Home :: Privacy Policy

Privacy Policy

Last Revised: June 27, 2026

This Privacy Policy ("Policy") is entered into between Horrormerch.com, operating at horrormerchstore.com ("Company", "we", "us", or "our") and you, the individual accessing or using our website, purchasing our products, or otherwise engaging with our services ("you" or "Data Subject"). This Policy governs the collection, processing, use, storage, disclosure, and protection of your Personal Data in connection with the Company's online store and related services (collectively, the "Services").

BY ACCESSING OR USING THE SERVICES, YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTOOD, AND AGREE TO BE BOUND BY THIS POLICY. IF YOU DO NOT AGREE TO THE TERMS OF THIS POLICY, YOU MUST IMMEDIATELY DISCONTINUE USE OF THE SERVICES.

1. Amendments to This Policy

The Company reserves the right to amend, modify, or update this Policy at any time, at its sole discretion, to reflect changes in applicable law, regulatory requirements, or our data processing practices. Any material changes will be posted on this page with an updated "Last Revised" date. Your continued use of the Services following the posting of any amendments constitutes your acceptance of such changes. We encourage you to review this Policy periodically.

2. Categories of Personal Data Collected

The Company collects Personal Data (as defined under applicable privacy law, including but not limited to the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA/CPRA") and the General Data Protection Regulation ("GDPR")) from and about you in the following categories:

2.1 Personal Data You Provide Directly

When you interact with the Services, you may voluntarily provide the following categories of Personal Data:

  • Identifiers: Full name, email address, postal address, telephone number, account username, and password.
  • Commercial Information: Billing address, shipping address, order history, payment confirmation details, items viewed, items added to cart or wishlist, and transaction records.
  • Account Credentials: Username, hashed password, and security question responses.
  • Communications Data: The content of any messages, inquiries, or correspondence you submit to us through the Services, including customer support requests.

Provision of certain Personal Data is required to access specific features of the Services. Failure to provide required Personal Data may result in your inability to complete a transaction or access certain functionality.

2.2 Personal Data Collected Automatically

When you access or interact with the Services, the Company and its authorized third-party service providers may automatically collect the following categories of Personal Data through the use of cookies, web beacons, pixel tags, software development kits (SDKs), and similar tracking technologies (collectively, "Tracking Technologies"):

  • Internet or Network Activity Data: IP address, browser type and version, operating system, device identifiers, referring URLs, pages viewed, time spent on pages, clickstream data, and other usage statistics.
  • Geolocation Data: Approximate geographic location derived from your IP address.
  • Device Information: Hardware model, unique device identifiers, and mobile network information.

2.3 Personal Data Obtained from Third Parties

The Company may receive Personal Data about you from the following categories of third-party sources:

  • E-commerce Infrastructure Providers: Shopify Inc., which powers our online store platform and may collect data pursuant to its own privacy policy.
  • Payment Processors: Third-party payment processors who collect and process financial information (including credit/debit card data and billing details) necessary to complete your transactions. The Company does not store full payment card information.
  • Advertising and Analytics Partners: Third parties who provide analytics, advertising, and marketing services and who may collect data about your interactions with our Services and third-party websites.
  • Social Media Platforms: If you interact with our Services through social media integrations or login features, we may receive certain profile information from those platforms in accordance with your privacy settings.

All Personal Data received from third parties is processed in accordance with this Policy. The Company is not responsible for the accuracy of information provided by third parties or for the privacy practices of such third parties.

3. Purposes and Legal Bases for Processing

The Company processes your Personal Data for the following purposes and, where required by applicable law (including the GDPR), on the following legal bases:

  • Performance of a Contract: To process and fulfill your orders, manage your account, arrange shipping and delivery, facilitate returns and exchanges, and send transactional communications related to your purchases.
  • Legitimate Interests: To operate, maintain, and improve the Services; to detect, prevent, and investigate fraud, security incidents, and other malicious or illegal activity; to analyze usage patterns and optimize user experience; and to maintain our business relationship with you.
  • Consent: To send marketing, promotional, and advertising communications by email, SMS, or postal mail where you have provided your consent. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.
  • Legal Obligation: To comply with applicable laws, regulations, court orders, subpoenas, governmental requests, and other legal processes, and to enforce our Terms of Service and other applicable agreements.

4. Use of Tracking Technologies (Cookies)

The Company uses Tracking Technologies to enhance the functionality of the Services, analyze user behavior, and deliver targeted advertising. For information specific to Shopify's use of cookies in connection with our store, please refer to Shopify's Cookie Policy at https://www.shopify.com/legal/cookies.

You may configure your browser to refuse all cookies or to alert you when cookies are being sent. Please note that disabling Tracking Technologies may impair the functionality of certain features of the Services. Disabling cookies does not necessarily prevent all data sharing with third-party advertising partners.

5. Disclosure of Personal Data to Third Parties

The Company does not sell your Personal Data for monetary consideration. However, we may disclose your Personal Data to the following categories of third parties for the business purposes described in this Policy:

  • Service Providers: Third-party vendors engaged to perform services on our behalf, including but not limited to payment processing, order fulfillment, logistics and shipping, IT infrastructure, data analytics, customer support, and cloud storage. Such service providers are contractually obligated to process Personal Data only as directed by the Company and in accordance with applicable law.
  • Business and Marketing Partners: Including Shopify and other partners who assist in delivering and personalizing the Services and related advertising. These partners process your data pursuant to their own privacy policies.
  • Affiliates: Entities within our corporate group, for internal business and operational purposes.
  • Successors in Interest: In connection with a merger, acquisition, reorganization, bankruptcy, or sale of all or substantially all of our assets, your Personal Data may be transferred to the acquiring entity, subject to the terms of this Policy.
  • Legal and Regulatory Authorities: Where required or permitted by law, including in response to valid legal process, to protect the rights, property, or safety of the Company, our users, or the public, or to enforce our agreements and policies.
  • With Your Consent: To any other third party where you have provided explicit consent to such disclosure.

The Company does not use or disclose Sensitive Personal Information (as defined under applicable law) for the purpose of inferring characteristics about Data Subjects.

6. User-Generated Content

To the extent the Services permit you to submit product reviews, comments, or other user-generated content to publicly accessible areas of the Services, you acknowledge that such content will be publicly available and accessible to any third party. The Company assumes no responsibility for the privacy or security of information you voluntarily disclose in public areas of the Services.

7. Third-Party Websites and External Links

The Services may contain hyperlinks to third-party websites, platforms, or services that are not owned or controlled by the Company. The Company has no control over, and assumes no responsibility for, the content, privacy policies, or practices of any third-party websites. The inclusion of any link does not constitute an endorsement by the Company of the linked website or its operators. We strongly encourage you to review the privacy policy of any third-party website you visit.

8. Children's Privacy

The Services are not directed to, and the Company does not knowingly collect Personal Data from, children under the age of 13. If you are a parent or legal guardian and believe that your minor child has provided Personal Data to the Company without your consent, please contact us immediately using the contact information set forth in Section 14 of this Policy, and we will take prompt steps to delete such information. The Company does not have actual knowledge that it "sells" or "shares" (as those terms are defined under the CCPA/CPRA) the Personal Data of consumers under 16 years of age.

9. Security of Personal Data

The Company implements and maintains reasonable and appropriate administrative, technical, and physical safeguards designed to protect your Personal Data against unauthorized access, disclosure, alteration, destruction, or loss. Such measures include, but are not limited to, encryption of data in transit, access controls, and regular security assessments. Notwithstanding the foregoing, no method of transmission over the Internet or method of electronic storage is completely secure, and the Company cannot guarantee the absolute security of your Personal Data. You are responsible for maintaining the confidentiality of your account credentials and for any activity that occurs under your account.

10. Retention of Personal Data

The Company retains your Personal Data for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting obligations, resolve disputes, enforce our agreements, and as otherwise required or permitted by applicable law. The criteria used to determine retention periods include the nature and sensitivity of the Personal Data, the purposes for which it is processed, and applicable statutory limitation periods.

11. Your Rights and Choices

Subject to applicable law and certain exceptions, you may have the following rights with respect to your Personal Data. To exercise any of these rights, please contact us using the information provided in Section 14.

  • Right of Access / Right to Know: You may have the right to request confirmation of whether we process your Personal Data and to obtain a copy of the Personal Data we hold about you, including information about the categories, sources, purposes, and recipients of such data.
  • Right to Deletion / Erasure: You may have the right to request the deletion or erasure of your Personal Data, subject to certain exceptions permitted by law.
  • Right to Rectification / Correction: You may have the right to request that we correct inaccurate or incomplete Personal Data we maintain about you.
  • Right to Data Portability: You may have the right to receive your Personal Data in a structured, commonly used, and machine-readable format and to request its transmission to another controller, where technically feasible.
  • Right to Restriction of Processing: You may have the right to request that we restrict the processing of your Personal Data under certain circumstances.
  • Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw such consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
  • Right to Opt Out of Sale or Sharing: Under the CCPA/CPRA, you may have the right to opt out of the sale or sharing of your Personal Data for cross-context behavioral advertising purposes.
  • Right to Non-Discrimination: The Company will not discriminate against you for exercising any of your privacy rights.
  • Right to Appeal: If we decline to act on your request, you may have the right to appeal that decision. Appeals may be submitted by responding directly to our denial notice.
  • Right to Lodge a Complaint: You have the right to lodge a complaint with the applicable supervisory authority or data protection authority in your jurisdiction.
  • Communication Preferences: You may opt out of receiving promotional communications from us at any time by using the unsubscribe mechanism included in our marketing emails. Opting out of marketing communications does not affect our ability to send you transactional or service-related communications.

To submit a verifiable consumer request, we may require you to provide sufficient information to verify your identity. We will respond to your request within the timeframe required by applicable law. You may designate an authorized agent to submit requests on your behalf, provided that such agent provides proof of authorization and you verify your identity directly with us.

12. International Data Transfers

The Company is based in the United States. If you are located outside the United States, please be aware that your Personal Data may be transferred to, stored in, and processed in the United States or other jurisdictions that may not provide the same level of data protection as your home jurisdiction. Where we transfer Personal Data from the European Economic Area ("EEA"), the United Kingdom, or Switzerland to a third country, we rely on appropriate safeguards, including Standard Contractual Clauses approved by the European Commission or equivalent mechanisms recognized under applicable law, unless the transfer is to a jurisdiction that has received an adequacy decision.

13. Complaints and Dispute Resolution

If you have concerns or complaints regarding our processing of your Personal Data, we encourage you to contact us in the first instance using the contact details below. We will investigate and respond to your complaint in a timely manner. If you are not satisfied with our response, you may have the right to escalate your complaint to the relevant data protection authority or supervisory authority in your jurisdiction.

14. Contact Information

For questions, concerns, or requests relating to this Policy or our data processing practices, or to exercise your rights as a Data Subject, please contact us at:

  • Email: frontpage@horrormerchstore.com
  • Mail: Horrormerch.com, PO Box 666, Hilliard, OH 43026, United States

We will endeavor to respond to all legitimate inquiries within the timeframe required by applicable law.