Privacy Policy
Privacy Policy
Last updated: September 11, 2026
The short version
We collect what we need to take your order, deliver it, and answer your questions. We use Shopify to run this store, and they process data on our behalf. We do not sell your data for cash. You can ask us what we hold on you, correct it, or have it deleted. Just email us. You can opt out of personalised advertising at any time.
The full detail is below.
1. Who we are
Nolina Boutique operates this store and website, including all related content, features, tools, products and services (the "Services"). Our store runs on Shopify.
This Privacy Policy explains how we collect, use and share your personal information when you visit the Services, buy something, or get in touch. Where this policy and our Terms of Service disagree about personal information, this policy wins.
By using the Services you confirm you have read and understood this policy.
2. What we collect
"Personal information" means information that identifies you or can reasonably be linked to you. Anonymous or de-identified data is not included.
Depending on how you use the Services, we may collect:
- Contact details - name, email address, phone number, billing and shipping address
- Payment information - card and account details, transaction records, payment confirmations
- Account information - username, password, preferences and settings
- Shopping activity - what you view, add to your cart or wishlist, buy, return or exchange
- Messages - anything you send us, for example a customer support email
- Device information - your device, browser, network connection, IP address and similar identifiers
- Usage information - how and when you move around the Services
3. Where it comes from
- Directly from you - when you order, create an account, or contact us
- Automatically - from your device and through cookies and similar technologies
- From our service providers - when they process information on our behalf
- From our partners and other third parties
4. What we use it for
Running the store. Taking payment, fulfilling and shipping your order, handling returns and exchanges, managing your account, sending order updates, remembering your preferences, and recommending products.
Marketing. Sending you promotional email or post, and showing you online ads, including ads based on what you have previously viewed or bought.
Security and fraud prevention. Verifying your account, keeping payments secure, and investigating suspicious or illegal activity. If you create an account, keeping your password safe is your responsibility. Please do not share it.
Support. Answering your questions and maintaining our relationship with you.
Legal reasons. Complying with the law, responding to valid legal requests, and enforcing our terms.
5. Who we share it with
- Shopify and our service providers - payment processing, fulfilment and shipping, IT, analytics, customer support and cloud storage
- Advertising and marketing partners - including Shopify's personalised advertising, which uses your activity across different merchants and sites. These partners use your information under their own privacy notices. You can opt out of this at any time on our Your Privacy Choices page.
- Third parties you ask us to share with - for example a carrier delivering your parcel, or a social login you choose to use
- In a business transaction - such as a merger or insolvency, and where we need to comply with a legal obligation, enforce our terms, or protect our rights and the rights of others
We do not sell your personal information for money.
6. Shopify
The Services are hosted by Shopify, which collects and processes information about your use of the store in order to provide and improve it. That information may be transmitted to Shopify and to third parties in other countries.
Shopify also uses data from your interactions with our store, other merchants, and Shopify itself to power certain enhanced features. For those features Shopify is responsible for processing your information, including handling your requests about it.
More detail is available in the Shopify Consumer Privacy Policy at shopify.com/legal/privacy/app-users and the Shopify Privacy Portal at privacy.shopify.com/en.
7. Your rights
Depending on where you live, you may have the right to:
- Know and access - what personal information we hold about you
- Delete - the personal information we hold about you
- Correct - anything that is inaccurate
- Receive a copy - of your information, or have it transferred to someone else
- Opt out - of the sale or sharing of your information for targeted advertising, on our Your Privacy Choices page
- Unsubscribe - from marketing email using the link at the bottom of any message. We may still send you non-promotional messages about your orders or account.
These rights are not absolute, and in some cases we may decline a request where the law allows it.
If you visit our site with the Global Privacy Control signal enabled, we treat that as an opt-out request for that browser and device, and for your account where we can match it. We do not act on other "Do Not Track" signals. You can read more about GPC at globalprivacycontrol.org.
To exercise any of these rights, email us using the details at the bottom of this page. We may need to verify your identity first. You can appoint someone to act on your behalf, but we will ask for proof of that authorisation. We will not treat you differently for exercising your rights, and we will respond within the time the law requires.
8. Children
The Services are not intended for children, and we do not knowingly collect personal information from anyone under the age of majority where they live. If you are a parent or guardian and believe your child has given us their information, email us and we will delete it.
As of the date of this policy, we have no actual knowledge that we share or sell the personal information of anyone under 16.
9. Security and how long we keep your information
No security measure is perfect, and information you send us may not be secure in transit, so please do not send us sensitive or confidential information through unsecured channels.
How long we keep your information depends on why we have it: maintaining your account, providing the Services, meeting legal obligations, resolving disputes, or enforcing our policies.
10. Links to other sites
The Services may link to sites we do not control. We are not responsible for their privacy practices or the accuracy of what is on them, and a link is not an endorsement. Check their policies before sharing anything with them.
Anything you post publicly, including on social platforms, may be visible to others and reused by them.
11. International transfers
We may transfer, store and process your personal information outside the country you live in. Where we transfer information out of the European Economic Area or the United Kingdom, we rely on recognised safeguards such as the European Commission's Standard Contractual Clauses, unless the destination country has been found to offer adequate protection.
12. Complaints
If you are unhappy with how we handle your information, email us first. We would rather fix it directly. Depending on where you live, you may also have the right to appeal our decision, or to complain to your state attorney general or local data protection authority.
13. Changes to this policy
We may update this policy to reflect changes in our practices or for legal or operational reasons. We will post the new version here, update the date at the top, and give notice where the law requires it.
14. Contact