Privacy policy

Privacy Policy

Last Updated: [DATE]

This Privacy Policy explains how [STORE NAME] ("we", "us", or "our") collects, uses, stores and shares personal information when you visit or make a purchase through our website.

We respect your privacy and are committed to handling personal information responsibly and in accordance with applicable data protection laws, including the General Data Protection Regulation ("GDPR") where applicable.

1. Data Controller

The entity responsible for the processing of your personal information is:

[LEGAL COMPANY NAME]
Trading as: [STORE NAME]
Address: [BUSINESS ADDRESS]
Email: [PRIVACY EMAIL]
Phone: [PHONE NUMBER]

2. Information We Collect

When you use our website, we may collect information such as:

Information You Provide Directly

Depending on how you interact with our website, this may include:

  • full name;

  • billing address;

  • shipping address;

  • email address;

  • telephone number;

  • payment and transaction information;

  • order information;

  • customer service communications;

  • information you voluntarily provide through forms or messages.

We do not intentionally collect sensitive personal information unless necessary and permitted by applicable law.

Information Collected Automatically

When you browse our website, certain information may be collected automatically, including:

  • IP address;

  • browser type;

  • device type;

  • operating system;

  • language preferences;

  • referring website;

  • pages visited;

  • time spent on pages;

  • interaction with website features;

  • approximate geographic information derived from technical data;

  • cookies and similar technologies.

3. How We Use Your Information

We may use personal information to:

  • process and fulfill orders;

  • provide products and services;

  • process payments;

  • arrange shipping and delivery;

  • provide order tracking;

  • communicate with you regarding your order;

  • respond to customer service requests;

  • manage returns, refunds and exchanges;

  • prevent fraud and unauthorized transactions;

  • maintain and improve our website;

  • personalize your shopping experience;

  • analyze website performance;

  • send marketing communications where legally permitted and where required consent has been obtained;

  • comply with legal obligations;

  • protect our rights and prevent misuse of our services.

4. Legal Bases for Processing

Where GDPR applies, we process personal information on one or more of the following legal bases:

  • performance of a contract;

  • compliance with a legal obligation;

  • our legitimate interests, where those interests are not overridden by your rights and freedoms;

  • your consent, where consent is required.

Where we rely on consent, you may withdraw that consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

5. Cookies and Similar Technologies

We use cookies and similar technologies to operate, secure and improve our website.

Cookies may be used for purposes including:

  • essential website functionality;

  • shopping cart functionality;

  • remembering preferences;

  • analytics;

  • performance measurement;

  • advertising and remarketing;

  • fraud prevention.

Where required by applicable law, we will request your consent before placing non-essential cookies on your device.

You can manage cookie preferences through our cookie consent mechanism or through your browser settings.

6. Shopify and Service Providers

Our online store may be hosted or powered by Shopify and may use third-party providers to operate our business.

These providers may process information necessary to provide services such as:

  • payment processing;

  • website hosting;

  • analytics;

  • advertising;

  • fraud prevention;

  • customer support;

  • email delivery;

  • order fulfillment;

  • shipping and logistics.

These providers may process personal information only as necessary to provide their services or as otherwise permitted by applicable law.

7. Payment Information

Payments may be processed through third-party payment providers.

We may receive transaction-related information necessary to confirm and fulfill your order.

Payment card information may be processed directly by the relevant payment provider rather than being stored by us.

8. Order Fulfillment and Shipping Partners

To fulfill orders, we may share relevant information such as your name, shipping address, email address and telephone number with suppliers, fulfillment providers, logistics companies and carriers where necessary to deliver your order.

Because we may operate an international ecommerce business, these providers may be located outside your country or region.

9. International Data Transfers

Some service providers or business partners may process personal information outside your country or the European Economic Area.

Where GDPR or other applicable data protection law requires safeguards for international transfers, we will use appropriate legal mechanisms and safeguards.

These may include adequacy decisions, Standard Contractual Clauses or other legally recognized transfer mechanisms.

10. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

  • provide our services;

  • complete transactions;

  • maintain business and accounting records;

  • comply with legal obligations;

  • resolve disputes;

  • prevent fraud;

  • enforce agreements.

Retention periods may vary depending on the type of information and the applicable legal requirements.

11. Your Privacy Rights

Depending on your location and applicable law, you may have rights including:

  • the right to access your personal information;

  • the right to correct inaccurate information;

  • the right to request deletion;

  • the right to restrict processing;

  • the right to object to certain processing;

  • the right to data portability;

  • the right to withdraw consent;

  • the right to object to direct marketing;

  • the right to lodge a complaint with a competent data protection authority.

GDPR rights can vary depending on the circumstances and applicable legal basis for processing.

12. Marketing Communications

Where permitted by law, we may send marketing communications about products, promotions and other updates.

You may unsubscribe from marketing communications at any time by:

  • clicking the unsubscribe link in our emails; or

  • contacting us at [PRIVACY EMAIL].

Unsubscribing from marketing communications does not prevent us from sending transactional messages necessary to fulfill or manage your orders.

13. Children's Privacy

Our website is intended for general consumers and is not knowingly directed toward children who are below the minimum age permitted to use online services under applicable law.

We do not knowingly collect personal information from children in circumstances where such collection is prohibited.

If you believe a child has provided personal information to us, please contact us so we can investigate and take appropriate action.

14. Data Security

We use reasonable technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration or disclosure.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

15. Third-Party Websites

Our website may contain links to third-party websites.

We are not responsible for the privacy practices, content or security of third-party websites.

We encourage you to review the privacy policies of any third-party website you visit.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, technology, legal requirements or services.

The updated version will be posted on this page with a revised "Last Updated" date.

17. Contact Us

If you have questions about this Privacy Policy or wish to exercise a privacy right, contact:

[LEGAL COMPANY NAME]
Email: [PRIVACY EMAIL]
Address: [BUSINESS ADDRESS]

Where applicable, you may also contact the relevant data protection authority in your country of residence.