Privacy policy

Last updated: September 4, 2026

Coastal Willow operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). Coastal Willow is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy describes how we collect, use and disclose your personal information when you visit, use or make a purchase or other transaction using the Services, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing and disclosure of your personal information.

Please read this Privacy Policy carefully. By using or accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use and disclosure of your information as described below.

Personal Information We Collect or Process

When we use the term "personal information," we mean information that identifies you or can reasonably be linked to you or another person. Personal information does not include information that has been collected anonymously or de-identified so that it cannot identify or reasonably be linked to you.

Depending on how you interact with the Services, where you live, and as permitted or required by applicable law, we may collect or process the following categories of personal information:

  • Contact details, including your name, billing address, shipping address, phone number and email address.

  • Financial and payment information, including payment card information, transaction details, form of payment, payment confirmation and other payment details.

  • Account information, including your username, password, preferences and settings.

  • Transaction and shopping information, including products you view, add to your cart or wishlist, purchase, return, exchange or cancel, as well as information about previous transactions.

  • Communications with us, including information you provide when contacting us, such as through a customer support enquiry.

  • Device and technical information, including information about your device, browser or network connection, IP address and other online or unique identifiers.

  • Usage information, including information about how and when you interact with, browse or navigate the Services.

  • Marketing and advertising information, including information about your interactions with our advertisements and marketing campaigns.

Personal Information Sources

We may collect personal information from the following sources:

  • Directly from you, including when you create an account, visit or use the Services, place an order, communicate with us or otherwise provide personal information to us.

  • Automatically through the Services, including from your device when you visit or use our website and through cookies, pixels and similar technologies.

  • From our service providers, including where we engage providers to enable technology or other services and they collect or process personal information on our behalf.

  • From our business, advertising and marketing partners and other third parties, where permitted by applicable law.

How We Use Your Personal Information

Depending on how you interact with us and which Services you use, we may use personal information for the following purposes.

Providing, Tailoring and Improving the Services

We use your personal information to provide the Services, including to process payments, fulfil orders, remember your preferences and products you may be interested in, process purchases, returns, exchanges and other transactions, maintain your account, arrange shipping, provide customer support and create a more personalised shopping experience.

We may also use information to understand how customers use our Services and to improve our website, products and customer experience.

Marketing and Advertising

We may use your personal information for marketing and promotional purposes, including to send marketing and promotional communications where permitted, and to show or measure advertisements for our products on other websites, apps and platforms.

This may include using information about products you have viewed, purchased or added to your cart and other interactions with the Services to measure advertising performance and, where permitted, provide advertising that may be more relevant to you.

Security and Fraud Prevention

We use personal information where necessary to provide a secure shopping experience; authenticate accounts; detect, investigate or take action regarding potentially fraudulent, illegal, unsafe or malicious activity; and protect our Services, customers and business.

If you create an account, you are responsible for keeping your account credentials secure. You should not share your username, password or other access credentials with other people.

Communicating with You

We use your personal information to provide customer support, respond to enquiries, communicate with you about orders and the Services and maintain our business relationship with you.

Legal Reasons

We may process personal information to comply with applicable laws and legal obligations, respond to valid legal processes or requests from authorities, establish or defend legal claims and enforce or investigate potential violations of our terms and policies.

Meta Advertising, Cookies and Tracking Technologies

We use advertising and measurement technologies provided by Meta Platforms, Inc. and its affiliates ("Meta"), including the Meta Pixel and Meta Conversions API, in connection with advertising on Facebook, Instagram and other Meta services.

These technologies help us understand how customers interact with our Services, measure the effectiveness of our advertising, attribute purchases and other actions to advertising campaigns and improve our advertising.

Information Collected and Shared with Meta

Where permitted by applicable law and, where required, with your consent, information about your interactions with our Services may be collected and/or shared with Meta.

This information may include:

  • pages and products you view;

  • searches and other interactions with our website;

  • products you add to your shopping cart;

  • when you begin the checkout process;

  • purchases and transaction information;

  • information about your device and browser;

  • your IP address and other online identifiers;

  • your name;

  • your email address;

  • your telephone number; and

  • location information.

We use Shopify's Facebook and Instagram by Meta integration with customer data sharing enabled. This integration may transmit information through browser-based technologies such as the Meta Pixel and through server-to-server technologies such as the Meta Conversions API.

Certain customer information may be transformed or hashed before it is transmitted to Meta for matching purposes.

How We Use Meta Advertising Information

We may use Meta's advertising technologies to:

  • measure visits and interactions with our website;

  • measure purchases and other conversions;

  • understand whether an advertisement contributed to a sale or other action;

  • measure the effectiveness of our Facebook and Instagram advertisements;

  • optimise advertising campaigns;

  • create or measure advertising audiences where permitted;

  • provide advertising that may be more relevant to your interests where permitted; and

  • understand and improve our marketing performance.

Meta may process information it receives in accordance with its own privacy policies, terms and applicable laws.

Cookies and Your Choices

We and our service providers use cookies, pixels and similar technologies for purposes including operating our website, remembering preferences, understanding how our Services are used, measuring advertising performance and, where permitted, providing personalised advertising.

Some technologies are necessary for our website and Services to operate. Others, including certain advertising and analytics technologies, are non-essential.

Where required by applicable law, including in the United Kingdom and European Economic Area, we will request your consent before using non-essential cookies or similar technologies on your device.

Where our cookie and privacy controls are available, you can use them to accept, reject or manage non-essential cookies and tracking technologies.

You may change or withdraw your consent using the privacy or cookie preference controls made available through our website. Withdrawing consent does not affect the lawfulness of processing that occurred before your consent was withdrawn.

Disabling certain advertising or analytics technologies may affect our ability to measure advertising performance or personalise your experience, but should not prevent you from using the essential functionality of our store.

How We Disclose Personal Information

In certain circumstances, we may disclose personal information to third parties for legitimate purposes and as described in this Privacy Policy. These circumstances may include:

  • Shopify and service providers that perform services on our behalf, such as website hosting, payment processing, data analytics, customer support, cloud services, fulfilment and shipping.

  • Business, advertising and marketing partners, including Meta, where we use their services to advertise our products, measure advertising performance or provide personalised advertising where permitted.

  • Third parties you direct us to interact with, including where you request or consent to disclosure, such as shipping providers or social media integrations.

  • Our affiliates or corporate group, where applicable.

  • Parties involved in business or legal matters, including in connection with a merger, acquisition, restructuring, insolvency or similar business transaction, or where disclosure is necessary to comply with applicable law, respond to legal processes, enforce our terms or protect our rights or those of our customers or others.

Depending on where you reside, you may have rights relating to the use or disclosure of personal information for targeted or personalised advertising.

Our business and marketing partners process information in accordance with their own privacy notices and applicable laws.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services.

Information you submit through the Services may be transmitted to and shared with Shopify and relevant third parties, which may be located in countries other than the country where you reside, where necessary to provide and improve the Services.

In addition, to help protect, grow and improve our business, we may use Shopify features that incorporate data and information obtained from your interactions with our store, Shopify and other merchants.

In these circumstances, Shopify may be responsible for certain processing of your personal information, including responding to requests to exercise rights relating to information processed by Shopify.

You can learn more about how Shopify processes personal information through the Shopify Consumer Privacy Policy and Shopify Privacy Portal.

Third-Party Websites and Links

The Services may provide links to websites or online platforms operated by third parties.

If you follow a link to a website or service that is not controlled by us, you should review that third party's privacy and security policies and terms. We are not responsible for the privacy or security practices of third-party websites or platforms.

Information you provide in public or semi-public areas, including information shared through third-party social networking platforms, may also be viewable by other users of those platforms.

The inclusion of a link does not, by itself, imply our endorsement of the content, owner or operator of that third-party website or platform.

Children's Data

The Services are not intended for use by children, and we do not knowingly collect personal information from children under the age at which they can lawfully provide the relevant consent in their jurisdiction.

If you are a parent or guardian and believe a child has provided personal information to us, please contact us using the details below to request its deletion.

We do not knowingly sell or share, as those terms may be defined under applicable privacy laws, personal information belonging to individuals under 16 years of age.

Security and Retention of Your Information

We take appropriate measures intended to protect personal information. However, no security system is perfect or impenetrable, and we cannot guarantee absolute security.

Information transmitted over the internet may not always be secure while in transit. We recommend that you do not use unsecured channels to communicate sensitive or confidential information to us.

We retain personal information for as long as reasonably necessary for the purposes for which it was collected, including to provide the Services, maintain records of transactions, comply with legal and regulatory obligations, resolve disputes and enforce our agreements and policies.

The appropriate retention period may vary depending on the type of information, why we collected it and our applicable legal obligations.

Your Rights and Choices

Depending on where you live, you may have some or all of the following rights regarding your personal information. These rights are not absolute and may apply only in certain circumstances.

  • Right to Access / Know. You may have the right to request access to personal information that we hold about you.

  • Right to Delete. You may have the right to request deletion of personal information that we maintain about you.

  • Right to Correct. You may have the right to request correction of inaccurate personal information.

  • Right to Portability. In certain circumstances, you may have the right to receive a copy of personal information we hold about you and/or request that it be transferred to another organisation.

  • Managing Communication Preferences. You may opt out of promotional emails at any time by using the unsubscribe option included in our marketing emails. If you opt out of marketing communications, we may still send non-promotional communications relating to your account, purchases or orders.

If you reside in the United Kingdom or European Economic Area, and subject to applicable exceptions and limitations, you may also have rights including:

  • Objection to Processing and Restriction of Processing. You may have the right to object to or ask us to restrict certain processing of your personal information.

  • Withdrawal of Consent. Where we rely on your consent to process personal information, you have the right to withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out before consent was withdrawn.

You may exercise applicable rights through options provided through the Services or by contacting us using the contact details below.

We will not discriminate against you for exercising your privacy rights. We may need to verify your identity before processing certain requests, as permitted or required by applicable law.

Where applicable, you may appoint an authorised agent to make a request on your behalf. We may require evidence that you have authorised the agent to act for you and may also need to verify your identity directly.

We will respond to valid requests within the time required by applicable law.

Complaints

If you have concerns or complaints about how we process your personal information, please contact us using the details below.

Depending on where you live, you may also have the right to complain to your local data protection authority or supervisory authority.

If you are in the United Kingdom, this may include the Information Commissioner's Office (ICO). If you are in the European Economic Area, you may contact the appropriate data protection supervisory authority in your country.

International Transfers

We may transfer, store and process personal information outside the country where you live.

Where required, if personal information is transferred outside the United Kingdom or European Economic Area, we will rely on an appropriate lawful transfer mechanism, such as an adequacy decision, the European Commission's Standard Contractual Clauses, an applicable UK transfer mechanism, or another mechanism recognised under applicable data protection law.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices, technologies, service providers or for operational, legal or regulatory reasons.

When we update this Privacy Policy, we will post the revised version on this website and update the "Last updated" date. We will provide additional notice where required by applicable law.

Contact

If you have questions about our privacy practices or this Privacy Policy, or if you would like to exercise any privacy rights available to you, please contact us at:

Email: privacy@coastalwillow.com

For the purposes of applicable data protection laws, Coastal Willow is the controller of your personal information where we determine how and why that information is processed.