PRIVACY POLICY

When we use the term "personal information," we mean information that identifies or can reasonably be linked to you or another person. It does not include information collected anonymously or that has been de-identified. Depending on how you interact with the Services, where you live, and as permitted or required by applicable law, we may collect or process the following categories (including inferences drawn from them):

• Contact details including name, address, billing address, shipping address, phone number, and email address.
• Financial information including card and financial account numbers, payment card information, transaction details, form of payment, and payment confirmation. Card details are handled by our payment processor and never touch our servers.
• Account information including username, password, security questions, preferences and settings.
• Transaction information including items you view, add to your cart or wishlist, or purchase, return, exchange or cancel, and your past transactions.
• Communications with us including information you include when you contact support.
• Device information including your device, browser, or network connection, IP address, and other unique identifiers.
• Usage information including how and when you interact with or navigate the Services.

We may collect personal information from the following sources:

• Directly from you, including when you create an account, use the Services, communicate with us, or otherwise provide us with your personal information;
• Automatically through the Services, including from your device and through cookies and similar technologies;
• From our service providers, when we engage them to enable certain technology or to process your personal information on our behalf;
• From our partners or other third parties.

Depending on how you interact with us or which of the Services you use, we may use personal information to:

• Provide, tailor, and improve the Services — perform our contract with you, process payments, fulfil orders, manage your account, arrange shipping, facilitate returns and exchanges, remember your preferences, enable reviews, and create a customised shopping experience, including tailoring and improving the Services.
• Marketing and advertising — send marketing and promotional communications by email, text message or postal mail, and show you online advertisements, including based on items you previously purchased or added to your cart and other activity on the Services.
• Security and fraud prevention — authenticate your account, provide a secure payment and shopping experience, and detect, investigate or act on possible fraudulent, illegal, unsafe or malicious activity. You are responsible for keeping your account credentials safe; do not share them with anyone.
• Communicate with you — provide customer support and maintain our business relationship.
• Legal reasons — comply with applicable law, respond to valid legal process, and enforce or investigate potential violations of our terms or policies.

In certain circumstances we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy, including:

• With Shopify, vendors and other third parties who perform services on our behalf (e.g. IT management, payment processing, data analytics, customer support, cloud storage, fulfillment and shipping).
• With business and marketing partners to provide marketing services. Our business and marketing partners use your information in accordance with their own privacy notices. Depending on where you reside, you may have a right to direct us not to share information about you for targeted advertising.
• When you direct, request or otherwise consent to disclosure to third parties, such as to ship you products or through login integrations.
• With our affiliates or otherwise within our corporate group.
• In connection with a business transaction such as a merger or bankruptcy, to comply with legal obligations (including subpoenas, search warrants and similar requests), to enforce our terms, and to protect or defend the Services and the rights of our users or others.

Consistent with our privacy-first mission, we deliberately keep our stack minimal:

• We do not use Google Analytics.
• We do not use Shopify Network Intelligence, and we do not share customer data across the Shopify network for cross-merchant intelligence.
• We run no third-party advertising trackers, behavioural profiling, or data-broker pixels of our own.

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve them. Information you submit to the Services will be transmitted to and shared with Shopify, as well as third parties that may be located in countries other than where you reside. Where Shopify is responsible for the processing of your personal information, including responding to requests to exercise your rights over that use, you can learn more in the Shopify Consumer Privacy Policy and exercise applicable rights at privacy.shopify.com/en.

The Services may link to websites or platforms operated by third parties. If you follow links to sites we do not control, review their privacy and security policies and terms. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found there. Information you share on third-party social platforms may be viewable by others without limitation as to its use. Our inclusion of a link does not imply endorsement.

The Services are not intended to be used by children, and we do not knowingly collect personal information about children under the age of majority in your jurisdiction. If you are the parent or guardian of a child who has provided us with their personal information, contact us using the details below to request deletion. As of the effective date of this Privacy Policy, we do not have actual knowledge that we "share" or "sell" (as defined in applicable law) the personal information of individuals under 16 years of age.

No security measures are perfect or impenetrable, and we cannot guarantee "perfect security." Any information you send to us may not be secure while in transit; do not use unsecure channels to communicate sensitive or confidential information to us. How long we retain your personal information depends on factors such as whether we need it to maintain your account, provide the Services, comply with legal obligations, resolve disputes, or enforce our contracts and policies.

Depending on where you live, you may have some or all of the rights below. These rights are not absolute, may apply only in certain circumstances, and in certain cases we may decline your request as permitted by law.

• Access / know — request access to the personal information we hold about you.
• Delete — request that we delete personal information we maintain about you.
• Correct — request that we correct inaccurate personal information.
• Portability — receive a copy of your personal information and, in certain circumstances, have it transferred to a third party.
• Opt out of sale/sharing or targeted advertising — where applicable, opt out of the "sale" or "share" of your personal information or of processing for "targeted advertising." If you visit our website with the Global Privacy Control signal enabled, we will treat it as an opt-out request for that device and browser (see globalprivacycontrol.org). We do not recognise other "Do Not Track" signals.
• Manage communication preferences — opt out of promotional emails via the unsubscribe link in our emails. We may still send non-promotional emails about your account or orders.

To learn more about how Shopify uses your personal information and any rights you may have, visit privacy.shopify.com/en. We will not discriminate against you for exercising these rights. We may need to verify your identity before processing your request, and you may use an authorised agent where permitted by law.

If you have complaints about how we process your personal information, contact us using the details below. Depending on where you live, you may have the right to appeal our decision or to lodge a complaint with your local data protection authority.

We may transfer, store and process your personal information outside the country you live in. If we transfer your personal information out of the European Economic Area or the United Kingdom, we rely on recognised transfer mechanisms such as the European Commission's Standard Contractual Clauses (or equivalent UK contracts), unless the transfer is to a country determined to provide an adequate level of protection.

We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on this website, update the "Last updated" date, and provide notice as required by applicable law.

Questions about our privacy practices or this Privacy Policy, or to exercise any of your rights: contact@lowprofile.studio. This document is provided for general information and is not legal advice.