Personal Information We Collect or Process

"Personal information" refers to any details that directly identify you or can reasonably be linked to you. Personal information does not include anonymous or de-identified data.

Depending on how you interact with our store, we may collect or process the following categories of personal information:

• Contact Details: Full name, physical billing address, shipping address, phone number, and email address.
• Financial & Payment Information: Credit card, debit card, or third-party payment processor details, transaction confirmations, and billing information. (Note: Payment details are securely processed by encrypted third-party payment gateways; we do not store raw payment credentials on our servers.)
• Account Information: Usernames, passwords, security questions, and shopping preferences.
• Transaction History: Items viewed, cart additions, wishlist entries, completed purchases, returns, exchanges, and customer service history.
• Customer Communications: Feedback, support inquiry messages, and communication history sent to our support channels.
• Device & Technical Data: IP address, browser type, operating system, network connection, device identifiers, and security logs.
• Usage Data: Information regarding how and when you navigate our site, pages visited, and interaction timestamps.

How We Collect Personal Information

We collect personal information through the following methods:

• Directly From You: When you place an order, create an account, complete checkout, sign up for notifications, or contact customer support.
• Automated Technologies: Collected automatically via your device when you visit our website through secure cookies, web beacons, and similar tracking tools.
• Third-Party Partners & Service Providers: Information received from platform providers, analytics providers, payment processors, and shipping/fulfillment partners.

How We Use Your Personal Information

We use your personal information for transparent, legitimate business purposes, including:

• Fulfilling Orders & Providing Services: Processing payments, managing accounts, shipping products to your delivery address, facilitating returns/refunds, and sending transactional notifications.
• Customer Support: Resolving inquiries, managing order updates, and maintaining reliable service channels.
• Marketing & Advertising: Sending promotional emails or text communications (only where consented to) and displaying relevant ads. You may opt out of marketing communications at any time.
• Fraud Prevention & Security: Authenticating user accounts, detecting unauthorized or fraudulent transactions, protecting site integrity, and enforcing secure checkout via SSL encryption.
• Legal Compliance: Complying with applicable legal obligations, tax regulations, law enforcement requests, or court orders.

How We Share & Disclose Personal Information

We do not sell your personal information. We disclose personal data only to trusted service providers necessary to operate our store:

• E-Commerce & Infrastructure Providers: Hosted service providers (Shopify) and cloud infrastructure tools.
• Payment Processors & Logistics: Payment gateways, payment networks, delivery couriers, and third-party logistics (3PL) providers to ensure physical delivery of your purchases.
• Marketing & Analytics Partners: Analytics providers (such as Google Analytics) and marketing networks to analyze site performance and deliver targeted promotions.
• Legal & Corporate Requirements: When required by law, subpoena, regulatory authority, or to protect the safety, rights, and property of Beau & Arrow, our users, or the public.

Relationship with Shopify

Our storefront is hosted by Shopify Inc., which provides the underlying e-commerce technology allowing us to present products and complete transactions.

• Data Processor Role: For order fulfillment, payment processing, and account administration, Shopify acts as our primary data processor, processing customer data strictly under our direction.
• Enhanced Features & Joint Responsibilities: For specific platform-level tools—such as global fraud detection, network security analytics, and cross-merchant advertising capabilities—Shopify may act as an independent data controller.

Your data (including billing, shipping, and device information) is securely transmitted through Shopify’s infrastructure. To learn more about how Shopify manages and protects personal data across its ecosystem, review the Shopify Consumer Privacy Policy . If you wish to submit a data request regarding information directly controlled by Shopify, you may use the Shopify Privacy Portal .

Cookies and Tracking Technologies

Our website uses cookies, web beacons, and pixels to ensure website functionality, remember shopping cart items, analyze user traffic, and optimize marketing campaigns.

You can control or disable cookies through your web browser settings. Please note that disabling essential cookies may impact store functionality or prevent checkout completion.

Third-Party Links & External Sites

Our website may contain links to external third-party websites or social platforms (such as our official Facebook page: facebook.com/beauandarrowresale ). We do not control and are not responsible for the privacy practices, safety, or content of third-party websites. We encourage you to read the privacy statements of any external service you visit.

Children's Privacy

Our Services are intended strictly for general audiences and are not directed to children. We do not knowingly collect personal information from individuals under the age of majority in their jurisdiction. If you are a parent or legal guardian and believe your child has submitted personal information to us, please contact us immediately to request deletion.

Data Retention

We retain personal information only for as long as necessary to fulfill the purposes outlined in this policy, including satisfying legal, accounting, dispute resolution, or tax obligations.

• Order and Transaction Records: Kept for up to 7 years to comply with standard tax and financial record-keeping laws.
• Customer Support Records: Kept for up to 3 years to handle follow-up inquiries and dispute resolution.
• Marketing Preferences: Retained until you opt out or request data deletion.

Data Security & HTTPS Protection

We maintain physical, technical, and administrative security measures designed to safeguard your personal data. All checkout transactions and data transfers are protected using Secure Sockets Layer (SSL) encryption technology. However, no internet transmission or electronic storage method can be guaranteed 100% secure.

Your Privacy Rights and Choices

Depending on your geographic location, you may have the following legal rights regarding your personal information:

• Right to Access / Know: Request a copy of the personal information we hold about you.
• Right to Correction: Request updates or corrections to inaccurate personal data.
• Right to Erasure / Deletion: Request the deletion of your personal data, subject to legal retention exceptions.
• Right to Opt-Out: Opt out of targeted marketing, behavioral advertising pixels, or email lists at any time using the "Unsubscribe" link in our emails or by contacting us.
• Right to Non-Discrimination: We will not discriminate or deny services to any customer exercising their legal privacy rights.

To exercise any of these rights, please submit a request using our business contact details listed below.

Global Data Transfers

Beau & Arrow processes customer orders globally. Personal data collected through our store may be transferred, stored, and processed across international borders, including on servers located in the United States and Canada where our cloud hosting providers maintain facilities.

Data protection standards in host countries may differ from those in your jurisdiction. When transferring personal data outside of the European Economic Area (EEA), the United Kingdom (UK), or Switzerland, we rely on legally recognized cross-border transfer mechanisms, such as Standard Contractual Clauses (SCCs) approved by the European Commission or official UK international data transfer addendums, ensuring your data receives equivalent levels of protection wherever it is processed.

Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy to reflect changes in legal requirements, operational practices, or platform integrations. Updates will be published directly on this page with an updated "Last updated" date.