プライバシーポリシー
Worn Within (“Worn Within,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and otherwise process personal information when you visit getwornwithin.com, purchase from us, contact us, or otherwise interact with our services (collectively, the “Services”).
Please read this policy carefully. If you do not agree with it, please do not use the Services. Depending on where you live, you may have additional privacy rights described below.
1. Personal Information We Collect
The information we collect depends on how you interact with us and may include:
- Contact information: name, email address, telephone number, billing address, shipping address, and other delivery details.
- Order and transaction information: products viewed or purchased, order history, returns, refunds, discounts, gift messages, and customer service communications.
- Payment information: payment method and transaction details. Complete payment card information is processed by Shopify and our payment providers rather than stored directly by us.
- Account information: login details, saved preferences, and information associated with your customer account.
- Communications: messages, inquiries, feedback, survey responses, reviews, photographs, and other content you submit to us.
- Device and usage information: IP address, browser and device type, operating system, pages viewed, links clicked, referring URL, approximate location, session activity, and cookie or pixel identifiers.
- Marketing preferences: email or SMS subscription status, advertising preferences, consent records, and cookie choices.
- Fraud and security information: information used to verify transactions, protect accounts, prevent abuse, and comply with law.
2. How We Collect Personal Information
We may collect personal information:
- directly from you when you place an order, create an account, contact us, or subscribe;
- automatically through cookies, pixels, logs, and similar technologies;
- from Shopify and service providers that support our store;
- from payment processors, shipping carriers, fraud-prevention providers, and customer support tools;
- from advertising, analytics, and social media partners, subject to your choices and applicable law; and
- from publicly available sources where permitted by law.
3. How We Use Personal Information
We may use personal information to:
- provide, operate, personalize, and improve the Services;
- process payments, fulfill orders, arrange delivery, and handle returns or refunds;
- create and maintain customer accounts;
- respond to inquiries and provide customer support;
- send transactional messages about orders, accounts, and policy changes;
- send marketing communications where permitted and honor opt-out choices;
- measure website performance and understand how customers use our Services;
- personalize content, product recommendations, and advertising where permitted;
- detect fraud, secure transactions, prevent misuse, and protect our legal rights;
- comply with legal, tax, accounting, regulatory, and recordkeeping obligations; and
- carry out other purposes disclosed to you or undertaken with your consent.
4. Legal Bases for Processing
Where laws such as the UK GDPR or EU GDPR apply, we process personal information under one or more of the following legal bases: performance of a contract with you, compliance with legal obligations, our legitimate interests or those of others, and your consent. Our legitimate interests may include operating and improving our business, securing the Services, preventing fraud, understanding customer needs, and marketing our products, provided those interests are not overridden by your rights.
5. How We Disclose Personal Information
We may disclose personal information to:
- Shopify: our ecommerce platform provider, which processes information needed to host and operate our store and may process certain information for its own purposes as described in the Shopify Consumer Privacy Policy.
- Service providers: payment processors, shipping and fulfillment partners, website hosting, customer support, email and SMS providers, analytics, fraud prevention, security, and professional advisers.
- Advertising and business partners: where permitted by law and subject to your consent or opt-out rights.
- Authorities and legal recipients: when reasonably necessary to comply with law, enforce our agreements, respond to valid legal process, or protect people, property, and rights.
- Business transaction recipients: in connection with a merger, financing, acquisition, restructuring, sale, or transfer of all or part of our business, subject to applicable safeguards.
- Other recipients: when you direct us to disclose information or provide consent.
We do not disclose personal information to third parties in exchange for money. However, some privacy laws may define certain analytics, personalized advertising, or cross-context behavioral advertising activities as a “sale,” “sharing,” or “targeted advertising.” Where applicable, you may opt out as described in the “Your Privacy Rights and Choices” section.
6. Shopify and Enhanced Services
Our store is powered by Shopify. Shopify collects and processes personal information when you visit or make a purchase from our store. Depending on our Shopify settings, Shopify may use customer information together with information from other merchants to provide enhanced fraud prevention, analytics, personalization, and advertising services. Your consent and opt-out choices are applied as supported by Shopify’s customer privacy tools. You can learn more and exercise rights directly with Shopify through the Shopify Privacy Portal.
7. Cookies and Similar Technologies
We and our partners, including Shopify, use cookies, pixels, local storage, and similar technologies to operate the site, remember preferences, secure transactions, perform analytics, personalize your experience, and—where permitted—show relevant advertising.
Some technologies are necessary for the Services to function. Others are optional and are used only as permitted by applicable law. You can manage available choices through our cookie banner or “Cookie Preferences” link, where displayed. Browser controls may also allow you to block or delete cookies, but doing so can affect site functionality.
8. Marketing Communications
You may unsubscribe from marketing emails at any time by using the unsubscribe link in the message. You may opt out of marketing text messages by following the instructions in the message, where applicable. We may still send non-marketing communications, including order confirmations, shipping updates, account notices, and customer service responses.
9. Your Privacy Rights and Choices
Depending on your location and subject to applicable exceptions, you may have the right to:
- request access to personal information we hold about you;
- request correction of inaccurate information;
- request deletion of personal information;
- receive a portable copy of certain information;
- restrict or object to certain processing;
- withdraw consent where processing is based on consent;
- opt out of targeted advertising or the sale or sharing of personal information;
- appeal a decision we make about a privacy request, where applicable; and
- not receive discriminatory treatment for exercising a privacy right.
To make a request, email support@getwornwithin.com. We may need to verify your identity before completing a request. Authorized agents may submit requests where permitted by law, but we may require proof of authorization and identity verification.
Where available, you may also use our “Your Privacy Choices,” “Do Not Sell or Share My Personal Information,” or data-sharing opt-out link. We process browser-based opt-out preference signals, such as Global Privacy Control, where required by applicable law and supported by our systems.
10. International Data Transfers
We, Shopify, and our service providers may process personal information in countries other than the country where you live. Those countries may have different data protection laws. Where required, we use recognized transfer mechanisms and contractual safeguards designed to protect personal information during international transfers.
11. Data Retention
We retain personal information for as long as reasonably necessary for the purposes described in this policy, including to provide the Services, maintain transaction and tax records, resolve disputes, enforce agreements, prevent fraud, and comply with legal obligations. Retention periods vary depending on the type of information, the nature of our relationship with you, and applicable law.
12. Data Security
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please use a unique password and notify us if you believe your account or information has been compromised.
13. Children’s Privacy
Our Services are not directed to children under 13, or a higher minimum age where required by local law. We do not knowingly collect personal information from children in violation of applicable law. If you believe a child has provided personal information to us, contact us so we can review and, where appropriate, delete it.
14. Third-Party Websites and Services
Our Services may link to websites, apps, or platforms operated by third parties. Their privacy policies and practices apply to information they collect. We are not responsible for third-party privacy practices and encourage you to review their notices before providing information.
15. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our practices, technology, legal obligations, or Services. We will post the updated policy on this page and revise the “Last updated” date. Where required, we will provide additional notice or request consent.
16. Contact Us
For questions, requests, or complaints about privacy, contact:
Worn Within
Email: support@getwornwithin.com
If you are not satisfied with our response, you may have the right to lodge a complaint with the data protection or privacy authority in your place of residence.