This policy explains what personal information we collect, why we collect it, who we share it with, and the choices you have. It applies to this website and to orders placed through it.
Last updated: October 17, 2026.
Who we are
This store is operated by [LEGAL COMPANY NAME], [STREET ADDRESS], [CITY, STATE ZIP], [COUNTRY]. For privacy questions or requests, email kruytinnis@gmail.com with the subject "Privacy Request".
Information we collect
| What | Examples | How we get it |
|---|---|---|
| Order information | Name, shipping and billing address, email address, phone number, items ordered, order value | You provide it at checkout |
| Account information | Email address, password (stored hashed), order history, saved addresses | You provide it if you create an account |
| Payment information | Card brand, last four digits, billing postcode, transaction reference | Collected by our payment processors — we never see or store full card numbers |
| Messages | Emails, contact-form messages, return requests, photos you send us | You provide them when you contact us |
| Device and usage data | IP address, browser and device type, pages viewed, referring site, approximate location derived from IP | Collected automatically by cookies and similar technologies |
| Marketing preferences | Whether you subscribed to email, and what you have opened or clicked | From your subscription and email activity |
Why we use it
- To fulfil orders — taking payment, packing, shipping, handling returns and refunds, and providing customer service. This is necessary to perform our contract with you.
- To communicate — order confirmations, shipping updates, and responses to your questions.
- To improve the store — understanding which pages and products are used, diagnosing problems, and testing changes. Based on our legitimate interest in running a working shop.
- To prevent fraud and abuse — screening orders and protecting the site. Based on our legitimate interest and legal obligations.
- To market to you — only where you have opted in, or where the law allows soft opt-in for existing customers. You can unsubscribe at any time.
- To comply with the law — tax, accounting, consumer-protection and record-keeping requirements.
We do not sell your personal information, and we do not use your data to make automated decisions that have a legal or significant effect on you.
Who we share it with
We share information only with service providers who need it to do a specific job for us, and only under contracts that limit their use of it:
- Shopify — our e-commerce platform, which hosts the store and processes orders.
- Payment processors — to authorise and settle payments, and to handle chargebacks.
- Shipping carriers and fulfilment partners — name, address and phone number, so parcels can be delivered.
- Email and marketing providers — to send order notifications and, if you opted in, marketing email.
- Analytics providers — aggregated or pseudonymised usage data.
- Professional advisers and authorities — where required by law, court order, or to establish or defend legal claims.
If our business is sold or merged, customer data may transfer to the buyer as part of the business assets. We will tell you before that happens and before your data becomes subject to a different policy.
Cookies
Cookies are small files stored by your browser. We use them to keep your cart and session working, remember preferences, measure traffic, and (if you agree) support advertising.
| Category | Purpose | Can you refuse? |
|---|---|---|
| Strictly necessary | Cart, checkout, security, load balancing | No — the store cannot work without them |
| Preferences | Currency, language, dismissed banners | Yes |
| Analytics | Page views, traffic sources, conversion measurement | Yes |
| Marketing | Measuring ad performance, remarketing | Yes |
You can clear or block cookies in your browser settings. Blocking necessary cookies will break checkout. Where required by law, we ask for consent before setting non-essential cookies.
How long we keep it
- Order records: 7 years, to meet tax and accounting obligations.
- Customer service messages: 3 years after the last contact.
- Marketing lists: until you unsubscribe, plus a suppression record so we do not email you again by mistake.
- Analytics data: up to 26 months, in aggregated or pseudonymised form.
Your rights
Depending on where you live, you may have the right to:
- ask what personal information we hold about you, and receive a copy;
- ask us to correct inaccurate information;
- ask us to delete your information, subject to legal retention duties;
- object to, or ask us to restrict, certain processing;
- receive your data in a portable format;
- withdraw consent for marketing at any time (every email has an unsubscribe link);
- not be discriminated against for exercising these rights.
Email kruytinnis@gmail.com with "Privacy Request" in the subject line. We respond within 30 days and may ask for information to verify your identity. You also have the right to complain to your local data-protection authority.
California residents: you may request to know, delete or correct personal information, and to opt out of "sharing" for cross-context behavioural advertising. We do not sell personal information for money. To opt out of advertising cookies, use the cookie banner or your browser settings.
Children
Our store is not directed at children under 13, and we do not knowingly collect their personal information. If you believe a child has provided us with data, contact us and we will delete it.
International transfers
We are based in [COUNTRY], and our service providers may process data in other countries, including the United States. Where data leaves your region, we rely on appropriate safeguards such as standard contractual clauses.
Security
The store runs on Shopify, which is PCI-DSS compliant; payment card data is handled by our payment processors, not by us. We use HTTPS across the site and restrict staff access to order data on a need-to-know basis. No system is completely secure, but we take these obligations seriously and review our practices regularly.
Third-party links
Our site may link to other websites — for example a carrier's tracking page or our social profiles. Those sites have their own privacy policies, and this policy does not cover them.
Changes
We may update this policy to reflect changes in our practices or the law. The "Last updated" date at the top always shows the current version. Material changes will be announced on this page, and where required we will ask for your consent again.