Privacy Policy
Last updated: October 9, 2026
This policy describes how personal information is handled when you browse, purchase, or contact support. Shopify also processes information to operate the commerce platform and may act independently for some services.
1. Information collected
- Contact and account information: name, email, delivery and billing addresses, telephone number, and account details you provide.
- Order information: products purchased, order and payment status, payment method type, and transaction references.
- Support information: communications and evidence you provide for an order issue, including photographs.
- Device and usage information: IP address, browser and device details, cookie identifiers, pages viewed, interactions, and approximate location inferred from IP address.
- Preferences: marketing choices, privacy selections, and shopping preferences where provided or inferred through enabled tools.
Payment credentials are processed by the payment provider. Do not send card numbers, security codes, or passwords to customer support.
2. Sources and purposes
Information comes directly from you, from browser and device interactions, and from Shopify, payment providers, carriers, or providers supporting an order.
Information is used to process orders and payments, arrange delivery, provide support, administer returns, maintain accounts, prevent fraud, secure the store, and meet legal obligations.
Where enabled and permitted, analytics and advertising tools help measure performance and show or measure relevant advertising. Consent or another lawful basis is used where required. Acceptance of store terms is not blanket consent to optional advertising cookies.
3. Cookies, analytics, and advertising
Essential cookies support checkout, security, sessions, and preferences. Optional tools, where enabled, may use cookies or similar technology for analytics and advertising and receive identifiers, device data, browsing activity, or purchase events.
Advertising-related disclosures may be considered a “sale,” “sharing,” or targeted advertising under applicable privacy law even without a monetary payment. Optional collection is subject to required consent and opt-out choices.
Providers vary with the tools enabled on the store. This policy does not assert that a particular advertising platform is installed.
4. Information disclosures
Information is disclosed to Shopify and providers supporting hosting, payment, shipping, communications, customer support, security, and analytics or advertising where enabled and lawful. Providers receive information relevant to their functions.
Information may also be disclosed when legally required, to protect rights and security, or in a business transaction subject to appropriate protections. Full payment credentials are not disclosed to advertising partners.
5. Retention and international processing
Information is kept for the period needed for the stated purpose, including order fulfillment, returns, fraud prevention, disputes, and required accounting records. Retention depends on information type and applicable obligations.
Store operations and providers may process information in China, the United States, or other countries. Required safeguards apply where cross-border transfer rules require them.
6. Privacy rights
Depending on your location and whether the relevant law applies, you may have rights to access information, obtain a copy, correct inaccuracies, request deletion or portability, and opt out of sale, sharing, targeted advertising, or certain profiling.
Some laws provide rights to limit particular sensitive-information uses. Sensitive personal information is not used to infer sensitive characteristics. You will not be unlawfully discriminated against for exercising a privacy right.
7. Requests and opt-outs
Use Contact Us to request access, correction, deletion, or an applicable opt-out of sale, sharing, or targeted advertising. State the right you wish to exercise and provide enough information to identify your interaction with the store.
Identity may be verified proportionately for access, correction, or deletion. An authorized agent may be asked to provide proof of authority. Requests are handled within applicable legal deadlines, with any permitted extension explained.
If a request is denied, the reason and available appeal process will be explained. You may appeal through the same contact channel.
Where available, use the site’s cookie-preference or data-sharing opt-out controls. Browser settings can block or delete cookies but may affect checkout.
Where required by law, recognized preference signals such as Global Privacy Control are honored for covered processing. Cookie choices may be specific to a browser or device. A generic “Do Not Track” setting is not the only mechanism for exercising an applicable opt-out.
8. Marketing and children
You may unsubscribe from promotional emails using their unsubscribe link. Transactional order and service messages may continue.
The store is not directed to children under 13. Personal information from children under 13 is not knowingly collected. Contact support if you believe a child has provided information so the matter can be investigated.
Information about individuals under 16 is not knowingly sold or shared.
9. Security and changes
Reasonable administrative, technical, and organizational measures are used to protect information. No website or transmission method is completely secure.
External services have their own privacy practices. This policy may be updated as operations change. Material notices or consent will be provided where required.
For Shopify’s own processing, review Shopify’s Privacy Policy.