Personal Information We Collect or Process

“Personal information” means information that identifies or can reasonably be linked to you or another person. It does not include anonymized or de-identified data. Depending on how you interact with the Services and applicable law, we may collect or process:

•      
• Contact details: name, address, billing/shipping address, phone number, email address.
•      
• Financial information: payment card details, financial account info, transaction details, payment confirmation and method.
•      
• Account information: username, password, security questions, preferences, settings.
•      
• Transaction information: items viewed, added to cart or wishlist, purchases, returns, exchanges, cancellations, order history.
•      
• Communications: contents of messages you send to us (e.g., support inquiries).
•      
• Device information: device, browser, network info, IP address, unique identifiers.
•      
• Usage information: how and when you interact with or navigate the Services.
•    

Location Information

We do not collect or use precise real-time location data from your mobile device for SMS marketing purposes.

We may infer general location information (such as country or region) from your IP address to comply with legal requirements, enable shipping options, or improve service functionality.

Personal Information Sources

•      
• Directly from you: when you create an account, visit or use the Services, communicate with us, or otherwise provide information.
•      
• Automatically through the Services: from your device and via cookies and similar technologies.
•      
• Service providers: engaged to enable certain technology or process information on our behalf.
•      
• Partners or third parties: where permitted by law.
•    

How We Use Your Personal Information

•      
• Provide, tailor, and improve the Services: perform our contract, process payments, fulfill orders, remember preferences, process returns/exchanges, manage accounts, arrange shipping and returns, enable reviews, and personalize your shopping experience (including recommendations).
•      
• Marketing and advertising: send marketing communications by email/SMS/post; show online ads on our Services or other sites, including based on your activity.
•      
• Security and fraud prevention: authenticate accounts; detect, investigate, and address potential fraud, illegal activity, or safety issues; secure our Services. You are responsible for keeping your login credentials confidential.
•      
• Communications and support: provide customer support and maintain our relationship with you.
•      
• Legal reasons: comply with law and lawful requests; respond to legal process; enforce terms and policies; protect our rights and users.
•    

SMS Marketing & Communications

If you opt in to receive text messages from Eco Kitchen Co, we may send you transactional and promotional SMS messages, including order updates, account notifications, promotional offers, and abandoned cart reminders.

When you provide your phone number and consent to receive SMS messages, we collect and process that number solely for purposes related to our SMS program. Message frequency varies. Message and data rates may apply.

You may opt out of SMS messages at any time by replying STOP to any message or by contacting us using the details below.

SMS Abandoned Cart Messages

Our website uses cookies, pixels, and similar technologies to keep track of items you place in your shopping cart, including when a cart has been abandoned.

If you have opted in to receive SMS messages, this information may be used to determine when to send you cart reminder messages via SMS.

How We Disclose Personal Information

We may disclose personal information to third parties for legitimate purposes, subject to this Policy:

•      
• Service providers: Shopify, payment processors, IT, analytics, customer support, cloud storage, fulfillment and shipping vendors.
•      
• Business & marketing partners: to provide marketing services and advertise to you (including personalized advertising based on activity across merchants and websites). Partners use your information in accordance with their privacy notices. Depending on where you reside, you may have rights to opt-out of certain sharing for targeted advertising.
•      
• At your direction/with consent: e.g., to ship products, social media widgets, login integrations.
•      
• Affiliates/corporate group: internal processing consistent with this Policy.
•      
• Business transactions & legal: in connection with a merger, acquisition, bankruptcy; to comply with legal obligations; to enforce terms; to protect the Services, our rights, and those of users or others.
•    

SMS consent and opt-in data: Notwithstanding anything else in this Privacy Policy, text messaging originator opt-in data and consent will not be shared, sold, rented, or disclosed to any third parties.

Relationship with Shopify

The Services are hosted by Shopify. Shopify collects and processes personal information about your access to and use of the Services to provide and improve the platform. Information you submit may be transmitted to and shared with Shopify and certain third parties (which may be located in other countries) to provide and improve the Services. We may also use Shopify features that incorporate data from your interactions with our store and other merchants.

In these circumstances, Shopify is responsible for such processing, including responding to requests to exercise rights related to that processing.

Learn more in the Shopify Consumer Privacy Policy and manage rights through the Shopify Privacy Portal.

Third-Party Websites and Links

The Services may link to third-party websites or platforms. We are not responsible for their privacy/security practices or content. Review their policies and terms. Information you post on public or third-party platforms may be viewable by others. Inclusion of a link does not imply endorsement unless disclosed.

Children’s Data

The Services are not intended for children, and we do not knowingly collect personal information from individuals under the age of majority in your jurisdiction. If you are a parent/guardian of a child who has provided personal information, contact us using the details below to request deletion. As of the effective date, we do not have actual knowledge that we “share” or “sell” personal information of individuals under 16, as those terms may be defined by applicable law.

Security and Retention of Your Information

No security measures are perfect; we cannot guarantee “perfect security.” Information sent to us may not be secure in transit—avoid using unsecure channels for sensitive data.

We retain personal information as needed to maintain your account, provide Services, comply with legal obligations, resolve disputes, and enforce agreements and policies.

Your Rights and Choices

Subject to where you live and applicable law, you may have the following rights (not absolute and applicable in certain circumstances):

•      
• Right to access/know personal information we hold about you.
•      
• Right to delete personal information we maintain about you.
•      
• Right to correct inaccurate personal information.
•      
• Right of portability to receive a copy and request transfer to a third party (subject to limits).
•      
• Managing communications by using the unsubscribe link in marketing emails. (You may still receive non-promotional messages such as order updates.)
•    

EEA/UK residents: you may also have rights to object to or restrict certain processing and to withdraw consent where relied upon (without affecting processing prior to withdrawal).

You may exercise rights where indicated on the Services or by contacting us (see “Contact”). To learn how Shopify uses personal information and related rights, visit https://privacy.shopify.com/en.

We will not discriminate against you for exercising rights. We may verify your identity as permitted by law. You may designate an authorized agent; we may require proof of authorization and direct verification.

Complaints

If you have concerns about how we process personal information, please contact us. Depending on where you live, you may have the right to appeal our decision or lodge a complaint with your local data protection authority (for EEA authorities, see the EU official listings).

International Transfers

We may transfer, store, and process personal information outside your country. For transfers from the EEA/UK, we rely on recognized transfer mechanisms (e.g., the European Commission’s Standard Contractual Clauses or UK-approved equivalents) unless the destination ensures an adequate level of protection.

Changes to This Privacy Policy

We may update this Policy to reflect changes to our practices or for operational, legal, or regulatory reasons. We will post updates here, adjust the “Last updated” date, and provide additional notice where required by law.

Contact

Questions about this Privacy Policy or our privacy practices, or to exercise your rights:

Email: info@eco-kitchen-co.com

For data protection purposes, Eco Kitchen Co is the data controller of your personal information.