Privacy Policy

SECTION 1 – WHAT DO WE DO WITH YOUR INFORMATION?

When you purchase from our store, we collect personal information you provide—such as name, billing and shipping address, email, phone number, and payment details—so we can process your order and provide customer support.

When you browse our site, we automatically receive technical data including your device and browser type, IP address, time zone, and certain cookies/analytics identifiers to help us operate, secure, and improve the store.

With your permission, we may send emails about our store, new products, and updates.

SECTION 2 – CONSENT

How do you get my consent?

• Providing personal information to complete a transaction (place an order, verify payment, arrange delivery or returns) implies consent for that specific purpose.
• For secondary uses (e.g., marketing emails or non-essential cookies), we ask for explicit consent where required. You may decline without affecting essential services.

How do I withdraw my consent?

• You can withdraw consent at any time (for example, unsubscribe via the link in marketing emails) or contact us at info@buttpluglovers.com.

SECTION 3 – DISCLOSURE

We may disclose personal information if required by law, to respond to lawful requests, to protect our rights or users’ safety, to prevent fraud, or to enforce our terms.

SECTION 4 – SHOPIFY

Our store is hosted on Shopify Inc., which provides the e-commerce platform that enables us to sell to you. Your data may be stored through Shopify’s data storage, databases, and the general Shopify application on secure servers behind a firewall.

Payment

• If you use a direct payment gateway, Shopify stores your card data encrypted per PCI-DSS. Purchase data is retained only as long as necessary to complete the transaction and then deleted.
• All direct gateways follow PCI-DSS standards managed by the PCI Security Standards Council (Visa, MasterCard, American Express, Discover).
• Read Shopify’s Terms of Service and Privacy Policy for details.

SECTION 5 – THIRD-PARTY SERVICES

Third-party providers collect, use, and disclose information only to the extent necessary to perform services for us. Typical categories include:

• Payment processors & fraud prevention (e.g., Shopify Payments/PayPal, chargeback and risk tools);
• Fulfillment & shipping carriers and logistics;
• Email/SMS & customer support platforms;
• Analytics & performance (e.g., Google Analytics) and site personalization;
• Advertising/retargeting (only with consent where required).

These providers may be located in jurisdictions different from yours. If you proceed with a service involving a third party, your information may be subject to that jurisdiction’s laws.

Links

Our site may link to third-party websites. We are not responsible for their privacy practices. We encourage you to read their policies.

SECTION 6 – SECURITY

We implement administrative, technical, and physical safeguards designed to protect personal information. Payment information is transmitted over SSL/TLS and stored with AES-256 encryption. While no method is 100% secure, we follow PCI-DSS requirements and industry best practices (e.g., access controls and two-factor authentication for admin accounts).

SECTION 7 – COOKIES & TRACKING TECHNOLOGIES

We use essential cookies (required for the store), performance/analytics cookies (to improve the site), and, where applicable, advertising cookies. You can manage preferences anytime via Cookie Settings. For details, see our Cookie Policy.

Examples may include Shopify session cookies and Google Analytics cookies (e.g., _ga, _gid, _ga_<container-id>). Lifetimes vary by cookie type.

SECTION 8 – AGE OF CONSENT

This website, its products, and services are intended for adults 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided information, contact info@buttpluglovers.com so we can delete it promptly.

SECTION 9 – DATA RETENTION

We retain personal information only as long as necessary for the purposes described in this policy (e.g., order fulfillment, legal/accounting requirements, fraud prevention) and then delete or anonymize it according to our retention schedules.

SECTION 10 – CALIFORNIA PRIVACY RIGHTS (CCPA/CPRA)

California residents have the right to know and access categories and specific pieces of personal information we collect, delete information, correct inaccuracies, limit use of sensitive data (where applicable), and opt out of the sale or sharing of personal information. We honor Global Privacy Control (GPC) signals where technically feasible.

To exercise your rights, email info@buttpluglovers.com or visit Do Not Sell or Share My Personal Information.

We do not knowingly sell or share the personal information of consumers under 16 years of age.

SECTION 11 – INTERNATIONAL USERS (GDPR/UK GDPR) & PIPEDA

For users in the EEA/UK/Canada, we process personal data under lawful bases including: performance of a contract (order processing), legitimate interests (fraud prevention, store improvement), legal obligation (tax/accounting), and consent (marketing or non-essential cookies).

Where data is transferred outside your region (e.g., to the U.S.), we use appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms.

Your rights may include access, rectification, deletion, restriction, objection, data portability, and withdrawal of consent at any time. To exercise these rights, contact info@buttpluglovers.com.

SECTION 12 – CHANGES TO THIS PRIVACY POLICY

We may update this policy from time to time. Changes take effect upon posting on the website. Material changes will be noted here so you understand what we collect, how we use it, and under what circumstances we disclose it.

QUESTIONS AND CONTACT INFORMATION

If you would like to access, correct, amend, or delete any personal information we hold about you, register a complaint, or request more information, contact us at info@buttpluglovers.com or by mail at: