Privacy policy
Privacy Policy
Last Updated: [DATE]
This Privacy Policy explains how [STORE NAME] ("we", "us", or "our") collects, uses, stores and shares personal information when you visit or make a purchase through our website.
We respect your privacy and are committed to handling personal information responsibly and in accordance with applicable data protection laws, including the General Data Protection Regulation ("GDPR") where applicable.
1. Data Controller
The entity responsible for the processing of your personal information is:
[LEGAL COMPANY NAME]
Trading as: [STORE NAME]
Address: [BUSINESS ADDRESS]
Email: [PRIVACY EMAIL]
Phone: [PHONE NUMBER]
2. Information We Collect
When you use our website, we may collect information such as:
Information You Provide Directly
Depending on how you interact with our website, this may include:
-
full name;
-
billing address;
-
shipping address;
-
email address;
-
telephone number;
-
payment and transaction information;
-
order information;
-
customer service communications;
-
information you voluntarily provide through forms or messages.
We do not intentionally collect sensitive personal information unless necessary and permitted by applicable law.
Information Collected Automatically
When you browse our website, certain information may be collected automatically, including:
-
IP address;
-
browser type;
-
device type;
-
operating system;
-
language preferences;
-
referring website;
-
pages visited;
-
time spent on pages;
-
interaction with website features;
-
approximate geographic information derived from technical data;
-
cookies and similar technologies.
3. How We Use Your Information
We may use personal information to:
-
process and fulfill orders;
-
provide products and services;
-
process payments;
-
arrange shipping and delivery;
-
provide order tracking;
-
communicate with you regarding your order;
-
respond to customer service requests;
-
manage returns, refunds and exchanges;
-
prevent fraud and unauthorized transactions;
-
maintain and improve our website;
-
personalize your shopping experience;
-
analyze website performance;
-
send marketing communications where legally permitted and where required consent has been obtained;
-
comply with legal obligations;
-
protect our rights and prevent misuse of our services.
4. Legal Bases for Processing
Where GDPR applies, we process personal information on one or more of the following legal bases:
-
performance of a contract;
-
compliance with a legal obligation;
-
our legitimate interests, where those interests are not overridden by your rights and freedoms;
-
your consent, where consent is required.
Where we rely on consent, you may withdraw that consent at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
5. Cookies and Similar Technologies
We use cookies and similar technologies to operate, secure and improve our website.
Cookies may be used for purposes including:
-
essential website functionality;
-
shopping cart functionality;
-
remembering preferences;
-
analytics;
-
performance measurement;
-
advertising and remarketing;
-
fraud prevention.
Where required by applicable law, we will request your consent before placing non-essential cookies on your device.
You can manage cookie preferences through our cookie consent mechanism or through your browser settings.
6. Shopify and Service Providers
Our online store may be hosted or powered by Shopify and may use third-party providers to operate our business.
These providers may process information necessary to provide services such as:
-
payment processing;
-
website hosting;
-
analytics;
-
advertising;
-
fraud prevention;
-
customer support;
-
email delivery;
-
order fulfillment;
-
shipping and logistics.
These providers may process personal information only as necessary to provide their services or as otherwise permitted by applicable law.
7. Payment Information
Payments may be processed through third-party payment providers.
We may receive transaction-related information necessary to confirm and fulfill your order.
Payment card information may be processed directly by the relevant payment provider rather than being stored by us.
8. Order Fulfillment and Shipping Partners
To fulfill orders, we may share relevant information such as your name, shipping address, email address and telephone number with suppliers, fulfillment providers, logistics companies and carriers where necessary to deliver your order.
Because we may operate an international ecommerce business, these providers may be located outside your country or region.
9. International Data Transfers
Some service providers or business partners may process personal information outside your country or the European Economic Area.
Where GDPR or other applicable data protection law requires safeguards for international transfers, we will use appropriate legal mechanisms and safeguards.
These may include adequacy decisions, Standard Contractual Clauses or other legally recognized transfer mechanisms.
10. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:
-
provide our services;
-
complete transactions;
-
maintain business and accounting records;
-
comply with legal obligations;
-
resolve disputes;
-
prevent fraud;
-
enforce agreements.
Retention periods may vary depending on the type of information and the applicable legal requirements.
11. Your Privacy Rights
Depending on your location and applicable law, you may have rights including:
-
the right to access your personal information;
-
the right to correct inaccurate information;
-
the right to request deletion;
-
the right to restrict processing;
-
the right to object to certain processing;
-
the right to data portability;
-
the right to withdraw consent;
-
the right to object to direct marketing;
-
the right to lodge a complaint with a competent data protection authority.
GDPR rights can vary depending on the circumstances and applicable legal basis for processing.
12. Marketing Communications
Where permitted by law, we may send marketing communications about products, promotions and other updates.
You may unsubscribe from marketing communications at any time by:
-
clicking the unsubscribe link in our emails; or
-
contacting us at [PRIVACY EMAIL].
Unsubscribing from marketing communications does not prevent us from sending transactional messages necessary to fulfill or manage your orders.
13. Children's Privacy
Our website is intended for general consumers and is not knowingly directed toward children who are below the minimum age permitted to use online services under applicable law.
We do not knowingly collect personal information from children in circumstances where such collection is prohibited.
If you believe a child has provided personal information to us, please contact us so we can investigate and take appropriate action.
14. Data Security
We use reasonable technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration or disclosure.
However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
15. Third-Party Websites
Our website may contain links to third-party websites.
We are not responsible for the privacy practices, content or security of third-party websites.
We encourage you to review the privacy policies of any third-party website you visit.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business, technology, legal requirements or services.
The updated version will be posted on this page with a revised "Last Updated" date.
17. Contact Us
If you have questions about this Privacy Policy or wish to exercise a privacy right, contact:
[LEGAL COMPANY NAME]
Email: [PRIVACY EMAIL]
Address: [BUSINESS ADDRESS]
Where applicable, you may also contact the relevant data protection authority in your country of residence.