Serving Homeowners in All 50 States

Elevate Your Living
Beyond Expectations

We transform ordinary spaces into extraordinary experiences. From modern interiors to smart home upgrades, our expert team ensures precision, elegance, and lasting quality in every detail.

4.9/5(12K+ reviews)
Fully Licensed & Insured
0% Financing Available
Our Team at Work
From Many
Years Building Dreams
12,400+ Reviews
About Us

Redefining What
Home Means

Creative Home Decor was born from a simple belief: every family deserves a living space that inspires joy, ensures safety, and reflects who they are. A team of passionate architects and engineers in USA, we've grown into a nationwide force of 800+ certified professionals dedicated to making exceptional home improvement accessible to everyone.

What sets us apart isn't just our technical skill — it's our obsession with the homeowner experience. From your first consultation to the final walkthrough, we assign a dedicated project concierge who keeps you informed, addresses concerns in real-time, and ensures every detail meets our exacting standards. We don't leave until you're thrilled.

800+
Certified Pros
200+
Cities Served
99.2%
Satisfaction Rate
40+
Industry Awards
What We Do

Complete Home Service Suite

One partner for every corner of your home. Each service is delivered by certified specialists using premium materials and backed by industry-leading warranties.

Interior Design

Bespoke interiors crafted to your lifestyle — spatial planning, material curation, color psychology, and 3D renderings before a single nail is hammered.

Exterior Design

Transform your home's facade with architectural detailing, landscaping coordination, siding, stonework, and entryway redesigns that boost curb appeal.

Home Decor

Artful styling with furniture, textiles, window treatments, artwork, and accessories. We source from 500+ premium vendors to match any aesthetic.

Bathroom Remodeling

Spa-inspired retreats with heated floors, frameless glass, rainfall systems, custom vanities, and smart mirrors — luxury without the luxury markup.

Kitchen Remodeling

The heart of your home, reimagined. Custom cabinetry, quartz/granite countertops, smart appliances, island design, and optimized workflow layouts.

Fire & Safety Installs

NFPA-compliant fire sprinklers, smoke/CO detectors, fire extinguishers, escape ladder systems, and whole-home safety audits for complete protection.

Solar Panel Installs

Go solar with confidence. Tier-1 monocrystalline panels, microinverters, battery storage, net metering setup, and federal tax credit assistance.

Home Warranty

Comprehensive coverage plans protecting HVAC, plumbing, electrical, and appliances. $75 service call fee, no hidden caps, and 24-hour claim processing.

Roofing & Flooring

Architectural shingles, standing seam metal, clay tile, flat EPDM, and green roofs. All installations include ice/water shield and 25-year manufacturer warranty.

Gutter Installation

Seamless aluminum and copper gutters with micro-mesh guards, custom sizing, underground drain connections, and a no-clog guarantee for 20 years.

Home Security Systems

Enterprise-grade protection for your family: 4K AI-powered cameras, smart locks with biometric access, perimeter sensors, glass-break detectors, 24/7 professional monitoring, and full smart home integration via app. Military-grade encryption ensures your data stays private.

Designed for seamless control and total peace of mind, the system offers real-time alerts, remote access from anywhere, instant emergency response integration, and customizable automation scenes.

Get Quote →
Why Creative Home Decor

Built on Trust & Excellence

Here's why 75,000+ families chose us over the competition — and never looked back.

Vetted Master Tradespeople

Every technician passes a 12-step vetting process: background checks, skills testing, drug screening, reference verification, and 200+ hours of annual continuing education.

Fixed-Price Guarantee

Our quotes are locked-in. No surprise charges, no "materials went up" excuses. If we underbid, we eat the cost. Your price is our promise — period.

Precision Scheduling

Our proprietary scheduling system gives you a 2-hour arrival window (not "sometime between 8 and 5"). Missed windows earn you a $50 credit toward your project.

Lifetime Workmanship Promise

Our standard warranty is 10 years — not 1, not 5. And for premium-tier projects, we offer a lifetime workmanship guarantee that transfers to future homeowners.

Clean-Site Commitment

We treat your home like our own. Daily cleanup, floor protection, dust containment, and a final deep-clean after project completion. You'll never know we were there — except for the beautiful results.

Real-Time Project Tracking

Monitor every phase through our client portal: live progress photos, team locations, milestone updates, document storage, and direct messaging with your project concierge.

Newsletter

Join 40,000+ Smart Homeowners

Weekly home maintenance tips, seasonal project ideas, exclusive subscriber-only discounts, and early access to new service launches. No spam, ever — just value.

Weekly Tips 10% Off First Service Unsubscribe Anytime

Unsubscribe

We're sorry to see you go. Enter your email to opt out of all marketing communications. Important transactional messages related to active projects will still be delivered.

Testimonials

Homeowners Love Us

Verified reviews from real families across America — no photos, just honest words.

"We were terrified of remodeling — heard so many horror stories. Creative Home Decor changed the narrative entirely. The project portal let us see daily progress photos from our vacation in Hawaii. Came home to a completely new kitchen that looked exactly like the 3D rendering. Mind-blowing."

Marcus & Tanya Brooks
Kitchen Remodel • Atlanta, GA

"The solar installation team was phenomenal. They handled permits with the city, coordinated with our utility company, and had us generating clean energy in under 5 weeks. Our $280/month electric bill is now $22. The ROI projection they provided was actually conservative — we're ahead of schedule."

Patricia Nguyen
Solar Panels • San Diego, CA

"After our neighborhood had a string of break-ins, we called Creative Home Decor for security. They installed 8 cameras, smart locks on every entry, glass-break sensors, and connected it all to 24/7 monitoring. The app alerts me within 3 seconds of any trigger. I sleep soundly now."

James & Karen Whitfield
Home Security • Houston, TX

"Bathroom turned out gorgeous — heated floors, rainfall shower, the works. Only giving 4 stars because the tile we originally selected was discontinued and we had to pick a replacement, which added a week. But the result is genuinely spectacular and the team was very apologetic."

Daniel O'Sullivan
Bathroom Remodel • Seattle, WA

"Hail storm destroyed our 20-year-old roof. Creative Home Decor emergency crew arrived in 3 hours, tarped the damage, and had a full replacement done in 4 days. They even helped us navigate the insurance claim and got us $8,000 more than the initial offer. Above and beyond."

Rebecca & Tom Gallagher
Roofing • Oklahoma City, OK

"The interior designer understood our mid-century modern vision better than we could articulate it. She sourced vintage pieces, custom furniture, and art that made our home look like an architectural digest feature. Neighbors literally stop to take photos. Worth every penny."

Christina Morales
Interior Design • Miami, FL
FAQ

Got Questions?

What states do you operate in?

We operate in all 50 states through a combination of direct offices in 45 major metro areas and vetted local partnerships in remaining regions. Every partner undergoes our same rigorous quality standards, insurance requirements, and training programs. Whether you're in Manhattan or rural Montana, you get the same Creative Home Decor experience.

How does the free estimate process work?

Book online or call us. A certified specialist visits your home (or conducts a virtual walkthrough), takes measurements, discusses your vision and budget, and delivers a detailed written estimate within 48 hours. The estimate includes material specs, labor breakdown, timeline, and payment schedule. Zero obligation, zero pressure.

Do you offer financing and what are the terms?

Yes — we offer 0% APR for 24 months on projects $5K+, 2.99% APR for 60 months, and 5.99% APR for 120 months. We partner with GreenSky, Affirm, and Wells Fargo. Most approvals are instant with no impact to your credit score for pre-qualification. There are no prepayment penalties, and you can pay off the balance anytime.

Can I stay in my home during the renovation?

In most cases, absolutely. We use dust containment systems, HEPA filtration, and partition barriers to isolate work areas. For kitchen remodels, we set up a temporary cooking station. For extensive whole-home projects, we can recommend short-term housing partners with discounted rates. Your project concierge will create a livability plan before work begins.

What happens if I'm unhappy with the results?

We have a formal "Love It or We Fix It" guarantee. At the final walkthrough, if anything isn't right, we fix it free. If after corrections you're still unsatisfied, we escalate to our VP of Client Satisfaction who has authority to redo work, bring in outside specialists, or issue pro-rated refunds. In 17 years, fewer than 0.3% of projects have reached this stage.

Are your solar panels covered under warranty?

Yes, triple-layered coverage: manufacturer warranty on panels (25 years), inverter warranty (12-25 years depending on model), and our installation workmanship warranty (10 years). We also include a production guarantee — if your system underperforms our projection by more than 5%, we'll add panels at no cost to make up the difference.

How do I choose between services for my home?

Start with a free Whole-Home Assessment — a 90-minute inspection where we evaluate every system and surface. You'll receive a prioritized roadmap ranked by safety urgency, ROI potential, and aesthetic impact. Many homeowners bundle 2-3 services for a 15% package discount.

Do you handle HOA approvals?

Absolutely. We have a dedicated HOA Liaison Team that prepares submission packages including architectural drawings, material samples, color boards, and contractor credentials. We attend HOA meetings on your behalf if needed. Our 94% first-submission approval rate saves weeks of back-and-forth.

Get In Touch

Let's Build Your Dream Home

Fill out the form and a specialist will reach out within 4 business hours — not days, hours. Or call us directly for immediate assistance.

Phone
+1 213-825-1857
Mon–Sat 7AM–9PM EST
Email
info@creativehomedecor.info
4-hour response guarantee
Address
4560 Center St, Baldwin Park, CA 91706, USA

By submitting, you agree to our Privacy Policy and Terms of Service.

Legal Documents

Privacy Policy & Terms of Service

Effective Date: 2026 | Please review these documents carefully before using our services.

1. Overview and Acceptance of Privacy Practices

Creative Home Decor ("Creative Home Decor," "the Company," "we," "us," or "our") is deeply committed to safeguarding the privacy and personal data of every individual who interacts with our brand. This Privacy Policy establishes the comprehensive framework governing how we collect, process, store, share, and protect personal information obtained through our website (www.creativehomedecor.info), mobile applications, telephone communications, in-person consultations, social media platforms, and any other touchpoints associated with our home service operations. By accessing our digital properties, engaging our services, or providing personal information in any manner, you explicitly acknowledge that you have read, fully understood, and unconditionally agree to be bound by all provisions set forth herein. If any portion of this policy is unacceptable to you, you must immediately cease all use of our services and platforms.

2. Categories of Personal Information Collected

We systematically collect and categorize personal information to deliver superior service experiences. Direct Identifiers include your legal full name, mailing and residential addresses, telephone numbers (mobile, landline, and work), email addresses, date of birth, and Social Security Number when required for credit verification, warranty registration, or employment background checks. Financial Data encompasses credit card numbers, debit card information, bank account routing numbers, loan application details, credit score reports, payment histories, and billing statements processed through our PCI-DSS Level 1 compliant payment infrastructure. Technical and Behavioral Data includes IP addresses (both IPv4 and IPv6), precise geolocation data, device fingerprints, browser type and version, operating system details, screen resolution, connection speed, pages visited, clickstream data, scroll depth, session duration, referring URLs, search queries entered on our platforms, and download history. Project-Specific Information comprises interior and exterior photographs of your property, architectural floor plans, structural measurements, material preference surveys, design mood boards, color selections, budget parameters, existing conditions documentation, and before/after comparison imagery. Communication Records include all correspondence via email, phone call recordings (with disclosed consent), live chat transcripts, SMS messages, social media interactions, and in-person consultation notes maintained by our project teams.

3. Purposes and Legal Bases for Data Processing

Every instance of personal data processing is grounded in a legitimate legal basis as defined by applicable federal and state privacy legislation. We process your data to fulfill contractual obligations arising from service agreements, including project estimation, scheduling, execution, quality assurance, and warranty administration. We process data based on your explicit consent for marketing communications, biometric authentication, geolocation tracking, and the collection of sensitive data categories beyond what is strictly necessary for service delivery. We process data to comply with legal obligations including tax reporting (IRS Form 1099 requirements), building permit applications, OSHA safety documentation, workers' compensation filings, and regulatory audits by state contractor licensing boards. We process data for our legitimate business interests including service improvement, fraud prevention, network security, business analytics, workforce management, insurance underwriting, and the development of new service offerings. We process data for public interest purposes when cooperating with law enforcement agencies, consumer protection authorities, or emergency response organizations during situations involving imminent danger, suspected criminal activity, or natural disaster response efforts.

4. Methods of Data Collection

Personal information flows to us through multiple channels, each with specific collection mechanisms. Direct Collection occurs when you provide information through website forms, mobile app inputs, phone conversations, in-person consultations, mail correspondence, or at our physical office locations. Automated Collection is performed by technologies embedded in our platforms including HTTP cookies (essential, functional, analytical, and marketing categories), web beacons and tracking pixels, JavaScript-based analytics scripts, server log files, device fingerprinting algorithms, and SDK integrations with third-party services. Third-Party Collection occurs when we receive data from partners including credit bureaus (Equifax, Experian, TransUnion), insurance carriers, material suppliers, permit-issuing authorities, home inspection services, real estate platforms, and marketing data aggregators operating under lawful data-sharing agreements. Passive Collection happens through observational technologies such as heat mapping (recording where users click and hover), session replay tools (recording user interactions for UX analysis), and environmental sensors in our smart home installations that collect usage patterns for optimization purposes. Each collection method is designed with privacy-by-design principles, ensuring data minimization and purpose limitation at every stage.

5. Third-Party Sharing and Data Disclosure Practices

We maintain a rigorous data-sharing framework that restricts disclosure to carefully vetted recipients operating under binding contractual obligations. Service Providers and Subcontractors receive access to data necessary for performing assigned functions including installation work, material procurement, logistics coordination, quality inspection, and customer support. All such entities execute Data Processing Agreements mandating confidentiality, security standards equivalent to our own, and prohibitions on secondary data use. Financial Partners including payment processors (Stripe, Square), lending institutions (GreenSky, Wells Fargo, Affirm), and insurance carriers receive financial data necessary for transaction processing, credit decisioning, and claims administration. Professional Advisors including legal counsel, accounting firms, auditors, and compliance consultants access data as required for professional services delivery under attorney-client privilege or equivalent protections. Government and Regulatory Bodies receive disclosures when mandated by subpoena, court order, administrative summons, or regulatory examination from entities including state contractor licensing boards, the Consumer Financial Protection Bureau, the Federal Trade Commission, state attorneys general, and the Department of Labor. Business Transfers may occur in connection with mergers, acquisitions, asset sales, reorganizations, or bankruptcy proceedings, with successor entities bound by equivalent privacy commitments. We explicitly prohibit and have never engaged in the sale of personal information to data brokers, advertising networks, or any third party for monetary consideration.

6. Cookie Architecture and Digital Tracking Framework

Our digital tracking infrastructure employs a multi-layered approach designed to balance functionality, analytics, and marketing capabilities with user privacy preferences. Essential Cookies (approximately 12 active cookies) are strictly necessary for platform operation including session persistence (PHPSESSID), authentication state management (auth_token), CSRF protection (csrf_token), load balancing routing (route_id), and consent preference storage (consent_v2). Analytics Cookies deployed through Google Analytics 4, Microsoft Clarity, and Hotjar collect anonymized behavioral data including page views, navigation paths, device characteristics, geographic region (city-level, not precise coordinates), referral sources, and conversion events. Marketing Cookies from platforms including Meta (Facebook/Instagram) Pixel, Google Ads Conversion Tracking, LinkedIn Insight Tag, TikTok Pixel, Pinterest Tag, and Bing UET enable cross-platform ad delivery, conversion attribution, audience segmentation, and retargeting. Preference Cookies store your customization choices including language selection, unit preferences (imperial/metric), theme settings, and saved project configurations. All non-essential cookies require opt-in consent through our Cookie Consent Management Platform (OneTrust), which provides granular category-level controls. We honor Global Privacy Control (GPC) browser signals, Do Not Track (DNT) HTTP headers where technically feasible, and respect opt-out signals from the Network Advertising Initiative (NAI) and Digital Advertising Alliance (DAA) frameworks.

7. Data Security Architecture and Incident Response

Our information security program implements defense-in-depth principles across people, processes, and technology to protect personal data against unauthorized access, modification, disclosure, or destruction. Network Security includes enterprise-grade next-generation firewalls (Palo Alto Networks), web application firewalls (Cloudflare WAF), distributed denial-of-service mitigation, TLS 1.3 encryption for all data in transit, DNSSEC validation, and network segmentation isolating production environments from corporate networks. Application Security encompasses secure software development lifecycle (SSDLC) practices, static and dynamic application security testing (SAST/DAST), dependency vulnerability scanning, penetration testing by third-party firms on a quarterly basis, runtime application self-protection (RASP), and container security scanning for microservices architectures. Data Protection employs AES-256 encryption for data at rest within AWS S3 buckets with server-side encryption, AWS Key Management Service for cryptographic key management with automatic annual rotation, field-level encryption for highly sensitive data elements (SSN, financial account numbers), and database activity monitoring with real-time alerting. Access Controls implement zero-trust architecture principles with multi-factor authentication (MFA) for all user accounts, role-based access control (RBAC) with least-privilege assignments, privileged access management (PAM) for administrative functions, just-in-time access provisioning, and automated deprovisioning upon role changes or termination. Our Incident Response Plan, maintained in accordance with NIST SP 800-61 Rev. 2, defines detection, containment, eradication, recovery, and post-incident analysis procedures. In the event of a breach involving personal information, we notify affected individuals within 72 hours as required by applicable state breach notification laws, provide specific details about the nature and scope of the incident, offer identity protection services (typically 24 months of credit monitoring through Experian IdentityWorks), and coordinate with law enforcement as appropriate.

8. Consumer Rights and Data Subject Requests

Under applicable state and federal privacy legislation, you possess a comprehensive set of rights regarding your personal information. The Right to Know entitles you to receive a detailed disclosure of the specific categories and particular pieces of personal information we have collected about you, the sources from which it was obtained, the business purposes for which it is used, and the categories of third parties with whom it has been shared. The Right to Delete allows you to request complete erasure of your personal information from our systems and those of our service providers, subject to specific exceptions including information necessary to complete a transaction, comply with legal obligations, detect security errors, repair defects, exercise free speech, comply with the federal Electronic Communications Privacy Act, engage in public or peer-reviewed scientific research, or enable solely internal uses that are reasonably aligned with your expectations. The Right to Correct permits you to request the accurate completion or amendment of inaccurate personal information, taking into account the nature and purpose of the data processing. The Right to Opt-Out grants you the ability to direct us not to use or share your personal information for targeted advertising, the sale of personal information, or profiling in furtherance of decisions that produce legal or similarly significant effects. The Right to Limit Use of Sensitive Personal Information allows you to instruct us to use your sensitive data (precise geolocation, racial or ethnic origin, religious beliefs, private communications, genetic data, biometric information, health information, and information concerning sex life or sexual orientation) only for specified permitted purposes. The Right to Non-Discrimination ensures we will not discriminate against you for exercising any privacy rights, including by denying goods or services, charging different prices, providing different quality levels, or suggesting that you will receive such differential treatment. To exercise any right, submit a verified request through our Privacy Rights Portal at privacy.creativehomedecor.info, email privacy@creativehomedecor.info, or call +1 213-825-1857. We respond within 45 days (with one 45-day extension permitted under complex circumstances) and will never require you to create an account to submit a request.

9. California-Specific Disclosures (CCPA/CPRA)

This section provides mandatory disclosures for California residents under the California Consumer Privacy Act as amended by the California Privacy Rights Act. In the preceding twelve months, we have collected the following categories of personal information: Identifiers (name, email, phone, address, IP address, account IDs), Customer Records (home address, payment information, phone number, email), Protected Classifications (age/date of birth), Commercial Information (purchasing history, service preferences, project specifications), Internet Activity (browsing history, search queries, interaction data), Geolocation Data (city-level from IP, precise GPS when app-enabled), Sensory Data (photographs of your home taken during service delivery), Professional Information (employment history for job applicants), and Inferences (preferences, characteristics, behavior predictions). We have used this information for the purposes described in Section 3 above. We have disclosed personal information for business purposes to the categories of third parties described in Section 5 above. We have NOT sold personal information as "sale" is defined under CCPA (i.e., exchange for monetary or other valuable consideration to a third party for the purpose of cross-context behavioral advertising). We have NOT shared personal information for cross-context behavioral advertising. California residents may access this policy in multiple languages upon request. Our Chief Privacy Officer, designated as the agent for CCPA compliance, can be reached at: Creative Home Decor Attn: Privacy Officer, 4560 Center St, Baldwin Park, CA 91706, USA, or privacy@creativehomedecor.info.

10. Children's Online Privacy Protection

Our services and digital platforms are exclusively directed at adults aged 18 and older who own or are authorized to make decisions about residential properties. We do not knowingly collect, use, or disclose personal information from children under the age of 13 (as defined by COPPA) or under 16 (as defined by certain state laws). If a child under 13 has provided us with personal information, a parent or guardian may contact us at privacy@creativehomedecor.info to request immediate deletion, and we will comply within 10 business days as required by COPPA. We implement reasonable age-gating measures on interactive features and do not employ child-directed design elements, cartoon characters, or incentive structures that would attract children. In circumstances where we become aware that we have inadvertently collected personal information from a minor between 13 and 18 without parental consent, we will take commercially reasonable steps to delete such information promptly upon notification.

11. Data Retention, Storage, and Destruction Protocols

We apply a structured data retention framework that balances operational necessity, regulatory compliance, and data minimization principles. Active Customer Records including contact information, project files, financial transactions, and communication histories are retained for the duration of the business relationship plus seven years to satisfy IRS audit requirements (generally 3-7 years depending on transaction type), state contractor license retention obligations (typically 5-10 years), and statute of limitations considerations for potential litigation (up to 10 years for construction defects in some states). Project Documentation including architectural plans, photographs, permits, inspection reports, warranty registrations, and material specifications is retained for a minimum of fifteen years following project substantial completion, as construction defect claims may be filed within extended statutory periods. Employment Records are maintained for seven years following separation in accordance with EEOC, IRS, and Department of Labor requirements. Marketing Consent Records are retained for five years from the date of consent or withdrawal. Security Logs and Audit Trails are maintained for one year in hot storage and three years in cold storage. Upon expiration of the applicable retention period, personal data is securely destroyed using NIST SP 800-88 compliant methods including cryptographic erasure for encrypted storage media, physical shredding (DIN 66399 security level P-4 or higher) for paper documents, and degaussing for magnetic media. Data stored in our primary AWS infrastructure (US-East-1 and US-West-2 regions) never leaves United States jurisdiction except in rare circumstances involving CDN edge caching with appropriate safeguards.

12. Biometric, Genetic, and Health Data Handling

Certain advanced service features may involve the collection of biometric identifiers including facial geometry (for smart lock facial recognition), fingerprint data (for biometric door handles), and voice prints (for voice-activated smart home systems). All biometric data collection requires your explicit, written, opt-in consent separately obtained from general service consent, as required by state biometric information privacy laws USA. Biometric templates are stored using irreversible one-way hashing — raw biometric data is never retained and cannot be reconstructed. We do not collect, request, or process genetic data or health information except in the narrow context of accessibility modifications requested by the homeowner (such as grab bar installations or wheelchair ramp specifications), where such information is treated as confidential medical data with enhanced access restrictions. Any health-related information disclosed during service consultations is stored separately from general customer records in an access-restricted environment encrypted at the field level.

13. Artificial Intelligence, Machine Learning, and Automated Decisions

We deploy artificial intelligence and machine learning technologies across multiple operational domains to enhance service quality and efficiency. AI-Powered Design Tools generate initial design concepts, material recommendations, and spatial layout options based on your stated preferences, room dimensions, and style indicators. These outputs serve as professional starting points for human designers and are clearly identified as AI-generated when shared with customers. Predictive Analytics Models forecast project timelines, cost estimates, material requirements, and potential risk factors based on historical project data. These models are trained exclusively on our proprietary dataset and do not incorporate personal information from external sources. Smart Home AI Systems installed as part of security and automation services learn household patterns (occupancy schedules, lighting preferences, temperature habits) to optimize performance. All learning occurs on local edge devices (not cloud-based) by default, and customers retain full control over data collection granularity through the smart home app. We do not use AI systems that make final decisions producing legal or similarly significant effects (such as credit denials or service refusals) without providing a meaningful human review process upon your request. We conduct annual algorithmic fairness audits to identify and mitigate potential bias in our AI systems, particularly regarding protected characteristics.

14. International Data Transfer Safeguards

While our primary data processing infrastructure is located within the continental United States (AWS regions US-East-1 Virginia and US-West-2 Oregon), certain ancillary services may involve international data transfers. These include CDN edge nodes operated by Cloudflare that may cache non-personal content in international locations, software development tools hosted by GitHub (Microsoft, with data residency in the US), customer support platforms (Zendesk, US-hosted), and analytics services (Google Analytics, with optional EU data processing available upon request). For any transfer that involves personal information moving to a jurisdiction without an adequacy determination from the US Department of Commerce, we implement appropriate safeguards including Standard Contractual Clauses (SCCs) approved under Executive Order 14114, supplementary technical measures (encryption in transit and at rest, pseudonymization), and contractual commitments from the data importer to provide an equivalent level of data protection. We maintain a Data Transfer Impact Assessment for each international data flow and review it annually or whenever there is a material change in the transfer arrangement.

15. Mobile Application-Specific Privacy Practices

Our mobile applications (available on iOS and Android) collect specific categories of data beyond what is collected through our website. Device Information includes hardware model, OS version, unique device identifiers (IDFA on iOS, Advertising ID on Android), battery level, available storage, and network connectivity status. Location Data is collected with your explicit permission when you enable location services for features including finding nearby service centers, enabling geofenced smart home automations, and providing weather-appropriate maintenance alerts. You can revoke location permission at any time through your device settings without affecting other app functionality. Photo and Media Access is requested when you use in-app features to upload project photos, document existing conditions, or communicate with your project team. We process these images only for the stated purpose and do not add them to our marketing database without separate consent. Notification Permissions are requested for project updates, appointment reminders, and safety alerts. You can customize notification categories within the app's settings. Background Data Collection: Our app does not collect data while running in the background except for push notification delivery through Firebase Cloud Messaging, which requires a persistent connection but does not transmit personal data in the background. We comply with Apple App Store and Google Play Store data disclosure requirements, and our privacy nutrition labels are accurately maintained.

16. Vendor and Supply Chain Privacy Management

We recognize that our privacy commitments extend to the entire data supply chain. Every third-party vendor with access to personal information undergoes a comprehensive privacy and security assessment before onboarding, including completion of our Vendor Privacy Questionnaire (covering data practices, security controls, employee training, sub-processor management, and breach history), review of their SOC 2 Type II reports, verification of relevant certifications (ISO 27001, PCI-DSS, HITRUST), and legal review of their standard contractual terms. We require all vendors to execute our Data Processing Agreement which mandates: purpose limitation to specified business functions, confidentiality obligations with minimum 5-year post-termination duration, security standards meeting or exceeding our own requirements, prompt breach notification (within 24 hours of discovery), prohibition on subcontracting without prior written consent, audit rights with 30-day notice, and data return/destruction upon termination. We maintain a comprehensive vendor inventory, conduct annual re-assessments of high-risk vendors, and perform on-site security assessments for critical service providers. We have terminated vendor relationships for privacy and security non-compliance and will continue to do so to protect customer data.

17. Privacy-Related Communications and Opt-Out Mechanisms

We provide multiple convenient mechanisms for you to control the marketing communications you receive from Creative Home Decor. Email Marketing: Every promotional email contains a clearly visible "Unsubscribe" link in the footer that processes opt-out requests immediately upon click. Alternatively, you can reply with "STOP" to any marketing email, contact us at unsubscribe@creativehomedecor.info, or manage preferences through your online account dashboard. Opt-out requests are processed within 10 business days (typically within 1 business day for automated requests). SMS Marketing: Text message opt-out is available by replying STOP, END, CANCEL, or QUIT to any message from our short code (555-HOME). You may also text HELP for assistance or contact our support team. Phone Calls: To opt out of telemarketing calls, request placement on our internal Do-Not-Call list by calling +1 213-825-1857 or emailing dnc@creativehomedecor.info. We also maintain compliance with the National Do-Not-Call Registry. Direct Mail: To opt out of physical mailings, contact us at privacy@creativehomedecor.info with your mailing address. Targeted Online Advertising: To opt out of interest-based advertising served through our ad partners, visit the Digital Advertising Alliance opt-out page (optout.aboutads.info), the Network Advertising Initiative opt-out page (optout.networkadvertising.org), or adjust individual platform settings (Facebook Ad Preferences, Google Ad Settings, etc.). Please note that opting out of marketing communications does not affect receipt of transactional messages related to active projects, accounts, or warranty claims.

18. Specific State Privacy Law Disclosures

Beyond California, several states have enacted comprehensive privacy legislation that provides additional rights and requires specific disclosures. Virginia (VCDPA): Virginia residents have the right to know, correct, delete, obtain a copy, and opt out of processing of personal data for purposes of targeted advertising, sale, or profiling. We designate the Attorney General of Virginia as the sole enforcement authority. Colorado (CPA): Colorado residents possess the same core rights with additional universal opt-out mechanism support through the Global Privacy Control signal, which we honor. Connecticut (CTDPA): Connecticut residents have rights to know, correct, delete, port, and opt out, with enhanced protections for minors' data. Utah (UCPA): Utah residents have the right to opt out of targeted advertising and the sale of personal data. USA residents may opt out of the processing of personal data for purposes of targeted advertising, sale of personal data, or profiling. We process opt-out requests through our Privacy Rights Portal and honor GPC signals as the universal opt-out mechanism where required. Oregon, Montana, Texas (additional 2026 provisions), and other recently enacted statutes are monitored by our legal team, and our practices are updated proactively to ensure compliance ahead of effective dates. Residents of any state not specifically listed herein retain all rights available under applicable federal law and common law privacy protections.

19. Data Breach Notification and Remediation

In the event of a security incident resulting in the unauthorized acquisition, access, use, or disclosure of personal information, Creative Home Decor follows a structured notification protocol aligned with the most stringent applicable state law. Upon confirmation that a breach has occurred, we initiate our Incident Response Plan within one hour, engaging our internal Security Operations Center and external forensic investigation firm (currently CrowdStrike) to determine the scope, affected data categories, number of impacted individuals, and root cause. We notify affected individuals without unreasonable delay and in no event later than the timeframe specified by the most restrictive applicable law: 72 hours for breaches affecting 500+ California residents under CCPA, 60 days for breaches involving Social Security numbers under many state laws, or the "most expedient time possible" standard under other statutes. Notifications are delivered via the most effective method available — email for individuals with known email addresses, first-class mail for those without, and prominent website notice for large-scale incidents. Each notification includes: a description of what happened and when, the specific categories of personal information involved, our contact information, what we have done and are doing in response, what you can do to protect yourself (including specific actionable steps), and information about any credit monitoring or identity protection services we are providing at no cost. We also notify state attorneys general, the FTC, and other regulators as required by the breach notification laws of every state whose residents are affected.

20. Policy Updates, Contact Information, and Accountability

This Privacy Policy is a living document that evolves with our business practices, technological capabilities, and the regulatory landscape. We review this policy quarterly and update it as needed, with material changes posted on this page and highlighted in the "Last Updated" date above. For changes that significantly expand our data collection or processing activities, we will provide additional notice through email, website banner, or in-app notification at least 30 days before the change takes effect. We encourage you to review this policy periodically. Our Privacy Officer, who bears overall accountability for our privacy program, can be reached at: Creative Home Decor, Attn: Chief Privacy Officer,4560 Center St, Baldwin Park, CA 91706, USA; Email: privacy@creativehomedecor.info; Phone: +1 213-825-1857. We maintain a comprehensive privacy governance framework including annual privacy impact assessments for new initiatives, mandatory privacy training for all employees (with role-specific advanced training for teams handling sensitive data), regular internal audits conducted by our Privacy Center of Excellence, and engagement of external privacy counsel for complex regulatory interpretations. We are committed to transparency, accountability, and continuous improvement in our privacy practices because your trust is the foundation of our business.