Privacy Policy

Privacy Policy

SECTION 1 – WHAT DO WE DO WITH YOUR INFORMATION?

When you purchase something from Ellhaa, as part of the buying and selling process, we collect personal information such as your name, address, and email address.

When you browse our store, we also automatically receive your computer’s IP address to help us understand your browser and operating system.

Email marketing (if applicable): With your permission, we may send you emails about our store, new products, and other updates.

Location-based tracking: Your IP address may be used to determine your location in order to provide accurate shipping options and personalized content. No personal data is stored in this process.

SECTION 2 – CONSENT

How do we obtain your consent?
When you provide personal information to place an order, create an account, complete a transaction, verify your payment method, or request a return, we interpret this as your consent to collect and use that information for the specific purpose only.

If we ask for your personal information for a secondary reason (e.g., marketing), we will either ask for your explicit consent or give you an opportunity to opt out.

How do I withdraw my consent?
If you change your mind after opting in, you may withdraw your consent for us to contact you or continue using your information by contacting us at support@ellhaa.com.

SECTION 3 – DISCLOSURE

We may disclose your personal information if required by law or if you violate our Terms of Service.

SECTION 4 – SHOPIFY

Our store is hosted on Shopify Inc., which provides the e-commerce platform that allows us to sell our products and services.

Your data is stored through Shopify’s data storage systems, databases, and application, all on a secure server behind a firewall.

Payment:
If you choose a direct payment method, Shopify stores your credit card data encrypted through PCI-DSS (Payment Card Industry Data Security Standard). Your transaction data is only stored as long as necessary to complete the transaction and is then deleted.

All direct payment gateways follow PCI-DSS standards set by the PCI Security Standards Council, including Visa, MasterCard, American Express, and Discover.

You can learn more in Shopify’s Terms of Service and Privacy Policy.

SECTION 5 – THIRD-PARTY SERVICES

Third-party providers used by Ellhaa will only collect and use your information as necessary to perform the services they provide.

However, some providers (e.g., payment gateways) have their own privacy policies. We encourage you to read their policies to understand how your personal data will be handled.

These providers may be located in jurisdictions different from yours or ours. As a result, your information may become subject to the laws of those jurisdictions (e.g., U.S. laws like the Patriot Act).

Once you leave our store or are redirected to a third-party website or app, our Privacy Policy and Terms of Service no longer apply.

Links:
Links on our store may lead to external sites. We are not responsible for the privacy practices of these sites and recommend reviewing their privacy policies.

SECTION 6 – SECURITY

We take reasonable precautions and follow industry best practices to protect your personal information from loss, misuse, unauthorized access, disclosure, alteration, or destruction.

If you provide us with your credit card information, it is encrypted using Secure Socket Layer (SSL) technology and stored with AES-256 encryption. While no method of transmission over the Internet is 100% secure, we comply with all PCI-DSS requirements and implement additional accepted security measures.

SECTION 7 – COOKIES

We use cookies to improve your experience. Below are some cookies we use:

  • _session_id: unique token, sessional — tracks your session (referrer, landing page, etc.).

  • _shopify_visit: no data held, persists 30 minutes from last visit.

  • _shopify_uniq: no data held, expires at midnight next day — counts visits.

  • cart: unique token, persists for 2 weeks — stores your cart contents.

  • _secure_session_id: unique token, sessional.

  • storefront_digest: unique token, indefinite — used if the shop is password protected.

You can choose to disable cookies in your browser settings.

SECTION 8 – AGE OF CONSENT

By using this site, you confirm that you are at least the age of majority in your state or province, or that you are the age of majority and have given us consent to allow your minor dependents to use the site.

SECTION 9 – CHANGES TO THIS PRIVACY POLICY

We reserve the right to modify this Privacy Policy at any time. Changes will take effect immediately upon being posted. If material changes are made, we will notify you here.

If Ellhaa is acquired or merged with another company, your information may be transferred to the new owners to continue serving you.

QUESTIONS AND CONTACT INFORMATION

To access, correct, amend, or delete your personal information, file a complaint, or ask questions, contact us at:

Email: support@ellhaa.com