Privacy policy

Last updated: October 1, 2026

MURÉA operates this store and website, including related information, content, features, tools, products and services, to provide a personalized shopping experience (the “Services”). MURÉA is powered by Shopify, which enables us to provide the Services. This Privacy Policy describes how we collect, use and disclose personal information when you access or use the Services, make a purchase or another transaction, or communicate with us in any way. If our Terms of Service conflict with this policy, this policy prevails concerning collection, processing and disclosure of personal information.

Please read this policy carefully. By accessing and using the Services, you acknowledge that you have read this policy and understand the collection, use and disclosure described here.

Personal information we collect or process

“Personal information” means information that identifies you or can reasonably be linked to you or another person. It excludes information collected anonymously or made non-identifiable so that it cannot identify or reasonably be linked to you. Depending on your interaction with the Services, your location and what applicable law permits or requires, we may collect or process the following categories, including inferences drawn from them:

Contact details: name, address, billing and shipping addresses, telephone number and email address.
Financial information: credit card, debit card and bank account numbers, payment card and bank account information, transaction details, payment method, payment confirmation and other payment details.
Account information: username, password, security questions, preferences and settings.
Transaction information: items you view, put in your cart or wishlist, buy, return, exchange or cancel, and previous transactions.
Communications with us: information included in your messages, such as customer service inquiries.
Device information: device, browser, network connection, IP address and other unique identifiers.
Usage information: how and when you access or interact with the Services.

Sources of personal information

We may collect information:

Directly from you when you create an account, access or use the Services, communicate with us or otherwise provide information.
Automatically through the Services from your device when you use products or services or access our websites, and through cookies and similar technologies.
From service providers when they implement technologies for us or collect or process information on our behalf.
From partners or other third parties.

How we use personal information

Depending on your interactions and the Services used, we may use personal information for:

Providing, customizing and improving the Services. We use information to perform our contract with you, process payments and orders, remember preferences and items of interest, send account notifications, handle purchases, returns, exchanges and other transactions, create and manage accounts, arrange shipping, facilitate returns and exchanges, enable reviews and provide a personalized shopping experience, including recommendations based on purchases. We may also use it to make the Services more relevant and improve them.
Marketing and advertising. We use information for marketing and promotion, including email, text or postal communications and online advertising on the Services or other websites, based on items purchased or added to your cart and other activity.
Security and fraud prevention. We use information to authenticate accounts, provide secure checkout and shopping, detect, investigate or respond to fraudulent, unlawful, dangerous or malicious activity, protect public safety and secure our services. If you create an account, protect your login credentials. We strongly recommend not sharing usernames, passwords or other access details.
Communicating with you. We use information to provide customer service, answer requests, offer effective services and maintain our business relationship.
Legal reasons. We use information to comply with law or valid legal proceedings, including requests from law enforcement or government bodies, investigate or participate in civil discovery, potential or ongoing litigation or other proceedings, enforce terms or policies and investigate possible breaches.

How we disclose personal information

In certain circumstances, we may disclose information to third parties for legitimate purposes consistent with this policy, including:

To Shopify, providers and other parties supplying services on our behalf, such as IT management, payment processing, analytics, customer service, cloud storage, fulfillment and shipping.
To business and marketing partners to provide marketing services and advertising. For example, we use Shopify to support personalized advertising through third-party services based on online activity across merchants and websites. Partners use information under their own privacy notices. Depending on your location, you may have the right to request that information not be shared for targeted advertising or marketing based on such activity. Exercise applicable opt-out rights here.
When you instruct us, make a request or otherwise consent to disclosure, for example to ship products or through social media widgets or login integrations.
With affiliates or within our corporate group.
As part of a business transaction such as a merger or bankruptcy, to comply with legal obligations including subpoenas, search warrants or similar requests, enforce terms or policies, or protect the Services, our rights and the rights of users or others.

Relationship with Shopify

Shopify hosts the Services and collects and processes information about your access and use to provide and improve them. Information you submit is transmitted to and shared with Shopify and third parties, potentially in countries other than your country of residence, to provide and improve the Services. To protect, develop and improve our business, we use certain enhanced Shopify features incorporating data from interactions with our store, other merchants and Shopify. To provide these features, Shopify may use information collected from those interactions. In those circumstances, Shopify is responsible for processing your information, including responding to rights requests about those purposes. Read Shopify's Consumer Privacy Policy for details about its use and your rights. Depending on your location, you can exercise certain rights through Shopify's privacy portal.

Third-party websites and links

The Services may link to third-party websites or platforms. When following links to sites not affiliated with or controlled by us, review their privacy and security policies and terms. We do not guarantee or take responsibility for their privacy or security, including the accuracy, completeness or reliability of their information. Information provided in public or semi-public areas, including on third-party social media, may be visible to other users of the Services or those platforms without restrictions on its use by us or a third party. Including a link does not itself endorse the platform's content, owners or operators unless stated on the Services.

Children's data

The Services are not intended for children. We do not knowingly collect information about children below the age of majority in your jurisdiction. Parents or guardians of a child who has provided information may contact us below to request deletion. As of this policy's effective date, we do not know that we “share” or “sell” personal information about individuals under 16, as those terms are defined by applicable law.

Security and retention

No security measure is perfect or infallible, and we cannot guarantee perfect security. Information sent to us may not be secure during transmission. Do not use insecure channels to send sensitive or confidential information.

Retention depends on factors such as the need to manage your account, provide Services, meet legal obligations, resolve disputes or enforce applicable contracts or policies.

Your rights and choices

Depending on your location, you may have some or all of the following rights. These are not absolute, may apply only in particular circumstances, and requests may be refused where law permits:

Access/right to know: request access to information we hold about you.
Deletion: request deletion of information we hold.
Correction: request correction of inaccurate information.
Portability: receive a copy and request transfer to a third party in certain circumstances, subject to exceptions.
Opt out of sale, sharing or targeted advertising: depending on your location, opt out of “sale” or “sharing” or processing for “targeted advertising” as defined by applicable privacy law. Exercise applicable rights here. If you visit with a Global Privacy Control opt-out signal enabled, depending on your location, we automatically treat it as an opt-out request for that device and browser. If we can associate the device with a Shopify account, we also apply the request to that account. See https://globalprivacycontrol.org/. Except for Global Privacy Control, we do not recognize other Do Not Track signals sent by a browser or device.
Communication preferences: unsubscribe from promotional email at any time using its unsubscribe option. We may still send non-promotional emails about accounts or orders.

If you live in the UK or European Economic Area, subject to local legal exceptions and limitations, you may also exercise:

Objection and restriction: request that processing for particular purposes stops or is restricted.
Withdrawal of consent: where processing relies on consent, withdraw it without affecting the lawfulness of earlier processing.

Exercise rights through the available Service features or contact details below. For Shopify's processing and related rights, see https://privacy.shopify.com/en.

We will not penalize you for exercising rights. We may need to verify identity within legal limits. Where law permits, you can designate an authorized agent to act for you. We require proof of authorization before accepting an agent's request and may ask you to verify identity directly with us. We respond within legally prescribed timeframes.

Complaints

Contact us below with complaints about processing. Depending on your location, you may appeal our decision by contacting us or complain to your local data protection authority. EEA supervisory authorities are listed here.

International transfers

We may transfer, store and process information outside your country of residence. For transfers outside the EEA or UK, we rely on recognized mechanisms such as European Commission standard contractual clauses or equivalent UK authority agreements, unless the destination has been recognized as providing adequate protection.

Changes to this policy

We may update the policy to reflect practice changes or operational, legal or regulatory reasons. We publish the revised policy, update the “Last updated” date and provide notices as required by law.

Contact

For questions about privacy practices or this policy, or to exercise your rights, email contact.murea@proton.me. For applicable data protection law, we are the controller of your personal information.