Privacy policy



PRIVACY POLICY – SMALIE

Store name: Smalie
Company name: Smalie LLC
Address: 1209 MOUNTAIN ROAD PL NE, STE N, ALBUQUERQUE, NM 87110E, USA
Email: contact@smalie.com

Last updated: 15/12/2025

1. Introduction

Welcome to Smalie.
We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and safeguard your information when you visit or make a purchase from our website.

This Policy is designed to comply with:

  • UK GDPR

  • EU GDPR

  • CCPA/CPRA (California)

  • Other US State Privacy Laws (Colorado, Virginia, Connecticut, Texas…)

  • ePrivacy Directive / PECR

  • Shopify Data Processing Standards

By using our website, you agree to the practices described in this Policy.

2. What Data We Collect

We collect the following categories of information:

A. Information you provide

  • Name

  • Email address

  • Shipping address

  • Billing address

  • Payment information (processed securely by Shopify/Stripe/PayPal)

  • Phone number (optional)

  • Order details

  • Customer support messages

B. Automatically collected data

  • IP address

  • Device information

  • Browser type

  • Cookies and tracking technologies

  • Pages visited and time spent

  • Referring website

  • Approximate location

C. Third-party data

We may receive data from:

  • Shopify

  • Payment processors (Stripe, PayPal, Shopify Payments)

  • Analytics and advertising partners (Google, Meta, TikTok, etc.)

  • Fraud prevention tools

3. How We Use Your Data

We use your data for:

  • Processing and fulfilling your orders

  • Shipping, returns, and customer support

  • Fraud detection and security

  • Improving website performance

  • Personalizing your shopping experience

  • Analytics and performance measurement

  • Marketing and advertising (with consent where required)

4. Legal Bases for Processing (UK/EU GDPR)

We process your data under:

  • Contractual necessity (to fulfill your order)

  • Legal obligations (tax, accounting, fraud prevention)

  • Consent (marketing, cookies, email newsletters)

  • Legitimate interests (improving our website, preventing fraud)

We do not rely on legitimate interests for direct marketing to UK/EU residents — we only use consent.

5. Cookies & Tracking Technologies

We use cookies and similar technologies for:

  • Site functionality

  • Shopping cart operation

  • Analytics

  • Personalization

  • Advertising (with consent in UK/EU)

All visitors (worldwide) are shown a Cookie Consent Banner with granular control and a reject button, in compliance with UK PECR and EU ePrivacy rules.

You may withdraw cookie consent at any time from the “Cookie Preferences” link in our footer.

6. Sharing Your Information

We share data with trusted partners:

A. Service providers

  • Shopify (store hosting)

  • Payment processors (Stripe, PayPal, Shopify Payments)

  • Shipping carriers

  • Warehouse/fulfillment providers (if any)

  • Email marketing services (e.g., Omnisend)

B. Analytics & Ads partners

(Only with consent in UK/EU)

  • Google Analytics

  • Meta Pixel

  • TikTok Pixel

  • Other advertising networks

C. Legal or regulatory authorities

If required by law, fraud investigations, or government requests.

7. International Data Transfers

Your data may be transferred to and processed in the United States or other countries.

All transfers comply with GDPR requirements, including:

  • Standard Contractual Clauses (SCCs)

  • Adequacy decisions where available

8. Data Retention

We keep your data only as long as necessary:

  • Order data: 6 years (legal requirement)

  • Marketing data: until you withdraw consent

  • Analytics data: according to retention settings (typically 26 months)

You may request deletion at any time.

9. Your Rights (UK/EU Residents)

You have the right to:

  • Access your data

  • Rectify incorrect data

  • Request deletion

  • Restrict processing

  • Object to processing

  • Withdraw consent

  • Request data portability

To exercise your rights: contact@smalie.com

10. Your Rights (California – CCPA/CPRA & Other US States)

Residents of California, Colorado, Virginia, Connecticut, Texas, and other states may:

  • Request access to your personal information

  • Request deletion

  • Request correction

  • Opt out of the “sale” or “sharing” of personal data

  • Opt out of targeted advertising

We do not “sell” data.
We also do not “share” your data for cross-context behavioural advertising unless you opt in through the cookie banner.

You can submit a privacy request by email: contact@smalie.com

11. Do Not Track & Global Privacy Control (GPC)

Our website recognises and honours:

  • Do Not Track (DNT) signals

  • Global Privacy Control (GPC) signals

When received, we treat them as opt-out requests for data sale/sharing.

12. Protecting Children

Our website is not intended for individuals under 16 years of age.
We do not knowingly collect children’s data.

13. Security Measures

We use technical and organisational measures to protect your data, including:

  • HTTPS encryption

  • Secure payment gateways

  • Fraud prevention systems

  • Access controls

  • Shopify’s PCI-compliant infrastructure

No system is 100% secure, but we take all reasonable steps to protect your data.

14. Third-Party Links

Our website may contain links to third-party sites.
We are not responsible for their content or privacy practices.

15. Changes to This Policy

We may update this Privacy Policy to reflect legal or operational changes.
Updates will be posted on this page with a revised “Last Updated” date.

16. Contact Us

If you have any questions or privacy requests, contact us at:

📧 contact@smalie.com