Privacy policy

Privacy Policy

Last updated: September 1, 2026

This Privacy Policy describes how Cherished Grace (“we,” “us,” or “our”) collects, uses, discloses, and otherwise processes personal information when you visit cherishedgrace.shop, purchase from us, communicate with us, or otherwise use our services (collectively, the “Services”). The store is hosted by Shopify. If there is a conflict between this Privacy Policy and mandatory law, mandatory law controls.

Personal information we collect

Contact and account information, such as name, address, email address, telephone number, login details, and customer-service correspondence.

Order and transaction information, such as products viewed or purchased, billing and delivery details, returns, discounts, and payment status. Payment card data is generally processed by Shopify and payment providers rather than stored directly by us.

Device and usage information, such as IP address, browser, device identifiers, pages viewed, referral source, approximate location, cookie identifiers, and interactions with the Services.

Marketing preferences, survey responses, reviews, promotions, and other information you choose to provide.

Information from Shopify, payment processors, fraud-prevention services, analytics and advertising partners, fulfillment providers, carriers, and social platforms, subject to their own policies.

How we use personal information

Provide the Services; process payments, orders, delivery, returns, refunds, and customer support.

Authenticate accounts, maintain shopping carts, remember preferences, and improve products, content, and site performance.

Detect, investigate, and prevent fraud, abuse, security incidents, prohibited activity, and violations of our terms.

Comply with tax, accounting, legal, regulatory, and recordkeeping obligations; establish or defend legal claims.

Send transactional messages and, with consent where required, marketing communications. You can unsubscribe from promotional email using the link in the message.

Personalize advertising and measure marketing performance where permitted and according to your cookie/privacy choices.

Legal bases for EEA/UK users

If the European Economic Area or United Kingdom laws apply, we process personal information as necessary to perform a contract, comply with legal obligations, pursue legitimate interests that are not overridden by your rights, and based on consent where required. Do not intentionally target these markets until cookie consent, consumer terms, international returns, and representative obligations have been reviewed.

Cookies and similar technologies

We and Shopify use cookies, pixels, local storage, and similar technologies for essential site functions, preferences, analytics, fraud prevention, and—subject to applicable consent requirements—advertising. Available controls may include the cookie banner, browser settings, and the store’s data-sharing opt-out page. Blocking essential cookies can prevent checkout or account features from working.

How we disclose information

Shopify and its affiliates, which host and operate the commerce platform.

Payment processors, fraud-prevention providers, fulfillment partners, suppliers, carriers, customer-service tools, analytics providers, marketing and advertising partners, and IT/security vendors.

Professional advisers, insurers, auditors, tax authorities, regulators, law enforcement, courts, or other parties when reasonably necessary or legally required.

A buyer, investor, lender, or successor in connection with a merger, financing, reorganization, sale, insolvency, or transfer of some or all of the business.

Other parties at your direction or with your consent.

Targeted advertising and U.S. state privacy choices

Depending on where you live, certain disclosures for targeted advertising may be treated as “sale,” “sharing,” or targeted advertising under state privacy laws. Where applicable, you may opt out through the “Your Privacy Choices” or data-sharing opt-out link in the site footer and through the cookie banner. We do not knowingly sell personal information for money. Keep Shopify’s privacy settings and opt-out page configured consistently with the apps and advertising services actually used.

Retention

We retain personal information only as long as reasonably necessary for the purposes described here, including providing Services, maintaining transaction and tax records, resolving disputes, preventing fraud, and meeting legal obligations. Retention periods vary according to the type of record and applicable law.

Security

We use reasonable administrative, technical, and organizational safeguards. No internet transmission or storage system is completely secure. Do not send sensitive payment information by email.

Children

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided information, contact us so we can investigate and delete it as required. Additional age thresholds may apply in your jurisdiction.

Your privacy rights

Depending on your location, you may have rights to request access, correction, deletion, portability, restriction, or objection; withdraw consent; opt out of targeted advertising, sale, or sharing; and appeal a decision. We may verify your identity and may deny or limit a request where permitted by law. Authorized agents may submit requests where local law allows, subject to verification. You will not be discriminated against for exercising privacy rights.

International transfers

Shopify and other service providers may process information outside your state, province, or country. Where required, appropriate transfer mechanisms are used. Review Shopify’s current privacy documentation and configured store region before publishing this clause.

Changes

We may update this Privacy Policy to reflect operational, legal, or regulatory changes. The revised version will be posted with a new “Last updated” date. Material notices will be provided where required.