Purpose of collection: to load the Site accurately for you, and to perform analytics on Site usage to optimize our Site.

Source of collection: Collected automatically when you access our Site using cookies, log files, web beacons, tags, or pixels 

Disclosure for a business purpose: shared with our processor Shopify 

Personal Information collected: version of web browser, IP address, time zone, cookie information, what sites or products you view, search terms, and how you interact with the Site 

Purpose of collection: to provide products or services to you to fulfill our contract, process your payment information, arrange for shipping, and provide you with invoices and/or order confirmations, communicate with you, screen our orders for potential risk or fraud, and when in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.

Source of collection: collected from you.

Disclosure for a business purpose: shared with our processor Shopify

Personal Information collected: name, billing address, shipping address, payment information (including credit card numbers, email address, and phone number.

Customer support information

Purpose of collection:

Source of collection:

Disclosure for a business purpose:

Personal Information collected: 

Purpose of collection: to provide customer support.

Source of collection: collected from you

Disclosure for a business purpose: 

Personal Information collected:

We share your Personal Information with service providers to help us provide our services and fulfill our contracts with you, as described above. For example:

We use Shopify to power our online store. You can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy.

We may share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.

We use your personal Information to provide our services to you, which includes: offering products for sale, processing payments, shipping and fulfillment of your order, and keeping you up to date on new products, services, and offers.

[INCLUDE THE FOLLOWING SECTION IF YOUR STORE IS LOCATED IN OR IF YOU HAVE CUSTOMERS IN EUROPE]

Lawful basis

Pursuant to the General Data Protection Regulation (“GDPR”), if you are a resident of the European Economic Area (“EEA”), we process your personal information under the following lawful bases:

If you are a resident of the EEA, you have the right to object to processing based solely on automated decision-making (which includes profiling), when that decision-making has a legal effect on you or otherwise significantly affects you.

We [DO/DO NOT] engage in fully automated decision-making that has a legal or otherwise significant effect using customer data.

Our processor Shopify uses limited automated decision-making to prevent fraud that does not have a legal or otherwise significant effect on you.

Services that include elements of automated decision-making include:

Temporary blacklist of IP addresses associated with repeated failed transactions. This blacklist persists for a small number of hours.

Temporary blacklist of credit cards associated with blacklisted IP addresses. This blacklist persists for a small number of days.

Selling Personal Information

[INCLUDE THIS SECTION IF YOUR BUSINESS IS SUBJECT TO THE CALIFORNIA CONSUMER PRIVACY ACT AND SELLS PERSONAL INFORMATION AS DEFINED BY THE CALIFORNIA CONSUMER PRIVACY ACT]

Our Site sells Personal Information, as defined by the California Consumer Privacy Act of 2018 (“CCPA”).

[Insert:

categories of information sold;

IF USING SHOPIFY AUDIENCES: information about your use of the Site, your purchases, and the email address associated with your purchase

instructions on how to opt-out of sale;

whether your business sells information of minors (under 16) and whether you obtain affirmative authorization;

if you provide a financial incentive to sell information, provide information about what that incentive is.]

 

Your rights

[INCLUDE FOLLOWING SECTION IF YOUR STORE IS LOCATED IN OR IF YOU HAVE CUSTOMERS IN EUROPE]

GDPR

If you are a resident of the EEA, you have the right to access the Personal Information we hold about you, to port it to a new service, and to ask that your Personal Information be corrected, updated, or erased. If you would like to exercise these rights, please contact us through the contact information above. [OR INSERT ALTERNATIVE INSTRUCTIONS FOR SENDING ACCESS, ERASURE, CORRECTION, AND PORTABILITY REQUESTS]

Your Personal Information will be initially processed in Ireland and then will be transferred outside of Europe for storage and further processing, including to Canada and the United States. For more information on how data transfers comply with the GDPR, see Shopify’s GDPR Whitepaper: https://help.shopify.com/en/manual/your-account/privacy/GDPR.

[INCLUDE FOLLOWING SECTION IF YOUR BUSINESS IS SUBJECT TO THE CALIFORNIA CONSUMER PRIVACY ACT]

CCPA

If you are a resident of California, you have the right to access the Personal Information we hold about you (also known as the ‘Right to Know’), to port it to a new service, and to ask that your Personal Information be corrected, updated, or erased. If you would like to exercise these rights, please contact us through the contact information above. 

If you would like to designate an authorized agent to submit these requests on your behalf, please contact us at the address above.

A cookie is a small amount of information that’s downloaded to your computer or device when you visit our Site. We use a number of different cookies, including functional, performance, advertising, and social media or content cookies. Cookies make your browsing experience better by allowing the website to remember your actions and preferences (such as login and region selection). This means you don’t have to re-enter this information each time you return to the site or browse from one page to another. Cookies also provide information on how people use the website, for instance whether it’s their first time visiting or if they are a frequent visitor.

We use the following cookies to optimize your experience on our Site and to provide our services.

[Be sure to check this list against Shopify’s current list of cookies on the merchant storefront: https://www.shopify.com/legal/cookies ]

Cookies Necessary for the Functioning of the Store

Name Function Duration

_ab Used in connection with access to admin. 2y

_secure_session_id Used in connection with navigation through a storefront. 24h

_shopify_country Used in connection with checkout. session

_shopify_m Used for managing customer privacy settings. 1y

_shopify_tm Used for managing customer privacy settings. 30min

_shopify_tw Used for managing customer privacy settings. 2w

_storefront_u Used to facilitate updating customer account information. 1min

_tracking_consent Tracking preferences. 1y

c Used in connection with checkout. 1y

cart Used in connection with shopping cart. 2w

cart_currency Used in connection with shopping cart. 2w

cart_sig Used in connection with checkout. 2w

cart_ts Used in connection with checkout. 2w

cart_ver Used in connection with shopping cart. 2w

checkout Used in connection with checkout. 4w

checkout_token Used in connection with checkout. 1y

dynamic_checkout_shown_on_cart Used in connection with checkout. 30min

hide_shopify_pay_for_checkout Used in connection with checkout. session

keep_alive Used in connection with buyer localization. 2w

master_device_id Used in connection with merchant login. 2y

previous_step Used in connection with checkout. 1y

remember_me Used in connection with checkout. 1y

secure_customer_sig Used in connection with customer login. 20y

shopify_pay Used in connection with checkout. 1y

shopify_pay_redirect Used in connection with checkout. 30 minutes, 3w or 1y depending on value

storefront_digest Used in connection with customer login. 2y

tracked_start_checkout Used in connection with checkout. 1y

checkout_one_experiment Used in connection with checkout. session

Reporting and Analytics

Name Function Duration

_landing_page Track landing pages. 2w

_orig_referrer Track landing pages. 2w

_s Shopify analytics. 30min

_shopify_d Shopify analytics. session

_shopify_s Shopify analytics. 30min

_shopify_sa_p Shopify analytics relating to marketing & referrals. 30min

_shopify_sa_t Shopify analytics relating to marketing & referrals. 30min

_shopify_y Shopify analytics. 1y

_y Shopify analytics. 1y

_shopify_evids Shopify analytics. session

_shopify_ga Shopify and Google Analytics. session

[ Tailor Brands Terms of Service. ]

The length of time that a cookie remains on your computer or mobile device depends on whether it is a “persistent” or “session” cookie. Session cookies last until you stop browsing and persistent cookies last until they expire or are deleted. Most of the cookies we use are persistent and will expire between 30 minutes and two years from the date they are downloaded to your device.

You can control and manage cookies in various ways. Please keep in mind that removing or blocking cookies can negatively impact your user experience and parts of our website may no longer be fully accessible.

Most browsers automatically accept cookies, but you can choose whether or not to accept cookies through your browser controls, often found in your browser’s “Tools” or “Preferences” menu. For more information on how to modify your browser settings or how to block, manage or filter cookies can be found in your browser’s help file or through such sites as: www.allaboutcookies.org.

Additionally, please note that blocking cookies may not completely prevent how we share information with third parties such as our advertising partners. To exercise your rights or opt-out of certain uses of your information by these parties, please follow the instructions in the “Behavioural Advertising” section above.

Do Not Track

Please note that because there is no consistent industry understanding of how to respond to “Do Not Track” signals, we do not alter our data collection and usage practices when we detect such a signal from your browser.

Changes

We may update this Privacy Policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons.

Complaints

As noted above, if you would like to make a complaint, please contact us by e-mail or by mail using the details provided under “Contact” above.

If you are not satisfied with our response to your complaint, you have the right to lodge your complaint with the relevant data protection authority. You can contact your local data protection authority, or our supervisory authority here: [Add contact information or website for the data protection authority in your jurisdiction. For example https://ico.org.uk/make-a-complaint/]

Last updated: [7\11\2022]

Processing of your personal information (meaning, any information which may potentially allow your identification with reasonable means; hereinafter " Personal Information ") [add explanation regarding the legal grounds for processing personal information, such as:] is necessary for the performance of our contractual obligations towards you and providing you with our services, to protect our legitimate interests and for compliance with legal and financial regulatory obligations to which we are subject.

When you use the Site, you consent to the collection, storage, use, disclosure and other uses of your Personal Information as described in this Privacy Policy.

We encourage our Users to carefully read the Privacy Policy and use it to make informed decisions. 

We collect two types of data and information from Users. 

The first type of information is un-identified and non-identifiable information pertaining to a User(s), which may be made available or gathered via your use of the Site (“ Non-personal Information ”). We are not aware of the identity of a User from which the Non-personal Information was collected. Non-personal Information which is being collected may include your aggregated usage information and technical information transmitted by your device, including certain software and hardware information (e.g. the type of browser and operating system your device uses, language preference, access time, etc.) in order to enhance the functionality of our Site. We may also collect information on your activity on the Site (e.g. pages viewed, online browsing, clicks, actions, etc.).

The second type of information Personal Information which is individually identifiable information, namely information that identifies an individual or may with reasonable effort identify an individual. Such information includes:

• Device Information: We collect Personal Information from your device. Such information includes geolocation data, IP address, unique identifiers (e.g. MAC address and UUID) and other information which relates to your activity through the Site.
  
• [add types of personal information collected, and respective explanations, such as:]
  
• Registration information: When you register to our Site you will be asked to provide us certain details such as: full name; e-mail or physical address, and other information.  
  
• …
  
• …

You may request to: 

1. Receive confirmation as to whether or not personal information concerning you is being processed, and access your stored personal information, together with supplementary information. 
   
2. Receive a copy of personal information you directly volunteer to us in a structured, commonly used and machine-readable format. 
   
3. Request rectification of your personal information that is in our control.
   
4. Request erasure of your personal information. 
   
5. Object to the processing of personal information by us. 
   
6. Request to restrict processing of your personal information by us.
   
7. Lodge a complaint with a supervisory authority.
   

However, please note that these rights are not absolute, and may be subject to our own legitimate interests and regulatory requirements. 

If you wish to exercise any of the aforementioned rights, or receive more information, please contact our Data Protection Officer (“DPO”) using the details provided below:

[INFO@ALMOES.COM] .

We take great care in implementing and maintaining the security of the Site and your information. [ explain about your security practices, such as: we employ industry standard procedures and policies to ensure the safety of the information we collect and retain, and prevent unauthorized use of any such information, and we require any third party to comply with similar security requirements, in accordance with this Privacy Policy] . Although we take reasonable steps to safeguard information, we cannot be responsible for the acts of those who gain unauthorized access or abuse our Site, and we make no warranty, express, implied or otherwise, that we will prevent such access.

We understand the importance of protecting children’s privacy, especially in an online environment. The Site is not designed for or directed at children. Under no circumstances shall we allow use of our services by minors without prior consent or authorization by a parent or legal guardian. We do not knowingly collect Personal Information from minors. If a parent or guardian becomes aware that his or her child has provided us with Personal Information without their consent, he or she should contact us at INFO@ALMOES.COM .