Based on the applicable laws of your country or state of residence, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law.

To request to review, update, or delete your personal information, please fill out our data subject request form available at https://decomposition.com/contact-us/, or contact us using the information provided in Section 12.