Privacy policy

GDPR/CCPA draft. Generate the final version from Shopify Admin → Settings → Policies (Shopify template) and merge the pixel sections below. To be reviewed by a legal advisor.

Data controller

[Company name], [Street, City, Country], email privacy@hooppup.com.

Data we collect and why

• Order data (name, address, email, phone): to fulfil the contract, ship your order and provide support. Legal basis: contract.
• Payment data: processed directly by Shopify Payments / Stripe; we never store card details.
• Browsing data and cookies: analytics and marketing (TikTok Pixel, Meta Pixel, Shopify Analytics). Legal basis: consent, which you can withdraw from the cookie banner.
• Email/SMS marketing (Klaviyo): only with your consent; unsubscribe from any message.

Recipients

Shopify International Ltd (platform and payments), carriers and partner warehouse (shipping), Klaviyo (email), TikTok Technology Ltd and Meta Platforms Ireland (advertising). Some providers may process data outside the EEA under standard contractual clauses.

Retention

Order data: 10 years (tax obligations). Marketing data: until consent is withdrawn. Cookies: see Cookie policy.

Your rights

Access, rectification, erasure, restriction, portability, objection and the right to lodge a complaint with your supervisory authority (GDPR Art. 15–22). California residents have the rights set out in the CCPA/CPRA, including the right to know, delete and opt out of the sale/sharing of personal information; we do not sell personal information. Write to privacy@hooppup.com.