Privacy policy

1. Personal Information We Collect or Process

"Personal information" means information that identifies, relates to, describes, or can reasonably be linked to an identified or identifiable person. It does not include information that has been lawfully anonymized or de-identified so that it can no longer reasonably identify or be linked to an individual.

Depending on how you interact with the Services and where you reside, we may collect or process the following categories of personal information:

• Contact information: such as your name, billing and shipping addresses, email address, and telephone number.
• Order and transaction information: such as products viewed or purchased, order history, returns, exchanges, cancellations, warranty requests, shipping information, and transaction status.
• Account information: such as login credentials, account identifiers, preferences, and account settings.
• Payment information: such as payment method, billing information, payment confirmation, and transaction details. Payment card information is generally processed directly by Shopify and authorized payment providers. ThirdReality may receive limited payment and transaction information but does not ordinarily receive complete payment card credentials.
• Communications: including information contained in customer service requests, warranty claims, survey responses, and other messages you send to us.
• Device and network information: such as browser type, device type, operating system, IP address, network connection, and other online identifiers.
• Usage information: such as pages viewed, links selected, products viewed, cart activity, access times, referring pages, and interactions with the Services.
• Marketing preferences: including your choices regarding promotional communications and personalized advertising.
• Inferences: such as likely product interests or preferences derived from the information described above, where permitted by law.

2. Sources of Personal Information

We may obtain personal information from the following sources:

• Directly from you: when you browse or use the Services, create an account, place an order, submit a return or warranty request, subscribe to communications, or contact us.
• Automatically: through cookies, pixels, log files, and similar technologies when you use the Services.
• From Shopify and service providers: including payment processors, analytics providers, customer support providers, fulfillment providers, and shipping carriers that support our operations.
• From business and marketing partners: where permitted by law and consistent with your privacy choices.

3. Cookies and Similar Technologies

We and our service providers use cookies, pixels, local storage, and similar technologies to operate the Services, maintain security, remember preferences, understand website performance, and, where permitted, support analytics and advertising.

Where required, we request consent before using non-essential technologies. You may manage available choices through the cookie banner or privacy controls displayed on the Services and through your browser settings. Disabling certain technologies may affect the availability or performance of some features.

Where required by applicable law, we recognize and process supported Global Privacy Control signals as requests to opt out of the sale or sharing of personal information or targeted advertising for the browser and device sending the signal.

4. How We Use Personal Information

We may use personal information for the following purposes:

• Providing the Services: including processing payments and orders, arranging delivery, maintaining customer accounts, providing order updates, and handling returns, exchanges, warranty claims, and customer support.
• Improving and personalizing the Services: including analyzing performance, troubleshooting, improving navigation, and presenting products or content that may be relevant to you.
• Communicating with you: including responding to inquiries and sending service-related, transactional, safety, or account communications.
• Marketing and advertising: including sending promotional email communications and measuring or personalizing advertising, where permitted by law and consistent with your choices.
• Security and fraud prevention: including authenticating accounts, protecting transactions, detecting and investigating suspected fraud or misuse, and maintaining the integrity of the Services.
• Legal and compliance purposes: including complying with law, responding to valid legal process, enforcing our terms and policies, protecting legal rights, and resolving disputes.

5. Legal Bases for Processing

If you are located in the European Economic Area, the United Kingdom, Switzerland, or another jurisdiction that requires a legal basis for processing, we process personal information only when an applicable legal basis exists. Depending on the purpose, the legal basis may be performance of a contract with you, compliance with a legal obligation, our legitimate interests or those of a third party, or your consent.

Our legitimate interests may include operating and improving the Services, preventing fraud, protecting our business and customers, and conducting proportionate marketing and analytics. Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

6. How We Disclose Personal Information

We may disclose personal information when reasonably necessary for the purposes described in this Privacy Policy, including to:

• Shopify and service providers: that provide ecommerce hosting, information technology, analytics, cloud storage, customer support, fraud prevention, and other operational services.
• Payment processors and financial institutions: to authorize, process, settle, and protect transactions.
• Fulfillment providers and shipping carriers: to prepare, ship, deliver, track, and, where applicable, return orders.
• Advertising and marketing partners: to measure campaigns or provide advertising, subject to applicable law and your privacy choices.
• Professional advisers and authorities: including lawyers, accountants, auditors, insurers, regulators, courts, law enforcement, and government agencies when disclosure is legally required or reasonably necessary to protect rights, safety, or security.
• Affiliates and transaction counterparties: in connection with a merger, financing, reorganization, sale of assets, insolvency, or similar corporate transaction.
• Other recipients at your direction: when you request, direct, or consent to the disclosure.

We do not permit service providers to use personal information for purposes unrelated to the services they provide to us, except as permitted or required by law.

7. Relationship with Shopify

The Services are hosted by Shopify. Shopify collects and processes personal information concerning your access to and use of the Services in order to provide and improve its platform and related services. Information submitted through the Services may be transmitted to Shopify and other service providers located in countries other than your country of residence.

Where Shopify processes personal information for its own purposes, Shopify is responsible for that processing and for responding to applicable requests concerning its use of the information. Additional information is available in the Shopify Consumer Privacy Policy at https://www.shopify.com/legal/privacy/app-users and through the Shopify Privacy Portal at https://privacy.shopify.com/.

8. Sale, Sharing, and Targeted Advertising

We do not knowingly sell personal information in exchange for money. However, certain disclosures of online identifiers, device information, or usage information to advertising or analytics partners may be considered a "sale," "sharing," or processing for "targeted advertising" under some privacy laws.

Where applicable, you may request to opt out by emailing support@thirdreality.com with the subject line "Privacy Opt-Out." You may also use any "Your Privacy Choices" link made available on the Services. Where required by law, we honor supported Global Privacy Control signals. Shopify-related privacy choices may also be submitted through https://privacy.shopify.com/.

9. Third-Party Websites and Services

The Services may contain links to websites, applications, or platforms operated by third parties. We do not control and are not responsible for the privacy, security, accuracy, or practices of those third parties. You should review the privacy notices and terms that apply to any third-party service you choose to use.

Information you post in public or semi-public spaces, including third-party social networks or community forums, may be visible to other users and may be used by those users or platform operators. The inclusion of a third-party link does not, by itself, constitute endorsement of that third party.

10. Children's Privacy

The Services are not directed to children, and we do not knowingly collect personal information from children under the age of majority in their jurisdiction. If you are a parent or legal guardian and believe that a child has provided personal information to us, please contact us so that we can review and, where appropriate, delete the information.

As of the date of this Privacy Policy, we do not have actual knowledge that we sell or share, as those terms are defined by applicable law, the personal information of individuals under 16 years of age.

11. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please do not send sensitive or confidential information through unsecured channels. You are responsible for maintaining the confidentiality of your account credentials and for notifying us if you suspect unauthorized account activity.

12. Retention of Personal Information

We retain personal information for as long as reasonably necessary to provide the Services, maintain accounts, complete transactions, provide warranty and customer support, comply with legal and accounting obligations, prevent fraud, resolve disputes, and enforce agreements. Retention periods vary according to the type of information, the purpose for which it was collected, applicable limitation periods, and legal requirements. When information is no longer required, we take reasonable steps to delete or de-identify it, subject to lawful exceptions.

13. Your Rights and Choices

Depending on your location, you may have some or all of the following rights, subject to applicable exceptions and limitations:

• Access or knowledge: to request information about the personal information we maintain and how it is processed.
• Correction: to request correction of inaccurate personal information.
• Deletion: to request deletion of personal information, subject to lawful retention requirements.
• Portability: to request a copy of certain personal information in a portable format.
• Restriction or objection: to request restriction of, or object to, certain processing.
• Opt-out: to opt out of sale, sharing, targeted advertising, or certain profiling where applicable.
• Withdraw consent: to withdraw consent where processing is based on consent.
• Appeal: to appeal a decision concerning a privacy request where applicable law provides that right.

To exercise a right, contact us at support@thirdreality.com. Please describe your request and provide sufficient information for us to locate the relevant records. We may need to verify your identity before completing a request. An authorized agent may submit a request where permitted by law, but we may require proof of authorization and direct identity verification.

We will respond within the period required by applicable law. We will not discriminate against you for exercising a privacy right. Rights are not absolute, and we may deny or limit a request where permitted by law, in which case we will provide an explanation when required.

You may opt out of promotional emails by using the unsubscribe link in the message. Even after opting out of promotional communications, you may continue to receive non-promotional messages concerning orders, accounts, safety, or customer service.

14. Complaints

If you have a concern about our handling of personal information, please contact us first so that we can review it. Depending on your location, you may have the right to appeal our response or lodge a complaint with a competent data protection authority. A list of European Economic Area supervisory authorities is available at https://edpb.europa.eu/about-edpb/about-edpb/members.

15. International Transfers

We and our service providers may transfer, store, and process personal information outside your country of residence. Where required, we use recognized safeguards for international transfers, such as adequacy decisions, the European Commission's Standard Contractual Clauses, the United Kingdom's approved transfer mechanisms, or another legally recognized safeguard.

16. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to our practices, the Services, or legal and regulatory requirements. We will post the revised version on the Services, update the "Last updated" date, and provide additional notice when required by law. Your use of the Services after an update is subject to the revised Privacy Policy to the extent permitted by law.

17. Contact

If you have questions about this Privacy Policy or our privacy practices, or if you would like to exercise a privacy right, please contact us by email at support@thirdreality.com or by telephone at +1 800-341-9616.

For purposes of applicable data protection laws, ThirdReality is the controller of the personal information described in this Privacy Policy.