Privacy policy

PRIVACY POLICY

Last updated: September 2, 2026

The Haunt Lab ("The Haunt Lab," "we," "us," or "our") operates this online store and website, including the related content, features, products, and services (collectively, the "Services").

Our store is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy explains how we collect, use, disclose, store, and otherwise process your personal information when you visit our website, make a purchase, communicate with us, or otherwise use our Services.

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy.

Nothing in this Privacy Policy is intended to limit any rights you may have under applicable privacy or data protection laws.

1. Personal Information We Collect

The personal information we collect depends on how you interact with our Services and may include:

Contact Information

We may collect:

  • Name

  • Email address

  • Telephone number

  • Billing address

  • Shipping address

Order and Transaction Information

We may collect information relating to your purchases and transactions, including:

  • Products viewed or purchased

  • Shopping cart activity

  • Order information

  • Returns, refunds, and other transaction information

  • Payment status and confirmation

  • Shipping and delivery information

Payment Information

Payments may be processed by Shopify Payments or other third-party payment providers.

Depending on the payment method used, payment providers may collect information such as your payment card details, billing information, transaction details, and payment confirmation.

We generally do not directly store complete payment card information where payment processing is handled by a third-party payment provider.

Account Information

If customer accounts are available, we may process information associated with your account, including your login credentials, preferences, settings, and purchase history.

Communications

When you contact us, we may collect the information you provide in your communications, including customer service inquiries, complaints, return or refund requests, and other correspondence.

Device and Usage Information

When you use our website, certain information may be collected automatically, including:

  • IP address

  • Browser type

  • Device information

  • Network information

  • Unique identifiers

  • Pages viewed

  • Website interactions

  • Referring websites

  • Dates and times of visits

  • Shopping and browsing activity

We may collect this information through cookies, pixels, tags, and similar technologies.

2. How We Collect Personal Information

We may collect personal information:

  • Directly from you when you make a purchase, create an account, contact us, or otherwise provide information to us.

  • Automatically when you browse or interact with our website.

  • From Shopify and other service providers that help operate our store.

  • From payment processors.

  • From suppliers and fulfillment partners.

  • From shipping and logistics providers.

  • From analytics, advertising, and marketing partners where permitted by applicable law.

  • From other third parties where permitted by applicable law.

3. How We Use Personal Information

We may process personal information for purposes including:

Providing Our Services

We use personal information to:

  • Process and manage orders.

  • Process payments.

  • Arrange fulfillment and shipping.

  • Provide delivery updates.

  • Process returns, refunds, or replacements.

  • Maintain customer accounts.

  • Provide customer support.

  • Communicate with customers about their orders.

  • Provide and improve our Services.

Order Fulfillment and Dropshipping

The Haunt Lab may use third-party suppliers, manufacturers, fulfillment centers, shipping providers, and logistics partners to fulfill customer orders.

Where necessary to fulfill your order, we may provide these parties with information such as your:

  • Name

  • Shipping address

  • Telephone number

  • Email address

  • Order details

We provide personal information to fulfillment partners only where reasonably necessary to process, prepare, ship, deliver, or otherwise manage your order or where another lawful basis permits the disclosure.

Our suppliers and fulfillment partners may operate in countries different from the country in which you live.

Customer Support

We process information to answer questions, resolve complaints, investigate delivery issues, process eligible returns or refunds, and otherwise provide customer service.

Security and Fraud Prevention

We may process personal information to detect, investigate, prevent, or respond to fraud, abuse, unauthorized transactions, security incidents, or other unlawful or harmful activities.

Marketing and Advertising

Where permitted by applicable law, we may use personal information to provide marketing communications and advertising.

Where consent is legally required, we will seek the appropriate consent before carrying out the relevant processing.

You may unsubscribe from promotional emails at any time by using the unsubscribe link included in our marketing emails.

Unsubscribing from marketing communications will not prevent us from sending transactional or service-related communications, such as information concerning your orders.

Legal and Regulatory Purposes

We may process personal information where reasonably necessary to comply with applicable laws, regulations, court orders, lawful government requests, tax and accounting obligations, or to establish, exercise, or defend legal claims.

4. Legal Bases for Processing

Where the General Data Protection Regulation ("GDPR"), UK GDPR, or similar legislation applies, we process personal information under one or more applicable legal bases.

These may include:

Performance of a Contract:
Where processing is necessary to process your order, receive payment, arrange delivery, provide customer service, or otherwise perform our contractual obligations.

Legitimate Interests:
Where processing is necessary for legitimate business purposes, such as preventing fraud, securing our Services, improving our store, providing customer support, and managing our business, provided those interests are not overridden by your applicable rights and freedoms.

Consent:
Where applicable law requires your consent, including for certain cookies, tracking technologies, marketing activities, or personalized advertising.

Where processing is based on consent, you may withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

Legal Obligations:
Where processing is necessary to comply with a legal obligation applicable to us.

5. How We Disclose Personal Information

We may disclose personal information to third parties where necessary to operate our business and provide our Services, including:

  • Shopify.

  • Payment processors.

  • Suppliers and manufacturers.

  • Dropshipping and fulfillment partners.

  • Shipping companies and logistics providers.

  • IT and hosting providers.

  • Customer support providers.

  • Analytics providers.

  • Advertising and marketing providers, where legally permitted.

  • Professional advisers such as accountants, lawyers, or consultants.

  • Government authorities, courts, regulators, or law enforcement where legally required.

We may also disclose information in connection with a merger, acquisition, financing, restructuring, sale of assets, bankruptcy, or other business transaction.

We do not disclose personal information to third parties for purposes unrelated to operating our business except where you have consented, where permitted by applicable law, or where disclosure is otherwise legally authorized or required.

6. Shopify

Our store is hosted and powered by Shopify.

Shopify collects and processes personal information about your access to and use of our store in order to provide its platform and related services.

Information you provide through our store may therefore be transmitted to and processed by Shopify and other service providers, potentially in countries different from your country of residence.

Depending on the Shopify services and features enabled on our store, Shopify may process certain personal information for its own purposes as described in its applicable privacy documentation.

You can learn more about Shopify's privacy practices through the Shopify Consumer Privacy Policy and exercise certain privacy choices through the Shopify Privacy Portal.

7. Cookies and Similar Technologies

We and our service providers may use cookies and similar technologies to operate our website, remember preferences, understand website usage, measure performance, prevent fraud, and, where permitted, provide advertising and marketing.

Depending on where you live, we may request your consent before using non-essential cookies or similar tracking technologies.

Where required by applicable law, you can manage or withdraw your consent through the cookie and privacy controls provided on our website.

Disabling certain cookies may affect the functionality of some parts of our Services.

8. Advertising and Data Sharing Choices

Depending on your location and the technologies enabled on our store, you may have the right to opt out of certain uses or disclosures of your personal information for targeted advertising, cross-context behavioral advertising, or activities legally defined as the "sale" or "sharing" of personal information.

Where these rights apply, you may exercise them using the privacy or data-sharing opt-out controls provided through our website or by contacting us.

Where required by applicable law and technically supported by our Services, we may also recognize qualifying browser-based opt-out preference signals, such as Global Privacy Control.

9. International Data Transfers

Because we use Shopify and may work with international suppliers, fulfillment providers, technology providers, and other service providers, your personal information may be transferred, stored, or processed outside the country in which you reside.

Where applicable law requires safeguards for international transfers, we will rely on legally recognized transfer mechanisms as appropriate, which may include adequacy decisions, Standard Contractual Clauses, or other lawful transfer mechanisms.

10. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

  • Fulfill orders.

  • Maintain business and transaction records.

  • Provide customer support.

  • Comply with tax, accounting, and other legal obligations.

  • Prevent fraud and abuse.

  • Resolve disputes.

  • Establish, exercise, or defend legal claims.

  • Enforce our agreements and policies.

The applicable retention period may vary depending on the type of information, why it was collected, and applicable legal requirements.

When personal information is no longer required, we may delete, anonymize, or otherwise dispose of it in accordance with applicable law.

11. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information.

However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

You should avoid sending sensitive or confidential information through unsecured communication channels.

12. Your Privacy Rights

Depending on where you live, you may have rights regarding your personal information, including the right to:

  • Request access to personal information we hold about you.

  • Request correction of inaccurate personal information.

  • Request deletion of your personal information.

  • Request restriction of certain processing.

  • Object to certain processing.

  • Request portability of your personal information.

  • Withdraw consent where processing is based on consent.

  • Opt out of certain targeted advertising, sale, or sharing practices where applicable.

  • Lodge a complaint with an applicable data protection authority.

These rights are not absolute and may be subject to exceptions or limitations under applicable law.

We may need to verify your identity before processing certain requests.

We will not unlawfully discriminate against you for exercising your applicable privacy rights.

13. EEA and UK Residents

If you are located in the European Economic Area ("EEA") or United Kingdom, you may have additional rights under the GDPR or UK GDPR.

Depending on the circumstances, these may include rights of access, rectification, erasure, restriction, portability, objection, and withdrawal of consent.

You may also have the right to lodge a complaint with the competent data protection supervisory authority in your country.

Where we rely on legitimate interests, you may have the right to object to processing in circumstances provided by applicable law.

Where we rely on consent, you may withdraw your consent at any time.

14. United States Privacy Rights

Residents of certain U.S. states may have additional privacy rights under applicable state privacy laws.

Depending on your state of residence and whether the applicable legal requirements and thresholds apply to us, these rights may include access, correction, deletion, portability, and the ability to opt out of certain sales, sharing, targeted advertising, or profiling.

Where applicable, instructions for exercising these rights will be provided through our website's privacy controls or may be requested by contacting us.

15. Children's Privacy

Our Services are not intended for children, and we do not knowingly collect personal information from children in violation of applicable law.

If you are a parent or legal guardian and believe that a child has provided personal information to us improperly, please contact us so that we can investigate and, where required, delete the information.

16. Third-Party Websites

Our Services may contain links to websites, applications, or platforms operated by third parties.

We are not responsible for the privacy, security, content, or practices of third-party websites or services.

We encourage you to review the privacy policies of any third-party services you use.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business practices, technologies, legal obligations, or regulatory requirements.

When we update this policy, we will publish the revised version and update the "Last updated" date.

Where required by applicable law, we will provide additional notice of material changes.

18. Contact Us

If you have questions about this Privacy Policy, our privacy practices, or wish to exercise an applicable privacy right, please contact:

The Haunt Lab
Email: thehauntlab@gmail.com

For purposes of applicable data protection laws, The Haunt Lab is the controller of personal information where it determines the purposes and means of processing, except where another party acts as an independent controller under applicable law.