Privacy policy

Last updated: January 16, 2026

ELLY SECRET operates this store and website, including all information, content, features, tools, products, and services, in order to provide you, as the customer, with a proper shopping experience (the “Services”). ELLY SECRET is supported by Shopify, which enables us to provide you with the Services. This Privacy Policy describes how we collect, use, and disclose your personal data when you visit, use, make a purchase, or carry out any other transaction through the Services, or when you communicate with us. In the event of any conflict between our Terms and Conditions of Service and this Privacy Policy, this Privacy Policy shall prevail with respect to the collection, processing, and disclosure of your personal data.

Please read this Privacy Policy carefully. By using and accessing the Services, you confirm that you have read this Privacy Policy and understood what is described regarding the collection, use, and disclosure of your information.

Personal Data We Collect or Process

When we use the term “personal data,” we mean information that identifies you or can reasonably be linked to you or another person. Personal data does not include information collected anonymously or anonymized so that it cannot identify or be linked to you.

Depending on your interaction with the Services, where you live, and as permitted or required by applicable law, we may collect or process the following categories of personal data, including inferences drawn from such personal data:

  • Contact details, including name, address, billing address, shipping address, phone number, and email address

  • Financial data, including credit card, debit card, and financial account numbers, card payment details, transaction details, payment method, payment confirmation, and other payment information

  • Account data, including username, password, security questions, preferences, and settings

  • Transaction data, including items you view, add to cart, add to wishlist, purchase, return, exchange, or remove, as well as past transactions

  • Communications with us, including information you include in communications, such as customer service disputes

  • Device information, including device, browser, or network connection details, IP address, and other unique identifiers

  • Usage information, including details about your interaction with the Services and how and when you use or browse them

Sources of Personal Data

We may collect personal data from the following sources:

  • Directly from you, including when you create an account, visit or use the Services, communicate with us, or provide us with your personal data

  • Automatically through the Services, including through your device when using our products or services or visiting our website, and through cookies and similar technologies

  • From our service providers, including when we engage them to implement specific technologies or when they collect or process personal data on our behalf

  • From our partners or third parties

How We Use Your Personal Data

Depending on how you interact with us or which Services you use, we may use your personal data for the following purposes:

To Provide, Personalize, and Improve the Services

We use your personal data to provide you with the Services and fulfill our contract with you, including:

  • Processing payments

  • Fulfilling orders

  • Remembering your preferences and interests

  • Sending account notifications

  • Processing purchases, returns, exchanges, or other transactions

  • Creating, maintaining, and managing your account

  • Organizing shipping

  • Facilitating returns and exchanges

  • Allowing you to post reviews

  • Creating a personalized shopping experience, such as product recommendations based on your purchases

Marketing and Advertising

We may use your personal data for marketing and advertising purposes, including:

  • Sending you marketing, advertising, and promotional communications via email, text message, or post

  • Showing you online advertisements for products and services on our Services or other websites, based on your past purchases, cart activity, and interactions with the Services

Security and Fraud Prevention

We use your personal data to:

  • Authenticate your account

  • Provide a secure payment and shopping experience

  • Detect, investigate, and take action against fraudulent, illegal, unsafe, or harmful activities

  • Protect public safety and our Services

By using the Services and creating an account, you are responsible for protecting your login credentials. We recommend that you do not share your username, password, or other access details with anyone.

Communications With You

We use your personal data to:

  • Provide customer support

  • Respond to your requests

  • Deliver effective services

  • Maintain our business relationship with you

Legal Reasons

We may use your personal data to:

  • Comply with applicable laws

  • Respond to valid legal processes, including requests from government authorities

  • Investigate or participate in legal proceedings

  • Enforce or investigate potential violations of our terms or policies

How We Disclose Personal Data

In certain circumstances, we may disclose your personal data to third parties for legitimate purposes under this Privacy Policy, including:

  • With Shopify, vendors, and other third parties who provide services on our behalf (such as IT management, payment processing, data analysis, customer support, storage, fulfillment, and shipping)

  • With business and marketing partners to provide you with services and personalized advertising

  • When you request or authorize us to disclose certain information to third parties, such as for shipping products or using social media widgets or login integrations

  • With our affiliates or within our corporate group

  • In connection with a business transaction such as a merger or bankruptcy, to comply with legal obligations, enforce our policies, or protect our Services and rights

Relationship with Shopify

The Services are powered by Shopify, which collects and processes personal data related to your access to and use of the Services in order to provide and improve the Services for you.

To provide and improve the Services, data you submit may be transferred to and shared with Shopify and third parties that may be located in countries different from your own.

In addition, to help us protect, grow, and improve our business, we use certain advanced features from Shopify that incorporate data and information received from your interactions with our store, other merchants, and Shopify itself.

For more information about how Shopify uses your personal data and your rights, you may review the Shopify Consumer Privacy Policy.

Third-Party Websites and Links

The Services may contain links to third-party websites or online platforms. If you access external websites not affiliated with or controlled by us, you may be subject to their privacy, security, and terms policies.

We are not responsible for the privacy, security, accuracy, or reliability of third-party websites or platforms.

Children’s Data

The Services are not intended for use by minors, and we do not knowingly collect personal data from children below the age of majority in your jurisdiction.

If you are a parent or guardian of a minor who has provided us with personal data, you may contact us to request deletion.

As of the effective date of this Privacy Policy, we are not aware of any “sharing” or “selling” of personal data of individuals under the age of 16.

Data Security and Retention

Please note that no security measure is perfect or impenetrable, and we cannot guarantee “absolute security.”

We recommend using secure methods when communicating sensitive or confidential information.

The retention period for personal data depends on factors such as:

  • Whether we need the data to maintain your account

  • Provide Services

  • Comply with legal obligations

  • Resolve disputes

  • Enforce contracts and policies

Your Rights and Choices

Depending on your location, you may have rights regarding your personal data, including:

  • Right of access

  • Right to deletion

  • Right to correction

  • Right to data portability

  • Right to opt out of sale or sharing for targeted advertising

  • Right to manage communication preferences

  • Right to object to or restrict processing (for UK/EEA residents)

  • Right to withdraw consent where applicable

You may exercise your rights through the Services where available, or by contacting us.

You will not be discriminated against for exercising your rights. We may need to verify your identity before processing your request.

Complaints

If you have complaints about how we process your personal data, please contact us using the contact details below.

Depending on your location, you may also have the right to appeal our decision or lodge a complaint with your local data protection authority.

International Transfers

Please note that we may transfer, store, and process your personal data outside your country of residence.

If we transfer your personal data outside the UK or European Economic Area, we will rely on appropriate transfer mechanisms, such as standard contractual clauses approved by the relevant authorities, unless the destination country is considered to provide an adequate level of protection.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for operational, legal, or regulatory reasons.

We will post the updated Privacy Policy on our website, update the “Last updated” date, and provide notice as required by law.

Contact Us

If you have any questions about our privacy practices or this Privacy Policy, or if you wish to exercise your rights, please email us at info@ellysecret.com.

For the purposes of applicable data protection laws, we are the data controller of your personal data.