Privacy policy
GLOBAL PRIVACY POLICY
Last updated: August 4, 2026
This Privacy Policy explains how VesperaGlow collects, uses, discloses, and protects personal information when you visit our website, place an order, contact us, or otherwise use our online store and related services (collectively, the “Services”). It also explains the privacy rights and choices that may be available to you.
VesperaGlow is operated by [INSERT FULL LEGAL NAME], trading as VesperaGlow (“VesperaGlow,” “we,” “us,” or “our”). For the purposes of applicable data-protection law, we are the controller or business responsible for the personal information described in this Policy, except where another party expressly acts as an independent controller.
Our store is hosted by Shopify. Shopify provides the ecommerce infrastructure that enables us to offer the Services.
Please read this Policy carefully. If you do not agree with it, please do not use the Services. This Policy should be read together with our Terms of Service, Shipping Policy, Return & Refund Policy, and Cookie settings.
1. SCOPE OF THIS POLICY
This Policy applies to personal information processed through:
• Our Shopify online store and checkout.
• Customer accounts and order management.
• Customer-support communications.
• Email, SMS, or other marketing communications, where enabled.
• Product reviews, surveys, promotions, and social-media interactions that we operate.
• Cookies, pixels, analytics, and similar technologies used on our store.
This Policy does not control the independent privacy practices of third-party websites, platforms, payment providers, delivery companies, or social networks. Their own privacy notices apply when they process information for their own purposes.
2. PERSONAL INFORMATION WE COLLECT
The information we collect depends on how you interact with us, the features you use, the country in which you live, and the settings enabled on our store.
We may collect the following categories of personal information:
Identity and contact information
• Name.
• Email address.
• Telephone number.
• Billing and delivery addresses.
• Country or region.
Order and transaction information
• Products viewed, added to a cart, purchased, returned, exchanged, or cancelled.
• Order number, purchase date, order value, discounts, shipping method, and delivery status.
• Billing status, payment method type, and payment confirmation.
• Customer-service history and warranty or return information.
Payment information
Payments are processed by Shopify and/or authorized payment providers. These providers may collect payment-card numbers, bank details, authentication information, and billing data directly from you.
VesperaGlow does not normally receive or store your complete payment-card number. We may receive limited payment information, such as the payment method, card brand, last digits, transaction identifier, payment status, and fraud-screening results.
Account information
• Account identifier and login credentials handled through Shopify’s customer-account services.
• Saved addresses, preferences, and account settings.
• Order history and wish-list information, where those features are available.
Communications and submitted content
• Messages sent to customer support.
• Information included in return, refund, delivery, or warranty requests.
• Product reviews, ratings, photographs, videos, survey responses, or competition entries that you choose to submit.
Device, network, and usage information
• Internet Protocol (IP) address.
• Browser and device type.
• Operating system, language, and time zone.
• Cookie, device, session, and similar identifiers.
• Approximate location inferred from your IP address.
• Pages viewed, links selected, searches, referring pages, cart activity, and interactions with the Services.
• Dates, times, and duration of visits.
Marketing and preference information
• Marketing subscriptions and communication preferences.
• Cookie and privacy choices.
• Responses to campaigns or promotions.
• Inferences about products that may interest you, where permitted by law.
Fraud-prevention and security information
• Device, transaction, identity-verification, and risk signals used to prevent fraud, payment abuse, unauthorized access, and other unlawful activity.
We do not intentionally request or collect sensitive information such as health information, biometric identifiers, religious or philosophical beliefs, political opinions, or information about sexual orientation. Please do not send such information to us unless it is genuinely necessary for a specific request and we have asked you to provide it.
3. HOW WE COLLECT PERSONAL INFORMATION
We may collect personal information:
Directly from you
When you browse the store, create an account, place an order, subscribe to marketing, contact us, submit a review, enter a promotion, or otherwise provide information.
Automatically
Through Shopify, cookies, pixels, log files, analytics tools, and similar technologies when you use the Services.
From service providers
From Shopify, payment providers, fulfillment providers, delivery carriers, fraud-prevention services, customer-support tools, analytics providers, and other vendors that help us operate the Services.
From third parties
From advertising or marketing partners, social networks, referral partners, and publicly available sources, but only where permitted by law and relevant to the Services.
4. HOW AND WHY WE USE PERSONAL INFORMATION
We use personal information only where we have an appropriate purpose and, where required, a lawful basis.
To provide the Services and perform our contract with you
• Process payments and orders.
• Arrange fulfillment, shipping, delivery, returns, exchanges, and refunds.
• Create and manage customer accounts.
• Send order confirmations, tracking information, service notices, and other transactional messages.
• Respond to customer-support requests.
• Provide product, warranty, and after-sales support.
To comply with legal obligations
• Maintain tax, accounting, transaction, and compliance records.
• Respond to valid legal or regulatory requests.
• Fulfill product-safety, recall, consumer-protection, and fraud-prevention obligations.
• Establish, exercise, or defend legal claims.
For our legitimate interests, where those interests are not overridden by your rights
• Operate, secure, troubleshoot, and improve the Services.
• Understand store performance and customer experience.
• Prevent fraud, abuse, security incidents, and unauthorized transactions.
• Protect our customers, business, systems, and legal rights.
• Personalize basic store functionality and remember non-advertising preferences.
• Communicate with existing customers about similar products where permitted by law and subject to opt-out rights.
With your consent, where required
• Send promotional email or SMS messages.
• Use non-essential cookies or similar technologies.
• Measure advertising or deliver personalized and targeted advertising.
• Share information with advertising partners where consent or an opt-in is required.
• Publish optional content, photographs, or reviews where separate permission is appropriate.
You may withdraw consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.
5. COOKIES AND SIMILAR TECHNOLOGIES
We and our service providers may use cookies, pixels, local storage, software development kits, and similar technologies.
These technologies may be used for:
Strictly necessary purposes
To operate checkout, remember your cart, authenticate accounts, process payments, maintain security, prevent fraud, and provide features you request.
Functional purposes
To remember language, region, display, and other preferences.
Analytics purposes
To understand traffic, store performance, and how visitors interact with the Services.
Advertising purposes
To measure campaigns, limit repeated advertisements, build audiences, or show advertising based on browsing activity, where permitted by law.
Where required, non-essential cookies and similar technologies will not be used until you provide consent. You can manage available choices through our cookie banner or privacy-preferences page:
[INSERT YOUR SHOPIFY PRIVACY CHOICES OR COOKIE SETTINGS LINK]
Blocking some cookies may affect the availability or performance of certain features. For more information about the specific cookies active on our store, please review the cookie details displayed through our consent-management tool.
6. MARKETING COMMUNICATIONS
We may send marketing communications where you have consented or where another lawful basis permits us to do so.
You can unsubscribe from promotional emails using the unsubscribe link in each message. You can opt out of SMS marketing by following the instructions in the message or contacting us.
Opting out of marketing does not stop transactional or service communications, such as order confirmations, tracking updates, security notices, or responses to customer-support requests.
7. PERSONALIZED ADVERTISING AND PRIVACY SIGNALS
Where enabled and permitted by law, we may work with Shopify or advertising partners to measure campaigns or show advertisements based on activity across websites, apps, merchants, or devices.
We do not sell personal information for money. However, some disclosures involving cookies, advertising identifiers, or online activity may be legally defined as a “sale,” “sharing,” or use for “targeted advertising” in certain jurisdictions.
Where those laws apply, you may opt out through:
• Our privacy-choices page: PRIVACY POLICY
• Shopify’s privacy controls: https://privacy.shopify.com/en
• A recognized opt-out preference signal, such as Global Privacy Control, where we are legally required and technically able to recognize it.
Except for recognized opt-out preference signals required by applicable law, we do not currently respond to general browser “Do Not Track” signals because there is no universally accepted standard for them.
8. HOW WE DISCLOSE PERSONAL INFORMATION
We may disclose personal information only as reasonably necessary for the purposes described in this Policy.
Shopify
Shopify hosts our store and processes information needed to provide ecommerce, checkout, account, analytics, security, and related services.
Payment providers
To authorize and process payments, issue refunds, manage disputes, and prevent payment fraud.
Fulfillment and delivery providers
To prepare, ship, track, deliver, return, or replace orders and handle customs documentation where necessary.
Technology and business-service providers
Including hosting, cloud storage, customer support, email delivery, fraud prevention, cybersecurity, analytics, consent management, and store-app providers.
Marketing and advertising partners
Where enabled, permitted by law, and subject to your available consent and opt-out choices.
Professional advisers
Including accountants, insurers, auditors, legal advisers, and other professional consultants who are bound by legal or contractual confidentiality obligations.
Authorities and legal recipients
Where reasonably necessary to comply with law, court orders, lawful government requests, product-safety obligations, or to protect rights, safety, property, and the integrity of the Services.
Business transfers
In connection with a proposed or completed sale, transfer, restructuring, financing, or acquisition of all or part of the business, subject to appropriate confidentiality and legal safeguards.
At your direction
When you request, authorize, or consent to a disclosure, such as using a third-party login or social-sharing feature.
We require service providers acting on our behalf to process personal information only for authorized purposes and to apply appropriate safeguards, subject to applicable law.
9. SHOPIFY’S ROLE
Shopify processes personal information to provide services to us and may also process certain information for its own purposes, depending on the Shopify features you use and your interactions with Shopify, Shop, Shop Pay, or other merchants.
Information submitted through our store may be transmitted to Shopify and its service providers in countries other than your own.
To learn more, review:
• Shopify Consumer Privacy Policy: https://www.shopify.com/legal/privacy/consumers
• Shopify Privacy Controls: https://privacy.shopify.com/en
Requests concerning VesperaGlow’s use of your information should be sent to us. Requests concerning Shopify’s independent use of information may also be submitted directly through Shopify’s privacy controls.
10. INTERNATIONAL DATA TRANSFERS
We, Shopify, and our service providers may store or process personal information in countries other than the country in which you live. Privacy laws in those countries may differ from those in your jurisdiction.
Where required, international transfers are protected through recognized safeguards, which may include:
• An adequacy decision issued by a competent authority.
• The European Commission’s Standard Contractual Clauses.
• The United Kingdom’s approved international data-transfer mechanisms.
• Contractual, organizational, and technical safeguards required by applicable law.
You may contact us for more information about safeguards relevant to your personal information, subject to legal and confidentiality restrictions.
11. DATA RETENTION
We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including to provide the Services, maintain security, resolve disputes, enforce agreements, and satisfy legal, tax, accounting, warranty, consumer-protection, and recordkeeping obligations.
Retention periods depend on factors such as:
• Whether you maintain an account or an ongoing relationship with us.
• The type and sensitivity of the information.
• The purpose for which the information was collected.
• Applicable statutory limitation periods.
• Tax, accounting, payment, fraud-prevention, product-safety, and legal requirements.
• Whether information is required for an active dispute, investigation, or claim.
When personal information is no longer required, we will delete, anonymize, or securely isolate it, subject to technical backup cycles and legal obligations.
12. SECURITY
We use reasonable administrative, technical, and organizational measures designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, and unauthorized access.
No method of transmission or storage is completely secure. We cannot guarantee absolute security, but we will assess and respond to suspected incidents as required by applicable law.
You are responsible for protecting your account credentials and for using a secure device and connection. Please contact us immediately if you believe your account or personal information has been compromised.
13. AUTOMATED TOOLS AND FRAUD SCREENING
Shopify, payment providers, and fraud-prevention services may use automated tools to evaluate transaction and security signals. These tools may flag, delay, or recommend review of an order.
We do not intend to make decisions that produce legal or similarly significant effects about you solely through automated processing, except where permitted by law and accompanied by any required safeguards. You may contact us if you believe an order was affected by an automated decision and wish to request human review where that right applies.
14. YOUR PRIVACY RIGHTS
Depending on your location and subject to legal conditions and exceptions, you may have the right to:
• Request access to personal information we hold about you.
• Request a copy of certain information in a portable format.
• Request correction of inaccurate or incomplete information.
• Request deletion or erasure.
• Request restriction of certain processing.
• Object to processing based on legitimate interests.
• Withdraw consent where processing is based on consent.
• Opt out of targeted advertising or legally defined sale or sharing.
• Limit certain uses of sensitive personal information, where applicable.
• Appeal a refusal of a privacy request, where local law provides that right.
• Lodge a complaint with a competent privacy or data-protection authority.
• Receive equal service and not be discriminated against for exercising a privacy right.
These rights are not absolute. We may retain or continue processing information where permitted or required, including to complete transactions, provide requested services, maintain security, comply with law, or establish and defend legal claims.
15. HOW TO EXERCISE YOUR RIGHTS
To submit a request, contact: Email: support@vesperaglow.com
Privacy-choices page: Privacy policy
Please describe your request and provide enough information for us to identify the relevant records. We may take reasonable steps to verify your identity before acting on a request. We will request only the information reasonably necessary for verification.
Where permitted, an authorized agent may submit a request on your behalf. We may require evidence of the agent’s authority and may ask you to confirm your identity or instructions directly.
We will respond within the period required by applicable law. If we deny a request in whole or in part, we will provide an explanation and information about any available appeal process where required.
16. REGIONAL PRIVACY DISCLOSURES
European Economic Area, United Kingdom, and Switzerland
If data-protection law in the EEA, United Kingdom, or Switzerland applies, you may have rights of access, correction, erasure, restriction, portability, objection, and withdrawal of consent.
Our primary legal bases are:
• Contract, when processing is necessary to process and fulfill an order or provide requested Services.
• Legal obligation, when processing is necessary for tax, accounting, consumer-protection, product-safety, or other legal requirements.
• Legitimate interests, when necessary to operate, secure, prevent fraud, improve, and protect the Services, balanced against your rights.
• Consent, for marketing, non-essential cookies, or targeted advertising where consent is required.
You may lodge a complaint with the supervisory authority in the country where you live, work, or believe an infringement occurred. We encourage you to contact us first so we can try to resolve the matter.
United States
Residents of certain U.S. states may have rights to know, access, correct, delete, or obtain a copy of personal information and to opt out of targeted advertising, sale, sharing, or certain profiling. You may also have a right to appeal a denied request and to receive equal service.
For purposes of applicable U.S. state privacy laws, the categories we may have collected during the preceding 12 months are described in Section 2. The sources are described in Section 3, the purposes in Section 4, and the categories of recipients in Section 8.
We do not sell personal information for money. Certain advertising-related disclosures may be considered a sale or sharing under some U.S. state laws. You can submit an applicable opt-out request through the methods in Section 15.
California residents may also have rights to know, correct, delete, opt out of sale or sharing, limit certain uses of sensitive personal information, and receive non-discriminatory treatment, to the extent the California Consumer Privacy Act applies to us.
Canada
Where Canadian privacy law applies, you may request access to or correction of personal information and may withdraw consent, subject to legal or contractual restrictions and reasonable notice. You may contact the applicable federal or provincial privacy regulator if you remain dissatisfied with our response.
Australia and New Zealand
Where applicable law provides, you may request access to or correction of personal information and lodge a complaint with the relevant privacy authority. We will respond in accordance with applicable requirements.
Brazil and other jurisdictions
Residents of Brazil and other jurisdictions may have additional rights under local law, including rights relating to confirmation of processing, access, correction, deletion, portability, information about disclosures, objection, consent withdrawal, or review of certain automated decisions.
We will honor applicable regional rights even if they are not expressly listed in this Policy.
17. CHILDREN’S PRIVACY
The Services are intended for a general audience and are not directed to children under 16, or any higher minimum age required by applicable local law.
We do not knowingly collect personal information directly from children in violation of applicable law. If you are a parent or guardian and believe that a child has provided personal information to us, contact support@vesperaglow.com so we can review and, where appropriate, delete the information.
We do not knowingly sell or share the personal information of individuals under 16 for targeted advertising.
18. THIRD-PARTY WEBSITES AND SOCIAL FEATURES
The Services may contain links to third-party websites, applications, or social-media services. Those services are operated independently and are governed by their own privacy policies.
Information posted publicly, including product reviews or social-media comments, may be visible to other users and may be copied or used by third parties. Please avoid posting personal or sensitive information in public areas.
19. CHANGES TO THIS POLICY
We may update this Policy to reflect changes in our Services, technology, vendors, legal requirements, or privacy practices.
We will publish the revised Policy with a new “Last updated” date. If changes are material, we will provide additional notice where required by law. We will request consent before using personal information for a materially different purpose where consent is legally required.
20. CONTACT AND CONTROLLER DETAILS
For questions, complaints, or privacy-rights requests, contact:
Controller: [INSERT FULL LEGAL NAME], trading as VesperaGlow
Email: support@vesperaglow.com
Postal address: [INSERT COMPLETE BUSINESS OR SERVICE ADDRESS]
Telephone: [INSERT BUSINESS TELEPHONE NUMBER]
EU or UK representative, if legally required: [INSERT DETAILS OR DELETE THIS LINE]
If you contact us with a complaint, please provide sufficient detail for us to investigate. We will review and respond within the period required by applicable law.