Privacy policy

Last updated: April 11, 2026

soon-sha (“we,” “us,” or “our”) operates this online store and website (including all related information, content, features, tools, products, and services, collectively, the “Service”) and provides a curated shopping experience. Our store is hosted by Shopify Inc. (“Shopify”), which enables us to provide the Service.

This Privacy Policy explains how we collect, use, disclose, and otherwise process your personal information when you visit, use, or make a purchase from the Service, or otherwise communicate with us (collectively, “interact” with us). If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy governs with respect to the collection, processing, and disclosure of personal information.

Please read this Privacy Policy carefully. By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy.

 

1. Personal information we collect or process

When we use the term “personal information,” we mean information that identifies, relates to, describes, or can reasonably be linked to you or another individual. Personal information does not include information collected anonymously or de-identified so that it cannot reasonably be linked to an individual.

Depending on how you interact with the Service, where you live, and what is permitted or required by applicable law, we may collect or process the following categories of personal information (including inferences drawn from such information):
• Contact information: name, billing address, shipping address, phone number, and email address.
• Payment and transaction information: payment method, payment confirmation, transaction details, and other information necessary to process your order.
• Account information: username, password, and account preferences/settings (if you create an account).
• Order information: products you view, add to cart, purchase, return, exchange, or cancel, and your order history.
• Communications: information you provide when you contact us, including customer support inquiries.
• Device information: device type, browser type, network connection, IP address, and other identifiers associated with your device or browser.
• Usage information: information about how you access and use the Service, such as time of access, pages viewed, and navigation behavior, including through cookies and similar technologies.


2. Sources of personal information

We may collect personal information from the following sources:
• Directly from you, when you create an account, place an order, submit a form, subscribe to emails, contact us, or otherwise provide information to us.
• Automatically through the Service, from your device and browser when you use the Service, including through cookies, pixels, and similar technologies.
• From service providers who help us operate the Service, such as payment processors, fulfillment and shipping providers, analytics providers, customer support tools, and cloud hosting or storage providers.
• From business and marketing partners, including where they help us measure advertising performance or provide marketing-related services.


3. How we use personal information

Depending on your interactions with the Service, we may use personal information for the following purposes:
• To provide, operate, and improve the Service, including processing payments, fulfilling orders, shipping products, facilitating returns or exchanges, sending order-related communications, maintaining accounts, and improving our website and services.
• To communicate with you, including responding to inquiries, providing customer support, and sending service-related notices.
• For marketing purposes, including sending promotional emails where permitted by applicable law.
• For security and fraud prevention, including helping authenticate users, secure transactions, detect and investigate potentially fraudulent, unlawful, or harmful activity, and protect the safety and integrity of the Service.
• For legal and compliance purposes, including complying with applicable law, responding to lawful requests, participating in legal proceedings, enforcing our terms and policies, and protecting our rights and the rights of others.

You are responsible for maintaining the confidentiality of your account credentials.

–––––

4. How we disclose personal information

We may disclose personal information to third parties for legitimate purposes consistent with this Privacy Policy, including:
• Shopify and other service providers that perform services on our behalf, such as payment processing, hosting, analytics, customer support, fulfillment, and shipping.
• Business and marketing partners that help us provide marketing services or advertising-related services. Some of these third parties may process your personal information in accordance with their own privacy policies.
• Third parties where you request, direct, authorize, or consent to the disclosure.
• Parties involved in a business transaction, such as an actual or proposed merger, acquisition, financing, sale of assets, bankruptcy, or similar event, subject to applicable law.
• Law enforcement, regulators, courts, or other parties where disclosure is required by law or reasonably necessary to protect the Service, our rights, or the rights, property, or safety of others.

Depending on where you live, you may have the right to opt out of certain disclosures or uses of your information for targeted advertising or similar purposes. Please see Section 9 below.


5. Our relationship with Shopify

The Service is hosted by Shopify. Shopify may collect and process personal information relating to your access to and use of the Service in order to provide hosting, infrastructure, checkout, payment-related, analytics, and other commerce services.

Information you submit to the Service may be shared with Shopify and with certain third parties that assist in operating Shopify’s platform and related services. Those parties may be located outside your country of residence.

We may also use Shopify features and tools to help operate, improve, protect, and grow our store.

For more information about how Shopify processes personal information, please review Shopify’s privacy information.


6. Third-party websites and links

The Service may contain links to third-party websites or online services that we do not control. If you follow a link to a third-party site or service, you should review its privacy policy, security practices, and terms of use.

We are not responsible for the privacy, security, accuracy, or practices of third parties. Information you choose to provide in public or semi-public areas, including on third-party social platforms, may be visible to others.


7. Children’s data

The Service is not directed to children, and we do not knowingly collect personal information from children. If you are a parent or guardian and believe that your child has provided personal information to us, please contact us using the information in Section 13 so that we can review the request and take appropriate action.

We do not knowingly process personal information of children in violation of applicable law.


8. Data security and retention

We use reasonable measures designed to protect personal information. However, no method of transmission over the internet and no security system is completely secure, and we cannot guarantee absolute security.

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Service, maintain business and transaction records, comply with legal obligations, resolve disputes, and enforce our agreements and policies. Retention periods may vary depending on the nature of the information and the reason it is processed.


9. Your rights and choices

Depending on where you live, you may have certain rights regarding your personal information. These rights are not absolute and may apply only in specific circumstances.

Rights you may have
• Right to access: request access to personal information we hold about you.
• Right to delete: request deletion of personal information we hold about you.
• Right to correct: request correction of inaccurate personal information.
• Right to data portability: request a copy of certain personal information and, where applicable, request that it be transferred to another provider.
• Right to opt out: depending on your jurisdiction, you may have the right to opt out of certain processing activities, including targeted advertising or certain disclosures regarded as a “sale” or “sharing” of personal information under applicable law.
• Marketing preferences: you can unsubscribe from promotional emails at any time by using the unsubscribe link in those emails. Even if you opt out of marketing communications, we may still send you non-promotional messages, such as order confirmations or other service-related communications.

Global Privacy Control (GPC)
Where required by applicable law, and where technically supported by our store or service providers, we may recognize Global Privacy Control signals as a request to opt out of certain processing activities for the browser or device that sends the signal.

We do not respond to “Do Not Track” signals except where required by applicable law.

Exercising your rights
You may exercise your rights by contacting us using the information in Section 13. We may need to verify your identity before processing certain requests. Where permitted by law, you may also authorize an agent to make a request on your behalf, subject to verification and proof of authority as applicable.

We will respond in accordance with applicable law and will not discriminate against you for exercising your rights.


10. Complaints

If you have concerns about how we handle your personal information, please contact us using the information in Section 13.

Depending on where you live, you may also have the right to lodge a complaint with your local data protection or regulatory authority.


11. International transfers

Your personal information may be transferred to, stored in, and processed in countries other than your country of residence.

Where required by applicable law, we take steps designed to provide appropriate safeguards for international transfers of personal information.


12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, operational needs, legal obligations, or other reasons. When we do, we will post the revised Privacy Policy on this website and update the “Last updated” date. Where required by law, we will provide additional notice.


13. Contact us

If you have questions about this Privacy Policy, our privacy practices, or if you would like to exercise your rights, please contact us at:

Email: mail@soon-sha.com
Business name: soon-sha
Website: soon-sha.com