Privacy Policy

Last Updated: July 22, 2026

Spalace operates this online store and website, including the related information, content, features, products, tools, and services offered through the website, collectively referred to as the “Services.”

Spalace is powered by Shopify, which provides the ecommerce platform that enables us to offer the Services.

This Privacy Policy explains how the operator of Spalace, referred to as “Spalace,” “we,” “us,” or “our,” collects, uses, processes, retains, and discloses personal information when you:

• Visit or browse our website

• Create or use a customer account

• Place or attempt to place an order

• Make a payment

• Request shipping, delivery, a return, or a refund

• Subscribe to marketing communications

• Submit a review or other content

• Contact customer support

• Otherwise interact with the Services

This Privacy Policy should be read together with our Terms of Service, Shipping & Delivery Policy, Return & Refund Policy, Your Privacy Choices page, and other notices displayed through the Services.

If this Privacy Policy conflicts with our Terms of Service regarding the collection, use, processing, retention, or disclosure of personal information, this Privacy Policy will control for that subject.

Please read this Privacy Policy carefully. By using the Services, you acknowledge that you have reviewed and understood the practices described in this policy.

Your rights may vary depending on your location. Nothing in this Privacy Policy is intended to restrict any privacy right that cannot legally be restricted.

1. Who Is Responsible for Your Personal Information

The operator of Spalace is generally responsible for deciding how and why personal information collected directly through the Spalace store is processed.

Depending on the particular activity, Shopify and certain other providers may process personal information:

• On our behalf as service providers or processors

• For their own independent purposes

• As separate or joint controllers where applicable law recognizes those roles

Additional information about Shopify’s processing practices and privacy controls is available through Shopify’s own privacy notices and privacy portal.

2. What Personal Information Means

For purposes of this Privacy Policy, “personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or can reasonably be linked to an identifiable individual or household.

Personal information does not generally include information that has been lawfully:

• Aggregated

• Anonymized

• De-identified

• Modified so that it cannot reasonably be linked to an individual

The exact legal definition may vary depending on applicable law.

3. Categories of Personal Information We May Collect

The personal information we collect depends on how you interact with Spalace, the products or features you use, your location, and the technologies enabled on our website.

We may collect or process the following categories of information.

Contact Information

This may include:

• Full name

• Email address

• Telephone number

• Billing address

• Shipping address

• Country or region

• Delivery instructions

• Other contact details you provide

A telephone number may be collected when needed for order verification, delivery, carrier communication, fraud prevention, or customer support.

Order and Transaction Information

This may include:

• Products viewed

• Products placed in a shopping cart

• Products saved or added to a wishlist

• Products purchased

• Order number

• Order date

• Purchase amount

• Discount information

• Shipping method

• Delivery status

• Tracking information

• Returns

• Refunds

• Exchanges

• Cancellations

• Past transaction history

• Product preferences

Payment Information

Payment information may include:

• Payment method

• Billing information

• Payment status

• Transaction reference

• Payment authorization result

• Fraud-screening information

• Partial payment-card details, such as card type or last digits, where provided by the payment processor

Payment card information is generally processed directly by Shopify Payments or another third-party payment provider.

Spalace does not ordinarily receive or store complete payment-card numbers or card security codes.

Account Information

If customer account functionality is available, information may include:

• Username

• Account email

• Encrypted or protected account credentials

• Saved addresses

• Order history

• Account preferences

• Wishlist information

• Communication settings

• Security information

• Account activity

You are responsible for maintaining the confidentiality of your account credentials.

Customer Support and Communications

When you contact us, we may collect:

• The content of your message

• Your name and contact information

• Order details

• Product questions

• Return or refund information

• Photographs

• Videos

• Shipping-label images

• Packaging images

• Product-condition information

• Other documents or information you choose to provide

Please do not send passwords, complete payment-card numbers, bank login credentials, government identification documents, medical information, or other unnecessary sensitive information unless we specifically and lawfully request it.

Device and Technical Information

This may include:

• IP address

• Browser type

• Device type

• Operating system

• Internet service or network information

• Device identifiers

• Cookie identifiers

• Advertising identifiers

• Language settings

• Time zone

• Approximate location derived from an IP address

• Referring website

• Technical logs

• Website error information

Website Usage Information

This may include information about:

• Pages visited

• Products viewed

• Search terms

• Links selected

• Time spent on pages

• Navigation patterns

• Shopping cart activity

• Checkout activity

• Advertising interactions

• Email interactions

• Website session activity

• Dates and times of visits

Marketing and Advertising Information

This may include:

• Marketing preferences

• Email subscription status

• Advertisement interactions

• Products viewed

• Products purchased

• Shopping interests

• Cookie or advertising identifiers

• Inferences about likely interests

• Campaign attribution information

Reviews and User-Submitted Content

If you submit a review, photograph, question, comment, or other content, we may collect:

• Your display name

• Review text

• Rating

• Product information

• Submitted images or videos

• Date of submission

• Verification information

• Any personal information included in the content

Reviews may be displayed publicly or shared with review-service providers as described at the time of submission.

Do not include sensitive or unnecessary personal information in a public review.

Fraud Prevention and Security Information

This may include:

• IP address

• Device information

• Payment verification results

• Billing and shipping address comparisons

• Transaction patterns

• Account activity

• Failed payment attempts

• Risk scores

• Evidence of suspected fraud

• Information received from payment or fraud-prevention providers

4. Sensitive Personal Information

Depending on applicable law, certain information may be considered sensitive personal information.

Spalace does not intentionally seek to collect sensitive personal information unless it is reasonably necessary to provide a requested service, complete a transaction, verify a claim, prevent fraud, comply with law, or protect safety.

Please do not voluntarily provide information concerning:

• Account passwords

• Full financial account credentials

• Government identification numbers

• Precise medical information

• Biometric information

• Racial or ethnic origin

• Religious beliefs

• Sexual orientation

• Immigration status

• Other highly sensitive matters

If sensitive information is collected, we will use it only for legally permitted purposes and retain it only as reasonably necessary.

5. Sources of Personal Information

We may collect personal information from the following sources.

Directly From You

We collect information directly from you when you:

• Place an order

• Enter information during checkout

• Create an account

• Contact customer support

• Request a return or refund

• Subscribe to marketing communications

• Submit a review

• Complete a form

• Participate in a promotion

• Otherwise provide information to us

Automatically Through the Services

We may collect information automatically when you use our website through:

• Cookies

• Pixels

• Tags

• Log files

• Analytics tools

• Local storage

• Advertising technologies

• Similar tracking technologies

From Shopify and Other Service Providers

We may receive information from providers that help us operate Spalace, such as:

• Shopify

• Payment processors

• Fraud-prevention providers

• Shipping carriers

• Warehouses

• Suppliers

• Fulfillment providers

• Analytics providers

• Advertising platforms

• Customer-support providers

• Email and communication providers

• Review platforms

• Cloud and hosting providers

From Business and Marketing Partners

We may receive information from advertising, analytics, social media, referral, affiliate, or marketing partners where permitted by law.

From Publicly Available or Lawful Sources

In limited circumstances, we may receive information from publicly available records, fraud-prevention databases, delivery records, legal processes, or other lawful sources.

6. How We Use Personal Information

We may use personal information for the following purposes.

Providing and Operating the Services

We may use personal information to:

• Operate the Spalace website

• Display products

• Maintain website functions

• Create and manage accounts

• Save customer preferences

• Provide shopping-cart and checkout functions

• Improve website usability

• Provide customer support

Processing Orders and Payments

We may use personal information to:

• Process purchases

• Authorize payments

• Confirm transactions

• Generate order confirmations

• Detect payment problems

• Prevent unauthorized transactions

• Issue refunds

• Maintain transaction records

Fulfilling and Delivering Orders

We may use or disclose information to:

• Confirm product availability

• Prepare orders

• Send products

• Generate shipping labels

• Arrange delivery

• Provide tracking information

• Facilitate customs processing

• Respond to carrier questions

• Investigate delayed or missing packages

Information required for fulfillment may be shared with suppliers, warehouses, manufacturers, fulfillment providers, shipping carriers, or customs intermediaries.

Handling Returns, Refunds, and Order Issues

We may use personal information to:

• Review return eligibility

• Issue return instructions

• Inspect return claims

• Process refunds or exchanges

• Review damaged or defective product claims

• Investigate missing components

• Prevent return fraud

• Maintain records of resolutions

Customer Support and Communication

We may use personal information to:

• Respond to questions

• Provide product information

• Resolve order concerns

• Communicate about shipping or returns

• Provide service notices

• Send account or security information

• Maintain a record of customer communications

Personalization and Store Improvement

We may use information to:

• Remember preferences

• Recommend related bathroom products

• Improve product organization

• Understand customer interests

• Improve website navigation

• Analyze shopping patterns

• Test website features

• Improve customer experience

• Evaluate product demand

Marketing and Advertising

Where permitted by law, we may use personal information to:

• Send promotional emails

• Display advertisements

• Measure advertising performance

• Personalize marketing

• Understand whether advertisements led to visits or purchases

• Create or measure customer audiences

• Recommend products based on previous activity

Where consent is required, we will seek consent before using information for the applicable marketing or advertising activity.

You may unsubscribe from promotional emails using the unsubscribe option in the message.

Even after unsubscribing from marketing, you may continue to receive non-promotional communications concerning orders, accounts, security, returns, refunds, or customer support.

Security and Fraud Prevention

We may use personal information to:

• Authenticate accounts

• Verify orders

• Prevent payment fraud

• Detect unauthorized transactions

• Protect customers

• Protect the website

• Investigate suspicious activity

• Enforce our policies

• Prevent abuse of discounts, refunds, or returns

• Maintain network and information security

Legal and Compliance Purposes

We may use or disclose personal information to:

• Comply with applicable laws

• Respond to valid legal process

• Respond to lawful government requests

• Maintain tax and transaction records

• Investigate legal claims

• Establish or defend legal rights

• Enforce contracts and policies

• Address safety concerns

• Cooperate with product recalls

• Protect the rights and safety of customers, Spalace, or others

7. Legal Bases for Processing

Where applicable law requires us to identify a legal basis, we may process personal information under one or more of the following grounds:

• Performance of a contract, such as processing and delivering an order

• Steps requested before entering into a contract

• Compliance with a legal obligation

• Our legitimate interests or those of another party

• Your consent

• Protection of vital interests

• Establishment, exercise, or defense of legal claims

• Another legal basis permitted by applicable law

Examples of legitimate interests may include:

• Operating and improving our store

• Preventing fraud

• Maintaining security

• Providing customer support

• Understanding store performance

• Protecting legal rights

Where processing relies on consent, you may withdraw that consent at any time. Withdrawal will not affect processing that lawfully occurred before consent was withdrawn.

8. Cookies and Similar Technologies

Spalace, Shopify, and other providers may use cookies and similar technologies.

These technologies may support:

• Website operation

• Shopping-cart functions

• Checkout

• Account login

• Security

• Fraud prevention

• Preference storage

• Analytics

• Advertising

• Marketing measurement

• Website performance

Cookies may be categorized as:

Necessary Cookies

These cookies support basic functions such as:

• Website navigation

• Shopping carts

• Checkout

• Payment processing

• Account security

• Fraud prevention

Necessary cookies may operate without optional consent where permitted by law.

Functional Cookies

These cookies may remember preferences and improve website functions.

Analytics Cookies

These cookies help us understand website use, traffic, product interest, and performance.

Advertising Cookies

These cookies may be used to measure advertising or display advertisements based on browsing activity.

Where required, optional cookies will be used only after obtaining appropriate consent.

You may manage applicable cookie choices through:

• The cookie banner

• Website privacy settings

• Browser settings

• Device settings

• Our Your Privacy Choices page

• A recognized Global Privacy Control signal where legally applicable

Blocking certain cookies may affect website functionality.

9. How We Disclose Personal Information

We may disclose personal information to the following categories of recipients for legitimate business, operational, contractual, or legal purposes.

Shopify

Our store is hosted and supported by Shopify.

Information submitted through the Services may be transmitted to and processed by Shopify to:

• Host the store

• Provide ecommerce functions

• Process checkout activity

• Improve platform services

• Prevent fraud

• Provide analytics

• Support enhanced Shopify features

• Provide other services used by Spalace

Shopify may process information in locations outside your country.

Payment Providers

We may share information with payment processors, banks, card networks, digital-wallet providers, or financial institutions to:

• Authorize payments

• Complete transactions

• Prevent fraud

• Process refunds

• Resolve payment disputes

Suppliers, Warehouses, and Fulfillment Providers

We may disclose necessary order information to suppliers, manufacturers, warehouses, and fulfillment partners to:

• Confirm availability

• Prepare orders

• Package products

• Ship products

• Process returns

• Resolve fulfillment issues

Shipping and Logistics Providers

Information such as your name, address, telephone number, order details, and delivery instructions may be shared with:

• Shipping carriers

• Postal services

• Customs intermediaries

• Freight providers

• Tracking providers

• Local delivery providers

Customer-Support Providers

We may use providers that assist with email, chat, ticketing, translation, support management, or customer communications.

Analytics and Technology Providers

We may disclose website and device information to providers that help us:

• Measure website performance

• Understand website activity

• Detect errors

• Improve security

• Analyze sales and customer behavior

• Maintain technical services

Advertising and Marketing Partners

Where permitted, we may disclose identifiers, website activity, product interests, purchase activity, or similar information to advertising and marketing partners.

Depending on applicable law, certain disclosures for cross-context behavioral advertising may be considered a “sale,” “sharing,” or “targeted advertising.”

Eligible individuals may opt out as described in our Your Privacy Choices page.

Professional Advisers

We may disclose information to:

• Attorneys

• Accountants

• Auditors

• Insurers

• Consultants

• Tax advisers

• Other professional advisers

Such disclosures may occur when reasonably necessary for professional services, compliance, risk management, or legal claims.

Government Authorities and Legal Recipients

We may disclose information when reasonably necessary to:

• Comply with law

• Respond to subpoenas, court orders, or warrants

• Cooperate with lawful investigations

• Report safety concerns

• Protect legal rights

• Prevent fraud or harm

Business Transactions

Information may be disclosed as part of a proposed or completed:

• Merger

• Acquisition

• Financing

• Reorganization

• Sale of assets

• Insolvency

• Bankruptcy

• Transfer of business operations

Any recipient will be expected to handle personal information consistently with applicable law.

With Your Direction or Consent

We may disclose information when you direct us to do so, request a service involving another party, or provide valid consent.

10. Sale, Sharing, and Targeted Advertising

Spalace does not ordinarily exchange personal information for money.

However, certain disclosures involving advertising or analytics technologies may be legally defined as:

• Sale of personal information

• Sharing of personal information

• Targeted advertising

• Cross-context behavioral advertising

Where applicable law grants an opt-out right, you may exercise it through:

• Our Your Privacy Choices page

• Available cookie or privacy controls

• A valid Global Privacy Control signal

• Emailing glissynugblit@gmail.com with the subject line “Privacy Choices Request”

An opt-out may apply only to the browser, device, or account associated with the request, depending on the technology used and applicable legal requirements.

You may continue to see advertising after opting out, but it may be less personalized.

11. Relationship With Shopify

Shopify collects and processes personal information relating to access to and use of Shopify-powered stores.

Information you submit through Spalace may be transmitted to Shopify and other providers in countries outside your place of residence.

Shopify may use information to:

• Provide and improve ecommerce services

• Operate checkout and payment functions

• Prevent fraud

• Maintain security

• Provide analytics

• Support network or enhanced commerce features

• Fulfill legal obligations

Certain Shopify features may use information about interactions with Spalace, Shopify, and other Shopify merchants.

For processing performed by Shopify for its own purposes, Shopify may be independently responsible for responding to applicable privacy requests.

Shopify provides a consumer privacy portal through which eligible individuals may request access, deletion, or certain advertising choices relating to data controlled by Shopify.

12. Third-Party Websites and Services

The Services may link to websites, applications, social networks, payment services, or other online platforms operated by third parties.

We do not control the independent privacy or security practices of those third parties.

Before providing information to a third-party service, review its:

• Privacy policy

• Terms of service

• Security practices

• Cookie settings

The inclusion of a link does not by itself mean that Spalace owns, controls, sponsors, or endorses the third party.

Information posted in a public review, social media page, community, or other public venue may be visible and used by others.

13. International Processing and Transfers

Personal information may be transferred to, stored in, or processed in countries other than the country in which you reside.

Those countries may have privacy and data-protection laws that differ from the laws in your jurisdiction.

Where required, international transfers may rely on recognized safeguards such as:

• Adequacy decisions

• Standard contractual clauses

• Contractual data-protection terms

• Legally recognized certifications

• Other lawful transfer mechanisms

Service providers may also process information in accordance with their own lawful transfer arrangements.

14. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

The retention period may depend on:

• Whether you maintain an account

• Whether an order or transaction remains active

• Return or warranty periods

• Customer-support needs

• Fraud-prevention requirements

• Legal or tax obligations

• Accounting requirements

• Payment disputes

• Product safety issues

• Litigation or legal claims

• Contractual requirements

• Applicable limitation periods

Examples of information we may need to retain include:

• Order records

• Payment confirmation records

• Refund records

• Shipping records

• Customer communications

• Fraud-prevention records

• Privacy-request records

• Tax and accounting information

When personal information is no longer reasonably required, we may delete, anonymize, aggregate, or securely dispose of it, subject to applicable law and technical limitations.

15. Security

We use reasonable administrative, organizational, contractual, and technical measures designed to protect personal information.

These measures may include:

• Access controls

• Account authentication

• Encryption in transit

• Payment-provider security

• Fraud monitoring

• Service-provider restrictions

• Security logging

• Staff or contractor access limitations

• Incident-response procedures

However, no website, network, database, transmission method, or storage system can be guaranteed to be completely secure.

You are responsible for:

• Protecting account credentials

• Using a strong and unique password

• Restricting access to your devices

• Logging out of shared devices

• Informing us of suspected unauthorized account activity

Do not send sensitive or confidential information through unsecured channels.

If we become aware of a personal information breach requiring notification, we will provide notice as required by applicable law.

16. Children’s Privacy

The Services are intended for a general audience and are not directed to children under 13.

We do not knowingly collect personal information directly from children under 13 without legally required parental or guardian authorization.

We do not knowingly sell or share the personal information of individuals under 16 where affirmative authorization is required by applicable law.

If you are a parent or legal guardian and believe that a child has provided personal information to Spalace, contact:

glissynugblit@gmail.com

Please use the subject line:

Child Privacy Request

We may request information reasonably necessary to verify the request and locate the relevant data.

17. Your Privacy Rights

Depending on where you live and applicable law, you may have some or all of the following rights.

These rights are not absolute and may be subject to legal exceptions.

Right to Know or Access

You may have the right to request:

• Confirmation that we process your personal information

• Access to personal information we maintain

• Information about categories of personal information

• Information about the purposes of processing

• Information about categories of recipients

Right to Delete

You may have the right to request deletion of certain personal information.

We may retain information where reasonably necessary or legally permitted for:

• Completing transactions

• Processing returns or refunds

• Maintaining tax records

• Preventing fraud

• Protecting security

• Resolving disputes

• Complying with legal obligations

• Establishing or defending legal claims

Right to Correct

You may have the right to request correction of inaccurate personal information.

Right to Data Portability

You may have the right to receive certain personal information in a portable and reasonably usable format.

Right to Opt Out

You may have the right to opt out of:

• Sale of personal information

• Sharing of personal information

• Targeted advertising

• Certain profiling activities

Right to Limit Certain Sensitive Information Uses

Where applicable, you may have the right to limit certain uses or disclosures of sensitive personal information.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw your consent at any time.

Right to Object or Restrict Processing

In certain jurisdictions, you may have the right to object to or request restriction of particular processing activities.

Right to Appeal

Residents of certain jurisdictions may have the right to appeal a denial or partial denial of a privacy request.

Right to Lodge a Complaint

You may have the right to submit a complaint to a competent privacy or data-protection authority.

18. How to Exercise Your Rights

To submit a privacy request, email:

glissynugblit@gmail.com

Use one of the following subject lines, where appropriate:

• Privacy Access Request

• Privacy Deletion Request

• Privacy Correction Request

• Privacy Choices Request

• Privacy Request Appeal

• Child Privacy Request

Please describe the request clearly and provide enough information for us to identify the relevant records.

Do not provide passwords, complete payment-card numbers, or unnecessary sensitive information.

We will acknowledge and respond to valid requests within the period required by applicable law.

19. Identity Verification

We may need to verify your identity before completing certain privacy requests.

Verification may depend on:

• The type of request

• The sensitivity of the information

• The risk of unauthorized disclosure or deletion

• Applicable legal requirements

We may ask you to confirm information such as:

• Name

• Email address

• Order number

• Shipping address

• Account information

• Recent transaction details

We will request only information reasonably necessary for verification.

If we cannot reasonably verify a request, we may deny or limit it as permitted by law.

20. Authorized Agents

Where permitted by law, you may authorize another person or organization to submit a request on your behalf.

We may require:

• Proof of the agent’s authority

• Confirmation of your identity

• Direct confirmation that you authorized the request

• Other documentation permitted by law

We may refuse an agent request if sufficient evidence of authority is not provided.

21. Global Privacy Control and Do Not Track Signals

Where applicable law requires us to recognize a valid Global Privacy Control signal, we will treat the signal as a request to opt out of covered sale, sharing, or targeted-advertising activities for the browser or device transmitting it.

A browser-based signal may not automatically apply to another browser, device, or customer account.

Other “Do Not Track” signals may not be recognized unless required by applicable law or supported by our website technology.

For additional information, review our Your Privacy Choices page.

22. Marketing Communications

You may unsubscribe from promotional emails by using the unsubscribe option included in the message.

You may also contact:

glissynugblit@gmail.com

Use the subject line:

Marketing Opt-Out Request

After opting out of marketing, you may continue to receive transactional or service-related communications concerning:

• Orders

• Payments

• Shipping

• Tracking

• Returns

• Refunds

• Security

• Accounts

• Customer-support inquiries

Processing an unsubscribe request may require a reasonable period.

23. Non-Discrimination

We will not unlawfully discriminate against you for exercising an applicable privacy right.

Exercising a privacy right will not, solely because of that request, result in unlawful:

• Denial of goods or services

• Different pricing

• Different service quality

• Retaliation

• Discrimination prohibited by applicable law

Legally permitted loyalty, discount, or voluntary incentive programs may be subject to separate terms.

24. Privacy Request Appeals

Where applicable law provides an appeal right, you may appeal a denied or partially denied request by emailing:

glissynugblit@gmail.com

Use the subject line:

Privacy Request Appeal

Include:

• A description of the original request

• The response you received

• The reason you believe the decision should be reconsidered

We will review the appeal and respond within the legally required period.

25. Complaints

If you have a concern about how Spalace handles personal information, contact:

glissynugblit@gmail.com

Use the subject line:

Privacy Complaint

Please describe the concern and identify any relevant order, account, communication, or privacy request.

Depending on your location, you may also have the right to lodge a complaint with a local privacy, consumer-protection, or data-protection authority.

Contacting Spalace does not waive any right to contact an appropriate authority.

26. Automated Processing and Profiling

We may use automated tools to support:

• Fraud screening

• Payment risk assessment

• Website personalization

• Product recommendations

• Advertising measurement

• Marketing audience selection

• Security monitoring

These tools may use information such as transaction details, device information, browsing activity, or account activity.

We do not intend to make decisions based solely on automated processing that produce significant legal or similarly significant effects unless permitted by applicable law and accompanied by required protections.

Where applicable law provides rights concerning automated decision-making or profiling, you may submit a request using the contact information in this policy.

27. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in:

• Products and services

• Website technologies

• Shopify features

• Service providers

• Advertising practices

• Data-processing activities

• Business operations

• Legal or regulatory requirements

The revised policy will be posted through the Services with an updated “Last Updated” date.

Where required by law, we will provide additional notice or obtain consent before a material change takes effect.

Changes will generally apply prospectively and will not retroactively authorize unlawful processing.

28. Contact Information

For questions about this Privacy Policy, our privacy practices, or your privacy rights, contact:

Spalace Privacy Support
Email: glissynugblit@gmail.com
Website: spalace.us
Store Name: Spalace
Business Type: Online Retail Store
Main Category: Bathroom Products and Accessories

Email is our primary privacy contact method.

We generally aim to respond within 1–2 business days, Monday through Friday. Privacy requests will be handled within the period required by applicable law.

Please do not send passwords, full payment-card information, bank login information, or unnecessary sensitive information by email.