Privacy policy

 

Last updated: January 18th, 2026

Eternal Wear (“Eternal Wear,” “we,” “us,” “our”) operates this store and website, including related information, content, features, tools, products, and services (the “Services”). Our store is hosted by Shopify. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit or use the Services or otherwise communicate with us. If there is any conflict between this Privacy Policy and our Terms of Service regarding the collection, processing, or disclosure of personal information, this Privacy Policy controls.

By accessing or using the Services, you acknowledge this Privacy Policy.

1) Scope; Roles and Definitions

  • Personal information means information that identifies or can reasonably be linked to a person or household. De-identified or aggregated data is not personal information.

  • For most processing described here, Eternal Wear acts as an independent controller (or “business” under U.S. state privacy laws).

  • Shopify provides hosting and certain platform features. For some activities, Shopify independently decides why and how to process data and acts as a separate controller. See Section 10 (Relationship with Shopify).

2) Categories of Personal Information We Collect

Depending on how you use the Services and applicable law, we collect the following categories:

  • Identifiers and contact data: name, email, phone, billing and shipping address.

  • Account credentials and settings: username, password, preferences.

  • Commercial data: items viewed, cart/wishlist, purchases, returns, exchanges, order history.

  • Payment data: payment method, last 4 digits, transaction identifiers, authorization data (processed by our payment provider).

  • Communications and UGC: customer support messages, reviews, survey responses, claims.

  • Device and network data: IP address, device and browser type, OS, identifiers, language, timezone.

  • Usage data: clicks, page views, referral URLs, session logs, feature usage, cookies and similar technologies.

  • Geolocation (coarse): derived from IP.

  • Inferences: preferences or interests derived from the above.

  • Fraud signals and risk scores.

  • AI interactions: prompts, inputs, chat transcripts, sizing inputs, system metadata, and AI output (see Section 7).

We do not intentionally collect sensitive personal information via AI features or otherwise (e.g., PHI, full payment numbers, government IDs, precise geolocation, biometrics). Do not submit such data.

3) Sources of Personal Information

  • You: forms, checkout, account creation, support, reviews, AI chat or tools.

  • Automated collection: cookies, pixels, SDKs, and similar technologies.

  • Service providers and vendors: payments, fulfillment, analytics, security, advertising.

  • Shopify: platform and enhanced features.

  • Partners/third parties: marketing, anti-fraud, address validation, social login (if enabled).

4) Purposes of Use

We use personal information to:

  • Provide and operate the Services, process payments, fulfill orders, manage accounts, handle returns, and deliver customer support.

  • Personalize and improve experiences, content, and recommendations.

  • Marketing and advertising: send emails/SMS (with consent where required), run promotions, and show ads on our site and third-party sites.

  • Security, fraud prevention, and integrity: authenticate users, detect abuse, enforce terms, protect our users and systems.

  • AI features: provide AI-assisted responses, recommendations, moderation, and sizing guidance (see Section 7).

  • Legal and compliance: respond to lawful requests and claims, keep records, protect rights, and comply with law.

5) Cookies and Similar Technologies

We and our vendors use cookies, pixels, tags, and SDKs for core functionality, analytics, personalization, and advertising. You can adjust browser settings, use platform tools, or opt-out links provided in this Policy. Some features may not function without certain cookies. Where required, we obtain consent.

6) Disclosures of Personal Information

We disclose personal information as follows:

  • Service providers (processors): hosting, payment processing, fulfillment, customer support, analytics, security, communications, and AI vendors acting on our instructions.

  • Business and marketing partners: ad networks, measurement and attribution partners, only as permitted by law and your settings.

  • Shopify: for hosting, platform features, fraud prevention, and enhancements (see Section 10).

  • Affiliates and corporate group.

  • Legal and safety: law enforcement, regulators, courts, or to protect rights, users, or property.

  • Business transfers: merger, acquisition, financing, restructuring, or bankruptcy.

We do not sell personal information for money. We may “share” personal information for targeted advertising as defined by certain U.S. state privacy laws; see Section 12 for opt-out rights.

7) AI Features and Automated Decision-Making

AI-Assisted Services. Parts of the Services use automated systems and third-party AI models to generate responses, recommendations, summaries, sizing guidance, and content moderation (“AI Output”). To operate these features we transmit prompts, inputs, limited account and transactional metadata, and system context to vetted AI vendors under confidentiality and security obligations.

Accuracy and Limits. AI Output may be incomplete, inaccurate, or biased. It is informational only and not medical, legal, financial, or safety advice. You are responsible for how you use AI Output.

Your Inputs; Licenses. You own your prompts and inputs. You grant us a perpetual, worldwide, sublicensable, royalty-free license to use prompts, inputs, transcripts, and feedback to provide, secure, maintain, and improve AI features and to enforce policies.

AI Output; License to You. As between you and us, we own AI Output generated by or for the Services, subject to third-party rights. We grant you a non-exclusive, non-transferable license to use AI Output you receive for personal, non-commercial use with the Services. Do not use AI Output to create or improve competing models or remove notices.

Prohibited AI Inputs. Do not include sensitive data (health, full payment card numbers, government IDs, precise geolocation, biometrics), export-controlled or classified data, malware, or unlawful content.

Automated Decisions and Human Review. We may use automated systems for fraud and abuse screening or other decisions with legal or similarly significant effects. You may request human review and an explanation and contest the decision at info@eternalcommerce.net where required by law.

Third-Party AI Providers and Training. AI vendors act as processors. By default we do not permit vendors to train foundation models on your prompts beyond what is necessary to provide and secure the service. If a vendor seeks broader training use, we will present a clear opt-in. We do not sell your personal information.

Opt-Out of AI Features. Do not engage AI tools if you do not wish to use them. You may request account-level restriction where feasible at privacy@eternalcommerce.net.

8) Security

We apply administrative, technical, and physical safeguards, including encryption in transit and at rest where appropriate, access controls, logging, and vendor due diligence. No system is perfectly secure. Transmission over the internet carries risk.

9) Retention

We retain personal information for as long as necessary for the purposes described above, including to provide Services, comply with legal obligations, resolve disputes, enforce agreements, and maintain business records. We then delete or de-identify data per our schedule.

10) Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services to operate and improve the platform. Shopify may also process personal information to provide enhanced features that combine data from your interactions with our store and other merchants. For those activities, Shopify acts as an independent controller and is responsible for responding to related privacy requests. See the Shopify Consumer Privacy Policy and Shopify Privacy Portal for details and rights requests.

11) International Transfers

Your information may be transferred to and processed in countries other than your own. Where required, we use lawful transfer mechanisms, such as the EU Standard Contractual Clauses and the UK International Data Transfer Addendum.

12) Your Privacy Rights and Choices

Your rights depend on your location and the applicable law.

A. U.S. State Privacy Rights (e.g., CA, CO, CT, UT, VA)

You may have the right to access/know, delete, correct, port, and opt out of: (i) targeted advertising (“sharing”), (ii) sale of personal information (we do not sell for money), and (iii) certain profiling/automated decision-making.

  • Opt-out of targeted advertising (“Do Not Share”): Use the site controls where available or email info@eternalcommerce.net with “Do Not Share” in the subject.

  • Global Privacy Control (GPC): Where recognized by law, we treat a valid GPC signal as an opt-out for the browser/device, and if we can associate it with your account, we apply it to the account.

  • Verification and agents: We may need to verify your identity. Authorized agents must present proof of authority, and we may require direct verification.

  • Appeals: If we deny a request, you may appeal by replying to our decision or emailing info@eternalcommerce.net with “Appeal” in the subject.
    We will not discriminate against you for exercising rights.

B. EEA/UK (GDPR) Disclosures

  • Controller: Eternal Wear ([Eternal Commerce, Inc.], 7381 114th Ave, Suite 403B PMB 10001, Largo, FL 33773, USA).

  • Legal bases: performance of contract; legitimate interests (e.g., security, improvement, marketing to existing customers); consent (e.g., certain cookies/SMS/marketing where required); compliance with legal obligations.

  • Rights: access, rectification, erasure, restriction, portability, and objection; withdrawal of consent without affecting prior processing.

  • Transfers: safeguarded per Section 11.

  • Complaints: you may complain to your local supervisory authority. Contact us first so we can try to resolve.

13) Children’s Data

The Services are not directed to children and are intended for individuals who have reached the age of majority in their jurisdiction. We do not knowingly collect personal information from children under 13 (or under the applicable age of digital consent). If you believe we have collected such data, contact info@eternalcommerce.net and we will delete it.

14) Marketing Communications and SMS

  • Email: You may opt out of promotional emails via unsubscribe links. We may still send transactional messages (orders, service notices).

  • SMS/MMS: If you opt in, you consent to receive marketing texts to the provided number. Consent is not a condition of purchase. Message/data rates may apply. Frequency varies. Reply STOP to cancel, HELP for help. See our Terms and this Policy for details.

15) Do Not Track

Except where required by law, we do not respond to browser “Do Not Track” signals. We honor GPC as described in Section 12.

16) Your Options to Control Targeted Ads

Use our on-site preferences (where available), your device OS settings, ad platform choices, and industry tools. Requests sent to info@eternalcommerce.net will be honored as required by law.

17) Third-Party Websites and Social Features

Links and embedded features may take you to third-party properties. Their privacy practices govern their handling of your data. Review their notices. Public posts or reviews you submit may be viewable by others.

18) State-Specific Disclosures (CCPA/CPRA)

California residents may request:

  • Categories of personal information collected, sources, business/commercial purposes, and categories of third parties disclosed to.

  • Specific pieces of personal information (subject to verification).
    We disclose identifiers, contact, commercial, usage, device, geolocation (coarse), inferences, communications, and AI interactions to service providers, Shopify, partners, affiliates, and as legally required. We “share” for targeted advertising as defined by CPRA unless you opt out. We do not sell personal information for money. We do not knowingly sell or share the personal information of consumers under 16.

19) Changes to This Policy

We may update this Policy to reflect legal, technical, or business changes. We will post the revised Policy with an updated “Last updated” date and provide additional notice where required. Your continued use after the effective date signifies acceptance.

20) Contact Us; Data Controller

Data Controller: [Eternal Commerce, Inc.]
Mailing address: 7381 114th Ave, Suite 403B PMB 10001, Largo, FL 33773, USA
Email (privacy): info@eternalcommerce.net
General: info@eternalcommerce.net

21) Region-Specific Annexes (If Applicable)

  • Brazil (LGPD), Canada (PIPEDA), Australia (Privacy Act): We will honor applicable local rights, legal bases, and cross-border transfer rules. Contact info@eternalcommerce.net to exercise regional rights.

Short Disclosures for Just-in-Time Notices

At points of collection (checkout, reviews, SMS), we display concise notices or consent prompts that reference this Policy.

Data Processing Addendum (DPA)

For B2B customers or integrations where we process personal data on your documented instructions, we will execute a DPA upon request. Contact info@eternalcommerce.net.

Annex: Automated Decision-Making Summary (where used)

  • Purpose: fraud/abuse screening, account integrity, and transactional risk.

  • Logic involved: rule-based checks, anomaly detection, and risk scoring using vendor systems.

  • Consequences: order holds, additional verification, or transaction denial.

  • Your rights: request human review, explanation in plain language, and to contest, via info@eternalcommerce.net.

End of Policy.