Privacy policy

Last updated: August 18, 2026

Talumie operates this store and website, including all related information, content, features, tools, products, and services, to provide you, the customer, with a personalized shopping experience (the "Services"). Talumie is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, disclose, store, and otherwise process your personal information when you visit or use the Services, make a purchase or other transaction, create an account, communicate with us, or otherwise interact with us. If there is any conflict between our Terms and Conditions and this Privacy Policy, this Privacy Policy will prevail with respect to the collection, processing, use, and disclosure of your personal information.

Please read this Privacy Policy carefully. By accessing or using the Services, you acknowledge that you have read and understood how we collect, use, and disclose your personal information as described in this Privacy Policy. Where applicable law requires your consent for a specific processing activity, we will request that consent separately.

What personal data do we collect or process?

When we use the terms "personal data" or "personal information," we mean information that identifies, relates to, describes, or can reasonably be linked to you or another identifiable individual. Personal data does not include information that has been collected anonymously or anonymized to such an extent that identification or association with you is no longer reasonably possible. Depending on how you interact with the Services, where you live, and as permitted or required by applicable law, we may collect or process the following categories of personal data, including inferences derived from such data:

• Contact details.  Including your name, postal address, billing address, delivery address, telephone number, and email address.
• Financial and payment data.  Including payment method, transaction details, payment confirmation, billing information, and other payment-related information. Payment card and financial account information may be collected and processed directly by Shopify, payment processors, or other payment service providers rather than being stored directly by us.
• Account information.  Including username, password or authentication information, account preferences, configurations, and settings.
• Transaction and shopping information.  Including products you view, add to your cart, add to your wishlist, purchase, return, exchange, or cancel, together with your order and transaction history.
• Communications with us.  Including information you provide when communicating with us, such as when contacting customer support, submitting a request, responding to a survey, or otherwise corresponding with us.
• Device and technical information.  Including information about your device, browser, operating system, network connection, IP address, device identifiers, cookie identifiers, and other unique identifiers.
• Usage information.  Including information about how you interact with, access, navigate, or use the Services, such as pages viewed, links clicked, products viewed, referring URLs, browsing activity, and the date and time of interactions.
• Marketing and advertising information.  Including your marketing preferences, interactions with advertisements and marketing communications, attribution information, and information used to measure or personalize advertising, where permitted by applicable law.
• Fraud prevention and security information.  Including information used to verify transactions, identify potentially fraudulent or abusive activity, protect accounts, and maintain the security of the Services.

Sources of personal data

We may collect personal data from the following sources:

• Directly from you.  We collect information when you create an account, place an order, make a payment, use the Services, contact us, subscribe to marketing communications, submit information through a form, or otherwise provide personal data to us.
• Automatically through the Services.  We may collect information automatically from your device when you visit or use our website or Services through cookies, pixels, tags, software development kits, server logs, and similar technologies, subject to applicable consent requirements.
• From our service providers.  We may receive information from companies that provide services on our behalf, including payment processing, website hosting, analytics, fraud prevention, customer support, fulfillment, logistics, shipping, and marketing services.
• From Shopify.  As our commerce platform provider, Shopify may provide us with information necessary to operate our store, process transactions, provide functionality, improve the Services, prevent fraud, and support our business.
• From business, advertising, and marketing partners.  We may receive information from advertising platforms, analytics providers, social networks, affiliates, and other business partners where permitted by applicable law.
• From other third parties.  We may receive information from third parties where you have authorized the disclosure, where the information is lawfully available, or where otherwise permitted by applicable law.

How do we use your personal data?

Depending on how you interact with us or which Services you use, we may use personal data for the following purposes:

• Provision, customization, and improvement of the Services.  We use your personal data to provide the Services, fulfill our contract with you, process payments, process and fulfill orders, provide order confirmations and updates, organize shipping and delivery, facilitate returns, refunds and exchanges, maintain your account, remember your preferences, enable reviews or other functionality, provide customer support, and improve or personalize your shopping experience.
• Marketing and advertising.  Subject to applicable law and, where required, your consent, we may use personal data to send marketing or promotional communications by email, SMS, or other channels, measure the effectiveness of our advertising, understand customer interests, and display or facilitate personalized or targeted advertisements on our Services or third-party websites and platforms.
• Analytics and improvement.  We may use information to understand how customers interact with the Services, measure performance, troubleshoot problems, conduct analytics, develop new functionality, and improve our website, products, advertising, and customer experience.
• Security and fraud prevention.  We use personal data to authenticate accounts, provide secure payment and shopping experiences, prevent unauthorized access, detect, investigate, and respond to potentially fraudulent, illegal, unsafe, or malicious activity, protect our customers and business, and maintain the security and integrity of the Services.
• Communication with you.  We use your personal data to provide customer support, respond to questions and requests, communicate regarding your account or orders, send service-related messages, resolve complaints, and maintain our business relationship with you.
• Legal and regulatory purposes.  We may use personal data to comply with applicable laws, tax and accounting requirements, regulatory obligations, lawful requests from courts, law enforcement, or governmental authorities, establish or defend legal claims, resolve disputes, enforce our terms and policies, and protect our rights or the rights of others.

Legal bases for processing personal data in the EEA and United Kingdom

If you are located in the European Economic Area ("EEA") or United Kingdom ("UK"), we process your personal data only where we have a valid legal basis under applicable data protection law. Depending on the circumstances, we may rely on one or more of the following legal bases:

• Performance of a contract.  We process personal data where necessary to enter into or perform our contract with you, including processing payments, fulfilling orders, arranging delivery, providing customer support, and handling returns or refunds.
• Legal obligations.  We process personal data where necessary to comply with legal obligations, including tax, accounting, consumer protection, fraud prevention, and regulatory requirements.
• Legitimate interests.  We may process personal data where necessary for our legitimate business interests or those of a third party, provided those interests are not overridden by your rights and freedoms. These interests may include operating and improving our business, protecting the Services, preventing fraud, securing transactions, providing customer service, understanding business performance, and establishing or defending legal claims.
• Consent.  Where required, we process personal data based on your consent, including for certain marketing communications, advertising technologies, analytics technologies, cookies, or similar technologies. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

Cookies and similar technologies

We and our service providers may use cookies, pixels, tags, local storage, and similar technologies to operate the Services, remember your preferences, maintain shopping cart functionality, secure the Services, understand how the Services are used, measure performance, conduct analytics, and provide or measure advertising.

Some cookies and similar technologies are strictly necessary for the Services to function and may not require consent. Other technologies, including certain analytics, advertising, and personalization technologies, may be used only after obtaining your consent where required by applicable law.

You may be able to manage your cookie preferences through the cookie consent tool made available on our website. You may also control certain cookies through your browser settings. Disabling certain cookies may affect the availability or functionality of portions of the Services.

How do we share personal data?

Under certain circumstances, we may disclose personal data to third parties for legitimate business purposes and in accordance with this Privacy Policy and applicable law. Such circumstances may include:

• With Shopify and service providers that perform services on our behalf, such as website hosting, IT services, payment processing, fraud prevention, data analytics, customer support, cloud storage, order fulfillment, logistics, shipping, and delivery.
• With payment processors, banks, card networks, and other financial service providers as necessary to process transactions, prevent fraud, handle refunds, and provide payment-related services.
• With fulfillment partners, warehouses, suppliers, logistics providers, and shipping carriers where necessary to process, fulfill, ship, track, and deliver your order.
• With business, analytics, advertising, and marketing partners that provide services to us or assist us in measuring, delivering, or personalizing advertising, subject to applicable consent and opt-out requirements.
• When you request or authorize us to disclose information to a third party, such as when using social media integrations, third-party login services, or other integrations.
• With our affiliates, subsidiaries, or other entities within our corporate group where necessary for legitimate business purposes and permitted by applicable law.
• In connection with an actual or proposed merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or other business transaction.
• Where necessary to comply with applicable law, respond to subpoenas, court orders, warrants, or lawful governmental requests, enforce our terms or policies, investigate suspected violations, protect the Services, or protect our rights, customers, employees, or others.

Depending on the laws applicable where you live, certain disclosures of personal information for personalized or targeted advertising may be considered a "sale," "sharing," or use of personal information for "targeted advertising," even where no money is exchanged. Where applicable, you may have the right to opt out of these activities as described below.

Relationship with Shopify

The Services are hosted and powered by Shopify. Shopify collects and processes personal data relating to your access to and use of the Services in order to provide, secure, personalize, and improve Shopify's services and the commerce experience.

Information you submit through the Services may be shared with Shopify and other third parties, including parties located in countries other than your country of residence, where necessary to provide and improve the Services. We may also use Shopify features that use information derived from your interactions with our store, Shopify, and other merchants. In certain circumstances, Shopify may independently determine the purposes and means of processing certain personal data and may be responsible for responding to requests relating to that processing.

For more information about how Shopify processes personal information, please review the Shopify Consumer Privacy Policy. You may also access the Shopify Privacy Portal to learn more about available privacy controls and rights.

Third-party websites and links

The Services may contain links to websites, applications, social networks, or other online platforms operated by third parties. If you follow a link to a website or service that is not owned or controlled by us, you should review that third party's privacy and security policies and other applicable terms.

We are not responsible for the privacy, security, accuracy, completeness, or reliability of third-party websites or services. Information that you make available publicly or semi-publicly through third-party platforms may be visible to other users and may be used by those parties in accordance with their own policies. The inclusion of a third-party link does not necessarily mean that we endorse the third party, its content, or its practices.

Data from children

The Services are not directed to children, and we do not knowingly collect personal information from children under the age at which they may lawfully provide their own consent under applicable law. If you are a parent or legal guardian and believe that a child has provided personal information to us improperly, please contact us using the contact information below so that we can review and, where appropriate, delete the information.

We do not knowingly sell or share, as those terms may be defined under applicable U.S. state privacy laws, personal information belonging to individuals under 16 years of age.

Security of your personal data

We use reasonable administrative, technical, and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. However, no security system, method of transmission, or electronic storage system is completely secure, and we cannot guarantee absolute security.

You are responsible for maintaining the confidentiality of your account credentials. You should not share your password or other login credentials with other people. We also recommend that you avoid transmitting sensitive or confidential information through insecure communication channels.

Retention of personal data

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected or otherwise processed, including providing the Services, fulfilling orders, maintaining accounts, handling customer service requests, processing returns and refunds, preventing fraud, complying with tax, accounting, consumer protection, and other legal obligations, resolving disputes, and establishing or defending legal claims.

The appropriate retention period depends on factors such as the nature and sensitivity of the data, the purposes for which it is processed, applicable statutory retention requirements, the existence of an ongoing customer relationship, potential disputes, and other legal or operational requirements.

Where personal data is processed for direct marketing purposes, we may retain relevant information until you unsubscribe, withdraw consent, or object to the processing, subject to our ability to retain limited information necessary to record and respect your opt-out request.

Your rights and options

Depending on where you live and subject to applicable law, you may have some or all of the following rights regarding your personal data. These rights are not absolute and may be subject to exceptions or limitations permitted by law.

• Right of access or information.  You may have the right to request information about the personal data we collect, use, disclose, or otherwise process and to request access to personal data relating to you.
• Right to deletion or erasure.  You may have the right to request deletion of personal data we maintain about you, subject to applicable exceptions.
• Right to correction or rectification.  You may have the right to request correction of inaccurate or incomplete personal data.
• Right to data portability.  You may have the right to receive certain personal data in a structured, commonly used, and machine-readable format and, in certain circumstances, request that it be transferred to another organization.
• Right to withdraw consent.  Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
• Marketing preferences.  You may unsubscribe from promotional emails at any time by using the unsubscribe mechanism contained in those communications. Even after opting out of marketing communications, we may continue sending non-promotional communications relating to your account, transactions, orders, security, or our ongoing business relationship.

Additional rights for residents of the EEA and United Kingdom

If you are located in the EEA or United Kingdom, subject to applicable exceptions and limitations, you may have the following additional rights:

• Right to restriction of processing.  You may request that we restrict the processing of your personal data in certain circumstances.
• Right to object.  Where we rely on legitimate interests as a legal basis, you may have the right to object to processing based on your particular situation. You also have the right to object at any time to the processing of personal data for direct marketing purposes.
• Rights relating to automated decision-making.  Where applicable, you may have rights concerning decisions based solely on automated processing, including profiling, that produce legal effects or similarly significantly affect you.
• Right to lodge a complaint.  You have the right to lodge a complaint with an applicable data protection supervisory authority. EEA residents may generally contact the supervisory authority in the country where they live, work, or where an alleged infringement occurred. UK residents may contact the UK Information Commissioner's Office ("ICO").

United States privacy rights

If you reside in a U.S. state that provides specific consumer privacy rights and the applicable privacy law applies to us, you may have additional rights regarding your personal information. Depending on your state of residence and subject to applicable exceptions, these rights may include:

• The right to know or confirm whether we process personal information about you.
• The right to access certain personal information.
• The right to request correction of inaccurate personal information.
• The right to request deletion of certain personal information.
• The right to obtain a portable copy of certain personal information.
• The right to opt out of the sale of personal information, where applicable.
• The right to opt out of the sharing of personal information for cross-context behavioral advertising, where applicable.
• The right to opt out of processing for targeted advertising, where applicable.
• The right to limit certain uses or disclosures of sensitive personal information, where applicable.
• The right to opt out of certain profiling or automated decision-making activities, where provided by applicable law.
• The right to appeal certain decisions regarding your privacy request, where provided by applicable law.
• The right not to receive unlawful discriminatory treatment for exercising applicable privacy rights.

Depending on applicable law, certain transfers of identifiers, device information, internet or network activity, shopping activity, and related information to advertising or marketing partners may constitute "selling," "sharing," or processing for targeted advertising even when we do not receive monetary payment for the information.

Where required by applicable law, you may exercise applicable opt-out rights through privacy controls made available through the Services or by contacting us using the information provided in the Contact section below.

Where legally required, we may also recognize qualifying browser-based opt-out preference signals, such as the Global Privacy Control ("GPC"), for the browser or device from which the signal is sent.

Where permitted by applicable law, you may designate an authorized agent to make a privacy request on your behalf. We may require evidence that you authorized the agent to act for you and may separately verify your identity.

California residents

If the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA"), applies to our processing of your personal information, California residents may have rights to know, access, correct, and delete certain personal information, as well as rights to opt out of the sale or sharing of personal information and to limit certain uses and disclosures of sensitive personal information, subject to applicable exceptions and limitations.

We will not discriminate against you for exercising rights provided to you under applicable California privacy law.

The categories of personal information we may have collected during the preceding 12 months are described in the "What personal data do we collect or process?" section above. The purposes for collecting and using this information are described in the "How do we use your personal data?" section, and the categories of recipients are described in the "How do we share personal data?" section.

Canadian privacy rights

If you are located in Canada, we process personal information in accordance with applicable Canadian privacy laws. Subject to applicable law, you may have the right to request access to personal information held about you, request correction of inaccurate information, withdraw consent to certain processing, and challenge our compliance with applicable privacy requirements.

Where we rely on consent, we seek to ensure that consent is meaningful and appropriate to the sensitivity of the information and the purposes for which it is collected, used, or disclosed. You may withdraw consent where permitted by law, subject to legal or contractual restrictions and reasonable notice. Withdrawal of consent may affect our ability to provide certain Services where the information is necessary to provide those Services.

We may use service providers located outside Canada, including in the United States and other jurisdictions. As a result, personal information may be processed in jurisdictions where it may be subject to lawful access by courts, law enforcement agencies, or governmental authorities in accordance with local law.

Questions or concerns regarding our Canadian privacy practices may be directed to our Privacy Officer at info@talumie.com.

Quebec residents

If you reside in Quebec, additional rights may apply under Quebec privacy law, including rights relating to access, rectification, withdrawal of consent, cessation of dissemination, de-indexation or re-indexation in certain circumstances, and data portability where applicable. Requests may be submitted to our Privacy Officer using the contact information provided below.

Exercising your privacy rights

You may exercise applicable privacy rights through controls provided within the Services or by contacting us using the contact information below. We will not unlawfully discriminate against you or otherwise penalize you for exercising applicable privacy rights.

Where permitted or required by law, we may need to verify your identity before processing a privacy request. The information required for verification will depend on the nature and sensitivity of the request. We may decline or limit a request where permitted by applicable law, including where we cannot reasonably verify your identity or where a legal exception applies.

Where applicable law permits an authorized representative to submit a request on your behalf, we may require proof that you authorized that person to act for you and may require you to verify your identity directly with us.

We will respond to valid privacy requests within the time periods required by applicable law.

Complaints

If you have a complaint regarding how we process your personal data, please contact us using the contact information provided below so that we can review your concerns.

If you are located in the EEA, you also have the right to lodge a complaint with an applicable data protection supervisory authority. Information about EEA supervisory authorities is available through the European Data Protection Board.

If you are located in the United Kingdom, you may have the right to lodge a complaint with the UK Information Commissioner's Office. If you are located in Canada, you may have the right to submit a complaint to the Office of the Privacy Commissioner of Canada or an applicable provincial privacy regulator. If you are located in the United States, applicable state law may provide additional complaint or appeal mechanisms.

International transfers

We operate internationally and use service providers that may process personal data in countries other than the country in which you reside. As a result, your personal data may be transferred to, stored in, or processed in other jurisdictions, including the United States and other countries where Shopify or our service providers operate.

Where personal data is transferred from the EEA to a country that has not been recognized as providing an adequate level of data protection, we use appropriate safeguards where required, which may include the European Commission's Standard Contractual Clauses or another legally recognized transfer mechanism.

Where personal data is transferred from the United Kingdom to a country that is not covered by applicable UK adequacy regulations, we use appropriate safeguards where required, which may include the UK International Data Transfer Agreement, the UK Addendum to the European Commission's Standard Contractual Clauses, or another legally recognized transfer mechanism.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, Services, technologies, legal obligations, or for other operational, legal, or regulatory reasons. When we update this Privacy Policy, we will publish the revised version on this website and update the "Last updated" date above. Where required by applicable law, we will provide additional notice or obtain consent to material changes.

Contact

If you have questions about our privacy practices or this Privacy Policy, wish to exercise any applicable privacy rights, or wish to submit a privacy complaint, you may contact us using the following information:

Talumie
Email: info@talumie.com
Mailing address: 30 N Gould St, STE R, Sheridan, Wyoming 82801, United States
Privacy Officer: info@talumie.com

For purposes of applicable data protection laws, Talumie is the controller of your personal data unless otherwise stated or unless another entity is identified as the controller for a particular processing activity.