隐私政策

Last Updated: [Fill in Date, e.g. July 28, 2026]

This Privacy Policy applies to all visitors, users, and customers of our e-commerce store hosted on the Shopify platform (the “Store”), operated by [Your Full Business Name] (“we”, “us”, “our”). Our registered contact email: [Your Official Store Email]

1. Introduction & Scope


We respect your privacy and are fully committed to protecting your personal data in compliance with the EU GDPR, UK GDPR, California CPRA (CCPA), Canada PIPEDA and other applicable global data protection laws.

This policy explains what personal information we collect, how we use it, who we share it with, your legal rights to your data, and how you can contact us for privacy-related requests.

This policy only covers data collected through our Shopify store, and does not apply to third-party external websites linked from our store.

2. Who We Are (Data Controller)


Data Controller: [Your Company Name]

Contact Email for Privacy Requests: [Your Privacy Email, e.g. privacy@shturl.]

IP Infringement Email (as your previous notice): ip@whosebilling.com

Platform Provider: Shopify Inc. (Shopify acts as our authorized data processor only)

3. What Personal Data We Collect


We collect information you actively submit and passive technical data automatically recorded when you browse or shop on our store:

3.1 Information You Voluntarily Provide


  • Full name, billing/shipping physical address, postal code
  • Email address, phone number (for order updates, SMS alerts, newsletter subscription)
  • Order history, purchased items, delivery instructions
  • Payment reference data (Note: We DO NOT store full credit card/debit card numbers; all payment processing is handled securely by Shopify Payments, PayPal, Stripe or other PCI DSS certified payment gateways)
  • Messages sent via our customer support, contact form, live chat
  • Account details if you create a registered customer account on our store

3.2 Automatically Collected Technical Data


  • Device information: device model, operating system, browser type and version
  • IP address, approximate geographic location (country/region only)
  • Store browsing behavior: pages visited, click paths, search keywords, time spent on site
  • Cookies, tracking pixels and anonymous analytics identifiers (Google Analytics 4, Facebook/Meta Pixel, TikTok Pixel etc.)

3.3 Sensitive Data


We do not intentionally collect racial, religious, health, biometric or other sensitive personal data unless you voluntarily provide it for special order requirements.

4. Legal Bases for Data Processing (GDPR Compliance)


We process your personal data only on valid legal grounds:

  1. Performance of a Contract: Necessary to complete your purchase, process payment, arrange shipping, issue invoices and provide after-sales order support.
  2. Legitimate Interest: Prevent fraudulent orders, protect store cybersecurity, improve website functionality, analyze sales performance for business optimization.
  3. Explicit Consent: Send promotional newsletters, targeted advertising, non-essential analytics and marketing cookies. You may withdraw consent at any time.
  4. Legal Obligation: Retain transaction records to meet tax, accounting and local regulatory requirements.

5. How We Use Your Personal Information


We use collected data exclusively for the following legitimate purposes:

  1. Process, fulfill, deliver your orders and handle returns, refunds and warranty services
  2. Send order confirmations, shipping tracking updates, delivery notifications via email/SMS
  3. Respond to your customer service inquiries, resolve disputes and provide technical support
  4. Verify buyer identity to reduce payment fraud and secure transaction risks
  5. Improve our store website, product range, user experience and website load performance
  6. Send optional marketing newsletters, discount offers and new product launches (only if you opt-in)
  7. Comply with tax laws, accounting record-keeping and mandatory legal reporting requirements
  8. Enforce our Terms of Service and protect our legal rights

6. Third Parties We Share Your Data With


We never sell, rent or trade your personal information to unaffiliated third parties for commercial profit. We only share limited necessary data with trusted service providers who act as data processors under strict data protection agreements:

  1. Shopify: Our e-commerce hosting platform for store operation, order management and data storage
  2. Payment Service Providers: Shopify Payments, PayPal, Stripe, Apple Pay, Google Pay for secure checkout
  3. Logistics & Shipping Carriers: Express delivery companies to ship your purchased goods to your address
  4. Marketing & Analytics Tools: Google Analytics, Meta (Facebook) Pixel, TikTok Pixel for anonymous traffic analysis and conversion tracking
  5. Email Marketing Platforms: Klaviyo, Mailchimp for subscribed newsletter delivery
  6. Legal Authorities: Disclose data only when required by court orders, government law enforcement requests or binding legal regulations

All third-party processors are contractually obligated to protect your personal data and cannot use it for their own independent marketing purposes.

7. Cookies & Tracking Technologies


Our Shopify store uses cookies and similar tracking tools:

  • Essential Cookies: Mandatory for website basic function, login session, shopping cart storage and checkout process; cannot be disabled.
  • Non-Essential Marketing/Analytics Cookies: For visitor behavior analysis and personalized ads. Visitors from EU/UK regions must give active consent before these cookies activate.

You can block cookies directly via your web browser settings, or use our store cookie consent banner to adjust preferences. For California residents, we honor Global Privacy Control (GPC) signals for "Do Not Sell or Share My Personal Information".

8. Data Retention Period


We only keep your personal data for as long as required by the original collection purpose:

  • Order & transaction records: Retained for 7 years to satisfy tax and accounting legal requirements
  • Marketing email subscription data: Stored until you unsubscribe or request deletion
  • Website analytics browsing data: Anonymized and retained for maximum 14 months
  • Customer account information: Saved until you submit a deletion request

After the retention period expires, we securely delete or anonymize all your personal information.

9. Your Legal Rights Over Personal Data


Depending on your residential jurisdiction (EU, UK, California, Canada etc.), you hold the following rights free of charge:

  1. Right to Access: Request a copy of all personal data we hold about you
  2. Right to Rectification: Correct inaccurate or incomplete personal details
  3. Right to Erasure (“Right to be Forgotten”): Request full deletion of your data where no legal obligation requires us to keep it
  4. Right to Restrict Processing: Limit how we use your data under specific conditions
  5. Right to Data Portability: Receive your order data in a machine-readable format
  6. Right to Object: Opt out of marketing emails, targeted advertising and legitimate-interest processing
  7. CCPA/CPRA Exclusive Right: Opt out of any sale or cross-context sharing of your personal information
  8. Withdraw Consent: Revoke previously granted marketing/cookie consent at any time

How to Exercise Your Rights


Submit your written request via our privacy contact email: [Your Privacy Email]. We will verify your identity first to prevent unauthorized data access, and respond within 30 calendar days as required by law.

10. Data Security Protection


We adopt industry-standard security measures to safeguard your personal data:

  • End-to-end SSL/TLS encryption for all website data transmission
  • Password encrypted back-end store admin access
  • Regular system security updates and vulnerability checks
  • Restricted internal staff access only for order fulfillment needs

Please note that no internet data transmission or electronic storage method can guarantee 100% absolute security. We will notify you promptly if a confirmed personal data breach occurs as required by law.

11. Children’s Privacy


Our store is intended for purchases by adults aged 18 years and older. We do not knowingly collect personal data from children under 13 years old. If you are a parent/guardian and find your minor child has submitted data to us, please contact us immediately for permanent deletion.

12. Business Transfer Scenario


If our business undergoes merger, acquisition, asset sale or reorganization, your stored personal data may be transferred as part of business assets. We will notify you via email before such transfer takes effect, and the new entity will still be bound by this Privacy Policy’s data protection rules.

13. Amendments to This Policy


We reserve the right to update and revise this Privacy Policy occasionally to match new legal requirements or business adjustments. Material changes will be posted on our Shopify store footer with an updated revision date. Continued browsing and shopping on our store after updates constitute your acceptance of the revised policy.