Security Policy
How we protect your payments, artwork and personal information.
Corazón De Oro Apparel, LLC takes the security of your information seriously. This policy explains how our store, our website, our checkout and our order handling protect what you share with us, and how to tell us if you find a problem. It works together with our Privacy Policy, which covers what we collect and why.
Secure Connections
Every page of our store and our website, our checkout and our order-status pages are served over HTTPS, so what you type is encrypted between your browser and our servers. Look for the padlock in your browser's address bar. Our sites are also verified by TrustedSite.
Payment Security
We never see or store your card number. Payment details are entered directly into forms run by our payment processors, which are certified to the Payment Card Industry Data Security Standard (PCI DSS):
- Boutique orders are paid through Shopify Checkout, which handles the card, wallet and Shop Pay payments on Shopify's secure servers.
- Custom embroidery orders placed on corazondeoroapparel.com and paid by card use Stripe. The card form on that checkout page is Stripe's own, embedded in the page; the number goes to Stripe and never passes through our systems.
- Venmo payments are completed inside the Venmo app. We receive only your Venmo username and confirmation that the payment arrived.
We keep only what an order needs: the items, the amount, the shipping address and a payment confirmation from the processor.
Your Artwork & Uploads
Logos and artwork you upload for embroidery or digitizing are stored in private cloud storage. They are not published anywhere and cannot be browsed. Our staff open them through time-limited links that expire, and only to produce your order and communicate with you about it. A design you place in our design library is shown to other customers only if we mark it public, which we do only with your agreement.
Accounts & Access
- Customer accounts for the Boutique live on this Shopify store and use Shopify's own sign-in; we never see those credentials.
- Our embroidery website keeps no customer passwords. Checking an order's status there needs the email address on the order and the order number from your confirmation, nothing more.
- Our staff dashboard requires a staff login and an administrator role. Order, quote, message and upload records are protected by database access rules so that only authorized staff can read them.
Email & Phishing
Order confirmations, shipping notices and replies from us come from addresses ending in corazondeoroapparel.com or from Shopify on our behalf. We will never ask you for your password, your full card number or a payment outside our checkout by email, text or social media. If a message claiming to be from us asks for any of those, do not reply; forward it to support@corazondeoroapparel.com so we can look into it.
Service Providers
We rely on established providers for hosting, payments, email delivery and order fulfillment, each of which maintains its own security program. They receive only the information needed to perform their service for us, as described in our Privacy Policy.
Reporting a Security Issue
If you believe you have found a vulnerability in our store or website, or a weakness in how we handle information, please tell us before telling anyone else. Email support@corazondeoroapparel.com with Security in the subject line and enough detail for us to reproduce it. We will acknowledge your report within two business days, keep you informed while we fix it, and credit you if you wish.
Please test only against your own orders and accounts, do not access, change or delete other customers' data, and do not run automated scans that could slow the site down for everyone. We will not take action against anyone who reports in good faith and follows these guidelines.
If Something Goes Wrong
If we learn of a security incident that affects your personal information, we will tell you by email at the address on your order, explain what happened and what we are doing about it, and notify authorities where the law requires it.
Policy Updates
We may update this policy as our store, website and providers change. The version on this page is the current one.
Contact Us
Questions about this policy may be sent to support@corazondeoroapparel.com.