Privacy Policy

Last updated: June 30, 2026

TyStrap runs this online store and the related website, content, features, products, and services to deliver a curated shopping experience to our customers (collectively, the "Services"). Our store is powered by Shopify. This Privacy Policy explains what personal information we collect, how we use it, and who we share it with when you interact with our Services. In the event of any conflict between this Privacy Policy and our Terms of Service, this Privacy Policy takes precedence in matters concerning the handling of your personal information.

By using or browsing any part of the Services, you confirm that you've reviewed this Privacy Policy and understand how your information is handled.

What We Mean by "Personal Information"

When we refer to "personal information," we mean any data that identifies you — or that could reasonably be tied back to you. Information that has been anonymized or stripped of identifying details is not considered personal information under this policy.

The types of personal information we may process depend on how you engage with us, where you live, and what applicable laws require or permit. These may include:

Identifying details — your name, postal address, billing and shipping addresses, phone number, and email address.
Payment-related data — credit and debit card numbers, financial account details, payment method, transaction records, and confirmation data.
Account credentials — username, password, security questions, preferences, and settings.
Shopping activity — products you browse, add to cart or wishlist, purchase, return, exchange, or cancel.
Communications — anything you send us when reaching out (for example, a customer support request).
Technical information — your device type, browser, network connection, IP address, and other unique identifiers.
Behavioral data — how you navigate and interact with the Services.

Where Your Information Comes From

We may receive personal information from several sources:

From you directly — when you create an account, place an order, contact our team, or otherwise share information with us.
Automatically — through cookies, tracking technologies, and your device when you visit our site or use our Services.
From service providers — when we partner with companies that handle parts of our operations on our behalf.
From business partners and other third parties.

How We Use Your Information

Depending on which Services you use and how you interact with us, we may use your personal information for the following reasons:

To run and improve our Services. This includes fulfilling your orders, processing payments, sending order updates, managing your account, arranging shipping, handling returns and exchanges, letting you leave reviews, and tailoring your shopping experience.
For marketing and advertising. We may send promotional messages by email, SMS, or postal mail, and display ads on our site or other websites based on your browsing and purchase history.
For security and fraud prevention. This covers authenticating your account, detecting suspicious activity, securing payments, and protecting our customers and our business. You're responsible for keeping your account credentials private — please never share them.
For customer support. We use your information to respond to your inquiries, resolve issues, and maintain a healthy relationship with you.
For legal compliance. This includes meeting our legal obligations, responding to lawful requests from authorities, and enforcing our terms or policies.

Who We Share Information With

In specific situations, we may share your personal information with third parties for legitimate business reasons, including:

Shopify and other vendors that help us run the store — for example, IT services, payment processing, analytics, support, cloud storage, fulfillment, and shipping partners.
Business and marketing partners who help us advertise and reach you with relevant offers. For instance, we use Shopify-powered tools that enable personalized advertising across the web. These partners follow their own privacy policies. Depending on your location, you may have the right to opt out of having your data used this way.
At your direction — for example, when you choose to ship a gift to someone else, or when you connect a social login.
Within our corporate structure — including affiliates and subsidiaries.
In specific legal or business scenarios — such as mergers or acquisitions, in response to subpoenas or government requests, to enforce our terms, or to protect ourselves, our customers, or third parties.

How Shopify Fits In

Our Services run on Shopify's platform. As part of providing the Services to you, Shopify collects and processes data about how you use our store. The information you submit may be transferred to Shopify and its partners, including third parties located in countries outside your own. We also rely on certain Shopify-enhanced features that incorporate data from your interactions with our store, other Shopify-powered merchants, and Shopify itself. For some of these activities, Shopify is the data controller and handles requests related to those activities directly. You can learn more about Shopify's practices through their Consumer Privacy Policy.

External Sites and Links

Our Services may include links to third-party sites or platforms. If you click through to those external sites, we recommend reviewing their privacy policies before sharing any information. We don't control and aren't responsible for the privacy practices, content, or security of those websites. If you share information publicly — for example on a third-party social platform — it may be accessible to other users beyond our control. Linking to a third-party site is not an endorsement of that site or its operators unless we explicitly say so.

Children's Privacy

Our Services aren't designed for children, and we don't knowingly collect personal information from anyone under the age of majority in their jurisdiction. If you're a parent or guardian and believe your child has shared personal information with us, please contact us so we can delete it. We also do not knowingly "sell" or "share" (as defined by applicable laws) personal information from anyone under the age of 16.

Data Security and Retention

We work hard to protect your data, but no system is completely secure. We can't guarantee absolute protection during transmission. Please avoid sending sensitive information through unsecured channels.

How long we retain your personal information depends on factors like whether we need it to maintain your account, fulfill ongoing services, comply with legal obligations, resolve disputes, or enforce our contracts.

Your Rights

Depending on your country or state of residence, you may be entitled to some or all of the following rights regarding your personal information. These rights are not absolute and may be subject to legal exceptions.

Access — the right to ask what personal data we hold about you.
Deletion — the right to request that we delete your data.
Correction — the right to ask us to fix inaccurate information.
Portability — the right to receive a copy of your data and have it transferred elsewhere, subject to certain conditions.
Opt-out of sale, sharing, or targeted advertising — depending on where you live, you may have the right to opt out of data being "sold" or "shared," or used for targeted advertising as defined by local laws. If you visit our site with the Global Privacy Control signal enabled, we'll automatically treat it as an opt-out request for that browser. You can learn more at https://globalprivacycontrol.org/. We don't currently honor other "Do Not Track" signals.
Email preferences — you can unsubscribe from promotional emails at any time using the link at the bottom of any marketing message. We may still send transactional emails about your account or orders.

If you live in the UK or the European Economic Area, you may also have:

The right to object to or restrict processing — for certain purposes.
The right to withdraw consent — where processing is based on your consent. Withdrawal doesn't affect the legality of processing done before you withdrew.

To exercise any of these rights, contact us using the details at the bottom of this policy. To learn more about how Shopify processes your information, visit https://privacy.shopify.com/en.

We won't retaliate against you for exercising any of these rights. We may need to verify your identity before fulfilling a request, as required by applicable law. You can also designate an authorized agent to act on your behalf — we'll require proof of that authorization and may verify your identity directly with you.

Filing a Complaint

If you have concerns about how we handle your personal data, please reach out using the contact details below. Depending on where you live, you may also have the right to appeal our response, or to file a complaint with your local data protection authority. EU residents can find a list of authorities through the European Data Protection Board.

International Data Transfers

Your personal information may be transferred, stored, or processed outside the country where you live.

When we transfer personal information out of the European Economic Area or the United Kingdom, we rely on legally recognized mechanisms such as the European Commission's Standard Contractual Clauses (or their UK equivalent), unless the destination has been deemed to offer an adequate level of data protection.

Updates to This Policy

We may revise this Privacy Policy from time to time — to reflect changes in our practices, legal updates, or for operational reasons. Any updated version will be published on this page with a new "Last updated" date. We'll notify you of significant changes as required by applicable law.

Contact Us

If you have questions about our privacy practices, this policy, or you'd like to exercise any of your rights, please email us at info@tystrap.com. For the purposes of applicable data protection law, TyStrap acts as the data controller of your personal information.