Privacy Policy

Last Updated: April 8, 2026

OVERVIEW & DATA CONTROLLER

Strictli operates this store and website, including all related information, content, features, tools, products, and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). Strictli is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase using the Services. For the purposes of the General Data Protection Regulation (GDPR) and UK GDPR, Strictli LLC is the Data Controller of your personal information. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to your personal information.

PERSONAL INFORMATION WE COLLECT

We may collect or process the following categories of personal information depending on how you interact with the Services:

• Contact Details: Name, billing address, shipping address, phone number, and email address.
• Financial Information: Payment card details, transaction details, and form of payment (processed securely).
• Account Information: Username, password, security questions, and preferences.
• Transaction Information: Items viewed, added to cart, purchased, returned, or exchanged.
• Communications: Information included in customer support inquiries.
• Device & Usage Information: Browser type, IP address, unique identifiers, and how you navigate the Services.

SOURCES OF PERSONAL INFORMATION

• Directly from you: When you create an account, make a purchase, or contact us.
• Automatically: Through cookies and similar technologies when you visit our Site.
• From Service Providers: Including Shopify, our dropship suppliers, and analytics partners.

HOW WE USE YOUR INFORMATION & LEGAL BASIS

Under the GDPR, we must have a valid legal basis to process your data. We use your personal information for the following purposes:

• Performance of a Contract: To process payments, arrange shipping, fulfill orders, manage your account, and provide customer support.
• Legitimate Interests: To screen orders for fraud, ensure public safety, secure our services, and optimize our Site analytics.
• Consent: To send marketing communications, text messages, or targeted advertising (you may withdraw this consent at any time).
• Legal Obligation: To comply with applicable laws, respond to legal processes, or enforce our policies.

HOW WE DISCLOSE PERSONAL INFORMATION

We may disclose your personal information to third parties for legitimate purposes, including:

• Shopify & Vendors: Third parties who perform services on our behalf, such as payment processing, fulfillment, and IT management.
• Marketing Partners: To provide personalized advertising based on your online activity. You can opt-out of targeted advertising where applicable by law.
• Legal Compliance & Affiliates: In connection with business transactions, to comply with subpoenas, or to protect the rights and safety of our users.

INTERNATIONAL TRANSFERS

The Services are hosted by Shopify. If you live outside the United States, including in the UK or European Economic Area (EEA), your personal information will be transferred to, stored, and processed outside your country of residence. We rely on recognized transfer mechanisms, such as the European Commission's Standard Contractual Clauses (SCCs) or UK equivalent, to ensure your data is protected.

SECURITY & DATA RETENTION

While no security measures are perfect, we implement industry-standard protocols to protect your data. We retain your personal information for as long as necessary to maintain your account, provide the Services, comply with legal/tax obligations, and resolve disputes.

Children's Data: The Services are not intended for children. We do not knowingly collect data from children under the age of majority in your jurisdiction. Parents or guardians may contact us to request the deletion of a child's data.

YOUR RIGHTS AND CHOICES

Depending on where you live (including the UK, EEA, and certain US states), you have specific rights regarding your personal information:

• Right to Access / Know: Request copies of the personal information we hold about you.
• Right to Correct / Rectification: Request correction of inaccurate or incomplete data.
• Right to Delete / Erasure: Request that we delete your personal information (the "Right to be Forgotten").
• Right of Portability: Request a copy of your data transferred to another party.
• Right to Restrict or Object: Object to processing for direct marketing, or request restricted processing under certain conditions.
• Right to Opt-Out: Opt-out of the "sale" or "sharing" of your data for targeted advertising. We recognize Global Privacy Control (GPC) signals from your browser.