Privacy Policy

Last updated: 3 November 2025

Amber Lane (“we”, “us”, “our”) operates this store and website, including all related information, content, features, tools, products and services, to provide you with a curated shopping experience (the “Services”). Our store is powered by Shopify, which helps us provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described here.

Personal Information We Collect or Process

“Personal information” means information that identifies or can reasonably be linked to you or another person. It does not include information that has been de-identified or anonymized. Depending on how you interact with the Services, where you live, and as permitted by law, we may collect or process the following categories (including inferences drawn from them):

• Contact details: name, address, billing and shipping address, phone number, email address.
• Financial information: credit/debit card and account numbers, payment details, transaction confirmations.
• Account information: username, password, security questions, preferences and settings.
• Transaction information: items viewed, cart, wishlist, purchases, returns, exchanges, cancellations, and past transactions.
• Communications: information you include when you contact us (e.g., customer support inquiries).
• Device information: device, browser and network details, IP address, unique identifiers.
• Usage information: how and when you interact with or navigate the Services.

Personal Information Sources

We collect personal information:

• Directly from you when you create an account, visit or use the Services, communicate with us, or otherwise provide information.
• Automatically through cookies and similar technologies when you use our products/services or visit our websites.
• From service providers that enable our technology and process personal information on our behalf.
• From partners or other third parties.

How We Use Your Personal Information

Depending on how you interact with us or which Services you use, we may use personal information to:

• Provide, tailor, and improve the Services: perform our contract with you, process payments, fulfill orders, remember preferences, send account notifications, process purchases/returns/exchanges, manage your account, arrange shipping, enable reviews, and personalize your shopping experience (including product recommendations).
• Marketing and advertising: send marketing and promotional communications (email, SMS, postal mail) and show online ads on our Services or other sites, including based on past activity.
• Security and fraud prevention: authenticate accounts, provide a secure experience, detect/investigate/prevent fraudulent, illegal, unsafe or malicious activity, protect public safety, and secure our Services. You are responsible for keeping your credentials safe.
• Communicating with you: provide customer support, respond to requests, and maintain our relationship.
• Legal reasons: comply with law, respond to lawful requests, handle litigation and investigations, and enforce terms and policies.

How We Disclose Personal Information

We may disclose personal information to third parties for legitimate purposes, including:

• With Shopify, vendors and service providers (e.g., IT, payments, analytics, support, cloud storage, fulfillment, shipping) acting on our behalf.
• With business and marketing partners to provide marketing services and advertising (including personalized ads based on online activity with different merchants and websites). Partners use your information under their own privacy notices. Where applicable, you may have the right to direct us not to share information for targeted advertising (see Your Rights and Choices).
• At your direction or with your consent, including for shipping, social media widgets, or login integrations.
• Within our corporate group (affiliates).
• For business transactions (e.g., merger, acquisition, bankruptcy) and legal compliance (e.g., subpoenas, court orders), to enforce our terms, and to protect our rights, users, or the public.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services to provide and improve the Services. Information you submit will be transmitted to and shared with Shopify and relevant third parties (which may be located outside your country). We also use certain Shopify enhanced features that incorporate data from your interactions with our store, other merchants, and Shopify. For those features, Shopify is responsible for the processing and for handling related rights requests. To learn more, see the Shopify Consumer Privacy Policy and the Shopify Privacy Portal for exercising rights related to data Shopify processes.

Third-Party Websites and Links

Our Services may contain links to third-party sites or platforms. Their privacy and security practices apply to your use of those sites. We are not responsible for the privacy or security of third-party sites, nor for information you make public (e.g., on social networks), which may be viewable by others. Inclusion of links does not imply endorsement.

Children’s Data

The Services are not intended for children, and we do not knowingly collect personal information from children under the age of majority in your jurisdiction. If you are a parent/guardian and believe your child provided personal information, contact us to request deletion. As of the effective date, we do not have actual knowledge that we “share” or “sell” personal information of individuals under 16 years of age (as defined by applicable law).

Security and Retention of Your Information

No security measures are perfect, and information transmitted over the internet may not be secure in transit. Please avoid using unsecure channels for sensitive information.
We retain personal information only as long as necessary for the purposes described, including maintaining your account, providing Services, complying with legal obligations, resolving disputes, and enforcing agreements.

Your Rights and Choices

Depending on where you live, you may have some or all of the following rights (subject to legal limitations):

• Right to access/know the personal information we hold about you.
• Right to delete personal information we maintain about you.
• Right to correct inaccurate personal information.
• Right to portability of certain information.
• Right to opt out of “sale” or “sharing”/targeted advertising where applicable. You can exercise opt-out rights via our site settings or by contacting us (see Contact). If you visit our site with a Global Privacy Control (GPC) signal enabled, we will treat it as a request to opt out for the browser/device and, where we can associate the device with a Shopify account, we will apply it to that account. Other than GPC, we do not respond to other “Do Not Track” signals.
• Managing communication preferences: you can unsubscribe from marketing emails at any time via the link in our emails. We may still send non-promotional messages (e.g., order confirmations, service notices).

EEA/UK residents may also have the right to:

• Object to or restrict certain processing; and
• Withdraw consent where processing is based on consent (withdrawal does not affect prior lawful processing).

You can exercise rights where indicated on the Services or by contacting us (see Contact). We may need to verify your identity and may accept authorized-agent requests with appropriate proof. We will not discriminate against you for exercising your rights.

Complaints

If you have concerns about how we process your personal information, please contact us first. Depending on where you live, you may have the right to appeal our decision or lodge a complaint with your local data protection authority. For EEA supervisory authorities, see the official EU list of DPAs.

International Transfers

We may transfer, store, and process your personal information outside your country.
If we transfer your personal information out of the European Economic Area or the United Kingdom, we rely on recognized transfer mechanisms (e.g., European Commission Standard Contractual Clauses or UK equivalents) unless the destination country has an adequacy decision.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for operational, legal, or regulatory reasons. We will post the revised Policy on this site, update the “Last updated” date above, and provide any notices required by law.

Contact

If you have questions about our privacy practices or this Privacy Policy, or if you would like to exercise your rights, please contact us via the contactpage.
For data protection purposes, Amber Lane is the data controller of your personal information.