Privacy policy

Last updated: September 14, 2025

Our Commitment

We respect your privacy and handle your information responsibly. This policy explains what we collect, how we use it, and the steps we take to keep it safe. While some of the language below is detailed for legal reasons, our goal is simple: to protect your data and earn your trust.

Quick Summary (Plain English)

🔒 We collect only what’s needed to process orders and provide service.

🛒 Your info is used for fulfillment, support, and account history.

📢 Marketing may be sent (you can opt-out anytime).

🤝 Data is shared only with Shopify and trusted service providers.

❌ We do not sell your personal information. Children’s data is never collected.

1. Data Controller and Service Providers

Icon Origins is the data controller for all personal information you provide directly. Shopify acts as our data processor and hosting provider. Other third-party service providers may act as sub-processors or independent controllers depending on their role.

2. Personal Information We Collect

We may collect identifiers, payment data, account info, communications, device data, and purchase preferences. We do not collect sensitive information except where legally required for fraud prevention or compliance.

3. Sources of Personal Information

Directly from you, automatically from devices/cookies, from service providers, and from third parties where legally permitted.

4. How We Use Your Information

We use your information to operate services, improve the store, send marketing (with consent), prevent fraud, provide support, and comply with law.

5. Disclosure

We may disclose your data to Shopify, service providers, partners, or in legal/corporate transactions. We do not sell your information or knowingly share children’s data.

6. Relationship with Shopify

Shopify may combine your data with other merchants and is responsible for its own processing. Review the Shopify Consumer Privacy Policy for details.

7. Cookies

We use cookies for site function, analytics, and marketing. You can adjust preferences in your browser. Where required, we obtain consent.

8. Retention

We keep order/transaction data for 7 years, marketing info until you unsubscribe, and account data while active plus 2 years.

9. Security

We use technical and organizational safeguards but cannot guarantee 100% security. Keep your credentials safe.

10. Children’s Data

We do not knowingly collect personal data from children under 16. If discovered, such data will be deleted.

11. Your Rights

You may have rights to access, correct, delete, port, opt-out, or complain to authorities depending on your jurisdiction. Contact info@iconorigins.com.

12. International Transfers

We may transfer your info outside your country using approved safeguards such as Standard Contractual Clauses.

13. Updates

We may revise this policy and post updates with a new date. Material changes will be communicated as required by law.

14. Contact

For questions or complaints, contact us at info@iconorigins.com.