When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you or another person.

Personal information does not include information that is collected anonymously or that has been de-identified, so that it cannot identify or be reasonably linked to you.

We may collect or process the following categories of personal information, including inferences drawn from this personal information, depending on how you interact with the Services, where you live, and as permitted or required by applicable law:

We may collect personal information from the following sources:

• Directly from you including when you create an account, visit or use the Services, communicate with us, or otherwise provide us with your personal information.
• Automatically through the Services including from your device when you use our products or services or visit our websites, and through cookies and similar technologies.
• From our service providers including when we engage them to enable certain technology and when they collect or process your personal information on our behalf.
• From our partners or other third parties.

Depending on how you interact with us or which of the Services you use, we may use personal information for the following purposes:

Security and Fraud Prevention. We use your personal information to authenticate your account, provide a secure payment and shopping experience, detect, investigate or take action regarding possible fraudulent, illegal, unsafe, or malicious activity, protect public safety, and secure our services.

Communicating with You. We use your personal information to provide customer support, be responsive to you, provide effective services and maintain our business relationship with you.

Legal Reasons. We use your personal information to comply with applicable law or respond to valid legal process, including requests from law enforcement or government agencies, civil discovery, litigation, adversarial legal proceedings, and enforcement or investigation of potential violations of our terms or policies.

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy.

• With Shopify, vendors and other third parties who perform services on our behalf, including IT management, payment processing, data analytics, customer support, cloud storage, fulfillment and shipping.
• With business and marketing partners to provide marketing services and advertise to you. Our business and marketing partners will use your information in accordance with their own privacy notices.
• When you direct, request us or otherwise consent to our disclosure of certain information to third parties, such as to ship you products or through your use of social media widgets or login integrations.
• With our affiliates or otherwise within our corporate group.
• In connection with a business transaction such as a merger or bankruptcy, to comply with applicable legal obligations, enforce applicable terms or policies, and protect or defend the Services, our rights and the rights of our users or others.

The Services may provide links to websites or other online platforms operated by third parties.

If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions.

We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on those sites.

Information you provide on public or semi-public venues, including information you share on third-party social networking platforms, may also be viewable by other users of the Services and/or users of those third-party platforms.

The Services are not intended to be used by children, and we do not knowingly collect any personal information about children under the age of majority in your jurisdiction.

If you are the parent or guardian of a child who has provided us with their personal information, you may contact us using the contact details set out below to request that it be deleted.

Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee "perfect security."

In addition, any information you send to us may not be secure while in transit. We recommend that you do not use unsecure channels to communicate sensitive or confidential information to us.

How long we retain your personal information depends on different factors, such as whether we need the information to maintain your account, provide you with Services, comply with legal obligations, resolve disputes or enforce other applicable contracts and policies.

Depending on where you live, you may have some or all of the rights listed below in relation to your personal information.

If you reside in the UK or European Economic Area, and subject to exceptions and limitations provided by local law, you may exercise the following rights in addition to the rights outlined above:

• Objection to Processing and Restriction of Processing: You may have the right to ask us to stop or restrict our processing of personal information for certain purposes.
• Withdrawal of Consent: Where we rely on consent to process your personal information, you have the right to withdraw this consent.

If you withdraw your consent, this will not affect the lawfulness of any processing based on your consent before the withdrawal.

You may exercise these rights where indicated on the Services or by contacting us using the contact details provided below.

To learn more about how Shopify uses your personal information and any rights you may have, including rights related to data processed by Shopify, visit:

Shopify Privacy Portal

We will not discriminate against you for exercising any of these rights.

We may need to verify your identity before we can process your requests, as permitted or required under applicable law.

In accordance with applicable laws, you may designate an authorized agent to make requests on your behalf to exercise your rights.

Before accepting such a request from an agent, we will require proof you have authorized them to act on your behalf, and we may need you to verify your identity directly with us.

We will respond to your request in a timely manner as required under applicable law.

If you have complaints about how we process your personal information, please contact us using the contact details provided below.

Depending on where you live, you may have the right to appeal our decision by contacting us using the contact details set out below, or lodge your complaint with your local data protection authority.

Please note that we may transfer, store and process your personal information outside the country you live in.

If we transfer your personal information out of the European Economic Area or the United Kingdom, we will rely on recognized transfer mechanisms like the European Commission's Standard Contractual Clauses, or any equivalent contracts issued by the relevant competent authority of the UK, as relevant, unless the data transfer is to a country that has been determined to provide an adequate level of protection.

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons.

Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please contact us using the details below.