Privacy Policy

Last Updated: June 24, 2026

Please read this policy carefully. By using our Site, you agree to the collection and use of information in accordance with this policy.

1. Who We Are

Brand: Freyjaloft 

Contact Email: freyjaloft@gmail.com

We are the data controller responsible for your personal information collected through this Site.

2. Information We Collect

2.1 Information You Provide to Us

When you visit our Site or place an order, you may provide us with the following information:

  • Contact information: name, email address, phone number

  • Billing and shipping information: delivery address, billing address

  • Payment information: payment card details or PayPal account information (processed securely by our third-party payment processors — we do not store your full payment details)

  • Account information: if you create an account, your username and password

  • Communications: any messages you send us via email or contact forms

2.2 Information Collected Automatically

When you browse our Site, we automatically collect certain information, including:

  • Device and browser information: IP address, browser type, operating system, device type

  • Usage data: pages visited, time spent on pages, links clicked, referring URLs

  • Location data: approximate geographic location based on your IP address

  • Cookie and tracking data: as described in Section 5 below

3. How We Use Your Information

We use the information we collect for the following purposes:

  • Processing and fulfilling orders: including payment processing, shipping, and order confirmation

  • Customer service: responding to your inquiries, resolving disputes, and troubleshooting

  • Account management: if you create an account on our Site

  • Marketing communications: sending promotional emails and offers, where you have consented or where permitted by law. You may opt out at any time (see Section 8)

  • Site improvement: analyzing usage patterns to improve our Site's performance and user experience

  • Legal compliance: complying with applicable laws, regulations, and legal processes

  • Fraud prevention: detecting and preventing fraudulent transactions and other illegal activities

4. Sharing Your Information

We do not sell your personal information. We may share your information with the following third parties in order to operate our business:

4.1 Service Providers

  • Shopify Inc. — E-commerce platform hosting and order management

  • PayPal — Payment processing

  • Third-party credit card processors — Payment processing for card transactions

  • ED Post — Order fulfilment and shipping

  • Klaviyo — Email marketing communications

  • Google Analytics — Website analytics and performance tracking

  • Meta (Facebook Pixel) — Advertising and marketing analytics

Each of these service providers has their own privacy policy governing the use of your information. We encourage you to review their policies.

4.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid legal requests by public authorities (e.g. a court or government agency).

4.3 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction.

5. Cookies and Tracking Technologies

Our Site uses cookies and similar tracking technologies to enhance your browsing experience and collect usage data.

5.1 Types of Cookies We Use

  • Strictly necessary cookies: Essential for the Site to function (e.g. shopping cart, login session). These cannot be disabled.

  • Analytics cookies: Help us understand how visitors interact with our Site (e.g. Google Analytics).

  • Marketing cookies: Used to deliver relevant advertisements and track campaign performance (e.g. Meta Pixel).

  • Preference cookies: Remember your settings and preferences for a better experience.

5.2 Managing Cookies

You can control cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our Site.

If you are located in the European Union or United Kingdom, you will be presented with a cookie consent banner when you first visit our Site, allowing you to accept or decline non-essential cookies.

6. International Data Transfers

We are based in China, and our Site is operated through Shopify, whose servers are primarily located in the United States and Canada. By using our Site, your personal information may be transferred to and processed in countries outside of your own, including China and the United States, which may have different data protection laws than your country of residence.

Where we transfer personal data from the European Union or United Kingdom to countries not deemed to provide an adequate level of data protection, we take appropriate safeguards to ensure your information remains protected in accordance with this Privacy Policy.

7. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes described in this Privacy Policy, unless a longer retention period is required by law. Order information is typically retained for a minimum of 5 years for accounting and legal compliance purposes. You may request deletion of your personal data at any time (see Section 8).

8. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

8.1 European Union and United Kingdom (GDPR / UK GDPR)

If you are located in the EU or UK, you have the right to:

  • Access: Request a copy of the personal data we hold about you

  • Rectification: Request correction of inaccurate or incomplete data

  • Erasure: Request deletion of your personal data ("right to be forgotten")

  • Restriction: Request that we limit the processing of your data

  • Data portability: Receive your data in a structured, machine-readable format

  • Object: Object to processing of your data for direct marketing purposes

  • Withdraw consent: Where processing is based on consent, withdraw it at any time

To exercise any of these rights, please contact us at freyjaloft@gmail.com. We will respond within 30 days.

8.2 United States — California Residents (CCPA)

If you are a California resident, you have the right to:

  • Know: Request information about the personal data we collect, use, and share

  • Delete: Request deletion of your personal data

  • Opt out: Opt out of the sale of your personal data (we do not sell personal data)

  • Non-discrimination: We will not discriminate against you for exercising your CCPA rights

To submit a CCPA request, please contact us at freyjaloft@gmail.com.

8.3 Other Regions (Canada, Australia, Middle East)

Regardless of your location, you may contact us at any time to access, correct, or request deletion of your personal information. We will respond to all reasonable requests in a timely manner.

9. Marketing Communications

If you have opted in to receive marketing emails from us, you may unsubscribe at any time by:

  • Clicking the "unsubscribe" link at the bottom of any marketing email

  • Contacting us directly at freyjaloft@gmail.com

Please note that even if you opt out of marketing communications, we may still send you transactional emails related to your orders.

10. Children's Privacy

Our Site is not directed at children. We do not knowingly collect personal information from children under the age of 13 (or under 16 for users in the European Union). If you believe we have inadvertently collected information from a child, please contact us immediately at freyjaloft@gmail.com and we will take steps to delete such information.

11. Third-Party Links

Our Site may contain links to third-party websites. We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies before providing any personal information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. When we make changes, we will update the "Last Updated" date at the top of this page. For significant changes, we will notify you by email or by placing a prominent notice on our Site. Your continued use of the Site after any changes constitutes your acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us.