Privacy Policy

Last updated: March 16, 2026

This Privacy Policy describes how Posh Heirlooms (the “Site”, “we”, “us”, or “our”) collects, uses, and discloses your personal information when you visit, use our services, make a purchase from poshheirlooms.com, or otherwise communicate with us regarding the Site (collectively, the “Services”).

For purposes of this Privacy Policy, “you” and “your” means you as the user of the Services, whether you are a customer, website visitor, or another individual whose information we have collected pursuant to this Privacy Policy.

Please read this Privacy Policy carefully.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for operational, legal, or regulatory reasons.

We will post the revised Privacy Policy on the Site, update the “Last updated” date, and take any other steps required by applicable law.

How We Collect and Use Your Personal Information

To provide the Services, we collect and have collected over the past 12 months personal information about you from a variety of sources, as described below.

The information that we collect and use varies depending on how you interact with us.

In addition to the specific uses set out below, we may use information we collect about you to:

  • communicate with you

  • provide, improve, and maintain the Services

  • comply with legal obligations

  • enforce applicable terms of service

  • protect or defend the Services, our rights, and the rights of our users or others

What Personal Information We Collect

The types of personal information we obtain about you depend on how you interact with our Site and use our Services.

When we use the term “personal information”, we are referring to information that identifies, relates to, describes, or can be associated with you.

Information We Collect Directly from You

Information that you directly submit to us through our Services may include:

  • Contact details including your name, address, phone number, and email

  • Order information including your name, billing address, shipping address, payment confirmation, email address, and phone number

  • Account information including your username, password, security questions, and other information used for account security purposes

  • Customer support information including the information you choose to include in communications with us

Some features of the Services may require you to directly provide us with certain information. You may choose not to provide this information, but doing so may prevent you from using certain features.

Information We Collect About Your Usage

We may automatically collect certain information about your interaction with the Services (“Usage Data”).

This may include:

  • device information

  • browser information

  • network connection information

  • IP address

  • information regarding your interaction with the Services

We may collect this information using cookies, pixels, and similar technologies.

Information We Obtain from Third Parties

We may obtain information about you from third parties, including vendors and service providers who collect information on our behalf, such as:

  • Shopify, which supports our Site and Services

  • Payment processors, who collect payment information such as bank account details, credit or debit card information, and billing address in order to process your payment and fulfill your orders

  • Tracking and analytics providers, including those using cookies, pixels, web beacons, software development kits, third-party libraries, and similar technologies

Any information we obtain from third parties will be treated in accordance with this Privacy Policy.

How We Use Your Personal Information

Providing Products and Services

We use your personal information to provide you with the Services and perform our contract with you, including to:

  • process your payments

  • fulfill your orders

  • send notifications related to your account, purchases, returns, exchanges, or other transactions

  • create, maintain, and manage your account

  • arrange for shipping

  • facilitate returns and exchanges

We may also enhance your shopping experience by enabling Shopify to match your account with other Shopify services you choose to use.

Marketing and Advertising

We may use your personal information for marketing and promotional purposes, including to send you marketing communications by:

  • email

  • text message

  • postal mail

We may also use your personal information to show you advertisements for products or services on our Site and other websites.

If you are an EEA resident, the legal basis for this processing is our legitimate interest under Art. 6 (1) (f) GDPR.

Security and Fraud Prevention

We use your personal information to detect, investigate, or take action regarding possible fraudulent, illegal, or malicious activity.

If you create an account, you are responsible for keeping your login credentials secure.

If you are an EEA resident, the legal basis for this processing is our legitimate interest under Art. 6 (1) (f) GDPR.

Communicating with You and Improving Services

We use your personal information to provide customer support and improve our Services.

If you are an EEA resident, the legal basis for this processing is our legitimate interest under Art. 6 (1) (f) GDPR.

Cookies

Like many websites, we use Cookies on our Site.

For specific information about the Cookies Shopify uses, please visit:
https://www.shopify.com/legal/cookies

We use Cookies to:

  • power and improve our Site and Services

  • remember your actions and preferences

  • run analytics

  • better understand user interaction with the Services

We may also allow third parties and service providers to use Cookies on our Site to tailor services, products, and advertising.

Most browsers accept Cookies automatically, but you can set your browser to remove or reject Cookies. Please note that doing so may negatively affect certain features and functionality of the Services.

Our website also recognizes the Global Privacy Control (GPC) signal, which enables you to opt out of certain uses or disclosures of your information.

To learn more, visit:
https://globalprivacycontrol.org/

Other than GPC, we do not recognize other “Do Not Track” signals.

How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties for purposes consistent with this Privacy Policy, including:

  • with vendors and third parties who perform services on our behalf

  • with business and marketing partners

  • when you direct or request us to disclose information

  • with affiliates within our corporate group

  • in connection with a merger, sale, bankruptcy, or similar business transaction

  • to comply with legal obligations

  • to enforce our terms

  • to protect our rights, users, or others

Categories of Personal Information Disclosed

Over the past 12 months, we may have disclosed the following categories of personal information:

  • Identifiers such as contact details and account information

  • Customer records information such as billing and shipping details

  • Commercial information such as order history, shopping activity, and support interactions

  • Internet or similar network activity such as Usage Data

These may be disclosed to:

  • vendors and service providers

  • payment processors

  • fulfillment partners

  • customer support providers

  • analytics providers

  • business and marketing partners

  • affiliates

We do not use or disclose sensitive personal information without your consent or for the purpose of inferring characteristics about you.

Sale, Sharing, and Targeted Advertising

With your consent, we may share personal information for advertising and marketing activities.

Over the preceding 12 months, we may have “sold” or “shared” personal information as defined by applicable law for advertising and marketing purposes.

This may include:

  • Identifiers such as name, email address, and phone number

  • Commercial information such as records of products or services purchased

  • Usage Data

Recipients may include business and marketing partners.

Third-Party Websites and Links

Our Site may provide links to third-party websites or platforms.

If you choose to visit these sites, you should review their privacy policies and terms. We are not responsible for the privacy, security, accuracy, or reliability of third-party websites or platforms.

Children’s Data

The Services are not intended for children, and we do not knowingly collect personal information from children.

If you believe a child has provided us with personal information, please contact us so we can delete it.

As of the effective date of this Privacy Policy, we do not have actual knowledge that we “share” or “sell” personal information of individuals under 16 years of age.

Security and Retention of Your Information

No security measures are perfect or impenetrable, and we cannot guarantee absolute security.

We recommend that you do not use insecure channels to communicate sensitive or confidential information.

We retain personal information for as long as necessary to:

  • maintain your account

  • provide the Services

  • comply with legal obligations

  • resolve disputes

  • enforce agreements and policies

Your Rights

Depending on where you live, you may have some or all of the following rights:

  • Right to Access / Know

  • Right to Delete

  • Right to Correct

  • Right of Portability

  • Right to Opt Out of Sale, Sharing, or Targeted Advertising

  • Right to Restrict Processing

  • Right to Withdraw Consent

  • Right to Appeal

  • Right to Manage Communication Preferences

You may exercise these rights by contacting us using the contact details below.

We may need to verify your identity before responding to your request.

We will not discriminate against you for exercising your rights.

Complaints

If you have complaints about how we process your personal information, please contact us using the details below.

If you are not satisfied with our response, you may have the right to appeal or lodge a complaint with your local data protection authority.

For EEA residents, a list of supervisory authorities is available through the European Union’s official resources.

International Users

Please note that we may transfer, store, and process your personal information outside the country in which you live.

If we transfer your personal information outside Europe, we will rely on recognized transfer mechanisms such as the European Commission’s Standard Contractual Clauses or equivalent lawful safeguards, unless the destination country has been recognized as providing an adequate level of protection.

Contact

If you have any questions about this Privacy Policy, our privacy practices, or if you would like to exercise any of your rights, please contact us at:

Email: poshheirlooms@gmail.com

For the purposes of applicable data protection laws, unless otherwise stated, Posh Heirlooms is the data controller of your personal information.