PRIVACY POLICY
This Privacy Policy explains how we collect, use, and protect your personal information when you visit or make a purchase from our Shopify-powered online store (the “Site”). By using our Site, you agree to the practices described below.
SECTION 1 – INFORMATION WE COLLECT
This section explains the types of personal information we collect when you visit or use our Shopify-powered online store (the “Site”).
A. INFORMATION YOU PROVIDE DIRECTLY
— Contact information: your name, billing address, shipping address, email address, and phone number.
— Order information: items purchased, payment method, and transaction details.
— Account information: username and password if you create an account.
— Communication information: messages, emails, and customer service inquiries.
B. INFORMATION COLLECTED AUTOMATICALLY
— Device data: IP address, browser type, operating system, and time zone.
— Browsing data: pages viewed, products viewed, time spent on the Site, and referring websites.
— Cookies and tracking technologies: see Section 4.
C. PAYMENT INFORMATION
We do not store full payment details. Payments are processed securely by Shopify Payments or other payment providers.
SECTION 2 – HOW WE USE PERSONAL INFORMATION
We use your personal information to:
— Process, prepare, and deliver your orders.
— Communicate with you regarding your account or order.
— Provide customer support.
— Improve and optimize the Site.
— Analyze browsing behavior to enhance user experience.
— Detect and prevent fraud.
— Comply with legal and regulatory requirements.
— Send marketing communications where consent has been given.
LEGAL BASIS (FOR EU CUSTOMERS)
We rely on the following legal bases to process personal data under GDPR:
— Performance of a contract (processing orders)
— Legitimate interests (improving the Site, preventing fraud)
— Consent (marketing emails, cookies)
Legal obligation (tax, accounting, and regulatory requirements)
SECTION 3 – SHARING PERSONAL INFORMATION
We do not sell your personal information.
We share your personal information only with service providers necessary to operate our business, including:
— Shopify, which hosts our online store.
— Payment processors, to complete secure transactions.
— Shipping and delivery partners, to deliver your orders.
— Marketing and advertising partners, to help us show relevant promotions.
— Email and communication service providers.
— Analytics platforms (such as Shopify analytics tools).
DATA TRANSFERS
Personal data may be transferred across borders, including outside the European Economic Area (EEA). When this occurs, we use appropriate safeguards such as standard contractual clauses to protect your data.
All partners must comply with applicable data protection laws, including GDPR and CCPA where applicable.
SECTION 4 – COOKIES AND TRACKING TECHNOLOGIES
We use cookies and similar technologies to enhance your shopping experience, analyze usage, and deliver personalized advertising.
TYPES OF COOKIES USED
— Essential cookies: required for site operation and checkout.
— Performance cookies: collect information about site usage to improve performance.
— Functionality cookies: remember your preferences and account settings.
— Advertising cookies: track browsing for personalized marketing.
You can manage or disable cookies through your browser settings. For EU visitors, consent may be required before using non-essential cookies.
SECTION 5 – ADVERTISING AND MARKETING
We use your contact information and browsing behavior to:
— Send promotional emails if you have opted in.
— Show personalized ads through platforms such as Google Ads, Meta Ads, and Shopify marketing tools.
You may unsubscribe at any time using the link in our emails or by contacting us.
SECTION 6 – YOUR RIGHTS UNDER DATA PROTECTION LAWS
A. EUROPEAN UNION (GDPR)
If you reside in the EU, you have the right to:
— Access the personal data we hold about you.
— Correct inaccurate or incomplete information.
— Delete your personal data.
— Restrict or object to certain forms of processing.
— Request data portability in a structured, commonly used format.
— Withdraw consent for processing based on consent (such as marketing emails).
B. CALIFORNIA, USA (CCPA/CPRA)
If you are a California resident, you have the right to:
— Know what personal information we collect, use, share, or sell.
— Request deletion of your personal information, subject to certain exceptions.
— Opt out of the sale or sharing of personal information.
— Non-discrimination for exercising your privacy rights.
C. OTHER JURISDICTIONS
Depending on your location, you may have additional rights under local privacy laws. Contact us to learn more.
To exercise any of these rights, please contact us using the details in Section 9.
SECTION 7 – DATA RETENTION
We retain your personal information as follows:
— Order and transaction information: retained for legal and tax purposes, typically 10 years.
— Customer account data: kept until you request deletion.
— Marketing information: retained until you unsubscribe or request deletion.
— Browsing and analytics data: retained only as long as necessary for business operations.
We keep your personal information only as long as necessary for the purposes described in this policy.
SECTION 8 – CHANGES TO THIS PRIVACY POLICY
We reserve the right to update this privacy policy at any time. Your continued use of the Site after changes are published indicates acceptance of the updated policy.
SECTION 9 – CONTACT INFORMATION
If you have questions about this privacy policy or wish to exercise your data rights, please contact us: shop@sophie-shannon.com.