Privacy Policy

Last updated: November 6, 2026

This Privacy Policy explains how WiseWalk collects, uses, discloses, and protects personal information when you visit our website, place an order, create an account, or contact us.

It also explains your privacy rights and how to exercise them.

1. Who Is Responsible for Your Information?

WiseWalk is the trading name of:

Legal name: [FULL LEGAL NAME OR REGISTERED COMPANY NAME]
Business address: [FULL BUSINESS ADDRESS, INCLUDING COUNTRY]
Privacy contact: mywisewalk@gmail.com
Website: [STORE WEBSITE ADDRESS]

The business identified above is the controller of the personal information processed for the purposes described in this policy, except where another provider acts as an independent controller.

Our store is hosted on Shopify.

This policy provides information about our practices. Reading it, browsing our website, or placing an order does not by itself constitute consent to optional marketing, advertising cookies, or other processing that requires separate consent.

2. Personal Information We Process

Depending on how you interact with us, we process the following categories:

• Contact and delivery information: your name, email address, telephone number, billing address, shipping address, and delivery instructions.

• Order and transaction information: products ordered, order amounts, payment status, delivery records, returns, refunds, and correspondence about your purchases.

• Payment-related information: information necessary to process and verify payments, such as transaction references, payment method, and limited payment identifiers. Payment providers process payment credentials through their systems. The information available to us depends on the payment method used.

• Account information: where accounts are available, account identifiers, authentication information, saved addresses, and preferences.

• Customer support information: messages, attachments, and other information you choose to provide when requesting assistance.

• Device and technical information: IP address, browser and device characteristics, security logs, and relevant online identifiers.

• Browsing and preference information: interactions with pages, products, shopping carts, and privacy settings, subject to applicable consent requirements.

• Reviews and submitted content: ratings, reviews, photographs, or other material you choose to submit.

We collect only information relevant to the purposes described in this policy. Please do not send full payment card details, identification documents, or sensitive information through ordinary email unless we specifically request necessary information through an appropriate channel.

Information that has been genuinely anonymized so that individuals can no longer reasonably be identified is not personal information. Pseudonymized information remains personal information where it can still be linked to an individual.

3. Where Information Comes From

We obtain personal information:

• Directly from you when you place orders, complete forms, manage an account, submit content, or contact us.

• Automatically through the website, including necessary technical functions and, where permitted, cookies and similar technologies.

• From Shopify and providers involved in payments, delivery, security, and customer support.

• From advertising or analytics providers, where those tools are enabled and the relevant legal requirements are met.

Additional providers or sources used by this store: [IDENTIFY ANY ADDITIONAL APPS, ADVERTISING PLATFORMS, ANALYTICS SERVICES, OR OTHER DATA SOURCES ACTUALLY USED; REMOVE IF NONE].

4. Why We Use Information and Our Legal Bases

Where the GDPR or UK GDPR applies, we rely on the following legal bases:

Purpose	Legal basis
Processing orders, arranging payment and delivery, and handling contractual returns	Performance of our contract with you
Taking steps you request before a purchase	Taking steps at your request before entering into a contract
Providing account functions you request	Performance of the relevant service contract
Maintaining invoices, accounting records, and legally required documentation	Compliance with legal obligations
Answering general enquiries and managing ordinary customer support	Our legitimate interest in responding to customers; contract performance where the enquiry concerns a purchase
Protecting accounts, detecting fraud, and maintaining website security	Our legitimate interest in protecting customers and our business; legal obligations where applicable
Establishing, exercising, or defending legal claims	Our legitimate interest in protecting legal rights
Sending optional marketing communications	Consent, or a legally permitted existing-customer exception where its requirements are met
Using non-essential cookies, advertising pixels, or similar tracking	Consent where required by applicable law
Measuring performance or personalizing content using personal information	Consent where required; otherwise a documented legitimate interest where legally permissible

Where we rely on legitimate interests, we assess those interests against your rights and reasonable expectations. Legitimate interests do not replace consent where consent is required.

Information needed to process an order is necessary to complete that purchase. If you do not provide it, we may be unable to fulfil your order. Optional information and permissions are not required merely to make a purchase.

5. Cookies, Analytics, and Advertising

Our website uses necessary cookies and similar technologies to support functions such as the shopping cart, checkout, security, and privacy preferences.

Optional analytics, personalization, and advertising technologies are used only in accordance with the rules applicable to you.

Where prior consent is required, non-essential technologies must remain inactive until you consent. You can refuse optional categories and subsequently change or withdraw your choices through our privacy controls.

Cookie information and settings: [INSERT WORKING LINK TO COOKIE INFORMATION AND THE CONSENT-PREFERENCE CONTROL].

The cookie information must identify the technologies actually used, their providers, purposes, and durations.

If advertising tools are enabled, information such as device identifiers, browsing activity, and purchase events may be disclosed to advertising providers to measure campaigns or personalize advertising.

Advertising and analytics providers currently used: [INSERT VERIFIED PROVIDERS AND LINKS TO THEIR PRIVACY NOTICES, OR STATE THAT NO OPTIONAL ADVERTISING OR ANALYTICS TOOLS ARE USED].

6. Marketing Communications

Where permitted, we may send product news or promotional offers.

When consent is required, we will request it separately. Agreeing to purchase terms does not automatically subscribe you to marketing.

You can unsubscribe from marketing emails using the link in each message or by contacting us.

Unsubscribing does not prevent necessary communications about orders, payments, delivery, safety, or customer service.

If we offer marketing by text message, the relevant sign-up notice will explain that program and its withdrawal instructions before you subscribe.

7. Who Receives Personal Information?

We disclose relevant information to recipients that need it for the purposes described above, including:

• Shopify, for hosting and operating the store.

• Payment providers, for processing payments and managing payment disputes.

• Fulfilment providers, suppliers, and carriers, where needed to prepare and deliver orders.

• Customer support, IT, hosting, and communications providers.

• Analytics and advertising providers, where enabled and legally permitted.

• Accountants, legal advisers, insurers, or public authorities where necessary and lawful.

We limit disclosures to information appropriate for the relevant purpose. Providers acting on our behalf must process information under appropriate contractual obligations.

If a business transfer occurs, personal information may be disclosed where necessary and lawful, subject to confidentiality, appropriate safeguards, and any required notices.

8. Shopify’s Role

Shopify processes personal information to operate the platform, support checkout, and provide related services.

For some processing, Shopify acts on our behalf. For other activities described in its privacy notices and applicable agreements, Shopify acts as an independent controller.

Shopify Network Intelligence status for this store: [CONFIRM WHETHER ENABLED OR DISABLED BEFORE PUBLICATION].

Where Shopify Network Intelligence and Enhanced Services are enabled, Shopify may use information about interactions with our store together with information from interactions with other merchants and Shopify. These services support functions such as personalization, advertising, and understanding customer interactions.

This can involve sharing information with Shopify and other providers located in other countries. Applicable consent and opt-out requirements apply.

You can learn more and exercise relevant rights directly with Shopify through:

• Shopify Consumer Privacy Policy

• Shopify Privacy Portal

You may still contact us about processing for which we are responsible. These links do not replace our obligations to you.

9. International Transfers

Our providers may process information outside your country, including outside the European Economic Area or the United Kingdom.

Where applicable, we use legally recognized safeguards for restricted international transfers, such as:

• An applicable adequacy decision.

• European Commission Standard Contractual Clauses, together with supplementary safeguards where necessary.

• The applicable UK transfer agreement or addendum.

We do not assume that every destination provides equivalent legal protection.

You can contact us for information about the safeguards relevant to your information and how to obtain a copy, subject to necessary redactions.

10. Retention

We keep personal information only as long as necessary for its purpose and to meet applicable legal obligations.

In particular:

• Order and invoice records: for the accounting, tax, consumer-law, and legal-claim periods applicable to our business.

• Account information: while the account is maintained, followed by any necessary limited retention for legal or security purposes.

• Support records: for the time needed to resolve the issue and address related claims.

• Marketing information: until you withdraw consent or object, subject to retaining a limited suppression record to respect your choice.

• Security records: for a proportionate period based on security needs and relevant investigations.

• Cookie and advertising information: for the durations disclosed in the relevant cookie information and provider notices.

Where information must be retained after its original purpose ends, we restrict its use as required. We delete or anonymize information when continued retention is no longer justified.

11. Security

We implement appropriate technical and organizational safeguards to protect personal information against unauthorized access, loss, misuse, or disclosure.

Access is limited according to business needs, and we assess relevant service providers and security arrangements.

No system can guarantee absolute security. This does not limit our legal obligations to protect information or notify authorities and affected individuals of a breach when required.

12. Your Privacy Rights

Depending on the applicable law and circumstances, you may have rights to:

• Access your personal information and receive information about its use.

• Correct inaccurate or incomplete information.

• Request deletion.

• Restrict processing.

• Receive eligible information in a portable format.

• Object to processing based on legitimate interests.

• Object to direct marketing, including related profiling.

• Withdraw consent without affecting the lawfulness of earlier processing.

• Obtain applicable protections concerning solely automated decisions with legal or similarly significant effects.

To exercise your rights, email mywisewalk@gmail.com.

We may request proportionate information to verify your identity where necessary. We do not require unnecessary identification documents.

Where the GDPR applies, we normally respond within one month. We may extend that period by up to two further months where legally justified, explaining the extension within the first month.

Requests are normally free. Any lawful refusal or fee will be explained, together with available complaint rights.

13. Additional Information for U.S. Residents

Depending on your state and whether the relevant law applies to our business, you may have additional rights to access, correct, delete, or obtain a copy of your information.

You may also have rights to opt out of:

• The sale of personal information.

• Sharing for cross-context behavioral advertising or targeted advertising.

• Certain profiling activities covered by applicable law.

Advertising disclosures may qualify as a “sale” or “sharing” under some laws even where no money is exchanged.

Store privacy-choice or opt-out page: [INSERT WORKING “YOUR PRIVACY CHOICES” OR “DO NOT SELL OR SHARE MY PERSONAL INFORMATION” LINK WHERE APPLICABLE].

Where required, we recognize supported universal opt-out signals, including Global Privacy Control.

You may contact us directly or use an authorized agent where permitted. Verification requirements depend on the request; we do not require identity verification for advertising opt-outs where prohibited.

Where you have an appeal right, you may appeal our decision by emailing mywisewalk@gmail.com with the subject “Privacy Appeal.” We will respond within the applicable statutory period and explain any further complaint options.

We will not unlawfully discriminate against you for exercising privacy rights.

Any additional state-specific disclosures required for our actual activities will be provided where applicable.

14. Children’s Information

Our store is intended for adult purchasers, including parents and guardians.

We do not knowingly collect personal information directly from children under 13 through services directed to them. Other age-related requirements may apply depending on location and the processing concerned.

Information about a child supplied by an adult is still personal information and must be handled appropriately. Please avoid submitting unnecessary identifying information about children.

If you believe a child has provided information in circumstances requiring parental consent, contact mywisewalk@gmail.com. We will investigate and take the action required by law.

15. Automated Decisions and Profiling

Payment, security, or advertising providers may use automated tools to assess transactions, identify suspicious activity, or personalize advertising.

Where processing amounts to solely automated decision-making with legal or similarly significant effects, we will provide the information and safeguards required by applicable law, including relevant review or challenge rights.

Store-specific disclosure: [CONFIRM WHETHER SUCH DECISIONS OCCUR; IF THEY DO, DESCRIBE THE PURPOSE, MEANINGFUL INFORMATION ABOUT THE LOGIC, EXPECTED EFFECTS, AND AVAILABLE SAFEGUARDS].

16. Complaints

You may contact us about any privacy concern at mywisewalk@gmail.com.

Where applicable, you may also complain directly to a competent data protection authority without first contacting us.

In Spain, the supervisory authority is the Spanish Data Protection Agency — AEPD.

Individuals in other EEA countries may contact their relevant supervisory authority. In the United Kingdom, they may contact the Information Commissioner’s Office.

17. Third-Party Websites

Our website may link to external services with their own privacy practices. Review their notices before providing information.

The presence of an external link does not remove any responsibility we have for disclosures or processing that we initiate.

18. Changes to This Policy

We may update this policy when our practices, services, or legal obligations change.

We will update the date above and provide additional notice where required. If a new processing activity requires consent, publishing an updated policy does not replace obtaining that consent.

19. Contact

For questions or privacy requests:

WiseWalk — [FULL LEGAL NAME OF CONTROLLER]
Email: mywisewalk@gmail.com
Postal address: [FULL BUSINESS ADDRESS, INCLUDING COUNTRY]