Privacy at Dropshipping Store

Overview

Dropshipping Store uses information to run this storefront, manage customer accounts and orders, respond to support requests, and provide optional store updates. This notice applies when you browse or use features on this website.

Some information is needed to provide a feature you request, such as processing an order or answering a message. If you choose not to provide it, that feature may not be available.

Information we collect

The information depends on how you use the store. It may include:

• Account information: name, email address, phone number, and a password stored as a password hash when you create an account.
• Saved address book details: address labels, recipient name, phone number, street address, city, region, postal code, and country that you choose to save in your account.
• Order and delivery information: products purchased, order totals, contact details, billing and delivery addresses, shipping selection, and order or payment status.
• Support messages: the name, email address, selected topic, optional order reference, and message you submit through the contact form.
• Newsletter information: your email address and subscription status if you sign up for store updates.
• Product reviews: the rating, title, and comment you submit while signed in. Reviews may be moderated before appearing on a product page.
• Technical and session information: session identifiers and security tokens needed for the cart, account session, and form protection. Your browser may also store your selected theme preference.
• Visit information: when you browse the storefront, signed in or not, we record a random visitor identifier stored in a cookie, your IP address, browser user agent, the pages you view, the referring page, and when you visited. We use this to count visitors and understand how the store is used.

Do not include passwords, full payment card numbers, security codes, or other sensitive authentication details in a support message or review.

How we use information

We use information for purposes connected to the features you use, including to:

• create and secure customer accounts, authenticate sign-ins, and show account or order information;
• maintain a cart, calculate order totals, create orders, and coordinate payment and fulfillment;
• contact you about an order, delivery, account issue, support request, or review you submitted;
• send store updates to people who subscribe and maintain their subscription status;
• protect the website, troubleshoot errors, and maintain records needed to operate the store; and
• meet applicable legal obligations or respond to valid legal requests.

Payments and orders

When you place an order, the store records details such as items, amounts, currency, customer contact information, delivery addresses, and payment status. An order record may also contain a payment gateway name or transaction reference.

Available payment methods and the provider handling a transaction are shown during checkout when configured. A payment provider may receive information needed to authorize or complete payment and will handle that information under its own privacy notice. Review the provider's terms before submitting payment details.

Do not send card details through the contact form. For a payment question, share only the order number or payment reference requested by support.

Sessions, cookies, and preferences

The storefront uses a PHP session to support features such as your cart, sign-in state, and form security. The session cookie is configured as HttpOnly and SameSite=Lax, and is marked Secure when the site is accessed over HTTPS.

A first-party store_visitor cookie holds a random identifier for up to one year so we can count returning visitors without requiring an account. It is HttpOnly and SameSite=Lax and is not shared with other websites. Clearing your cookies resets it.

If you turn on two-step verification and choose "Trust this device", a store_trusted_device cookie lets that browser skip the verification code for 30 days. We store only a hash of it with your account, plus the browser and IP address used. You can forget all trusted devices from Login Security, and changing your password also forgets them.

Your selected light or dark appearance is stored in your browser's local storage so it can be remembered on a later visit. This preference stays in your browser and is not needed to complete an order.

Blocking session cookies or clearing browser storage may sign you out, empty a session-based cart, or require you to submit a form again. Browser settings can be used to clear or restrict stored data.

When information is shared

Information may be made available to service providers when needed to operate the store and complete a request. Depending on the service used, these parties may include:

• website hosting, database, and technical providers that help operate the storefront;
• payment providers involved in checkout or transaction confirmation;
• suppliers, shipping, or fulfillment partners that need order and delivery details to prepare or deliver an order; and
• email or communications services used to deliver a response or a requested store update; and
• Google Fonts, which provides typefaces used by the storefront. Your browser may connect to Google's font servers and share standard connection information such as your IP address.

Information may also be disclosed when required by law, to address fraud or security concerns, or to protect the rights and safety of customers and the store. Service providers may have their own privacy notices and may process information in locations different from yours.

How long we keep it

Information is kept for as long as reasonably needed for the purpose it was collected, including to maintain an account, complete and support an order, maintain newsletter status, resolve a dispute, protect the store, or meet record-keeping obligations. Retention periods can differ by record type and legal requirements.

Session data is managed by the website session system and browser. You can contact us to ask about information associated with your account or request deletion, subject to information we need to retain for operational or legal reasons.

Security

The store uses safeguards such as password hashing, session protections, and CSRF checks on supported forms. No website, network, or storage method can be guaranteed completely secure. Use a unique password, sign out on shared devices, and contact us if you believe your account has been accessed without permission.

Before entering account or checkout information, check that your browser is connected over HTTPS.

Your choices and rights

Depending on where you live, privacy laws may give you rights to request access to, correction of, deletion of, or a copy of personal information, or to object to or limit certain processing. These rights may have exceptions, including where information must be retained to complete an order or meet legal obligations.

You can update some account details by signing in. To ask a privacy question, correct information you cannot edit, request account deletion, or stop newsletter updates, contact us through the Contact page. Tell us which email address or account the request concerns, but do not send your password or full payment details.

Children's privacy

This storefront is intended for people who can make purchases or use the store with a parent or guardian where required. We do not knowingly request that children provide personal information independently. A parent or guardian who believes a child has provided information may contact us to discuss appropriate next steps.

Changes to this notice

Store features and legal requirements can change. When this notice is updated, the revised version will be published on this page. Please review it from time to time, especially when using a new store feature.