Privacy policy
Effective date: October 1, 2026
1. Who we are
Plooka Products, 625 Spice Islands Dr, Suite J, Sparks, NV 89431, USA, is responsible for your personal information. Under EU and UK law, that makes us the "data controller". Privacy contact and privacy officer: Paul Rodgers, info@plookaproducts.com.
2. What we collect
| What | Examples | Where it comes from |
|---|---|---|
| Contact and order details | Name, email, phone, shipping and billing address, order history | You, at checkout or in a form |
| Payment details | Card or wallet details, handled by our payment processor (we never see full card numbers) | You, at checkout |
| Messages | Contact form, wholesale request, email newsletter sign-up | You |
| Age confirmation | A yes/no 21+ click, saved in your browser | You |
| Device and usage data | IP address, browser, pages viewed, cookies | Automatically, through Shopify and any analytics tools you allow |
We don't knowingly collect data from anyone under 21. We don't collect sensitive data such as health information.
3. Why we use it
| Purpose | Legal basis (EU/UK) |
|---|---|
| Process, ship and support your order | Performing our contract with you |
| Payments, fraud prevention, tax and accounting records | Legal obligation, legitimate interests |
| Answer your messages and wholesale requests | Legitimate interests, or steps before a contract |
| Send marketing emails | Your consent (unsubscribe any time) |
| Analytics and advertising cookies | Your consent, given through our cookie banner |
| Keep the site working and secure | Legitimate interests |
4. Who we share it with
We share personal information only with service providers who help us run the store:
- Shopify, which hosts our store, checkout and customer data. See Shopify's Privacy Policy.
- Payment processors, such as Shopify Payments, PayPal or others shown at checkout.
- Shipping carriers, which get your name, address and contact details to deliver your order.
- Email, analytics or advertising tools we use. These receive data only with your consent where the law requires it.
- Authorities, when the law requires it, or to protect our rights or prevent fraud.
We do not sell your personal information for money. If we use advertising cookies, some laws may treat that as "selling" or "sharing" data. You can opt out at any time (see section 7).
5. International transfers
We're based in the USA, and Shopify and other providers may process data in the USA, Canada and other countries. When data leaves the EU, UK or Canada, we rely on safeguards such as adequacy decisions or Standard Contractual Clauses provided by Shopify and our other providers.
6. How long we keep it
We keep order records for as long as tax and accounting law requires, typically 7 years. We keep messages for up to 2 years. We keep marketing data until you unsubscribe. Then we delete or anonymize it.
7. Your rights
Wherever you live, you can ask to see, correct or delete your personal information, or opt out of marketing. Email info@plookaproducts.com. We'll respond within 30 days, or within 45 days where US state law allows. We may need to confirm your identity first. We won't treat you differently for using your rights.
- EU and UK: you can also ask to restrict or object to processing, ask for your data in a portable format, and withdraw consent at any time. You can complain to your local data protection authority. In the UK, that's the ICO.
- Canada: you have rights under PIPEDA and provincial laws, including Quebec's Law 25. You can complain to the Office of the Privacy Commissioner of Canada or your provincial commissioner.
- US states, such as California, Colorado, Virginia and others: you can opt out of the sale or sharing of your data and of targeted advertising. Use the Your Privacy Choices link in our footer. We honor Global Privacy Control signals. If we deny your request, you can appeal by replying to our answer.
- Nevada: you can ask us not to sell your covered information by emailing info@plookaproducts.com. We don't currently sell covered information as Nevada law defines it.
8. Cookies
We use essential cookies to run the store and cart. In the EU, UK and other places that require consent, we ask before setting analytics or advertising cookies, using Shopify's cookie banner. You can change your choice at any time. Your browser's "Do Not Track" setting isn't a standard we can reliably respond to, but we honor Global Privacy Control.
9. Security
Shopify protects payment data to PCI DSS standards and encrypts the site with HTTPS. No system is perfectly secure. If a breach puts you at risk, we'll notify you and the authorities as the law requires.
10. Changes
We'll post any updates here and change the effective date. If we make a significant change, we'll tell you by email or with a notice on the site.