Facesmash operates this store and website, including all related information, content, features, tools, products, and services (the "Services"), and is powered by Shopify. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase through the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to your personal information. By using the Services, you acknowledge that you have read and understand this Privacy Policy.
Personal information we collect or process
When we say "personal information," we mean information that identifies or can reasonably be linked to you. Depending on how you interact with the Services and where you live, we may collect or process the following categories, including inferences drawn from them:
- Contact details including your name, billing and shipping address, phone number, and email address.
- Financial information including payment card and financial account information, transaction details, form of payment, and payment confirmations. Full card details are handled by our payment processor, not stored by us.
- Account information including your username, password, preferences, and settings.
- Transaction information including items you view, add to cart, purchase, return, exchange, or cancel, and your past transactions.
- Order content including the images and any text you upload to personalize a product.
- Communications including the information you provide when you contact us for support.
- Device information including your device, browser, network connection, IP address, and other identifiers.
- Usage information including how and when you interact with the Services.
Sources of personal information
We may collect personal information from the following sources:
- Directly from you, such as when you create an account, use the Services, communicate with us, or provide your information.
- Automatically through the Services, including from your device and through cookies and similar technologies.
- From our service providers, when they collect or process personal information on our behalf.
- From our partners or other third parties.
How we use your personal information
Depending on how you interact with us, we may use your personal information to:
- Provide, tailor, and improve the Services — process payments, fulfill and ship your orders, manage your account, handle returns and exchanges, remember your preferences, and personalize your experience.
- Market and advertise — send you marketing and promotional communications you can opt out of, and show you relevant online advertising.
- Security and fraud prevention — authenticate your account, secure the Services, and detect or investigate fraudulent, illegal, or malicious activity.
- Communicate with you — provide customer support and maintain our business relationship.
- Legal reasons — comply with applicable law, respond to legal process, and enforce our terms and policies.
How we disclose personal information
In certain circumstances we may disclose your personal information to third parties for legitimate purposes, including:
- With Shopify and other vendors who perform services on our behalf, such as IT, payment processing, data analytics, customer support, cloud storage, order production, fulfillment, and shipping.
- With business and marketing partners to provide marketing services and advertise to you; they use your information under their own privacy notices. Depending on where you live, you may have a right to opt out of this sharing.
- When you direct, request, or consent to disclosure, such as to ship your order or through social media or login integrations.
- With our affiliates or within our corporate group.
- In connection with a business transaction (such as a merger or bankruptcy), to comply with legal obligations, enforce our terms, or protect our rights and the rights of others.
We do not sell your personal information for money.
Relationship with Shopify
The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve them. Information you submit will be transmitted to and shared with Shopify and third parties that may be located in countries other than where you reside. Shopify may also use certain enhanced features that incorporate data from your interactions with our store, other merchants, and Shopify; in those circumstances Shopify is responsible for that processing. To learn more, you can review the Shopify Consumer Privacy Policy at privacy.shopify.com.
Third-party websites and links
The Services may link to websites or platforms operated by third parties. If you follow those links, you should review their privacy and security policies. We do not control and are not responsible for the privacy or security of those sites, or the accuracy of information on them. Information you share on public or third-party platforms may be viewable by others.
Children's data
The Services are not intended to be used by children, and we do not knowingly collect personal information from children under the age of majority in your jurisdiction. If you are a parent or guardian and believe your child has provided us with personal information, contact us using the details below to request deletion. We do not have actual knowledge that we "share" or "sell" the personal information of individuals under 16 years of age.
Security and retention
No security measures are perfect, and we cannot guarantee "perfect security," so please do not use insecure channels to send us sensitive information. How long we retain your personal information depends on factors such as whether we need it to provide the Services, maintain your account, comply with legal obligations, resolve disputes, or enforce our policies. [Add your specific retention approach for order data and uploaded images.]
Your rights and choices
Depending on where you live, you may have some or all of the following rights regarding your personal information. These rights are not absolute and may apply only in certain circumstances:
- Access / know — request access to the personal information we hold about you.
- Delete — request that we delete personal information we maintain about you.
- Correct — request that we correct inaccurate personal information.
- Portability — request a copy of your personal information or that we transfer it to a third party, with certain exceptions.
- Opt out of sale, sharing, or targeted advertising — depending on where you reside. We honor the Global Privacy Control (GPC) signal where required.
- Manage communications — unsubscribe from marketing emails at any time using the link in our emails; we may still send non-promotional messages about your account or orders.
If you are in the UK or EEA, you may also have the right to object to or restrict certain processing and to withdraw consent where we rely on it. We will not discriminate against you for exercising these rights, and we may need to verify your identity before responding. To exercise any right, contact us using the details below.
Complaints
If you have a complaint about how we process your personal information, please contact us using the details below. Depending on where you live, you may have the right to appeal our decision or to lodge a complaint with your local data protection authority.
International transfers
We may transfer, store, and process your personal information outside the country you live in. Where we transfer personal information out of the European Economic Area or the United Kingdom, we rely on recognized transfer mechanisms such as the European Commission's Standard Contractual Clauses, unless the destination country provides an adequate level of protection.
Changes to this privacy policy
We may update this Privacy Policy from time to time to reflect changes to our practices or for operational, legal, or regulatory reasons. We will post the revised policy on this page, update the "Last updated" date, and provide notice as required by law.
Contact
If you have questions about our privacy practices or this Privacy Policy, or would like to exercise your rights, email us at smash@facesmash.co. For the purposes of applicable data protection laws, we are the data controller of your personal information.