Privacy policy

Last updated: May 4, 2026

eklexic operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). eklexic is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.

Collecting Personal Information

When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or that has been de-identified, so that it cannot identify or be reasonably linked to you. We may collect or process the following categories of personal information, including inferences drawn from this personal information, depending on how you interact with the Services, where you live, and as permitted or required by applicable law:

• Device Information: Information about your device, browser, or network connection, your IP address, and other unique identifiers. We collect this automatically when you access our Services to load the site accurately and to perform analytics on site usage.
• Order Information: Name, billing address, shipping address, payment confirmation, email address, and phone number. We collect this directly from you to fulfill our contract, process your payment information, arrange for shipping, and provide you with invoices and/or order confirmations.
• Customer Support Information: Information you choose to include in communications with us, for example, when sending a customer support inquiry through email, live chat (Gorgias), or other communication channels.
• Shopping Activity: Items you view, put in your cart, add to your wishlist, or purchase, return, exchange or cancel.
• Marketing and Communication Data: Email address, phone number, SMS opt-in status, email subscription preferences, and your communication preferences. We collect this when you subscribe to our marketing communications or opt into SMS marketing programs.
• Social Media Data: Information from your interactions with our social media pages and advertising on Facebook, Instagram, Pinterest, TikTok, and X (Twitter), including engagement with our content and ads.
• Review and User-Generated Content: Product reviews, ratings, photos, and other content you submit through our review platform (Loox Reviews).
• Analytics and Advertising Data: Information about how you interact with our website, including pages viewed, products clicked, time spent on pages, referral sources, and advertising campaign performance collected through cookies, pixels, and similar technologies from Google Analytics, Meta Pixel, TikTok Pixel, Pinterest Tag, and other analytics services.
• Geolocation Data: General location information derived from your IP address to calculate shipping costs, taxes, and to provide location-specific content and pricing.
• Wholesale and B2B Data: If you are a wholesale customer, we may collect business name, tax ID, resale certificate, and business contact information through our wholesale platforms (Faire, Collective, Brandboom, Hubventory).

Children's Data

The Services are not intended to be used by children, and we do not knowingly collect any personal information about children under the age of majority in your jurisdiction. If you are the parent or guardian of a child who has provided us with their personal information, you may contact us using the contact details set out below to request that it be deleted.

As of the Effective Date of this Privacy Policy, we do not have actual knowledge that we "share" or "sell" (as those terms are defined in applicable law) personal information of individuals under 16 years of age.

Sharing Personal Information

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy. Such circumstances may include:

• Vendors and Service Providers: We use vendors who perform services on our behalf, including:
  • Shopify - ecommerce platform and hosting
  • Klaviyo - email and SMS marketing automation
  • Gorgias - customer support and live chat
  • Loox Reviews - product reviews and user-generated content
  • Google Analytics - website analytics
  • Chargeflow - chargeback management
  • Fulfillment and shipping partners - order fulfillment and delivery
  • Payment processors - secure payment processing
  • Cloud storage providers - data storage and backup
• Business and Marketing Partners: We may use partners to provide marketing services and advertise to you, including:
  • Meta (Facebook & Instagram) - social media advertising
  • Google & YouTube - search and video advertising
  • TikTok - social media advertising
  • Pinterest - visual discovery advertising
  • X (Twitter) - social media advertising
  • Microsoft Advertising - search advertising
  • Awin - affiliate marketing network
  Our business and marketing partners will use your information in accordance with their own privacy notices.
• With Shopify: The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services for you. Information you submit to the Services will be transmitted to and shared with Shopify as well as third parties that may be located in countries other than where you reside, in order to provide and improve the Services for you. You can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy.
• Shopify Network Intelligence: To help protect, grow, and improve our business, we use certain Shopify enhanced features that incorporate data and information obtained from your interactions with our Store, along with other merchants and with Shopify. To provide these enhanced features, Shopify may make use of personal information collected about your interactions with our store, along with other merchants, and with Shopify. In these circumstances, Shopify is responsible for the processing of your personal information, including for responding to your requests to exercise your rights over use of your personal information for these purposes. To learn more about how Shopify uses your personal information and any rights you may have, you can visit the Shopify Consumer Privacy Policy. Depending on where you live, you may exercise certain rights with respect to your personal information at the Shopify Privacy Portal.
• Wholesale Platforms: If you are a wholesale customer, we share your business information with our wholesale partners including Faire, Collective, Brandboom Elite, and Hubventory to facilitate wholesale orders and business relationships.
• Legal Compliance: We may disclose information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.

International Data Transfers

Your personal information may be transferred to, stored, and processed in the United States and other countries where our service providers operate. These countries may have data protection laws that differ from the laws of your country.

When we transfer personal information outside of the European Economic Area (EEA), United Kingdom, or Switzerland, we ensure appropriate safeguards are in place to protect your information, including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by the European Commission recognizing certain countries as providing adequate data protection
• Other legally approved transfer mechanisms

By using our Services, you acknowledge and consent to the transfer of your personal information to countries outside your country of residence.

Behavioral Advertising

As described above, we use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For example:

• We use Google Analytics to help us understand how our customers use the Site. You can read more about how Google uses your Personal Information here: https://policies.google.com/privacy?hl=en. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.
• We share information about your use of the Site, your purchases, and your interaction with our ads on other websites with our advertising partners including Meta (Facebook & Instagram), Google, TikTok, Pinterest, X (Twitter), and Microsoft. We collect and share some of this information directly with our advertising partners, and in some cases through the use of cookies or other similar technologies (which you may consent to, depending on your location).
• We use Shopify Audiences to help us show ads on other websites with our advertising partners to buyers who made purchases with other Shopify merchants and who may also be interested in what we have to offer. We also share information about your use of the Site, your purchases, and the email address associated with your purchases with Shopify Audiences, through which other Shopify merchants may make offers you may be interested in.
• We use Shopify Network Intelligence, which combines data from your interactions with our store with data from other Shopify merchants to improve products, ad targeting, and personalization. Shopify is responsible for this processing. To learn more, visit the Shopify Consumer Privacy Policy.
• We use Klaviyo to send personalized email and SMS marketing messages based on your shopping behavior, purchase history, and preferences.

Opting Out of Targeted Advertising:
Depending on where you reside, you may have a right to direct us not to share information about you to show you targeted advertisements. You can opt out through:

• Your privacy choices: Exercise your data sharing opt-out rights here
• Digital Advertising Alliance: http://optout.aboutads.info/
• Network Advertising Initiative: http://optout.networkadvertising.org/
• Your device settings: iOS users can enable "Limit Ad Tracking" and Android users can opt out through Google Settings

Using Personal Information

We use your personal Information to provide our services to you, which includes: offering products for sale, processing payments, shipping and fulfillment of your order, and keeping you up to date on new products, services, and offers.

Specific purposes include:

• Processing and fulfilling orders
• Communicating with you about orders, products, and services
• Providing customer support
• Sending marketing and promotional communications (with your consent where required)
• Personalizing your shopping experience
• Analyzing website performance and customer behavior
• Preventing fraud and enhancing security
• Complying with legal obligations
• Improving our products, services, and website
• Managing wholesale and B2B relationships

Lawful Basis (GDPR)

Pursuant to the General Data Protection Regulation ("GDPR"), if you are a resident of the European Economic Area ("EEA"), United Kingdom, or Switzerland, we process your personal information under the following lawful bases:

• Your consent - for marketing communications, cookies, and other optional data processing
• The performance of the contract between you and the Site - to fulfill orders and provide services
• Compliance with our legal obligations - to comply with tax, accounting, and legal requirements
• To protect your vital interests - to protect your safety or that of others
• To perform a task carried out in the public interest - where applicable
• For our legitimate interests, which do not override your fundamental rights and freedoms - such as fraud prevention, network security, and business analytics

Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Specific retention periods:

• Order and transaction data: Retained for 10 years to comply with tax, accounting, and legal requirements
• Marketing data: Retained until you unsubscribe or request deletion, or after 3 years of inactivity
• Customer support communications: Retained for 3 years after the last interaction
• Analytics data: Retained for up to 26 months, after which it is aggregated and anonymized
• Inactive accounts: Customer accounts with no activity for 5 years may be deleted

When you place an order through the Site, we will retain your Personal Information for our records unless and until you ask us to erase this information. For more information on your right of erasure, please see the "Your Rights" section below.

Automatic Decision-Making

If you are a resident of the EEA, UK, or Switzerland, you have the right to object to processing based solely on automated decision-making (which includes profiling), when that decision-making has a legal effect on you or otherwise significantly affects you.

We do engage in limited automated decision-making that has a legal or otherwise significant effect using customer data. Our processor Shopify uses limited automated decision-making to prevent fraud that does not have a legal or otherwise significant effect on you.

Services that include elements of automated decision-making include:

• Temporary denylist of IP addresses associated with repeated failed transactions. This denylist persists for a small number of hours.
• Temporary denylist of credit cards associated with denied transactions. This denylist persists for a small number of days.
• Automated fraud detection and prevention through Shopify's fraud analysis tools and Chargeflow.

Data Security

We take the security of your personal information seriously and implement industry-standard security measures to protect it, including:

• SSL/TLS encryption for all data transmitted between your browser and our website
• Secure payment processing through PCI-DSS compliant payment processors including Shopify Payments
• Access controls limiting employee and vendor access to personal information on a need-to-know basis
• Regular security audits and vulnerability assessments
• Secure data storage with encrypted databases and backup systems
• Employee training on data protection and security best practices

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you and any applicable regulatory authorities in accordance with applicable law. Notifications will be made without undue delay and, where feasible, within 72 hours of becoming aware of the breach.

We will provide you with information about:

• The nature of the breach
• The categories and approximate number of individuals affected
• The likely consequences of the breach
• Measures taken or proposed to address the breach
• Contact information for further inquiries

Your Rights

GDPR (EEA, UK, Switzerland):

If you are a resident of the EEA, UK, or Switzerland, you have the following rights:

• Right to access - You have the right to access the Personal Information we hold about you
• Right to rectification - You have the right to correct inaccurate or incomplete personal information
• Right to erasure - You have the right to request deletion of your personal information
• Right to restrict processing - You have the right to request that we limit how we use your information
• Right to data portability - You have the right to receive your personal information in a portable format
• Right to object - You have the right to object to certain types of processing, including direct marketing
• Right to withdraw consent - Where processing is based on consent, you have the right to withdraw it at any time
• Right to lodge a complaint - You have the right to file a complaint with your local data protection authority

To exercise these rights, please contact us at info@eklexic.com.

CCPA/CPRA (California):

If you are a resident of California, you have the following rights:

• Right to Know - You have the right to know what personal information we collect, use, disclose, and sell
• Right to Access - You have the right to access the personal information we hold about you
• Right to Delete - You have the right to request deletion of your personal information
• Right to Correct - You have the right to correct inaccurate personal information
• Right to Opt-Out - You have the right to opt out of the "sale" or "sharing" of your personal information for targeted advertising
• Right to Limit Use of Sensitive Personal Information - You have the right to limit the use of sensitive personal information
• Right to Non-Discrimination - You have the right not to receive discriminatory treatment for exercising your privacy rights

Categories of Personal Information Sold or Shared:
We may "sell" or "share" (as defined under California law) the following categories of personal information for targeted advertising purposes: identifiers (such as email address), commercial information (such as purchase history), internet activity (such as browsing behavior), and inferences drawn from this information.

Other US State Privacy Laws (Virginia, Colorado, Connecticut, Utah, and others):

If you are a resident of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), or other states with comprehensive privacy laws, you have similar rights including:

• Right to access your personal information
• Right to correct inaccurate personal information
• Right to delete your personal information
• Right to opt out of the sale of personal information
• Right to opt out of targeted advertising
• Right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects

To exercise these rights, please contact us at info@eklexic.com.

Authorized Agents:
If you would like to designate an authorized agent to submit requests on your behalf, please contact us at info@eklexic.com. We may require verification of the agent's authority.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to optimize website functionality, analyze performance, provide personalized experiences, and deliver targeted advertising.

Types of cookies we use:

• Essential cookies - Required for the website to function properly (e.g., shopping cart, checkout)
• Performance cookies - Help us understand how visitors use our website (e.g., Google Analytics)
• Functional cookies - Remember your preferences and settings
• Advertising cookies - Used to deliver relevant ads and measure campaign effectiveness (e.g., Meta Pixel, TikTok Pixel, Pinterest Tag)

Managing cookies:
You can control cookies through your browser settings. However, disabling certain cookies may affect the functionality of our website.

Cookie Consent:
Depending on your location, you may see a cookie consent banner when you first visit our website. You can manage your cookie preferences through this banner at any time.

Global Privacy Control (GPC)

If you visit our website with the Global Privacy Control opt-out preference signal enabled, depending on where you are, we will automatically treat this as a request to opt-out of activity that may be considered a "sale" or "sharing" of personal information or other uses that may be considered targeted advertising for the device and browser you used to visit our website.

To enable GPC, you can use a browser or browser extension that supports the Global Privacy Control signal.

Do Not Track

Please note that because there is no consistent industry understanding of how to respond to "Do Not Track" signals, we do not alter our data collection and usage practices when we detect such a signal from your browser, except regarding the Global Privacy Control as stated above.

Third-Party Links and Services

The Services may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on these sites.

Information you provide on public or semi-public venues, including information you share on third-party social networking platforms, may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use by us or by a third party. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators, except as disclosed on the Services.

Third-party services we integrate with include:

• Social media platforms (Facebook, Instagram, Pinterest, TikTok, X)
• Payment processors
• Shipping carriers
• Analytics providers
• Marketing platforms
• Wholesale marketplaces

Email and SMS Marketing

Email Marketing:
If you subscribe to our email list, we will send you marketing emails about new products, promotions, and other updates. You can unsubscribe at any time by clicking the "unsubscribe" link at the bottom of any marketing email or by contacting us.

SMS Marketing:
If you opt into our SMS marketing program, you will receive text messages about promotions, order updates, and other information. Message and data rates may apply. Message frequency varies.

To opt out of SMS marketing, reply STOP to any text message from us. For help, reply HELP or contact us at info@eklexic.com.

We use Klaviyo to manage our email and SMS marketing programs. Klaviyo processes your information in accordance with their own privacy policy.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons.

When we make material changes to this Privacy Policy, we will notify you by:

• Posting the updated policy on this page with a new "Last updated" date
• Sending an email notification to the email address associated with your account (where required by law)
• Displaying a prominent notice on our website

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Contact

For more information about our privacy practices, if you have questions, or if you would like to make a complaint or exercise your privacy rights, please contact us:

By email: info@eklexic.com
By mail:
eklexic
21926 Town Place Drive
Boca Raton, FL 33433
United States

For privacy-specific inquiries:

• Shopify Privacy Portal: https://privacy.shopify.com

Response Time:
We will respond to your privacy requests within 30 days (or as otherwise required by applicable law). In some cases, we may need to verify your identity before processing your request.