BUDDHASOUL operates this store and website, including all related information, content, features, tools, products, and services, designed to provide you, the customer, with a curated shopping experience (the "Service"). BUDDHASOUL is powered by Shopify, which enables us to provide you with the Service. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Service, or otherwise communicate with us. If there is any conflict between our Terms of Service and this Privacy Policy, this Privacy Policy will govern the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described herein.

Section 1 — Personal Information We Collect or Process

When we use the term "Personal Information," we mean information that identifies you or another person or can reasonably be associated with you or another person. Personal Information does not include information that is anonymously collected or de-tokenized, so that it cannot identify or reasonably be associated with you. We may collect or process the following categories of Personal Information, including inferences drawn from such Personal Information, about how you interact with the Services, where you live, and as permitted or required by applicable law:

• Contact Information includes your name, address, billing address, shipping address, phone number, and email address.
• Information includes credit card, debit card, and financial account numbers, payment card information, financial account information, transaction details, payment method, payment confirmation, and other payment financial details.
• Account Information includes your username, password, security questions, preferences, and settings.
• Transaction Information includes items you view, items added to your shopping cart, items added to your wish list, items purchased, items returned, items exchanged, or items canceled, as well as your transactions.
• Communications with us includes information you include in your communications with us, for example, when sending customer support inquiries.
• Device Information, including information about your device, browser, or network connection, your IP address, and other unique identifiers.
• Usage Information includes information about your interactions with the Services, including how and when you interact with or browse the Services.

Section 2 — Sources of Personal Information

We may collect personal information from the following sources:

• Directly from you, including when you create an account, access or use the Services, communicate with us, or otherwise provide us with your personal information;
• Automatically through the Services, including from your device when you use our products or services or visit our websites, and through the use of cookies and similar technologies;
• From our service systems, including when we engage them to enable certain technologies and when they collect or process your personal information on our behalf;
• From our partners or other third parties.

Section 3 - Consent and Withdrawal

When you provide us with personal information to complete a transaction, verify your credit card, place an order, arrange for a delivery, or return a purchase, we assume you consent to the collection and use of your information for that specific purpose only.

If we ask for your personal information for a secondary reason (such as marketing), we will either directly ask for your express consent or provide you with an opportunity to opt out.

If you change your mind after opting in, you may withdraw your consent for us to contact you and for the continued collection, use, or disclosure of your information at any time by contacting us at hello@buddhaandsoul.com. For text message marketing, you can also opt out by replying "TD" to any marketing message you receive.

If you text "TD" to our short code, you will receive a final message confirming that your opt-out request has been processed. Please note that we will only send text messages to your mobile device with your express consent.

Section 4 — How We Use Your Personal Information

Depending on the purpose of your interaction with us or the Services you use, we may use your Personal Information for the following purposes:

• Providing, customizing, and improving the Services. We use your Personal Information to provide you with the Services, including fulfilling our contract with you, processing your payments, fulfilling your orders, remembering your preferences and items of interest, sending you notifications related to your account, processing purchases, returns, exchanges, or other transactions, creating, maintaining, and managing your account, arranging shipments, facilitating any returns and exchanges, enabling you to post reviews, and customizing your shopping experience, such as recommending items related to your purchase. This may include using your Personal Information to better customize and improve the Shopping Services.
• Marketing and Advertising. We use your Personal Information for marketing and promotional purposes, such as sending marketing, advertising, and promotional communications via email, text message, or post, and showing you online advertisements for products or services on the Services or other websites, including based on items you have previously purchased or added to your shopping cart and other activity on the Services.

Email Marketing (if applicable): With your permission, we may send you emails about our store, new products, and other updates.

SMS Marketing (if applicable): With your consent, we may use your phone number to send you marketing messages via SMS. These messages may include promotions, updates, and other marketing information related to our products and services. Your phone number will not be shared with third parties or affiliated companies for their own marketing purposes. You can opt out of receiving these messages at any time by following the unsubscribe instructions provided in the message.

• Security and Fraud Prevention. We use your personal information to verify your account, provide a secure payment and shopping experience, detect, investigate, or take action regarding potentially fraudulent, illegal, unsafe, or malicious activity, protect public safety, and ensure the security of our Services. If you choose to use the Services and register an account, you are responsible for keeping your account secure. We strongly recommend that you do not share your username, password, or other access information with anyone.
• Communications with You. We use your personal information to provide you with customer support, respond to you promptly, provide you with efficient service, and maintain our business relationship with you.
• Legal Reasons. We use your personal information to comply with applicable laws or respond to valid legal process (including requests from law enforcement or government agencies), to investigate or participate in civil discovery, potential or actual litigation or other adversarial proceedings, and to enforce or investigate potential violations of our terms or policies.

Section 5 - How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties for lawful purposes, consistent with this Privacy Policy. These circumstances may include:

• With Shopify, vendors, and other third parties who provide services on our behalf (such as IT management, payment processing, data analytics, customer support, cloud storage, fulfillment, and shipping).
• With business and marketing partners to facilitate the provision of marketing services and advertising. For example, we use Shopify to support third-party services that personalize advertising based on your online activity across merchants and websites. Our business and marketing partners will use your information in accordance with their respective privacy statements. Depending on where you live, you may have the right to request that we not share your information so that we can display targeted advertising and marketing messages based on your online activity across merchants and websites.
• When you direct, request, or otherwise consent to our disclosure of certain information to third parties, such as to send you products or through your use of social media widgets or login integrations.
• With our subsidiaries or other companies within our corporate group.
• In connection with business transactions such as a merger or bankruptcy, to comply with any applicable legal obligations (including responding to subpoenas, search warrants, and similar requests), to enforce any applicable terms of service or policies, and to protect or defend the Service, our rights, and the rights of our users or others.

Section 6 — Relationship with Shopify

Our store is hosted by Shopify, which provides us with the online e-commerce platform that enables us to sell our products and services to you. Your data is stored through Shopify's data storage, databases, and the general Shopify application. They store your data on secure servers behind firewalls.

Section 7 — Third-Party Websites and Links

In general, the third-party providers we use will only collect, use, and disclose your information to the extent necessary to enable them to perform the services they provide to us. However, certain third-party service providers (such as payment gateways and other payment transaction processors) have their own privacy policies regarding the information we are required to provide to them for your purchase-related transactions.

For these providers, we encourage you to read their privacy policies so that you can understand how they will handle your personal information. In particular, some of these providers may be located in, or have facilities located in, a jurisdiction that is different from yours or ours. Therefore, if you elect to proceed with a transaction that involves the services of a third-party service provider, your information may become subject to the laws of the jurisdiction in which that service provider or its facilities are located. For example, if you are located in Canada and your transaction is processed by a payment gateway located in the United States, your personal information used to complete that transaction may be subject to disclosure under United States law, including the Patriot Act.

Once you leave our store's website or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy or our website's Terms of Service.

When you click on links from our store, they may take you away from our website. We are not responsible for the privacy practices of other websites and encourage you to read their privacy statements.

Our store uses Google Analytics to help us understand who visits our website and which pages are being viewed.

Section 8 - Security and Retention of Your Information

Please note that no security measures are perfect or impenetrable, and we cannot guarantee absolute security. Furthermore, any information you send to us may be subject to security risks during transmission. We recommend that you do not submit sensitive or confidential information to us through unsecured channels.

How long we retain your personal information depends on various factors, such as whether we need the information to maintain your account, provide you services, comply with legal obligations, resolve disputes, or enforce other applicable contracts and policies.

To protect your personal information, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered, or destroyed.

If you provide us with your credit card information, it will be encrypted using Secure Sockets Layer (SSL) technology and stored with an AES-256 encryption. While no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement other generally accepted industry standards.

Section 9 - Your Rights and Choices

Depending on where you live, you may have some or all of the following rights with respect to your personal information. However, these rights are not absolute and may only apply in specific circumstances. In some cases, we may deny your request as permitted by law.

• Right to Access/Information. You have the right to request access to the personal information we hold about you.
• Right to Deletion. You can request that we delete the personal information we hold about you.
• Right to Correction. You can request that we correct inaccurate personal information we hold about you.
• Right to Portability. Under certain circumstances and certain exceptions, you have the right to obtain a copy of the personal information we hold about you and request that we transfer it to a third party.
• Managing Your Communication Preferences. We may send you promotional emails, and you can opt out of receiving these emails at any time by using the unsubscribe option displayed in emails we send you. Even if you opt out, we may still send you non-email promotional messages, such as emails about your account or orders you have placed.

You can exercise these rights without charge in protected locations or by contacting us using the contact information provided below. For more information on how Shopify uses your personal information and any rights you may have, including rights regarding the data Shopify processes, please visit https://privacy.shopify.com/en.

Your rights will not be limited simply because you do not have any of the rights described above. As permitted or required by applicable law, we may need to verify your identity when processing your request. Under applicable law, you may designate an authorized agent to make a request on your behalf to safeguard your rights. When accepting such a request from an agent, we will require the agent to provide proof of your authorization to process your personal data on your behalf, and we may require you to verify your identity directly with us before doing so. We will respond to your request promptly, as required by applicable law.

Section 10 - Age Verification

By using this Site, you represent that you are at least the age of majority in your state or province, or that you are the age of majority in your state or province, and you have given us your consent to allow any of your minor dependents to use this Site.

Section 11 - Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time, so please review it frequently. Changes and clarifications will be effective immediately upon posting them on the Site. If we make material changes to this Policy, we will notify you here so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use or disclose it.
If our store is acquired or merged with another company, your information may be transferred to the new owners so that we can continue to sell products and services to you.

Section 12 - Contact Us

If you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any rights, please email us at hello@buddhaandsoul.com.