Privacy policy
Last updated: September 11, 2026
This Privacy Policy explains how Chiipop ("Chiipop," "we," "us," or "our") collects, uses, discloses, and protects personal information when you visit chiipop.com, create an account, place an order, subscribe to marketing, contact customer support, or otherwise use our website and related services (the "Services"). Our store is hosted by Shopify.
This Privacy Policy does not replace any rights available to you under applicable law. If a local law gives you additional rights, those rights apply.
1. Who We Are and How to Contact Us
Chiipop is responsible for the personal information described in this Privacy Policy, except where another party, such as Shopify or a payment provider, acts as an independent controller under its own privacy notice.
For privacy questions or to exercise your rights, contact:
| Contact method | Details |
|---|---|
| support@chiipop.com | |
| Website | chiipop.com |
2. Personal Information We Collect
The information we collect depends on how you interact with the Services.
| Category | Examples | Main sources |
|---|---|---|
| Identity and contact information | Name, email address, telephone number, billing and shipping address | You; Shopify; customer-support tools |
| Account information | Account identifier, login credentials, preferences and saved addresses | You; Shopify |
| Order and transaction information | Products viewed or purchased, cart activity, order history, discounts, returns, cancellations, refunds and shipment status | You; Shopify; fulfillment and shipping providers |
| Payment information | Payment method, payment status and transaction reference | Shopify Payments, PayPal and other payment providers you select. We generally do not receive complete payment-card numbers |
| Communications and support information | Emails, chat messages, return requests, photos and short videos submitted for damaged, defective or incorrect items | You; our email and chat providers |
| Device, usage and network information | IP address, browser and device type, cookie identifiers, pages viewed, interactions, approximate location derived from IP address and diagnostic data | Automatically through Shopify, cookies and similar technologies |
| Marketing information | Email subscription status, campaign interactions and use of the first-subscription discount | You; Shopify and our email service provider |
| Fraud and security information | Signals used to prevent fraudulent orders, account misuse, payment abuse or security incidents | Shopify, payment providers and fraud-prevention services |
Please do not send us sensitive information that we have not requested. When you submit photos or videos for customer support, include only information needed to show the product or delivery issue and avoid recording people, identification documents, payment details or private surroundings where possible.
3. How We Use Personal Information and Our Legal Bases
Where laws such as the UK GDPR or EU GDPR apply, we rely on the legal bases shown below. The legal basis may vary depending on the circumstances.
| Purpose | How we use information | Legal basis where applicable |
|---|---|---|
| Provide the Services | Operate the store, create and manage accounts, maintain carts and wish lists if enabled, process orders and payments, apply discounts and provide order records | Performance of a contract; steps taken at your request before entering a contract |
| Fulfill and support orders | Arrange shipping, provide tracking, handle split shipments, process cancellations, returns, refunds and replacements | Performance of a contract; compliance with legal obligations |
| Customer service | Respond to email or online-chat requests and review photos or videos submitted for after-sales support | Performance of a contract; legitimate interests in supporting customers and resolving disputes |
| Marketing | Send product, restock and preorder emails when you subscribe; administer the first-subscription discount; measure campaign engagement | Consent where required; legitimate interests where permitted |
| Personalization and analytics | Remember preferences, understand use of the Services, improve navigation and content, and measure site performance | Consent for non-essential cookies where required; legitimate interests where permitted |
| Security and fraud prevention | Authenticate users, protect accounts, review suspicious activity, prevent payment fraud and enforce our terms | Legitimate interests in protecting customers and our business; compliance with legal obligations |
| Legal and business administration | Maintain tax and accounting records, respond to lawful requests, establish or defend legal claims, and manage a merger, acquisition or restructuring | Compliance with legal obligations; legitimate interests in operating and protecting our business |
We do not use personal information to make decisions based solely on automated processing that produce legal or similarly significant effects, unless we tell you otherwise and provide protections required by law. Payment or fraud tools may automatically flag transactions for review or decline them under the provider's own rules.
4. When We Disclose Personal Information
We disclose personal information only as reasonably needed for the purposes described in this Policy, including to:
- Shopify, which hosts our storefront, checkout, customer accounts and commerce services;
- payment providers, including Shopify Payments and PayPal, to authorize and process payments, refunds and fraud checks;
- fulfillment, warehouse, shipping and logistics providers to prepare, deliver, track, return or replace orders;
- email, online-chat, analytics, advertising and other technology providers that we actually enable to operate or improve the Services;
- professional advisers, insurers, auditors, banks and public authorities where reasonably necessary or legally required;
- a buyer, successor or other relevant party in connection with a proposed or completed business transaction; and
- other parties at your direction or with your consent.
Service providers may process information for us under contractual restrictions. Some providers, including Shopify and payment providers, may also process information for their own purposes under their privacy notices.
We do not disclose payment-card numbers to shipping or marketing providers.
5. Shopify and Payment Providers
Shopify collects and processes information about your access to and use of our store so that it can provide and improve its commerce services. Depending on our settings, Shopify may also process data across merchants to provide enhanced services, fraud protection, analytics or personalized advertising. Learn more in the Shopify Consumer Privacy Policy and exercise Shopify-specific rights through the Shopify Privacy Portal.
Payments are processed by the provider you select, such as Shopify Payments or PayPal. Payment providers process information under their own privacy notices. We receive transaction details needed to confirm payment, fulfill the order, issue refunds and maintain records, but we generally do not receive complete payment-card numbers.
6. Cookies and Similar Technologies
We and our providers use cookies, pixels, local storage and similar technologies. These technologies may be used to:
| Type | Purpose |
|---|---|
| Strictly necessary | Run the storefront and checkout, keep the site secure, remember cart contents and provide requested features |
| Functional | Remember choices such as language, region or account preferences |
| Analytics | Understand visits and interactions, diagnose errors and improve the Services |
| Advertising | Measure campaigns and, if enabled, personalize advertising across websites or services |
Where required, we ask for consent before using non-essential cookies. You can use the cookie or privacy controls displayed on our website to change your choices. You can also adjust browser settings, but blocking necessary cookies may prevent parts of the Services from working.
Where applicable, we process recognized opt-out preference signals, including Global Privacy Control (GPC), as required by law. You may also use our data-sharing opt-out page if that feature is enabled for your region.
7. Marketing Communications
We send promotional email only as permitted by applicable law. If you subscribe, we may send information about new products, restocks, preorders and promotions and administer the first-subscription 5% discount.
You can unsubscribe at any time using the link in a marketing email or by contacting support@chiipop.com. Unsubscribing from marketing does not stop transactional messages about your account, orders, shipping, returns, refunds or security.
We do not send marketing text messages unless we separately obtain any consent required for that channel.
8. Sale, Sharing and Targeted Advertising
We do not sell personal information for money. Certain uses of advertising cookies or Shopify enhanced services may be considered a "sale," "sharing," or targeted advertising under some US state privacy laws, even when no money is exchanged.
If we use those features and the law applies to you, you may opt out through the website's cookie or privacy controls, the data-sharing opt-out page, or a recognized GPC signal. We do not knowingly sell or share for targeted advertising the personal information of anyone under 16.
9. International Transfers
We sell internationally and use providers that operate in multiple countries. Your information may therefore be transferred to, stored in or accessed from countries outside your place of residence, including locations where Shopify, payment, fulfillment, logistics, email and support providers operate.
Where UK or EEA data-protection laws require safeguards for an international transfer, we use an approved legal mechanism as applicable, such as an adequacy regulation or decision, the European Commission's Standard Contractual Clauses, the UK International Data Transfer Agreement or UK Addendum, or another lawful mechanism. You may contact us for information about applicable safeguards.
10. Data Retention
We keep personal information only for as long as reasonably necessary for the purposes described in this Policy, including to provide the Services, comply with tax, accounting and other legal requirements, resolve disputes, prevent fraud and enforce agreements.
| Information | General retention approach |
|---|---|
| Order, payment-status, refund and tax records | For the period required by applicable tax, accounting, consumer-protection and limitation laws |
| Account information | While the account is active and for a reasonable period afterward, unless deletion is requested or retention is legally required |
| Customer-service records, including submitted photos or videos | For the time needed to resolve the request and maintain appropriate dispute, fraud-prevention and legal records |
| Marketing subscription records | Until you unsubscribe, plus limited suppression records needed to honor the opt-out |
| Cookie and analytics information | According to the lifetime shown in the applicable cookie controls and provider settings |
We may keep information longer when required by law, needed for an active complaint or legal claim, or reasonably necessary to prevent abuse. We may retain de-identified information where it cannot reasonably be linked back to you.
11. Security
We use reasonable administrative, technical and organizational safeguards designed to protect personal information. However, no system or transmission method is completely secure. Please do not send passwords, complete payment-card numbers or other sensitive information through ordinary email or online chat.
You are responsible for keeping your account credentials confidential. Contact us promptly if you believe your account or personal information has been misused.
12. Children
The Services are intended for a general audience and are not directed to children under 13. We do not knowingly collect personal information from children under 13. Purchases should be made by an adult or by someone who has permission and legal capacity to enter the transaction.
If you believe a child has provided personal information to us without appropriate authorization, contact support@chiipop.com so we can review and delete it where required. Where local law sets a higher age or requires parental consent, we follow that law.
13. Your Privacy Rights
Depending on where you live, you may have rights to:
- request access to or a copy of your personal information;
- request correction of inaccurate information;
- request deletion of information;
- request restriction of or object to certain processing;
- receive certain information in a portable format;
- withdraw consent at any time where processing is based on consent;
- opt out of sale, sharing or targeted advertising where applicable;
- limit certain uses of sensitive personal information where applicable;
- appeal a decision we make on a privacy request where applicable; and
- receive equal service and pricing without unlawful discrimination for exercising privacy rights.
To make a request, email support@chiipop.com and write "Privacy Request" in the subject line. Tell us the right you wish to exercise and provide enough information to locate the relevant records. We may verify your identity and authority before acting. An authorized agent may submit a request where permitted, but we may request proof of authorization and direct identity verification.
Rights are not absolute. We may decline or limit a request where permitted by law, such as when information must be retained for legal obligations, fraud prevention or legal claims. We will respond within the time required by applicable law and explain any available appeal process.
UK and EEA complaints
If you are in the United Kingdom or European Economic Area, you may complain to the data-protection authority where you live, work or believe an infringement occurred. UK residents may contact the Information Commissioner's Office.
California and other US state rights
Where an applicable US state privacy law covers our processing, residents may exercise the rights provided by that law. We will honor recognized opt-out preference signals where required. Our disclosures in Sections 2, 3, 4 and 8 describe the categories of information collected, purposes of use, categories of recipients, and sale or sharing practices.
14. Third-Party Links and Services
The Services may link to websites, social networks or services operated by others. Their privacy and security practices are governed by their own notices. We are not responsible for third-party services that we do not control.
15. Changes to This Policy
We may update this Privacy Policy to reflect changes to the Services, our practices or legal requirements. We will post the revised version on this page, update the "Last updated" date and provide additional notice where required.
16. Contact Us
For questions, complaints or privacy-rights requests, email support@chiipop.com.