Privacy Policy

Privacy Policy

This policy explains what personal information Elio, operated by [LEGAL ENTITY NAME], collects, why, and what you can do about it. Last updated [DATE].

What we collect

  • Order information: name, shipping and billing address, email, phone number, and payment confirmation. We never see or store full card numbers — payments are handled by Shopify Payments and other processors.
  • Account information: email and password if you create an account, plus saved addresses and order history.
  • Marketing information: your email address if you join the drop list, and whether you open or click our emails.
  • Device and usage information: IP address, browser, device type, pages viewed and referring site, collected through cookies and similar technologies.

Why we use it

To process and ship your order, handle returns and warranty claims, prevent fraud, answer your questions, send marketing you've asked for, and understand how the site is used so we can improve it.

Who we share it with

Service providers who need it to do their job: Shopify (store and checkout), payment processors, shipping carriers, our email platform, and analytics and advertising providers. We also share information where the law requires it. We do not sell your personal information.

Advertising and analytics

We use cookies and pixels from advertising and analytics platforms to measure campaigns and show relevant ads. You can opt out of personalised advertising through your browser settings and through those platforms' own opt-out tools.

How long we keep it

Order records are kept as long as tax and accounting law requires. Marketing data is kept until you unsubscribe. Analytics data is kept in aggregate.

Your rights

Depending on where you live — including under the CCPA/CPRA in California and PIPEDA in Canada — you can ask us for a copy of your data, ask us to correct or delete it, ask us to stop using it for marketing, and appeal a decision we make. Email [SUPPORT EMAIL] and we'll respond within the timeframe the law requires. We won't discriminate against you for exercising these rights.

Children

This site isn't directed at children under 13 and we don't knowingly collect their information. If you believe a child has given us data, email us and we'll delete it.

Security

We use encryption in transit and restrict internal access to personal data. No system is perfectly secure, so we can't guarantee absolute security.

Contact

[LEGAL ENTITY NAME], [REGISTERED ADDRESS]. Email: [SUPPORT EMAIL].

Draft for review. Have a qualified lawyer check this against CCPA/CPRA, PIPEDA and any state privacy laws that apply to you before launch.