Privacy policy

Last updated: June 29, 2026

Catalina Crunch runs this store, its website, and the related information, content, features, tools, products, and services that together provide customers with a curated shopping experience (the “Services”). Shopify powers the Services for us. This policy explains how personal information is collected, used, and disclosed when you visit or use the Services, complete a purchase or other transaction, or communicate with us. If this policy conflicts with our Terms of Service on the collection, processing, or disclosure of personal information, this policy governs.

Read this policy carefully. Accessing or using any Service acknowledges that you have read it and understand the practices described here.

Personal information we collect or process

“Personal information” means information that identifies, or can reasonably be connected with, you or another person. It excludes anonymous or de-identified information that cannot reasonably identify or be linked to someone. Subject to your interaction, residence, and applicable law, we may collect or process the following categories and inferences derived from them:

• contact details, including name, address, billing and shipping addresses, telephone number, and email address;
• financial and payment details, such as credit or debit card and financial-account numbers, payment-card or account information, transaction information, payment method, payment confirmation, and related payment data;
• account data, including username, password, security questions, preferences, and settings;
• transaction history and activity, including items viewed, placed in a cart or wishlist, purchased, returned, exchanged, or cancelled;
• communications and the information supplied in support inquiries or other messages;
• device, browser, network, IP-address, and other unique-identifier information; and
• usage information showing how and when you interact with or navigate the Services.

Sources of personal information

We obtain information directly from you when you create an account, visit or use the Services, communicate with us, or otherwise provide data; automatically from your device through the Services, cookies, and similar technologies; from service providers that supply technology or process data for us; and from partners or other third parties.

How we use personal information

• Providing, tailoring, and improving the Services: performing our contract, processing payments, fulfilling orders, remembering preferences and interests, sending account notices, handling purchases, returns, exchanges, and other transactions, managing accounts, arranging shipping, enabling reviews, and personalizing recommendations and shopping experiences.
• Marketing and advertising: sending promotional messages by email, text, or post and presenting ads for products or services on the Services or elsewhere, including based on purchases, cart activity, and other use.
• Security and fraud prevention: authenticating accounts, protecting payments and shopping, detecting, investigating, or acting on potentially fraudulent, illegal, unsafe, or malicious conduct, protecting public safety, and securing the Services. You remain responsible for safeguarding credentials and should not share them.
• Communication: answering you, providing customer support and effective service, and maintaining our business relationship.
• Legal purposes: complying with law and valid legal process, responding to law-enforcement or government requests, participating in discovery, litigation, or other adversarial proceedings, and enforcing or investigating violations of our terms and policies.

How we disclose personal information

For legitimate purposes consistent with this policy, information may be disclosed in these circumstances:

• to Shopify, vendors, and service providers performing functions such as IT administration, payments, analytics, customer support, cloud storage, fulfillment, and shipping;
• to business and marketing partners that provide marketing or advertising. Shopify may support personalized advertising based on activity across different merchants and websites, and partners apply their own privacy notices. Where law provides an opt-out right for targeted advertising or related sharing, you may exercise it through the applicable opt-out mechanism;
• when you direct, request, or consent to disclosure, including for product shipment or social-media widgets and login integrations;
• to affiliates or within our corporate group; and
• in a merger, bankruptcy, or other business transaction, or to meet legal duties, respond to subpoenas, warrants, or similar requests, enforce terms or policies, and protect the Services, us, users, or others.

Relationship with Shopify

Shopify hosts the Services and processes information about access and use to provide and improve them. Information submitted through the Services is transmitted to Shopify and may be shared with third parties in countries other than your own. We also use enhanced Shopify features that combine interactions with this store, other merchants, and Shopify to protect, grow, and improve the business. For that enhanced processing, Shopify is responsible for responding to relevant rights requests. Review the Shopify Consumer Privacy Policy and Shopify Privacy Portal for details and available rights.

Third-party websites and links

Links may lead to platforms not operated or controlled by us. Review their privacy, security, and other terms before using them. We do not guarantee or accept responsibility for those sites, their security, or the accuracy, completeness, or reliability of their content. Information posted in public or semi-public spaces, including social networks, may be viewable and used without limitation by other users. A link does not by itself endorse a platform or its operator unless the Services say otherwise.

Children’s data

The Services are not intended for children, and we do not knowingly collect personal information from anyone under the age of majority where they live. A parent or guardian may use the contact details below to request deletion of information supplied by a child. As of this policy’s effective date, we do not actually know that we sell or share, as those terms are defined by law, personal information of anyone under 16.

Security and retention

No safeguard is perfect or impenetrable, and we cannot promise perfect security. Information can also be insecure while transmitted, so avoid sending sensitive or confidential information through unsecured channels. Retention periods depend on factors such as maintaining accounts, delivering Services, satisfying legal duties, resolving disputes, and enforcing agreements and policies.

Your rights and choices

Your location may give you some or all of the following rights, although they are not absolute, may apply only in certain situations, and may be declined where law permits:

• accessing or knowing the personal information we hold;
• deleting personal information we maintain;
• correcting inaccurate personal information;
• receiving a copy and, where applicable, asking that it be transferred to another party, subject to exceptions;
• opting out of sale or sharing for targeted advertising where those concepts apply. A Global Privacy Control signal will be treated as an opt-out request for the device and browser where required, and for an associated Shopify account when it can be linked. Other Do Not Track signals are not recognized; and
• unsubscribing from promotional email through the message’s unsubscribe option, while still receiving non-promotional account or order messages.

Exercise rights through the indicated Service controls or by contacting us below. Shopify-related rights and information are available at https://privacy.shopify.com/en. We do not discriminate for exercising a right. Identity verification may be required. An authorized agent must prove authorization, and we may also verify you directly. Requests are answered within the time applicable law requires.

Complaints

Send privacy complaints through the contact details below. Depending on where you live, you may appeal our decision through those details or complain to your local data-protection authority.

International transfers

Information may be transferred, stored, and processed outside your country. Transfers from the European Economic Area or United Kingdom rely on recognized safeguards such as the European Commission’s Standard Contractual Clauses or an equivalent UK instrument, unless the destination has been found to provide adequate protection.

Changes to this policy

We may revise this policy for operational, legal, regulatory, or practice changes. The updated policy will be posted here, the revision date will change, and any notice required by law will be given.

Contact

For questions about privacy or to exercise a right, call (225) 280-9488, email mk83923064@gmail.com, or write to Catalina Crunch, 352 Mudd Ave, Lafayette, Louisiana 70501, US, US.