Privacy policy

Last updated: November 17, 2025

Privacy Policy

Amalibro operates this store and website, including the data, content, features, tools, products, and services to provide you (the “Customer”) with a curated shopping experience (the “Services”). Amalibro uses Shopify’s technology to deliver the Services. This Privacy Policy explains how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction through the Services, or when you otherwise communicate with us. If there is any conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By accessing and using any of the Services, you acknowledge that you have read this Privacy Policy and understand how your personal information is collected, used, and disclosed as described here.

Personal Information We Collect or Process

“Personal information” means data that identifies or can reasonably be linked to you or another person. It does not include anonymized or de-identified data that cannot reasonably identify you. Depending on how you interact with the Services, where you reside, and what applicable law permits or requires, we may collect or process the following categories of personal information (including inferences):

Contact details such as name, address, billing address, shipping address, phone number, and email address.
Financial information such as credit/debit card and account details, payment information, transaction details, payment method, and payment confirmation.
Account information such as username, password, security questions, preferences, and settings.
Transaction information such as items you view, add to cart, wishlist, purchase, return, exchange, or cancel, and your past transactions.
Communications such as information you provide when you contact us (e.g., customer support claims).
Device information such as device, browser, or network details, IP address, and other unique identifiers.
Usage information such as how and when you browse or use the Services.

Sources of Personal Information

Directly from you when you create an account, visit or use the Services, communicate with us, or otherwise provide personal information.
Automatically through the Services including from your device when you use our products or services or visit our websites, and via cookies or similar technologies.
From our service providers when we engage them to enable certain technology or when they collect/process personal information on our behalf.
From partners or other third parties where permitted by law.

How We Use Personal Information

Depending on your interactions with us and the Services you use, we may use personal information to:

Provide, personalize, and improve the Services. This includes fulfilling our contract with you; processing payments; managing orders; remembering preferences; sending account-related notifications; handling purchases, returns, exchanges, or other transactions; creating and managing your account; organizing shipping; facilitating returns/exchanges; enabling reviews; and recommending products.
Marketing and advertising. We may send promotional emails or show online ads about products/services on or off the Services, including based on items previously viewed, added to cart, or purchased.
Security and fraud prevention. We may authenticate accounts; provide secure shopping and checkout; detect, investigate, or act on potential fraud, illegal activity, or harm; protect public safety; and secure the Services. If you create an account, you are responsible for safeguarding your credentials.
Communications. We may provide customer support, respond to requests, deliver the Services effectively, and maintain our business relationship with you.
Legal purposes. We may comply with applicable laws or legal processes (e.g., requests from law enforcement or authorities); investigate or participate in discovery/litigation; or enforce our terms or policies.

How We Disclose Personal Information

We may disclose personal information under the following circumstances, consistent with this Policy:

With Shopify, service providers, and other third parties that perform services on our behalf (e.g., IT, payments, analytics, customer support, cloud storage, order and shipping management).
With business and marketing partners to provide marketing services and show advertising (including personalized advertising based on your online activity). Partners use data in accordance with their privacy notices. Where applicable law provides, you may have the right to opt out of sharing for personalized advertising based on cross-site activity. You can exercise rights to opt out here.
With your direction or consent (e.g., shipping products to others; social media widgets; third-party sign-in).
With our affiliates or within our corporate group.
In connection with a business transaction (e.g., merger, insolvency); to comply with legal obligations (e.g., subpoenas, warrants); to enforce our Terms or policies; or to protect the Services, our rights, and the rights of users or others.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services to provide and improve the Services for you. To deliver these Services and certain advanced features, information you submit may be transferred to Shopify and third parties that may be located outside your country. In these circumstances, Shopify is responsible for processing your personal information (including responding to requests to exercise your rights regarding Shopify’s uses). For more information about how Shopify uses personal information and the rights you may have, see Shopify’s Consumer Privacy Policy. Depending on where you live, you may exercise certain rights via Shopify’s privacy portal here.

Third-Party Websites and Links

The Services may include links to third-party websites or online platforms not controlled by us. Please review their privacy and security policies and terms. We are not responsible for such sites, including the accuracy or reliability of information contained there. Information you provide in public or semi-public spaces (including third-party social platforms) may be visible to others without limitation on use by us or third parties.

Children’s Data

The Services are not intended for use by children, and we do not knowingly collect personal information from children as defined by applicable law. If you are a parent/guardian of a child who provided personal information to us, please contact us using the details below to request deletion. As of the effective date of this Policy, we have no actual knowledge that we “sell” or “share” (as defined by applicable law) personal information of individuals under 16.

Security and Retention

No security measures are perfect, and we cannot guarantee “absolute security.” Information sent to us may not be secure during transmission; please avoid using unsecure channels for sensitive data. We retain personal information for as long as necessary to maintain your account, provide the Services, comply with legal obligations, resolve disputes, and enforce agreements and policies.

Your Rights and Choices

Depending on where you live, you may have some or all of the following rights regarding your personal information (subject to legal limitations and exceptions):

Right of access to personal information we hold about you.
Right to deletion of personal information we hold about you.
Right to correction of inaccurate personal information.
Right to data portability in certain circumstances.
Right to opt out of “sale,” “sharing,” or targeted advertising as defined by applicable privacy laws. You can exercise these rights here. If you visit our site with the Global Privacy Control signal enabled, we will treat that visit as an opt-out request for that browser/device (and for your account, if we can associate the signal).
Marketing preferences: you may opt out of promotional emails via the unsubscribe link. We may still send non-promotional emails (e.g., order or account notices).

If you reside in the UK or EEA, and subject to local law exceptions/limitations, you may also have:

Right to object or restrict processing for certain purposes.
Right to withdraw consent where processing is based on consent (without affecting prior lawful processing).

You may exercise your rights where indicated in the Services or by contacting us using the information below. For more on how Shopify uses personal information and your rights regarding Shopify’s processing, visit https://privacy.shopify.com/en.

We will not discriminate against you for exercising your rights. We may need to verify your identity before processing requests as allowed or required by law. Where permitted, you may designate an authorized agent to submit requests on your behalf; we will require proof of authorization and may ask you to verify your identity directly with us. We will respond within a reasonable timeframe as required by law.

Complaints

If you have a privacy complaint, please contact us using the details below. Depending on where you live, you may have the right to appeal our decision by contacting us, or to lodge a complaint with your local data protection authority. For the EEA, a list of authorities is available here.

International Transfers

We may transfer, store, and process your personal information outside your country of residence. If we transfer personal information outside the EEA or the UK, we use recognized transfer mechanisms (e.g., European Commission Standard Contractual Clauses or UK-approved equivalents), unless the destination country is deemed to provide an adequate level of protection.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for operational, legal, or regulatory reasons. We will post the updated version on this website, update the “Last updated” date, and notify you as required by law.

Contact

If you have questions about our privacy practices or this Privacy Policy, or if you wish to exercise your rights, please email us at info@amalibro.com. For data protection laws, Amalibro is the controller of your personal information.