Privacy Policy

"Personal information" means information that identifies or can reasonably be linked to you. Depending on how you interact with our Services, we may collect:

• Contact details — name, address, billing and shipping address, phone number, and email address.
• Financial information — card and financial account numbers, payment details, transaction and payment confirmation data.
• Account information — username, password, security questions, preferences and settings.
• Transaction information — items viewed, carted, wishlisted, purchased, returned, exchanged, or cancelled, and past orders.
• Communications with us — anything you share when contacting customer support.
• Device information — device, browser, network, IP address and other identifiers.
• Usage information — how and when you interact with or navigate the Services.

• Directly from you — creating an account, using the Services, or communicating with us.
• Automatically through the Services — from your device and through cookies and similar technologies.
• From our service providers — engaged to enable certain technology on our behalf.
• From our partners or other third parties.

• Provide, tailor, and improve the Services — process payments, fulfil orders, manage your account, arrange shipping, facilitate returns and exchanges, enable reviews, and personalize your shopping experience.
• Marketing and advertising — send promotional communications by email, text, or post, and show relevant ads based on your activity.
• Security and fraud prevention — authenticate accounts, provide a secure checkout, and detect or investigate fraudulent or unsafe activity.
• Communicating with you — provide customer support and maintain our relationship with you.
• Legal reasons — comply with applicable law, respond to valid legal process, and enforce our terms and policies.

We may disclose your personal information to third parties for legitimate purposes, including:

• With Shopify, vendors, and other service providers (IT management, payment processing, data analytics, customer support, cloud storage, fulfillment and shipping).
• With business and marketing partners, including Shopify-supported personalized advertising based on your activity across merchants and websites.
• When you direct or consent to disclosure — for example, to ship products or through social media integrations.
• With our affiliates or within our corporate group.
• In connection with a business transaction (such as a merger), to comply with legal obligations, enforce our terms, or protect the Services and our users.

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve them. Information you submit will be transmitted to and shared with Shopify and third parties, which may be located in countries other than where you reside.

We also use certain Shopify enhanced features that draw on data from your interactions with our store, along with other merchants and Shopify itself. For these purposes, Shopify is responsible for processing your personal information, including responding to your requests to exercise your rights. You can learn more via the Shopify Consumer Privacy Policy, and depending on where you live, exercise certain rights through the Shopify Privacy Portal.

The Services may link to websites or platforms operated by third parties. If you follow such links, please review their own privacy and security policies — we do not guarantee and are not responsible for the privacy or security practices of sites we do not control. Information you share on public or semi-public venues, including third-party social platforms, may be viewable by others without limitation as to its further use.

The Services are not intended for use by children, and we do not knowingly collect personal information about children under the age of majority in your jurisdiction. If you are the parent or guardian of a child who has provided us with personal information, please contact us to request that it be deleted.

As of the effective date of this Privacy Policy, we do not have actual knowledge that we "share" or "sell" (as those terms are defined in applicable law) the personal information of individuals under 16 years of age.

No security measures are perfect or impenetrable, and we cannot guarantee "perfect security." Information you send us may not be secure while in transit — we recommend avoiding unsecure channels for sensitive or confidential communications.

How long we retain your personal information depends on factors such as whether we need it to maintain your account, provide the Services, comply with legal obligations, or resolve disputes and enforce our contracts and policies.

Depending on where you live, you may have some or all of the following rights regarding your personal information, though they are not absolute and may apply only in certain circumstances:

• Right to Access / Know — request access to the personal information we hold about you.
• Right to Delete — request that we delete personal information we maintain about you.
• Right to Correct — request that we correct inaccurate personal information.
• Right of Portability — receive a copy of your information and request it be transferred to a third party.
• Right to Opt Out — of the "sale" or "share" of your personal information, or of processing for "targeted advertising."
• Managing Communication Preferences — unsubscribe from promotional emails at any time; you may still receive non-promotional emails about your account or orders.

If you visit our site with the Global Privacy Control signal enabled, we will treat this as an opt-out request for that device and browser, and apply it to your account where we can associate the two. We do not otherwise recognize "Do Not Track" signals.

If you reside in the UK or European Economic Area, you may also have the right to object to or restrict processing, and to withdraw consent where we rely on it — withdrawal will not affect the lawfulness of processing carried out before that point.

We will not discriminate against you for exercising these rights. We may need to verify your identity before processing a request, and you may designate an authorized agent to act on your behalf, subject to proof of authorization.

If you have concerns about how we process your personal information, please contact us using the details below. Depending on where you live, you may have the right to appeal our decision, or to lodge a complaint with your local data protection authority.

We may transfer, store, and process your personal information outside the country you live in. Where we transfer information out of the European Economic Area or United Kingdom, we rely on recognized transfer mechanisms — such as the European Commission's Standard Contractual Clauses or equivalent UK mechanisms — unless the destination country has been deemed to offer an adequate level of protection.

We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised policy here, update the "Last updated" date, and provide notice as required by applicable law.

Should you have any questions about our privacy practices or this Privacy Policy, or wish to exercise any of the rights available to you, please call or email us at helloafapparels@gmail.com. For the purposes of applicable data protection laws, we are the data controller of your personal information.