Privacy policy

Last updated: October 9, 2026

George & Lucky Co. operates this store and website, including all related information, content, features, tools, products, and services (the “Services”). George & Lucky Co. is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction through the Services, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described here.

Personal Information We Collect or Process

When we use the term “personal information,” we mean information that identifies or can reasonably be linked to you or another person. Personal information does not include information collected anonymously or information that has been de-identified so that it cannot identify or reasonably be linked to you.

Depending on how you interact with the Services, where you live, and as permitted or required by applicable law, we may collect or process the following categories of personal information, including inferences drawn from this information:

Contact details: Your name, address, billing address, shipping address, phone number, and email address.
Financial information: Payment card information, financial account information, transaction details, payment method, payment confirmation, and other payment details.
Account information: Your username, password, security questions, preferences, and settings.
Transaction information: Items you view, place in your cart, add to a wishlist, purchase, return, exchange, or cancel, and your past transactions.
Communications with us: Information you include when contacting us, such as in a customer support inquiry.
Device information: Information about your device, browser, network connection, IP address, and other unique identifiers.
Usage information: Information about how and when you interact with or navigate the Services.

Personal Information Sources

We may collect personal information from:

You directly: When you create an account, visit or use the Services, communicate with us, or otherwise provide information.
Your use of the Services: Automatically through your device, cookies, and similar technologies.
Our service providers: When they provide technology or services on our behalf and collect or process personal information for us.
Our partners or other third parties.

How We Use Your Personal Information

Depending on how you interact with us or which Services you use, we may use your personal information for the following purposes:

Providing, tailoring, and improving the Services

We use your information to perform our contract with you, process payments, fulfill orders, remember your preferences, send account and order notifications, process returns and exchanges, maintain your account, arrange shipping, enable product reviews, and provide a customized shopping experience. This may include recommending products based on your interests or purchases and improving the Services.

Marketing and advertising

We use personal information for marketing and promotional purposes, such as sending promotional communications by email, text message, or postal mail, and showing advertisements on the Services or other websites. These communications and advertisements may be based on your purchases, cart activity, or other interactions with the Services.

Security and fraud prevention

We use personal information to authenticate accounts, provide a secure payment and shopping experience, detect and investigate potentially fraudulent, illegal, unsafe, or malicious activity, protect public safety, and secure the Services.

If you create an account, you are responsible for keeping your account credentials secure. Do not share your password or other account access details.

Communicating with you

We use personal information to provide customer support, respond to inquiries, and maintain our business relationship with you.

Legal reasons

We use personal information to comply with applicable law, respond to valid legal process and requests from government agencies, investigate or participate in legal proceedings, and enforce or investigate potential violations of our terms or policies.

How We Disclose Personal Information

In certain circumstances, we may disclose personal information to third parties for legitimate purposes consistent with this Privacy Policy, including:

With Shopify and service providers that perform services on our behalf, such as payment processing, IT management, data analytics, customer support, cloud storage, fulfillment, and shipping.
With business and marketing partners that help us provide marketing services and advertise to you. For example, we use Shopify to support personalized advertising with third-party services based on online activity across different merchants and websites. These partners use information according to their own privacy notices.
When you direct, request, or consent to disclosure, such as when we ship products to you or when you use social media features or login integrations.
With affiliates or within our corporate group, where applicable.
In connection with a business transaction, such as a merger or bankruptcy, or to comply with legal obligations, enforce applicable terms and policies, or protect the Services and the rights of our business, users, or others.

Depending on where you live, you may have the right to opt out of certain disclosures used for targeted advertising. You can submit an opt-out request through our Data Sharing Opt-Out page.

Relationship with Shopify

The Services are hosted by Shopify. Shopify collects and processes personal information about your access to and use of the Services to provide and improve the Services for you.

Information you submit through the Services may be transmitted to Shopify and third parties located in countries other than the country where you live.

We also use certain Shopify enhanced features that incorporate information from your interactions with our store, other merchants, and Shopify to help protect, grow, and improve our business. To provide these features, Shopify may use personal information collected from those interactions.

In these circumstances, Shopify is responsible for processing your personal information, including responding to requests to exercise your rights concerning that processing.

You can learn more through the Shopify Consumer Privacy Policy. Depending on where you live, you may exercise certain privacy rights through the Shopify Privacy Portal.

Third-Party Websites and Links

The Services may include links to websites or online platforms operated by third parties. When you follow a link to a site we do not control, review that site’s privacy policy, security practices, and terms.

We are not responsible for the privacy or security practices of third-party sites, including the accuracy, completeness, or reliability of their content.

Information you share in public or semi-public spaces, including third-party social networking platforms, may be visible to other users or third parties and may be used by them.

Including a third-party link does not imply endorsement of that website, its content, or its operator unless we expressly state otherwise.

Children’s Data

The Services are not intended for children, and we do not knowingly collect personal information about children under the age of majority in their jurisdiction.

If you are a parent or guardian and believe a child has provided personal information to us, contact us using the details below to request its deletion.

As of the date of this Privacy Policy, we do not have actual knowledge that we “sell” or “share,” as those terms are defined by applicable law, personal information belonging to individuals under 16 years of age.

Security and Retention of Your Information

No security measure is perfect or impenetrable, and we cannot guarantee complete security. Information sent to us may not be secure while in transit. Please avoid sending sensitive or confidential information through unsecured channels.

How long we retain personal information depends on factors such as whether we need it to maintain your account, provide the Services, comply with legal obligations, resolve disputes, or enforce applicable contracts and policies.

Your Rights and Choices

Depending on where you live, you may have some or all of the following rights concerning your personal information. These rights are not absolute, may apply only in certain circumstances, and may be subject to exceptions allowed by law.

Access or knowledge: Request access to personal information we hold about you.
Deletion: Request that we delete personal information we maintain about you.
Correction: Request correction of inaccurate personal information.
Portability: Request a copy of your personal information and, in certain circumstances, its transfer to a third party.
Opt out of sale, sharing, or targeted advertising: Depending on your location, request that we stop certain processing or disclosures of personal information for targeted advertising.

You can exercise applicable opt-out rights through our Data Sharing Opt-Out page.

If you visit our website with the Global Privacy Control opt-out preference signal enabled, depending on where you are, we will treat it as a request to opt out for the device and browser you use. If we can associate that device with a Shopify account, we will also apply the request to that account.

Learn more at Global Privacy Control. Other than Global Privacy Control, we do not recognize other “Do Not Track” signals sent by browsers or devices.

Marketing preferences

You may unsubscribe from promotional emails using the unsubscribe link included in those emails. After you unsubscribe, we may still send non-promotional messages, such as order confirmations, shipping updates, or account notices.

Additional rights for UK and European Economic Area residents

Subject to applicable exceptions and limitations, you may also have the right to:

Object to or request restrictions on certain processing of your personal information.
Withdraw consent when we rely on your consent to process personal information. Withdrawal does not affect the lawfulness of processing that occurred before you withdrew consent.

You may exercise your rights through the options provided in the Services or by contacting us using the details below. For rights relating to information processed by Shopify, visit the Shopify Privacy Portal.

We will not discriminate against you for exercising your privacy rights. We may need to verify your identity before completing a request, as permitted or required by law.

Where applicable law allows, you may appoint an authorized agent to submit a request on your behalf. We may require proof of the agent’s authorization and may ask you to verify your identity directly with us.

We will respond within the time required by applicable law.

Complaints

If you have concerns about how we process your personal information, please contact us using the details below.

Depending on where you live, you may have the right to appeal a decision about your privacy request or submit a complaint to your local data protection authority.

For residents of the European Economic Area, a list of supervisory authorities is available through the European Data Protection Board.

International Transfers

We may transfer, store, and process your personal information outside the country where you live.

When transferring personal information out of the European Economic Area or the United Kingdom, we will rely on recognized transfer mechanisms, such as the European Commission’s Standard Contractual Clauses or an applicable UK equivalent, unless the destination country has been recognized as providing an adequate level of protection.

Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to our practices or for operational, legal, or regulatory reasons.

We will post the revised policy on this website, update the “Last updated” date, and provide additional notice when required by applicable law.

Contact

For questions about this Privacy Policy, our privacy practices, or exercising your privacy rights, email:

georgeandluckyco@gmail.com

George & Lucky Co.
At Eleven101 Collective
11101 University Avenue
Clive, IA 50325
United States

For purposes of applicable data protection laws, George & Lucky Co. is the data controller of your personal information.