We use cookies for essential site functions and — with your consent — to measure traffic and improve the store. Privacy policy
This privacy policy explains what data [Your Company] ("we", "us") collects when you use [Your Store] (the "Service"), why we collect it, and the choices you have. It is a complete working template — replace the bracketed placeholders and review it against your jurisdiction before launch. It is not legal advice.
Last updated: 2026-09-12
Account information you provide (name, email address, profile picture) when you create an account; order information (shipping address, email, purchased items) — required to fulfill purchases; and technical data (IP address, browser, pages visited) collected via analytics only after you consent to cookies.
To fulfill and ship your orders, send transactional email (confirmations, shipping notices, refunds), provide the AI assistant, prevent fraud and abuse, and — with consent — understand how the store is used. We never sell personal data.
Chat messages you send to the store assistant are stored to operate the service and improve answers. Do not paste personal data you wouldn't share in an email; the assistant has no access to your order records.
Payments run on the gateway's own checkout (Stripe / PayPal / Alipay / WeChat). Card data never touches our servers — we store only the gateway's order/payment references.
Depending on your jurisdiction (GDPR/UK GDPR/CCPA), you may request access, correction, export, or deletion of your data. Account holders can export and delete self-service from Settings; everyone can contact [your email].
Order records are kept as long as required by tax/commerce law (typically 7–10 years). You may request access, correction, export, or deletion of your data via the contact below; the account area includes a self-service export and delete.
Data is stored in a managed Postgres database with encrypted transport; secrets live only in environment configuration. No system is perfectly secure — please don't send card numbers or passwords by email.
The store is not directed at children under 16, and we do not knowingly collect their data. If you believe a child provided data, contact us and we will delete it.
We may update this policy; the current version always lives at this URL. Material changes are announced on the store before they take effect.
Privacy questions: [your email]. Replace the placeholders throughout this page before launch.