Privacy Policy

Last Updated: September 6, 2026

This Privacy Policy explains how [LEGAL COMPANY NAME], trading as Creppy Lab ("Creppy Lab", "we", "us", or "our"), collects, uses, discloses, stores, and protects personal information when you visit our website, purchase our products, create an account, contact us, or otherwise interact with our services.

We operate our online store using Shopify.

This Privacy Policy applies to customers and website visitors worldwide and is intended to comply with applicable privacy and data protection laws, including, where applicable, the GDPR, UK GDPR, and U.S. state privacy laws.

Where the law of your jurisdiction provides additional or stronger privacy rights, those rights will apply.

1. Who We Are

Legal Company Name: [INSERT LEGAL COMPANY NAME]
Trading Name: Creppy Lab
Registered Address: [INSERT REGISTERED ADDRESS]
Email: creppylab@gmail.com

Where applicable, Creppy Lab acts as the data controller or equivalent responsible entity for personal information collected through our services.

2. Information We Collect

Depending on how you interact with us, we may collect:

Information You Provide

• Full name;
• Email address;
• Telephone number;
• Billing address;
• Shipping address;
• Order details;
• Account information;
• Customer service communications;
• Return and refund information;
• Reviews and other content you voluntarily submit; and
• Other information you choose to provide.

Payment Information

Payments may be processed by Shopify Payments or other third-party payment providers available through our store.

Depending on the payment method, we may receive information such as payment status, transaction identifiers, payment method type, or limited payment details.

We do not intend to store complete payment card numbers ourselves unless specifically stated and permitted by law.

Automatically Collected Information

When you visit our website, certain information may be collected automatically, including:

• IP address;
• Browser type;
• Device type;
• Operating system;
• Language;
• Approximate geographic location;
• Pages viewed;
• Referring website;
• Date and time of visits;
• Website interactions;
• Shopping activity; and
• Technical or diagnostic information.

3. How We Use Personal Information

We may use personal information to:

• Process and fulfill orders;
• Process payments;
• Deliver products;
• Provide customer support;
• Process returns, refunds, and exchanges;
• Communicate with you regarding orders;
• Maintain customer accounts;
• Prevent fraud and unauthorized transactions;
• Protect website and account security;
• Improve our website, products, and services;
• Analyze website performance;
• Personalize the customer experience where permitted;
• Send marketing communications where legally permitted;
• Comply with legal obligations;
• Establish, exercise, or defend legal claims; and
• Fulfill other purposes disclosed at the time information is collected.

4. Legal Bases for Processing

Where GDPR, UK GDPR, or similar laws apply, we may process personal information based on:

• Performance of a contract;
• Compliance with a legal obligation;
• Legitimate interests;
• Consent; or
• Other lawful bases recognized by applicable law.

Our legitimate interests may include operating our business, preventing fraud, improving our services, securing our website, communicating with customers, and protecting our legal rights.

Where we rely on consent, you may withdraw your consent at any time.

5. Shopify

Our online store is powered by Shopify.

Shopify may process personal information in connection with providing its e-commerce infrastructure, hosting, checkout, security, analytics, fraud prevention, and related services.

Information processed through Shopify may include customer information, order information, payment-related information, technical information, and other information necessary to operate the store.

Shopify's handling of personal information is also governed by its own privacy documentation and applicable contractual obligations.

6. Marketing

Where legally permitted, we may use your email address or other contact information to send marketing communications about products, promotions, launches, and other updates.

Where consent is required, we will obtain it before sending marketing communications.

You may unsubscribe at any time using the unsubscribe mechanism included in our marketing communications or by contacting:

creppylab@gmail.com

Transactional communications, such as order confirmations, shipping updates, security notifications, and important service messages, may still be sent where legally permitted and necessary.

7. Cookies and Similar Technologies

Our website may use cookies, pixels, tags, local storage, and similar technologies.

These technologies may be used for:

• Essential website functionality;
• Shopping cart functionality;
• Authentication;
• Security;
• Analytics;
• Performance;
• Personalization;
• Advertising; and
• Measuring marketing effectiveness.

Where applicable law requires consent for non-essential cookies or similar technologies, we will request consent before using them.

You may also manage cookies through your browser or device settings.

Disabling certain cookies may affect website functionality.

8. Analytics and Advertising

We may use analytics and advertising technologies provided by third parties.

Depending on the services activated on our Shopify store, these technologies may collect information about your device, browsing activity, purchases, interactions with advertisements, or use of our website.

Where required by applicable law, we will obtain consent before using non-essential analytics or advertising technologies.

You may have additional rights to opt out of targeted advertising, sale, or sharing of personal information depending on your jurisdiction.

9. Sharing Personal Information

We may share personal information with service providers and business partners where reasonably necessary to operate our business.

These may include:

• Shopify;
• Payment processors;
• Shipping and logistics providers;
• Fulfillment providers;
• Customer support providers;
• Email and communication providers;
• Analytics providers;
• Advertising providers;
• Fraud prevention providers;
• IT and technology providers;
• Professional advisers;
• Government authorities where legally required; and
• Other service providers acting on our behalf.

We require service providers to handle personal information appropriately and only for legitimate purposes, subject to applicable law and contractual requirements.

10. Sale and Sharing of Personal Information

We do not sell personal information for monetary consideration in the ordinary meaning of the term.

However, certain disclosures made for targeted advertising or similar purposes may be considered a "sale" or "sharing" under certain U.S. privacy laws.

Where such laws apply, we will provide any legally required opt-out rights and mechanisms.

11. International Data Transfers

Because we operate internationally and use service providers that may operate in different countries, your personal information may be transferred to and processed in countries other than the country in which you reside.

Where required by applicable law, we use appropriate legal safeguards for international transfers, which may include adequacy decisions, standard contractual clauses, contractual safeguards, or other legally recognized mechanisms.

12. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

We may retain information for longer where necessary to:

• Comply with legal, tax, accounting, or regulatory obligations;
• Resolve disputes;
• Prevent fraud;
• Enforce our agreements;
• Establish or defend legal claims; or
• Comply with other legal requirements.

When information is no longer required, we will delete, anonymize, or securely dispose of it where reasonably practicable.

13. Data Security

We use reasonable technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

However, no Internet transmission or electronic storage system is completely secure.

We therefore cannot guarantee absolute security.

14. Your Privacy Rights

Depending on your location, you may have rights including:

• Access to your personal information;
• Information about how your information is collected and used;
• Correction of inaccurate information;
• Deletion of personal information;
• Data portability;
• Restriction of processing;
• Objection to certain processing;
• Withdrawal of consent;
• Opt-out of targeted advertising;
• Opt-out of certain sales or sharing of personal information;
• Rights relating to sensitive personal information; and
• The right not to receive discriminatory treatment for exercising applicable privacy rights.

These rights are subject to applicable legal exceptions and limitations.

15. European Economic Area and United Kingdom

If GDPR, UK GDPR, or equivalent legislation applies to you, you may have rights including access, rectification, erasure, restriction, objection, data portability, and withdrawal of consent.

Where applicable, you may also have the right to lodge a complaint with your local data protection supervisory authority.

16. California Residents

If you are a California resident and applicable California privacy law applies, you may have additional rights concerning your personal information.

These may include rights to:

• Know/access personal information;
• Correct inaccurate information;
• Delete personal information;
• Opt out of the sale or sharing of personal information;
• Limit certain uses of sensitive personal information where applicable; and
• Receive equal treatment when exercising applicable privacy rights.

California residents may submit requests to:

creppylab@gmail.com

We may take reasonable steps to verify your identity before processing certain requests.

Where required by law, we will provide information about how to appeal a denied request.

17. Other U.S. State Privacy Laws

Residents of U.S. states with applicable comprehensive privacy legislation may have additional rights.

Depending on the applicable law, these may include rights concerning access, correction, deletion, portability, targeted advertising, profiling, sale or sharing of personal information, and sensitive personal information.

We will honor applicable statutory rights.

18. Children's Privacy

Our website is not directed toward children below the minimum age required under applicable law.

We do not knowingly collect personal information from children in violation of applicable law.

If you believe that a child has provided personal information to us unlawfully, please contact us at:

creppylab@gmail.com

19. Third-Party Websites

Our website may contain links to third-party websites or services.

We are not responsible for the privacy practices, security, or content of third-party websites.

We encourage you to review the privacy policies of third parties before providing personal information.

20. Do Not Track

Some browsers and devices offer "Do Not Track" functionality.

Because there is no universal technical standard governing all such signals, our website may not respond to every Do Not Track setting.

Where applicable law requires recognition of legally recognized privacy preference signals, we will comply with applicable requirements.

21. Changes to This Privacy Policy

We may update this Privacy Policy periodically.

The latest version will always display an updated "Last Updated" date.

Where required by law, we will provide additional notice or obtain consent before implementing material changes.

22. Contact Us

If you have questions, concerns, or requests concerning this Privacy Policy or our handling of personal information, please contact:

Creppy Lab
Email: creppylab@gmail.com
Registered Address: [INSERT REGISTERED ADDRESS]