Privacy Policy

1. Information We Collect

Information You Provide

• Name, email address, phone number, and shipping address
• Payment information (processed securely by our payment providers)
• Order history and preferences
• Customer service communications

Information Collected Automatically

• IP address, browser type, and operating system
• Pages visited and interaction patterns
• Referring website addresses

Marketing Communications

With your explicit permission, we may send emails about new products, promotions, wellness tips, and service updates. You can opt out at any time.

2. How We Use Your Information

We use your information to process transactions, fulfill orders, verify payments, arrange deliveries, and handle returns. For secondary purposes such as marketing, we will request your express consent or provide a clear option to decline.

You may withdraw consent at any time by contacting us at support@comrelaxstore.com, using the unsubscribe link in any marketing email, or adjusting your account settings.

3. Information Disclosure

We may disclose your personal information only in the following circumstances:

• When required by law or legal process
• To enforce our Terms of Service
• To protect the rights, property, or safety of Comrelax and our users
• With trusted third-party service providers under strict confidentiality agreements

4. Shopify Platform & Payment Security

Our store is hosted on Shopify Inc., which provides secure e-commerce infrastructure, data storage behind protected firewalls, and PCI-DSS compliant payment processing. Credit card data is encrypted and retained only as long as necessary to complete your purchase.

5. Third-Party Services

We work with trusted third-party providers including payment processors (PayPal, Stripe), shipping carriers (FedEx, UPS, USPS), and marketing and analytics platforms. These providers only access your data to the extent necessary to perform their services.

Our site may contain links to external websites. We are not responsible for their privacy practices and encourage you to review their policies directly.

6. Security

• SSL encryption for all data transmission
• AES-256 encryption for data storage
• PCI-DSS compliance for payment processing
• Device verification, fraud monitoring, and multi-layered data protection
• Regular security assessments and team training

7. Cookies & Tracking

We use cookies to enable seamless navigation, personalize your experience, analyze site traffic, and deliver interest-based advertising (with your consent). We use Google Analytics to understand how visitors interact with our site.

You can manage or disable cookies through your browser settings. Note that disabling cookies may limit access to certain site features.

8. Age of Consent

By using our site, you confirm that you are at least the age of majority in your jurisdiction. We do not knowingly collect personal information from children under 13 without verifiable parental consent.

9. Data Retention

We retain personal information only as long as necessary to fulfill orders, comply with legal obligations, resolve disputes, and support business operations.

10. Policy Changes

We may update this Privacy Policy periodically. The current version will always be posted with the latest revision date. Material changes will be communicated with additional notice. If Comrelax is acquired or merges with another company, your information may transfer to the new owners to ensure service continuity.

11. California Privacy Rights (CCPA/CPRA)

California residents have the right to know what personal information we collect and how it is used, request deletion or correction of their data, limit use of sensitive personal information, and opt out of cross-context behavioral advertising. Comrelax does not sell personal information as defined by CCPA.

To exercise your rights, contact us at support@comrelaxstore.com. We respond within 45 days and will not discriminate against you for exercising these rights.

12. European Data Protection Rights (GDPR)

We process personal data based on your consent, contract performance, legal compliance, or legitimate business interests. European and UK residents have the right to access, rectify, erase, restrict, or port their personal data, and to object to processing. The data controller is Comrelax Corporation.

13. International Users

By using our services, you acknowledge that your information may be transferred to and processed in countries with different data protection laws. Where required, we implement appropriate safeguards including standard contractual clauses.