Privacy policy

1. Scope of This Privacy Policy

This Privacy Policy applies to personal information processed through the Site, our online checkout, customer accounts, customer support communications, returns, refunds, order fulfillment, and related store operations.

This policy does not control the independent privacy practices of third parties that operate under their own privacy policies, such as payment providers, shipping carriers, or external websites.

2. Personal Information We Collect

The personal information we collect depends on how you interact with the Services and may include the following categories:

Contact Information

• Name
• Email address
• Telephone number
• Billing address
• Shipping address

Order and Transaction Information

• Products ordered, sizes, quantities, and purchase history
• Order number and order status
• Shipping, delivery, return, exchange, and refund information
• Discounts, taxes, payment status, and transaction records

Payment Information

Payments are processed by Shopify and the payment provider selected during checkout, which may include Shopify Payments, PayPal, supported card networks, or digital-wallet providers.

Cunhelaw does not store complete credit card or debit card numbers on its website or servers. Payment providers may collect and process payment information according to their own privacy policies and security requirements.

Account Information

If you create a customer account, we may process account credentials, saved addresses, account preferences, and order history. Passwords are handled through the applicable account and authentication system.

Device and Usage Information

• IP address
• Browser and device type
• Operating system
• Device identifiers
• Pages viewed and links selected
• Cart and checkout activity
• Referring website or marketing source
• Approximate location derived from an IP address
• Cookie, pixel, and similar technology information

Customer Support Information

We collect information included in emails, telephone inquiries, contact forms, product questions, return requests, dispute communications, and other messages sent to us.

Content You Submit

If you submit a product review, photograph, survey response, or other content, we may collect the content and associated account or contact information.

Marketing Preferences

We may collect your email subscription status, communication preferences, cookie choices, advertising choices, and consent records.

3. Sources of Personal Information

We may collect personal information:

• Directly from you when you make a purchase, create an account, contact us, submit a return, or subscribe to communications
• Automatically when you access or use the Site through cookies, pixels, logs, and similar technologies
• From service providers that support checkout, payment, fraud prevention, hosting, shipping, analytics, advertising, and customer support
• From business and marketing partners when permitted by law and consistent with your privacy choices

4. How We Use Personal Information

We may use personal information to:

• Provide, operate, and maintain the Site and Services
• Process payments and complete customer orders
• Confirm orders and send shipping or tracking notifications
• Arrange fulfillment, shipping, delivery, returns, and refunds
• Provide product, sizing, order, and customer-support assistance
• Create and manage customer accounts
• Detect, investigate, and prevent fraud or unauthorized activity
• Protect customers, Cunhelaw, the Site, and our service providers
• Improve Site functionality, products, and customer experience
• Measure Site performance and understand customer interactions
• Send marketing communications when permitted and consistent with your preferences
• Provide or measure advertising when advertising services are enabled and permitted by law
• Comply with legal, tax, accounting, and regulatory obligations
• Establish, exercise, or defend legal claims

5. How We Disclose Personal Information

We may disclose personal information when reasonably necessary to operate our store and provide the Services, including to the following categories of recipients:

• E-commerce platform providers, including Shopify
• Payment and financial-service providers, including the provider selected at checkout
• Fulfillment, warehouse, shipping, and delivery providers that process and deliver orders
• Customer-support and return-service providers
• Technology, hosting, security, and fraud-prevention providers
• Analytics and advertising partners when those services are enabled and subject to applicable consent or opt-out requirements
• Professional advisers, such as accountants, insurers, and legal advisers
• Government authorities or other parties when disclosure is required by law or reasonably necessary to protect legal rights and safety

We may also disclose information in connection with a business transfer, financing, reorganization, sale of assets, or similar transaction, subject to applicable law.

6. Shopify Platform

Our store is hosted by Shopify. Shopify processes personal information to provide its commerce platform, checkout, security, account, analytics, and related services to Cunhelaw and our customers.

Depending on the Shopify services and settings enabled for our store, Shopify may also process information about your interactions with Cunhelaw, Shopify, and other merchants to provide and improve its services.

Shopify’s processing of personal information is described in the Shopify Consumer Privacy Policy . You may also use Shopify’s privacy portal to learn about or exercise privacy rights directly with Shopify where available.

7. Payments and Financial Information

Payment information is provided directly to the payment provider selected during checkout. Payment providers may process payment credentials, billing information, transaction information, device information, and fraud signals to authorize and complete a payment.

Payment providers act according to their own legal obligations and privacy policies. Cunhelaw receives information such as payment status, transaction reference, payment method type, and limited payment details necessary to manage the order, but not the customer’s complete payment card number.

8. Cookies and Similar Technologies

We and our service providers may use cookies, pixels, software development tools, local storage, and similar technologies to operate and understand the Site.

These technologies may be used for:

• Essential Functions: Cart functionality, checkout, account access, security, and fraud prevention
• Preferences: Remembering language, region, and other Site choices
• Analytics: Understanding traffic, performance, and customer interactions
• Advertising: Measuring campaigns or providing relevant advertising where enabled and permitted

You can manage available cookie choices through the cookie banner or privacy controls displayed on the Site. You may also block or delete cookies through your browser settings. Blocking essential cookies may prevent parts of the Site, cart, or checkout from functioning correctly.

9. Advertising, Sale, Sharing, and Targeted Advertising

Cunhelaw does not sell personal information in exchange for money.

When analytics or advertising services are enabled, certain disclosures of online identifiers, device information, and Site activity to advertising or marketing partners may be considered a “sale,” “sharing,” or processing for “targeted advertising” under certain U.S. state privacy laws, even when no money is exchanged.

Where applicable, you may opt out by visiting:

Your Privacy Choices

You may also enable a recognized Global Privacy Control (“GPC”) signal in your browser. Where required by applicable law and supported by our privacy settings, a valid GPC signal will be treated as a request to opt out of applicable sale, sharing, or targeted-advertising processing for that browser or device.

Traditional “Do Not Track” signals may not operate in the same way as GPC signals and may not be recognized by all services.

10. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing the Services, maintaining order and transaction records, processing returns, preventing fraud, resolving disputes, and meeting legal, tax, accounting, and regulatory obligations.

Retention periods vary depending on the type of information, the nature of our relationship with you, legal requirements, and whether the information is needed to establish, exercise, or defend legal claims.

When information is no longer reasonably required, we may delete, anonymize, or otherwise handle it in accordance with applicable law.

11. Information Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

However, no internet transmission, electronic storage system, website, or security measure is completely secure. We cannot guarantee absolute security. Please protect your account credentials and contact us if you believe your interaction with Cunhelaw is no longer secure.

12. International Data Processing

Cunhelaw is based in the United States. Shopify and other service providers may process personal information in the United States, Canada, or other countries where they or their service providers operate.

Privacy and data-protection laws in those locations may differ from the laws in your place of residence. Where required, applicable safeguards are used for international transfers of personal information.

13. U.S. State Privacy Rights

Depending on your state of residence and subject to applicable law, you may have some or all of the following rights:

• Request access to personal information we maintain about you
• Request correction of inaccurate personal information
• Request deletion of personal information, subject to legal exceptions
• Request a portable copy of certain personal information
• Opt out of the sale or sharing of personal information or targeted advertising
• Limit certain uses or disclosures of sensitive personal information where applicable
• Withdraw consent where processing is based on consent
• Appeal certain decisions regarding a privacy request
• Exercise privacy rights without unlawful discrimination or retaliation

These rights are not absolute and may be subject to verification, legal exceptions, and applicability thresholds.

To submit an access, correction, deletion, portability, or appeal request, email hello@cunhelaw.com with the subject line Privacy Request.

To opt out of applicable sale, sharing, or targeted advertising, use our Your Privacy Choices page or a recognized GPC signal.

We may request information reasonably necessary to verify your identity and protect personal information from unauthorized disclosure. Information collected for verification will be used for that purpose.

An authorized agent may submit a request where permitted by law. We may request evidence that the agent is authorized to act on your behalf or ask you to confirm the request directly.

We will respond within the period required by applicable law. If we deny a request, we will provide an explanation when required and describe any available appeal process.

14. Marketing Communications

If you subscribe to promotional emails, you may unsubscribe at any time by selecting the unsubscribe link included in the message or by contacting us.

Even after opting out of promotional communications, we may continue sending non-promotional messages necessary to complete an order, provide customer service, issue security notices, or communicate about returns and refunds.

15. Children’s Privacy

The Services are intended for a general adult audience and are not directed to children under 13. We do not knowingly collect personal information from children under 13.

If you are a parent or legal guardian and believe a child has provided personal information to us, please contact us so that we can review and, where appropriate, delete the information.

We do not knowingly sell or share the personal information of individuals under 16 for targeted advertising without the authorization required by applicable law.

16. Third-Party Links

The Site may contain links to third-party websites or services. We are not responsible for the privacy, security, content, or practices of third-party services.

We encourage you to review the privacy policy of any third-party website or service before providing personal information.

17. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, technology, services, or legal obligations.

When we update this policy, we will post the revised version on the Site and update the “Last Updated” date. Where required by law, we may provide additional notice of material changes.

18. Contact Information

For privacy questions or to exercise an applicable privacy right, please contact us: