Privacy policy

Last updated: October 22, 2026

23eightfive operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). 23eightfive is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

This policy explains our practices and your choices. Where consent is required, we ask for it separately; visiting our website or reading this policy does not by itself give consent to optional advertising or other processing that requires consent.

Privacy at a Glance

We use personal information to process purchases, deliver products, provide support, protect against fraud, and operate our store. We also use advertising services, including TikTok and Shopify advertising features, to measure advertising and show relevant ads. These services can connect activity on our store with activity on other websites or platforms.

You can use our Privacy Choices page, the cookie preferences controls where available, or the contact details below to make a privacy request. Optional advertising consent is not a condition of making a purchase.

About this update: We have added detail about TikTok Enhanced data sharing, the reasons we process information, privacy choices, and request and complaint procedures.

Personal Information We Collect or Process

When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or that has been deidentified, so that it cannot identify or be reasonably linked to you. We may collect or process the following categories of personal information, including inferences drawn from this personal information, depending on how you interact with the Services, where you live, and as permitted or required by applicable law:

• Contact details including your name, address, billing address, shipping address, phone number, and email address.
• Financial information including credit card, debit card, and financial account numbers, payment card information, financial account information, transaction details, form of payment, payment confirmation and other payment details.
• Account information including account identifiers, sign in information, preferences and settings.
• Transaction information including the items you view, put in your cart, add to your wishlist, or purchase, return, exchange or cancel and your past transactions.
• Communications with us including the information you include in communications with us, for example, when sending a customer support inquiry.
• Device information including information about your device, browser, or network connection, your IP address, and other unique identifiers.
• Usage information including information regarding your interaction with the Services, including how and when you interact with or navigate the Services.

Personal Information Sources

We may collect personal information from the following sources:

• Directly from you including when you create an account, visit or use the Services, communicate with us, or otherwise provide us with your personal information;
• Automatically through the Services including from your device when you use our products or services or visit our websites, and through the use of cookies and similar technologies;
• From our service providers including when we engage them to enable certain technology and when they collect or process your personal information on our behalf;
• From our partners or other third parties.

How We Use Your Personal Information

Depending on how you interact with us or which of the Services you use, we may use personal information for the following purposes:

• Provide, Tailor, and Improve the Services. We use your personal information to provide you with the Services, including to perform our contract with you, to process your payments, to fulfill your orders, to remember your preferences and items you are interested in, to send notifications to you related to your account, to process purchases, returns, exchanges or other transactions, to create, maintain and otherwise manage your account, to arrange for shipping, to facilitate any returns and exchanges, to enable you to post reviews, and to create a customized shopping experience for you, such as recommending products related to your purchases. This may include using your personal information to better tailor and improve the Services.
• Marketing and Advertising. We use your personal information for marketing and promotional purposes, such as to send marketing, advertising and promotional communications by email, text message or postal mail, and to show you online advertisements for products or services on the Services or other websites, including based on items you previously have purchased or added to your cart and other activity on the Services.
• Security and Fraud Prevention. We use your personal information to authenticate your account, to provide a secure payment and shopping experience, detect, investigate or take action regarding possible fraudulent, illegal, unsafe, or malicious activity, protect public safety, and to secure our services. If you choose to use the Services and register an account, you are responsible for keeping your account credentials safe. We highly recommend that you do not share your username, password or other access details with anyone else.
• Communicating with You. We use your personal information to provide you with customer support, to be responsive to you, to provide effective services to you and to maintain our business relationship with you.
• Legal Reasons. We use your personal information to comply with applicable law or respond to valid legal process, including requests from law enforcement or government agencies, to investigate or participate in civil discovery, potential or actual litigation, or other adversarial legal proceedings, and to enforce or investigate potential violations of our terms or policies.

Information Needed to Provide the Services

Information marked as required at checkout, such as the contact, delivery and payment information needed for your purchase, is necessary to process payment, fulfill your order and deliver your products. If you do not provide required information, we may be unable to complete the purchase or provide the requested service. Optional marketing information and consent to optional advertising are not required to buy from us.

Legal Bases for Processing in the EEA and UK

Where European Economic Area or United Kingdom data protection law applies, the basis for processing depends on the purpose:

• Orders and requested services: We process information to perform our contract with you or take steps you request before entering a contract, including payment, delivery, returns, and requested account services.
• Security and business administration: We rely on our legitimate interests in preventing fraud, securing our store, responding to general inquiries, maintaining appropriate business records, improving how our services work, and establishing or defending legal claims, where those interests are not overridden by your rights.
• Advertising, tracking and optional communications: We rely on consent for advertising cookies, matching, associated tracking and marketing communications where consent is required. For direct communications that applicable law permits without consent, we may rely on our legitimate interest in promoting our products, subject to your right to object. This does not replace consent where the law requires it.
• Legal obligations: We process information to comply with legal obligations that provide a valid basis under the applicable data protection law. Other legally required recordkeeping may be supported by our legitimate interests where appropriate.

You can withdraw consent or exercise applicable objection rights as explained below. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy. Such circumstances may include:

• With Shopify, vendors and other third parties who perform services on our behalf (e.g. IT management, payment processing, data analytics, customer support, cloud storage, fulfillment and shipping).
• With business and marketing partners to provide marketing services and advertise to you. For example, we use Shopify to support personalized advertising with third party services based on your online activity with different merchants and websites. Our business and marketing partners will use your information in accordance with their own privacy notices. Depending on where you reside, you may have a right to direct us not to share information about you to show you targeted advertisements and marketing based on your online activity with different merchants and websites. You can exercise your rights to opt out of those uses here.
• When you direct, request us or otherwise consent to our disclosure of certain information to third parties, such as to ship you products or through your use of social media widgets or login integrations.
• With our affiliates or otherwise within our corporate group.
• In connection with a business transaction such as a merger or bankruptcy, to comply with any applicable legal obligations (including to respond to subpoenas, search warrants and similar requests), to enforce any applicable terms of service or policies, and to protect or defend the Services, our rights, and the rights of our users or others.

TikTok and Advertising Data Sharing

We use TikTok advertising tools with the Enhanced data sharing setting in our Shopify integration. This includes the TikTok Pixel, Events API and Advanced Matching. These technologies allow information about activity on our store to be shared with TikTok from the browser and from our Shopify store.

Depending on your activity, the information available and your privacy choices, this can include pages and products viewed, searches, cart and checkout activity, purchases and order value, product identifiers, IP address, browser and device information, and advertising or cookie identifiers. Customer matching information can include email address, telephone number, first and last name, city, state, postal code and country or region.

Email addresses and telephone numbers used for Advanced Matching are hashed before being shared with TikTok. Hashing transforms those identifiers for matching; it does not make information anonymous, and not every event parameter is hashed.

We use these tools to measure whether ads lead to visits or purchases, improve advertising delivery, match activity to TikTok users, build advertising audiences and show relevant ads, including ads to people who previously visited our store. TikTok may combine information received from our store with information it already holds, in accordance with its applicable privacy policy. See TikTok's US Privacy Policy or EEA and UK Privacy Policy, as applicable.

Our advertising partners may collect information about your online activities over time and across different websites or services. Sharing identifiers, shopping activity and related information for these purposes may constitute a sale, sharing, or processing for targeted advertising under applicable privacy laws, including where no money changes hands. You can exercise applicable choices through our Privacy Choices page, cookie preferences where available, or by contacting us.

Other advertising integrations connected to our store include Google & YouTube, Reddit Ads and Microsoft advertising services. Where the associated data sharing is enabled, these providers may receive identifiers, device information and shopping activity for measurement, attribution and relevant advertising, subject to your choices and applicable law. Their handling of information is described in the Google Privacy Policy, Reddit Privacy Policy and Microsoft Privacy Statement.

Cookies and Consent Choices

Our store uses cookies and similar technologies for essential functions such as checkout and security, and for optional analytics, personalization and advertising. Where consent is required, optional technologies and related processing depend on your consent. The cookie banner and its preferences controls allow you to accept or reject optional categories where those controls are offered. You can revisit available cookie preferences to change or withdraw your choices, or contact us for help.

Cookie consent and sale or sharing opt outs can address different uses of information. To exercise a right to opt out of sale, sharing or targeted advertising, use the Privacy Choices page or contact us even if you have already changed cookie preferences. Choices may apply to a particular browser or device; you may need to repeat them on other browsers or devices or after clearing cookies. Declining optional advertising does not prevent you from placing an order.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services for you. Information you submit to the Services will be transmitted to and shared with Shopify as well as third parties that may be located in countries other than where you reside, in order to provide and improve the Services for you. In addition, to help protect, grow, and improve our business, we use certain Shopify enhanced features that incorporate data and information obtained from your interactions with our Store, along with other merchants and with Shopify. To provide these enhanced features, Shopify may make use of personal information collected about your interactions with our store, along with other merchants, and with Shopify. In these circumstances, Shopify is responsible for the processing of your personal information, including for responding to your requests to exercise your rights over use of your personal information for these purposes. To learn more about how Shopify uses your personal information and any rights you may have, you can visit the Shopify Consumer Privacy Policy. Depending on where you live, you may exercise certain rights with respect to your personal information here Shopify Privacy Portal.

Automated Fraud Checks and Advertising Profiles

We and our commerce and payment providers may use automated checks to assess fraud and security risks. Depending on the service and transaction, these checks may consider order and payment verification information, address consistency, device or network information, and patterns associated with suspicious transactions. Risk assessments may lead to a payment or order being blocked, held or cancelled, including automatically.

If you believe a fraud related decision is incorrect, contact us to ask about the decision, provide additional information and request review. Where applicable law gives you rights concerning decisions based solely on automated processing that have legal or similarly significant effects, you may request human intervention, express your view and contest the decision.

Advertising tools can also infer interests from browsing and shopping activity to select audiences or ads. You can exercise the advertising and objection choices described in this policy.

Third Party Websites and Links

The Services may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on these sites. Information you provide on public or partly public venues, including information you share on third party social networking platforms may also be viewable by other users of the Services and/or users of those third party platforms subject to the relevant platform settings, terms and applicable law. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators, except as disclosed on the Services.

Children's Data

The Services are intended for a general adult shopping audience and are not directed to children. We do not knowingly collect personal information from children under the age of majority in their jurisdiction. If you are a parent or guardian and believe a child has provided personal information, contact us to request deletion and appropriate assistance.

We do not have actual knowledge that we sell or share personal information of individuals under 16. Where applicable law requires additional consent or protections for children or teenagers, those requirements apply separately from the general choices described in this policy.

Security and Retention of Your Information

No security measures are perfect or impenetrable, and information sent over the internet may not be secure while in transit. Please do not send payment card details, account passwords or other sensitive information through ordinary email.

We retain personal information for the purposes described in this policy, using the following criteria:

• Orders and transactions: The time needed to fulfill orders, manage returns, resolve payment or other disputes, maintain business records, and satisfy applicable legal requirements.
• Accounts and support: The time needed to maintain requested account services, respond to inquiries, resolve issues and address relevant later disputes.
• Marketing and privacy preferences: The time needed to manage your preferences and keep appropriate records of consent, withdrawal or an opt out, including records needed to prevent unwanted future marketing.
• Device, usage and advertising information: The time needed for the applicable security, measurement or advertising purpose, taking account of provider settings, contractual arrangements, privacy choices and legal requirements.

Retention can be longer where information is required for a legal obligation, a pending dispute or the establishment or defense of a legal claim. You can ask about retention of information relating to you using the contact details below. Information processed independently by Shopify or an advertising provider is also subject to that provider's retention practices and applicable law.

Your Rights and Choices

Your rights depend on where you live, the law that applies, and the circumstances. Subject to applicable limitations and exceptions, these can include:

• Access and information: Ask whether we process your information, obtain access or a copy, and receive information about collection, use and disclosure, including recipients or recipient categories where required.
• Correction: Ask us to correct inaccurate or incomplete information.
• Deletion: Ask us to delete personal information, subject to lawful retention exceptions.
• Portability: Receive certain information in a usable format or request its transfer where applicable.
• Advertising opt outs: Opt out of sale, sharing or processing for targeted advertising where applicable. Use our Privacy Choices page or contact us.
• Sensitive information and significant profiling: Exercise applicable rights to limit certain uses or disclosures of sensitive information or opt out of certain profiling or automated decisions.
• Objection, restriction and consent withdrawal: Where applicable, including in the EEA and UK, object to processing based on legitimate interests, request restriction, or withdraw consent.

Direct marketing objection: You can object to direct marketing and related profiling at any time; we will stop that processing.

Global Privacy Control: If you visit with the Global Privacy Control signal enabled, depending on your location we treat it as a request to opt out of sale or sharing for the browser and device sending the signal. If we can associate that device with a Shopify account, we apply the opt out to the account as well. Learn more at Global Privacy Control. Other than Global Privacy Control, we do not recognize other Do Not Track signals that may be sent by your browser or device.

Marketing communications: Use the unsubscribe option in a promotional email, the opt out instructions in an optional marketing message, or contact us to change your preferences. We may continue to send necessary communications about orders, accounts or requested services.

How to Make a Request

Email shop@23eightfive.com or shopify@23eightfive.com, call +1 888 822 2385, or write to the address below. Please describe the request and provide enough information for us to locate relevant records. If a regional online control is unavailable to you, you can still contact us to ask about the rights and choices that apply.

For access, correction, deletion or similar requests, we may need to verify your identity as permitted or required by law. We ask only for information appropriate to the request and the risk involved. An opt out of sale, sharing or targeted advertising does not require an account or identity verification where applicable law prohibits those requirements, although we may need information necessary to apply your choice.

You may use an authorized agent where applicable. The agent can contact us using the same methods. We may request evidence of authorization and, where permitted, verification directly from you. We will not discriminate or retaliate against you for exercising a privacy right.

We respond within the time required by the applicable law and explain any permitted extension. If we cannot fulfill a request, we explain the reason and the available appeal or complaint options, subject to legal restrictions. For processing for which Shopify is independently responsible, you can also use the Shopify Privacy Portal.

Complaints and Appeals

Contact us using the details below if you have a concern about our handling of personal information. You can put Privacy Complaint in the subject of an email to help us identify it, but this is optional. Where UK data protection law applies, we acknowledge privacy complaints within 30 days of receiving them, take appropriate steps to investigate, keep you informed and provide the outcome without undue delay.

If you wish to appeal a privacy request decision where an appeal right applies, reply to the decision or email us with Privacy Request Appeal, identify the original request and explain why you want the decision reviewed. We will review the appeal and respond within the applicable legal deadline. If the appeal is denied, we will provide the explanation and applicable regulator complaint information required by law.

You may also complain to the relevant regulator, subject to its procedures. These include your US state attorney general or privacy regulator; an EEA data protection authority; the UK's Information Commissioner's Office; or the Office of the Privacy Commissioner of Canada or applicable provincial commissioner. Contacting us does not remove any right you have to seek a regulator's assistance or a judicial remedy.

International Transfers

We operate in the United States. Your personal information may be transferred to, stored or processed in the United States and other countries where Shopify and our other providers operate. Those countries may have different privacy laws from your country. Information processed abroad may be accessible to courts, law enforcement, national security authorities or other public authorities under the laws of that country.

For transfers from the EEA or UK, permitted transfer mechanisms may include an applicable adequacy decision, European Commission Standard Contractual Clauses, or the relevant UK contractual mechanism, as appropriate to the transfer. You can contact us for information about the safeguards applicable to your information and how to obtain a copy, subject to lawful redactions.

Shopify describes its arrangements in its Data Processing Addendum, including applicable binding corporate rules and contractual safeguards, and in its Consumer Privacy Policy. The arrangements depend on the service, the parties' roles and the particular transfer.

Changes to This Privacy Policy

We may update this policy to reflect changes in our practices or legal requirements. We post the revised policy here and update the date at the top. For material changes, we provide any additional notice required by law, such as a conspicuous website notice or direct notice, and obtain new consent where required before using information for the new purpose. A policy update does not by itself override choices you have already made or authorize a use that requires new consent.

Contact and Privacy Responsibility

23eightfive is the controller responsible for our processing described in this policy. Please direct privacy questions, requests, complaints and appeals to our Privacy Contact:

23eightfive, Attention: Privacy
4694 Cemetery Rd, #330
Hilliard, OH 43026
United States

Email: shop@23eightfive.com or shopify@23eightfive.com
Telephone: +1 888 822 2385