PRIVACY POLICY
EFFECTIVE DATE: July 2025
LAST UPDATED: July 2025
SECTION 1 – PERSONAL DATA WE COLLECT AND PROCESS
As used in this document, “personal information” refers to any data that directly identifies you or can reasonably be linked to an identifiable individual. It does not encompass aggregated, anonymized, or de-identified data that can no longer be used to identify you.
Depending on your region, how you interact with our Services, and applicable statutory laws, we may gather and process the following categories of personal information:
- Identity & Contact Records: Your first and last name, physical residential address, billing location, shipping destination, phone number, and email address.
- Financial Details: Payment card numbers (credit or debit), financial account data, transaction records, preferred payment methods, and payment authentication receipts.
- Account Settings: Usernames, encrypted passwords, account configuration choices, profile settings, and security questions.
- Engagement & Purchase History: Items you search for, view, place in your shopping cart, add to your digital wishlist, buy, return, exchange, or cancel.
- Communications: Any written records, text, or files you share with us during customer support inquiries, emails, or chat interactions.
- Technical Device Information: Details regarding your web browser, hardware device, network connection type, IP address, and associated unique device identifiers.
- Digital Interaction Metrics: Information regarding when and how you navigate, click, load, and interact with the interface of our Services.
SECTION 2 – SOURCES OF DATA EXTRACTION
We collect personal information from the following primary sources:
- Direct Submissions: Data you explicitly share with us when creating a profile, ordering merchandise, filling out forms, or messaging our support team.
- Automated Tracking: Information collected automatically from your device whenever you interact with our storefront, gathered via cookies, web beacons, and similar tracking mechanisms.
- Service Providers: Data supplied by external vendors whom we contract to perform specialized operational services (e.g., cloud hosting, logistics, payment gateways) on our behalf.
- External Business Partners: Data provided by strategic third parties, marketing networks, or digital affiliates.
SECTION 3 – HOW WE UTILIZE YOUR INFORMATION
ThermoCore uses your personal information for specific operational and commercial purposes, depending on your account activity and location:
- Fulfillment and Service Delivery: To perform our contractual obligations with you, which includes managing your account, verifying payments, processing returns or exchanges, coordinating shipping logistics, facilitating customer reviews, and optimizing your shopping experience through tailored product recommendations.
- Marketing and Targeted Promotion: To distribute marketing updates, promotional offers, and advertisements via email, SMS, or direct mail, and to display targeted digital advertisements based on your browsing history or cart activity.
- Fraud Detection and System Security: To verify user credentials, maintain a secure payment gateway, detect malicious or illegal behavior, investigate fraudulent transactions, and secure our overall digital infrastructure.
- Direct Communications: To address support tickets, deliver service notices, and maintain a proactive business relationship with you.
- Legal Enforcement and Compliance: To satisfy applicable regulatory obligations, respond to lawful subpoenas or court orders, defend against legal claims, and investigate potential breaches of our terms and conditions.
SECTION 4 – HOW WE DISCLOSE YOUR DATA
Under certain conditions, ThermoCore may share your personal data with third parties for legitimate operational purposes:
- Operational Vendors: We share data with Shopify and other external service providers that handle cloud storage, analytical evaluations, customer support channels, inventory fulfillment, and parcel delivery.
- Marketing Networks: We share information with advertising partners to tailor promotional campaigns. For example, we utilize Shopify’s enhanced ad networks to display personalized advertisements based on your merchant interactions. You may possess the statutory right to opt out of targeted ad sharing depending on your location.
- Consensual Disclosures: We share details when you explicitly direct or permit us to do so, such as when using integrated social media plugins or single sign-on tools.
- Corporate Affiliates: Data may be shared internally within our corporate group and subsidiaries.
- Business Transfers and Asset Sales: In the event of a corporate merger, restructuring, asset sale, or bankruptcy, user data may be reviewed and transferred as a business asset, subject to legal regulations.
SECTION 5 – ARCHITECTURE AND RELATIONSHIP WITH SHOPIFY
Because our store is hosted by Shopify Inc., they collect, aggregate, and process data relating to your visits to our site to keep the e-commerce framework functional and stable. Any information you submit will be transmitted to and stored on Shopify’s global servers, which may reside outside your home country.
Additionally, ThermoCore utilizes Shopify’s enhanced analytics features. These tools cross-reference your interactions across various Shopify-powered merchants to optimize our business growth. For data processed under these specific optimization protocols, Shopify acts as an independent data controller. To understand their independent privacy practices, view the Shopify Consumer Privacy Policy and manage your records via the Shopify Privacy Portal.
SECTION 6 – THIRD-PARTY PLATFORMS AND LINKS
Our platform may display hyperlinks to third-party digital channels or websites that are entirely out of our control. If you choose to visit an unaffiliated site, we advise you to review their specific security and privacy terms. ThermoCore does not endorse, verify, or accept liability for the privacy standards, reliability, or content of external web platforms.
SECTION 7 – PRIVACY PROTECTION FOR CHILDREN
Our Services are intended strictly for adults. ThermoCore does not intentionally gather or maintain personal information from individuals who have not reached the legal age of majority in their jurisdiction. If you believe your minor dependent has shared personal data with us, please contact our support team to request immediate deletion. ThermoCore does not knowingly “sell” or “share” the personal information of individuals under the age of 16.
SECTION 8 – SECURITY AND DATA RETENTION
While ThermoCore implements commercially reasonable administrative, technical, and physical safeguards designed to protect your personal information, no method of transmission over the internet or electronic storage system can be guaranteed to be completely secure. Accordingly, we cannot guarantee absolute security of your information and encourage users to take reasonable precautions when transmitting sensitive data online.
The length of time we store your personal details is determined by functional business needs, including maintaining your account profile, delivering active Services, adhering to statutory tax and financial reporting laws, resolving disputes, and enforcing our legal agreements.
SECTION 9 – YOUR PRIVACY RIGHTS AND CHOICES
Depending on your geographic location or country of residence, you may hold specific statutory rights regarding your personal data. These rights are subject to statutory limitations and exceptions:
- Right to Access / Know: The right to request confirmation of and access to the personal data we hold about you.
- Right to Erase / Delete: The right to request the permanent deletion of your personal records.
- Right to Rectify: The right to request corrections to incomplete or inaccurate personal data.
- Right to Portability: The right to obtain a structured, machine-readable copy of your data or request its transfer to another organization.
- Right to Opt-Out of Sale or Targeted Ads: The right to opt out of data sharing for cross-context behavioral or targeted advertising. You can signal your preference automatically using the Global Privacy Control (GPC) web browser signal. If our system detects a GPC signal from a browser associated with a Shopify account, we will apply that opt-out preference across the profile. We do not currently respond to other non-standard “Do Not Track” browser signals.
- Communication Preferences: You can unsubscribe from marketing emails at any time by clicking the “unsubscribe” link at the bottom of our messages. We will still send essential transactional notices regarding your orders or account updates.
Supplemental Rights for Residents of the UK and EEA:
If you reside within the European Economic Area (EEA) or the United Kingdom (UK), you also possess the right to:
- Object to or Restrict Processing: Request that we halt or limit specific processing activities.
- Withdraw Consent: Retract your consent at any time for data processing activities that rely on your explicit consent.
To exercise these options, contact us using the details below. ThermoCore will never discriminate or penalize you for exercising your privacy rights. Please note that we must verify your identity before processing access or deletion requests. You may designate an authorized legal agent to file requests on your behalf, provided they present signed documentation proving their authorization.
SECTION 10 – FILING A COMPLAINT
If you are dissatisfied with how ThermoCore handles your data, please contact our privacy team directly. Depending on your home jurisdiction, you may have the legal right to appeal our decision or lodge an official grievance with your regional data protection authority (such as the European Data Protection Board or equivalent national supervisors).
SECTION 11 – GLOBAL TRANSFERS OF DATA
Your personal information may be moved to, stored in, and processed in countries outside of your home territory (including the United States). When transferring data outside of the UK or EEA, ThermoCore and Shopify rely on legally approved frameworks, including the European Commission’s Standard Contractual Clauses (SCCs) or equivalent UK contractual frameworks, unless the destination country has been officially recognized as providing an adequate standard of data protection.
SECTION 12 – COOKIES AND TRACKING TECHNOLOGIES
ThermoCore and our service providers use cookies, pixels, web beacons, and similar technologies to improve website functionality, analyze site traffic, personalize content, and support advertising activities.
These technologies may collect information about your browsing behavior, device characteristics, and interactions with our Services.
Most web browsers allow you to manage or disable cookies through browser settings. Please note that disabling certain cookies may impact the functionality of our Services.
SECTION 13 – AMENDMENTS TO THIS POLICY
We reserve the right to revise this Privacy Policy periodically to reflect changes in our operational procedures or shifting legal mandates. We will display the updated document on this page, modify the updated date notice, and provide explicit alerts if required by local statutes.
SECTION 14 – CONTACT INFORMATION
If you have questions regarding this Privacy Policy, wish to exercise your privacy rights, submit a data request, or file a complaint, please contact us at:
ThermoCore
Email: thermocore.help@gmail.com
We will make reasonable efforts to respond to all legitimate privacy requests within the timeframes required by applicable law.