Privacy Policy

Privacy Policy

Last Updated: July 29, 2026

Shopstead operates this online store and website, including the related content, features, products, tools, and services provided through shopstead.us, collectively referred to as the “Services.”

Shopstead is powered by Shopify, which provides the ecommerce infrastructure that enables us to offer the Services.

This Privacy Policy explains how Shopstead collects, uses, stores, processes, and discloses personal information when you:

  • Visit or use shopstead.us

  • Browse or purchase products

  • Create or use a customer account

  • Contact customer support

  • Subscribe to marketing communications

  • Submit a review or other content

  • Otherwise interact with the Services

This Privacy Policy also explains certain privacy rights and choices that may be available to you.

If there is a conflict between this Privacy Policy and our Terms of Service concerning the collection, use, processing, retention, or disclosure of personal information, this Privacy Policy will control with respect to that subject.

Please review this Privacy Policy carefully. By accessing or using the Services, you acknowledge that you have received and reviewed this Privacy Policy.

Your rights may vary depending on where you live and the privacy laws that apply to Shopstead and your interaction with the Services.

Nothing in this Privacy Policy limits any privacy or consumer right that cannot legally be limited or waived.

1. Who Is Responsible for Your Personal Information

For purposes of this Privacy Policy, Shopstead is generally responsible for determining why and how personal information is processed in connection with its online store, except where another party independently determines the purposes and methods of processing.

Shopify and other service providers may process personal information on our behalf to provide ecommerce, payment, security, hosting, analytics, fulfillment, advertising, and related services.

In certain circumstances, Shopify or another third party may process personal information for its own independently determined purposes. That processing is governed by the third party’s own privacy notice.

2. Meaning of Personal Information

“Personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to an individual or household.

Depending on applicable law, similar terms may include:

  • Personal data

  • Personally identifiable information

  • Customer personal data

  • Consumer information

Personal information does not generally include information that has been lawfully anonymized, aggregated, or de-identified so that it cannot reasonably be linked to an identifiable person.

3. Personal Information We May Collect

The personal information we collect depends on how you interact with Shopstead, the products and features you use, the information you choose to provide, your location, and the technologies enabled on the website.

We may collect or process the following categories of personal information.

Contact Information

This may include:

  • Full name

  • Email address

  • Telephone number

  • Billing address

  • Shipping address

  • Business address

  • Company name

  • Job title

  • Delivery instructions

Account Information

If customer accounts are available, this may include:

  • Account username

  • Encrypted password or authentication information

  • Account preferences

  • Saved addresses

  • Communication preferences

  • Shopping preferences

  • Account activity

Shopstead generally does not have access to your unencrypted account password.

Order and Transaction Information

This may include:

  • Products viewed

  • Products placed in a shopping cart

  • Products purchased

  • Products returned or exchanged

  • Cancelled orders

  • Order numbers

  • Purchase dates

  • Quantities

  • Product preferences

  • Discount codes

  • Shipping method

  • Transaction history

  • Return and refund history

  • Order-related communications

Payment Information

Payment and financial information may include:

  • Payment method

  • Billing information

  • Payment status

  • Payment authorization information

  • Transaction amount

  • Payment confirmation

  • Fraud-screening results

  • Limited payment-card details, such as card type and last digits

Complete payment-card numbers and security codes are generally collected and processed by Shopify, payment processors, financial institutions, or other authorized payment providers.

Shopstead does not ordinarily receive or store complete payment-card credentials in directly readable form.

Customer Support Information

When you contact us, we may collect:

  • Your name

  • Contact information

  • Order number

  • The contents of your message

  • Photographs

  • Videos

  • Product information

  • Delivery information

  • Return or refund information

  • Records of our response

  • Other information you voluntarily provide

Please do not send complete payment-card numbers, passwords, government identification numbers, medical information, or other unnecessary sensitive information through ordinary email.

Device and Technical Information

This may include:

  • IP address

  • Device type

  • Device identifiers

  • Browser type

  • Browser settings

  • Operating system

  • Network connection information

  • Language settings

  • Screen resolution

  • Time zone

  • Cookie identifiers

  • Advertising identifiers

  • Approximate location derived from an IP address

  • Website error and diagnostic data

Website Usage Information

This may include information about:

  • Pages visited

  • Products viewed

  • Searches performed

  • Links selected

  • Shopping-cart activity

  • Checkout activity

  • Referring websites

  • Session duration

  • Date and time of access

  • Advertising interactions

  • Email interactions

  • Navigation through the Services

  • Website features used

Marketing and Preference Information

This may include:

  • Email subscription status

  • Advertising preferences

  • Cookie choices

  • Products of interest

  • Previous purchases

  • Promotion interactions

  • Communication history

  • Survey responses

  • Inferred shopping interests

Reviews and Submitted Content

If you submit a review, photograph, question, comment, testimonial, or other content, we may collect:

  • The submitted content

  • Display name

  • Product association

  • Rating

  • Submission date

  • Related account or transaction information

  • Technical information used to prevent fraudulent reviews

Content submitted to a public or semi-public area may be visible to other people.

Do not include confidential information or unnecessary personal information in a public review.

Fraud and Security Information

We may collect or generate information used to identify and prevent:

  • Fraudulent payments

  • Account misuse

  • False delivery claims

  • Return fraud

  • Chargeback abuse

  • Promotion abuse

  • Automated attacks

  • Unauthorized access

  • Other unlawful or harmful activity

This may include risk scores, transaction patterns, device information, address information, account history, and information received from payment or fraud-prevention providers.

Business Customer Information

Because Shopstead sells retail store and facility supplies, some customers may purchase on behalf of a business.

We may collect:

  • Business name

  • Business address

  • Employee or representative name

  • Work email address

  • Work telephone number

  • Tax or exemption information

  • Purchasing role

  • Business order history

4. Sensitive Personal Information

Depending on applicable law, certain information may be considered sensitive personal information.

Shopstead does not intentionally request sensitive personal information unless it is reasonably necessary for a transaction, security verification, legal obligation, or customer request.

Sensitive information may include:

  • Account login credentials

  • Precise geolocation

  • Government identification numbers

  • Financial account access information

  • Racial or ethnic origin

  • Religious beliefs

  • Health information

  • Sexual orientation

  • Biometric information used for identification

Shopstead does not intentionally use sensitive personal information to infer characteristics about customers for unrelated advertising purposes.

Do not submit unnecessary sensitive information through product reviews, customer-support emails, or other unrestricted communication channels.

5. Sources of Personal Information

We may collect personal information from the following sources.

Directly From You

We may receive information directly from you when you:

  • Place an order

  • Create an account

  • Complete a form

  • Contact customer support

  • Request a return or refund

  • Subscribe to marketing

  • Submit a review

  • Participate in a survey

  • Provide information through the Services

Automatically Through the Services

We may collect information automatically when you access or use the Services through:

  • Cookies

  • Pixels

  • Tags

  • Local storage

  • Analytics tools

  • Advertising technologies

  • Server logs

  • Similar tracking technologies

From Shopify and Service Providers

We may receive information from providers that assist with:

  • Website hosting

  • Ecommerce functionality

  • Payment processing

  • Order management

  • Fraud prevention

  • Analytics

  • Customer support

  • Email delivery

  • Advertising

  • Fulfillment

  • Shipping

  • Returns

From Suppliers and Fulfillment Partners

We may receive information from suppliers, distributors, warehouses, and fulfillment providers concerning:

  • Order status

  • Inventory

  • Shipment preparation

  • Product availability

  • Tracking

  • Delivery

  • Returns

  • Product issues

From Shipping Carriers

Shipping and logistics providers may provide:

  • Tracking events

  • Delivery status

  • Delivery exceptions

  • Address correction information

  • Delivery photographs

  • Signature information

  • Claim information

  • Return-to-sender information

From Payment and Fraud-Prevention Providers

We may receive information concerning:

  • Payment authorization

  • Payment status

  • Chargebacks

  • Fraud indicators

  • Risk assessments

  • Account verification

  • Transaction disputes

From Marketing and Analytics Partners

Depending on the technologies used and your privacy settings, we may receive information relating to:

  • Advertising interactions

  • Campaign attribution

  • Website visits

  • Product interests

  • Device identifiers

  • Conversion events

  • Marketing performance

From Public or Third-Party Sources

Where permitted by law, we may receive information from:

  • Public records

  • Social media platforms

  • Business directories

  • Identity-verification services

  • Fraud-prevention databases

  • Other parties with whom you direct us to interact

6. How We Use Personal Information

We may use personal information for the following purposes.

Providing and Operating the Services

We may use personal information to:

  • Display and operate the website

  • Provide website features

  • Maintain shopping carts

  • Create and manage customer accounts

  • Remember preferences

  • Provide product recommendations

  • Improve website navigation

  • Respond to customer actions

Processing Orders and Payments

We may use personal information to:

  • Receive and review orders

  • Verify payment

  • Process transactions

  • Confirm purchases

  • Detect payment errors

  • Provide receipts

  • Maintain transaction records

  • Process cancellations

Fulfilling and Delivering Orders

We may use personal information to:

  • Confirm product availability

  • Prepare orders

  • Coordinate fulfillment

  • Generate shipping documentation

  • Provide information to suppliers and carriers

  • Send tracking information

  • Manage delivery issues

  • Investigate delayed or lost shipments

Processing Returns, Refunds, and Exchanges

We may use personal information to:

  • Verify purchases

  • Review return eligibility

  • Issue return instructions

  • Investigate damaged or incorrect products

  • Process replacements

  • Approve or deny refunds

  • Maintain records of returns and claims

  • Detect return fraud

Communicating With You

We may use personal information to:

  • Respond to inquiries

  • Provide customer support

  • Send order confirmations

  • Send shipping notifications

  • Send delay or cancellation notices

  • Provide return and refund updates

  • Send security notices

  • Communicate policy changes

  • Maintain our customer relationship

Personalizing and Improving the Services

We may use personal information to:

  • Remember customer preferences

  • Recommend relevant products

  • Analyze customer interests

  • Improve product categories

  • Test website functionality

  • Understand website usage

  • Diagnose errors

  • Improve customer experience

  • Develop new features

Marketing and Advertising

Subject to applicable law and your privacy choices, we may use personal information to:

  • Send promotional emails

  • Present online advertisements

  • Measure advertising performance

  • Understand marketing effectiveness

  • Identify products that may interest customers

  • Create or use advertising audiences

  • Limit repeated advertising

  • Attribute purchases to advertising campaigns

Where legally required, we will request consent before sending certain marketing communications or enabling certain non-essential tracking technologies.

Security and Fraud Prevention

We may use personal information to:

  • Authenticate accounts

  • Verify transactions

  • Detect suspicious activity

  • Prevent unauthorized access

  • Protect payment information

  • Investigate fraud

  • Prevent false claims

  • Enforce quantity or promotion limits

  • Protect customers, Shopstead, Shopify, and service providers

  • Maintain website and system security

Legal and Compliance Purposes

We may use personal information to:

  • Comply with applicable law

  • Maintain tax and accounting records

  • Respond to valid legal requests

  • Establish, exercise, or defend legal claims

  • Enforce our Terms of Service and policies

  • Investigate policy violations

  • Cooperate with lawful authorities

  • Protect the rights and safety of customers and others

  • Comply with customs, sanctions, trade, or regulatory requirements

Business Operations

We may use information to:

  • Maintain business records

  • Conduct internal audits

  • Manage suppliers

  • Evaluate business performance

  • Prevent loss

  • Obtain professional advice

  • Maintain insurance

  • Plan or complete a business transaction

7. Legal Bases for Processing

Where laws such as the European Union or United Kingdom data protection laws require a legal basis, Shopstead may rely on one or more of the following.

Performance of a Contract

We may process personal information when necessary to:

  • Process your order

  • Accept payment

  • Ship products

  • Communicate about a transaction

  • Process a return or refund

  • Provide requested customer support

Legitimate Interests

We may process information when reasonably necessary for legitimate business interests, including:

  • Operating and improving the Services

  • Preventing fraud

  • Maintaining security

  • Understanding website performance

  • Providing customer support

  • Managing business records

  • Protecting legal rights

We consider the potential impact on individuals before relying on legitimate interests.

Consent

We may rely on consent for activities such as:

  • Certain marketing communications

  • Certain advertising cookies

  • Certain analytics technologies

  • Processing that applicable law requires to be based on consent

You may withdraw consent at any time, subject to legal and technical limitations. Withdrawal does not make prior lawful processing unlawful.

Legal Obligations

We may process information to comply with:

  • Tax obligations

  • Accounting requirements

  • Consumer protection laws

  • Court orders

  • Government requests

  • Customs requirements

  • Payment regulations

  • Other legal duties

Protection of Rights and Safety

Where legally permitted, we may process personal information to protect the vital interests, rights, safety, or property of Shopstead, customers, service providers, or other individuals.

8. Cookies and Similar Technologies

Shopstead, Shopify, and authorized third parties may use cookies, pixels, tags, local storage, software development kits, analytics tools, and similar technologies.

These technologies may be used for:

  • Website operation

  • Shopping-cart functionality

  • Checkout

  • Account authentication

  • Payment security

  • Fraud prevention

  • Preference storage

  • Analytics

  • Performance measurement

  • Advertising

  • Campaign attribution

  • Personalization

  • Consent and privacy-preference management

Necessary Technologies

Necessary technologies may support:

  • Website security

  • Shopping carts

  • Checkout

  • Payment processing

  • Account login

  • Fraud prevention

  • Load balancing

  • Privacy preference storage

These technologies may remain active when required to provide a service requested by the user or maintain website security.

Functional Technologies

Functional technologies may remember:

  • Language

  • Region

  • Display settings

  • Customer preferences

  • Recently viewed products

Analytics Technologies

Analytics technologies may help us understand:

  • Visitor numbers

  • Website navigation

  • Product interest

  • Technical errors

  • Website performance

  • Conversion activity

Advertising Technologies

Advertising technologies may be used to:

  • Present relevant advertising

  • Measure advertisement performance

  • Build or use advertising audiences

  • Understand campaign effectiveness

  • Limit repeated advertisements

  • Attribute purchases or visits to campaigns

The technologies actually used may change as Shopstead adds, removes, or updates Shopify features and third-party applications.

9. Cookie and Tracking Choices

Where available, you may manage optional cookies through the cookie banner or privacy settings displayed on shopstead.us.

You may also control cookies through your browser settings.

Blocking or deleting cookies may affect:

  • Account login

  • Saved preferences

  • Shopping-cart contents

  • Checkout

  • Website personalization

  • Privacy choices

  • Other website functionality

Deleting cookies or using another browser or device may reset preferences previously submitted.

Where required by applicable law, Shopstead will not activate certain optional technologies until the required consent has been obtained.

10. Global Privacy Control and Browser Signals

Global Privacy Control, or GPC, is a browser-based privacy preference signal.

Where applicable law requires recognition of a valid GPC signal and the Shopstead privacy controls are configured to receive it, we will treat the signal as a request to opt out of applicable:

  • Sale of personal information

  • Sharing of personal information

  • Targeted advertising

  • Cross-context behavioral advertising

A browser signal may apply only to the browser or device sending it unless the signal can reasonably be linked to an authenticated customer account.

You may need to enable GPC separately for each browser and device.

Other browser-based “Do Not Track” signals may not be recognized unless applicable law requires recognition or Shopstead expressly states otherwise.

11. Marketing Communications

If you subscribe to promotional communications, Shopstead may send marketing messages concerning:

  • Products

  • Promotions

  • Discounts

  • Store updates

  • Related content

You may unsubscribe from promotional emails by:

  • Using the unsubscribe link included in the email

  • Updating available account preferences

  • Contacting dazlimasty@gmail.com

Opting out of marketing does not prevent us from sending necessary non-promotional communications concerning:

  • Orders

  • Payments

  • Shipping

  • Returns

  • Refunds

  • Account security

  • Customer-support requests

  • Legal or policy notices

12. How We Disclose Personal Information

We may disclose personal information to the following categories of recipients for legitimate purposes consistent with this Privacy Policy.

Shopify

The Services are hosted and supported by Shopify.

Information submitted through the Services may be transmitted to and processed by Shopify to provide:

  • Ecommerce infrastructure

  • Website hosting

  • Checkout

  • Order management

  • Security

  • Fraud prevention

  • Analytics

  • Customer privacy tools

  • Related Shopify services

Payment Providers and Financial Institutions

We may disclose transaction information to:

  • Payment processors

  • Card networks

  • Banks

  • Digital wallet providers

  • Fraud-prevention providers

  • Chargeback-management providers

These parties may independently process information under their own privacy policies and legal obligations.

Suppliers and Fulfillment Providers

We may disclose information necessary to:

  • Confirm inventory

  • Prepare products

  • Fulfill orders

  • Create shipping documents

  • Process returns

  • Investigate product or delivery issues

Information disclosed may include your name, delivery address, telephone number, email address, ordered products, and delivery instructions.

Shipping and Logistics Providers

We may disclose information to carriers, postal services, customs brokers, freight providers, and delivery partners to:

  • Deliver orders

  • Provide tracking

  • Complete customs procedures

  • Correct addresses

  • Investigate lost or damaged shipments

  • Process returns

Website and Technology Providers

We may disclose information to providers that assist with:

  • Website operation

  • Cloud storage

  • Security

  • Error monitoring

  • Customer accounts

  • Search functionality

  • Product reviews

  • Email delivery

  • Customer support

  • Consent management

  • Data management

Analytics and Advertising Partners

Subject to applicable law and your privacy settings, we may disclose online activity, device identifiers, cookie identifiers, advertising information, and conversion data to analytics or advertising partners.

Some privacy laws may define certain advertising-related disclosures as a “sale,” “sharing,” or processing for “targeted advertising,” even when no money is exchanged for personal information.

Professional Advisers

We may disclose information to:

  • Lawyers

  • Accountants

  • Auditors

  • Insurers

  • Consultants

  • Other professional advisers

Such disclosure will be limited to information reasonably necessary for the applicable professional service.

Government and Legal Authorities

We may disclose information when reasonably believed necessary to:

  • Comply with applicable law

  • Respond to a valid court order or legal process

  • Cooperate with law enforcement

  • Investigate unlawful conduct

  • Protect legal rights

  • Protect the safety of customers or others

Business Transactions

Personal information may be disclosed in connection with an actual or proposed:

  • Merger

  • Acquisition

  • Financing

  • Reorganization

  • Sale of assets

  • Insolvency

  • Bankruptcy

  • Transfer of store ownership

Any recipient will be subject to applicable confidentiality and privacy obligations.

At Your Direction or With Your Consent

We may disclose information when you:

  • Direct us to do so

  • Request integration with a third party

  • Use a third-party login or social feature

  • Consent to a disclosure

  • Ask us to coordinate with another person or organization

13. Relationship With Shopify

Shopify provides the platform used to operate the Shopstead online store and processes personal information to provide and improve its services.

Information you submit through Shopstead may be transmitted to Shopify and processed in countries other than your country of residence.

In some circumstances, Shopify processes personal information on behalf of Shopstead as a service provider or processor.

In other circumstances, Shopify may independently determine how and why it processes certain information, including information processed through Shopify consumer services, enhanced services, fraud-prevention features, analytics, or advertising services.

When Shopify independently determines the purposes and methods of processing, Shopify’s own privacy terms apply to that processing.

Customers may review Shopify’s privacy information and submit applicable Shopify-related privacy requests through the Shopify Privacy Portal.

14. Shopify Enhanced Services

Shopstead may use optional Shopify features that combine information from interactions with Shopstead, Shopify, and other Shopify merchants to support functions such as:

  • Fraud prevention

  • Personalization

  • Product recommendations

  • Analytics

  • Advertising measurement

  • Business insights

The availability and use of these features depend on the settings enabled for the Shopstead store.

Where these features are enabled, personal information may be processed by Shopify as described in Shopify’s applicable privacy documentation and service terms.

Where required by applicable law, customers may use Shopstead’s cookie banner, data-sharing opt-out page, GPC signal, or Shopify’s privacy portal to exercise applicable choices.

15. Sale, Sharing, and Targeted Advertising

Shopstead does not sell personal information for money in the ordinary meaning of the term “sell.”

However, some U.S. privacy laws define “sale” and “sharing” broadly.

Depending on the technologies and services enabled, disclosure of identifiers, device information, website activity, or advertising information to certain advertising partners may be considered:

  • Sale of personal information

  • Sharing of personal information

  • Targeted advertising

  • Cross-context behavioral advertising

Where required by applicable law, eligible consumers may opt out of these activities through:

  • The Your Privacy Choices page

  • Available cookie or privacy controls

  • A recognized GPC signal

  • An email request to dazlimasty@gmail.com

Use the email subject:

Privacy Choices Request

16. Categories Disclosed for Business Purposes

Depending on the Services used, we may disclose the following categories of personal information for operational or business purposes:

  • Identifiers

  • Contact information

  • Customer-record information

  • Commercial and transaction information

  • Payment-related information

  • Internet or network activity

  • Approximate location

  • Customer communications

  • Submitted content

  • Inferences concerning product interests

  • Fraud and security information

Recipients may include:

  • Shopify

  • Payment providers

  • Suppliers

  • Fulfillment providers

  • Shipping carriers

  • Technology providers

  • Customer-support providers

  • Analytics providers

  • Advertising providers

  • Professional advisers

  • Government authorities

We disclose only information reasonably necessary for the applicable purpose, subject to our contractual arrangements and legal obligations.

17. Third-Party Websites and Integrations

The Services may contain links to third-party websites, applications, payment services, tracking pages, social platforms, or other online services.

Shopstead does not control the privacy, security, availability, or content of independent third-party services.

When you leave shopstead.us or intentionally interact with a third-party service, the third party may collect information under its own privacy policy.

Review the third party’s privacy and security terms before submitting personal information.

The presence of a link or integration does not necessarily mean Shopstead endorses or controls the third party.

18. Public and User-Generated Content

Reviews, photographs, comments, questions, and other content submitted to a public area may be visible to:

  • Other customers

  • Website visitors

  • Search engines

  • Social media users

  • Third-party services

Do not include addresses, telephone numbers, payment information, account credentials, or other sensitive information in publicly submitted content.

Shopstead may moderate content in accordance with its Terms of Service, but cannot guarantee that public information will not be copied or used by other parties.

19. Children’s Privacy

The Services are not directed to children under 13, and Shopstead does not knowingly collect personal information directly from children under 13.

Customers must also be legally capable of entering into a purchase agreement in their jurisdiction or use the Services under appropriate adult supervision where legally permitted.

Shopstead does not knowingly sell or share the personal information of individuals under 16 in a manner requiring affirmative authorization under applicable law.

If you believe a child has provided personal information to Shopstead without appropriate authorization, contact:

dazlimasty@gmail.com

Include enough information for us to identify and review the relevant record. Do not send unnecessary sensitive information.

20. Security

Shopstead and its service providers use reasonable administrative, technical, and organizational measures intended to protect personal information.

These measures may include:

  • Access restrictions

  • Authentication

  • Encryption in transit

  • Fraud monitoring

  • Security logging

  • Service-provider safeguards

  • Account and transaction verification

  • Incident-response procedures

No website, transmission method, storage system, or security measure can be guaranteed completely secure.

Information sent through ordinary email may not be encrypted end to end.

Customers are responsible for:

  • Keeping account credentials confidential

  • Using strong and unique passwords

  • Securing their devices

  • Logging out of shared devices

  • Reporting suspected unauthorized activity

  • Avoiding unnecessary sensitive information in email

If you believe your Shopstead account or transaction information has been compromised, contact us promptly.

21. Data Retention

Shopstead retains personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy or as otherwise required or permitted by law.

Retention periods may depend on:

  • Whether you maintain a customer account

  • Whether an order remains active

  • Transaction and payment requirements

  • Return and refund periods

  • Fraud-prevention needs

  • Tax and accounting obligations

  • Customs and shipping requirements

  • Legal limitation periods

  • Dispute resolution

  • Enforcement of agreements

  • Security and recordkeeping requirements

Different categories of information may be retained for different periods.

When information is no longer reasonably necessary, it may be:

  • Deleted

  • Anonymized

  • Aggregated

  • Isolated from ordinary use

  • Retained only as required by law or legitimate compliance needs

A deletion request does not necessarily require deletion of information that must be retained for legal, tax, transaction, fraud-prevention, security, or dispute-resolution purposes.

22. International Transfers

Shopstead operates using service providers and commercial partners that may be located in countries other than the country in which you live.

Personal information may therefore be transferred to, stored in, or processed in:

  • Hong Kong

  • The United States

  • Canada

  • Other countries where Shopify, payment providers, fulfillment providers, carriers, or service providers operate

Privacy and data-protection laws in those countries may differ from the laws in your country.

Where legally required, Shopstead or its service providers may use recognized safeguards for international transfers, including:

  • Standard contractual clauses

  • Contractual data-protection commitments

  • Adequacy decisions

  • Other legally recognized transfer mechanisms

Information may also be transferred when necessary to perform a transaction requested by you or otherwise permitted by law.

23. Your Privacy Rights

Depending on where you live and subject to applicable exceptions, you may have some or all of the following rights.

Right to Access or Know

You may have the right to request:

  • Confirmation that we process your personal information

  • Access to personal information associated with you

  • Categories of information collected

  • Sources of information

  • Purposes of processing

  • Categories of recipients

Right to Correction

You may have the right to request correction of inaccurate personal information.

Right to Deletion

You may have the right to request deletion of certain personal information.

Shopstead may retain information where permitted or required for purposes such as completing transactions, complying with law, preventing fraud, maintaining security, resolving disputes, or defending legal claims.

Right to Data Portability

You may have the right to receive certain personal information in a structured and reasonably usable format.

Right to Restrict Processing

You may have the right to request that certain processing be restricted.

Right to Object

You may have the right to object to processing based on legitimate interests or to certain direct-marketing activities.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw consent at any time.

Right to Opt Out of Sale, Sharing, or Targeted Advertising

Depending on applicable law, you may have the right to opt out of:

  • Sale of personal information

  • Sharing of personal information

  • Targeted advertising

  • Cross-context behavioral advertising

Right to Limit Certain Sensitive Information Uses

Depending on applicable law and our processing activities, you may have the right to limit certain uses or disclosures of sensitive personal information.

Right to Appeal

Residents of certain jurisdictions may have the right to appeal a decision concerning a privacy request.

Right to Complain

You may have the right to submit a complaint to a privacy or data-protection authority in your jurisdiction.

24. How to Submit a Privacy Request

To exercise an applicable privacy right, contact:

Email: dazlimasty@gmail.com

Recommended subject:

Privacy Rights Request

Include:

  • Your full name

  • The email address associated with your account or order

  • Your state or country of residence

  • The right you wish to exercise

  • Information reasonably necessary to identify the relevant record

Do not send complete payment-card numbers, passwords, or unnecessary government identification documents by ordinary email.

You may also use available privacy controls presented on shopstead.us.

25. Verification of Privacy Requests

To protect personal information from unauthorized access, disclosure, correction, or deletion, we may need to verify your identity.

Verification may involve matching information you provide with records maintained by Shopstead, such as:

  • Name

  • Email address

  • Telephone number

  • Order number

  • Shipping address

  • Account information

  • Recent transaction details

We will request only information reasonably necessary to complete verification.

We may be unable to fulfill a request if:

  • We cannot reasonably verify your identity

  • We cannot locate information associated with you

  • The request is fraudulent or abusive

  • An exception under applicable law applies

  • Shopstead is not legally required to provide the requested right

Opt-out requests involving browser-based advertising may not require the same verification as a request for specific account or transaction information.

26. Authorized Agents

Where permitted by applicable law, you may authorize another person or organization to submit a privacy request on your behalf.

We may require:

  • Written authorization

  • Proof of the agent’s identity

  • Evidence of a legally valid power of attorney

  • Direct confirmation from you

  • Verification of your identity

We may deny an agent request if adequate authority cannot be established, unless applicable law requires otherwise.

27. Appeals and Complaints

If we deny a privacy request, we will provide an explanation when required by applicable law.

Where an appeal right applies, submit an appeal to:

dazlimasty@gmail.com

Use the subject:

Privacy Request Appeal

Include:

  • Your name

  • Date of the original request

  • Description of the request

  • The decision being appealed

  • Reason you believe the decision should be reconsidered

You may also have the right to complain to the data-protection, consumer-protection, or privacy authority in your jurisdiction.

28. Non-Discrimination

Shopstead will not unlawfully discriminate or retaliate against a consumer for exercising an applicable privacy right.

We will not unlawfully:

  • Refuse products or services

  • Charge a different price

  • Provide a materially different level of service

  • Retaliate against a customer

  • Suggest that a customer will receive inferior treatment

This does not prevent lawful differences permitted by applicable law or necessary to provide a feature requested by the customer.

29. California Privacy Notice

This section supplements the remainder of this Privacy Policy for California residents where the California Consumer Privacy Act, as amended, applies to Shopstead and the relevant processing activity.

Categories of Personal Information

Within the applicable statutory period, Shopstead may have collected the following categories:

  • Identifiers

  • Customer-record information

  • Commercial information

  • Internet or electronic network activity

  • Approximate geolocation

  • Audio, visual, or electronic communications voluntarily submitted

  • Professional or employment-related information provided by business customers

  • Inferences concerning product interests

  • Sensitive personal information used for permitted transactional or security purposes

The specific information collected depends on your interaction with the Services.

Purposes of Collection and Use

We may collect and use these categories for:

  • Providing the Services

  • Processing orders

  • Accepting payments

  • Shipping products

  • Customer support

  • Returns and refunds

  • Security and fraud prevention

  • Analytics

  • Advertising

  • Legal compliance

  • Business administration

Categories of Recipients

Personal information may be disclosed to:

  • Shopify

  • Payment processors

  • Suppliers

  • Fulfillment providers

  • Carriers

  • Technology providers

  • Analytics providers

  • Advertising providers

  • Professional advisers

  • Government authorities

  • Parties involved in a business transaction

Sale and Sharing

Shopstead does not sell personal information for money.

Certain advertising or analytics disclosures may be considered a sale or sharing under California law.

Eligible consumers may submit an opt-out request through the Your Privacy Choices page, available website privacy controls, a recognized GPC signal, or by contacting dazlimasty@gmail.com.

Sensitive Personal Information

Shopstead does not intentionally use or disclose sensitive personal information to infer characteristics about consumers for unrelated purposes.

Sensitive information may be used for permitted purposes such as payment processing, account access, order fulfillment, security, fraud prevention, and legal compliance.

California Rights

Subject to applicable conditions and exceptions, California residents may have the right to:

  • Know

  • Access

  • Correct

  • Delete

  • Obtain information about categories and recipients

  • Opt out of sale or sharing

  • Limit certain sensitive-information uses

  • Receive equal service and pricing

30. Other U.S. State Privacy Rights

Residents of certain U.S. states may have rights under applicable state privacy laws.

Depending on the state and whether the law applies to Shopstead, these may include rights to:

  • Access personal information

  • Correct inaccuracies

  • Delete personal information

  • Obtain a portable copy

  • Opt out of sale

  • Opt out of targeted advertising

  • Opt out of certain profiling

  • Appeal a denied request

  • Receive information about data practices

These rights are not absolute and may be subject to statutory exceptions, identity verification, and applicability thresholds.

Shopstead will respond to valid requests within the time required by applicable law.

31. European Economic Area, United Kingdom, and Switzerland

Individuals in the European Economic Area, United Kingdom, or Switzerland may have rights under applicable data-protection law, including rights to:

  • Access

  • Correction

  • Deletion

  • Restriction

  • Objection

  • Data portability

  • Withdraw consent

  • Complain to a supervisory authority

Where applicable, Shopstead processes personal information based on contract, legitimate interests, consent, legal obligations, or other recognized legal bases described in this policy.

If you believe your privacy rights have been violated, you may contact Shopstead or the competent supervisory authority in your place of residence.

32. Nevada Privacy Rights

Where applicable, eligible Nevada residents may submit a request to opt out of certain covered sales of personal information.

Shopstead does not sell covered information for monetary consideration in the ordinary meaning of a sale.

Requests may be submitted to:

dazlimasty@gmail.com

Use the subject:

Nevada Privacy Request

33. Financial Incentives and Loyalty Programs

Shopstead does not currently provide a financial incentive in exchange for personal information unless a separate notice expressly describes the program and its terms.

If Shopstead introduces a loyalty, rewards, discount, or financial-incentive program involving personal information, we will provide any notice and obtain any consent required by applicable law.

34. Privacy of Business Contacts

Information relating to employees, representatives, purchasers, and contacts of business customers may be processed to:

  • Manage commercial relationships

  • Process orders

  • Communicate with the organization

  • Provide customer support

  • Maintain records

  • Prevent fraud

  • Comply with legal obligations

Privacy rights may apply to business-contact information depending on the jurisdiction.

35. Automated Decision-Making

Shopstead and its service providers may use automated systems to support:

  • Fraud detection

  • Payment verification

  • Security

  • Product recommendations

  • Advertising

  • Order-risk assessment

Automated results may influence whether an order is held for review, requires additional verification, or is declined.

Where applicable law provides rights concerning automated decision-making or profiling, eligible individuals may submit a request using the contact information in this policy.

36. Data Breach and Security Incidents

If Shopstead becomes aware of a security incident involving personal information, we may:

  • Investigate the incident

  • Contain the issue

  • Coordinate with Shopify and service providers

  • Preserve relevant evidence

  • Notify affected individuals

  • Notify regulators or authorities

Notifications will be made when and in the manner required by applicable law.

37. Changes to This Privacy Policy

Shopstead may update this Privacy Policy to reflect changes in:

  • Store operations

  • Products and services

  • Shopify features

  • Third-party applications

  • Advertising tools

  • Privacy practices

  • Legal requirements

  • Security procedures

The revised policy will be posted on this page with an updated revision date.

Where required by applicable law, we will provide additional notice or obtain consent for material changes.

The policy applicable to an earlier transaction will generally remain the version in effect at the relevant time, except where a later change is required by law or provides greater protection.

38. Contact Information

For privacy questions, complaints, or requests, contact:

Store Name: Shopstead

Website: shopstead.us

Email: dazlimasty@gmail.com

Phone: +1 (936) 260-5549

Customer Support Hours:

Monday–Friday
10:00 AM–6:00 PM
Hong Kong Time, UTC+8

Business Correspondence Address:

Unit 809, 8/F, Brill Plaza
84 To Kwa Wan Road
To Kwa Wan, Hong Kong

The address above is a business correspondence address. It is not a physical retail store, walk-in customer service center, customer pickup location, fulfillment warehouse, or automatically authorized return address.

For faster processing, privacy requests should be submitted by email using the subject line:

Privacy Rights Request

We will respond within the period required by applicable law.