Privacy Policy

Effective Date: August 20, 2026

At Shoe Comfort, we believe you have the right to know how your information is handled when you shop with us. This Privacy Policy explains what information we collect, why we collect it, how we use it, and the choices available to you. By visiting shoecomforts.com, browsing our products, or making a purchase, you acknowledge that you have read and understood this policy.

1. Information We Collect

We collect information in two ways: information you provide directly and information our systems collect automatically as you browse our store.

Information You Provide

You may provide us with the following information when you create an account, place an order, contact our customer service team, or subscribe to our newsletter:

Identity Information: Name, email address, phone number, shipping address, and billing address.

Payment Information: Credit or debit card number, expiration date, security code, and billing zip code. (Payment card data is processed by our secure payment service providers—we do not store full card numbers on our servers.)

Account Credentials: If you create an account, you will need to provide a username and password.

Communication Data: Any messages, emails, comments, or feedback you send us, including customer service inquiries.

Preferences: Size preferences, style preferences, wishlists, and marketing communication preferences.

Automatically Collected Information

When you visit our website, we automatically collect certain data via cookies, pixels, and similar technologies:

Device Information: Browser type, operating system, screen resolution, device type (mobile, tablet, desktop), and unique device identifiers.

Usage Data: Pages viewed, products browsed, time spent on pages, click patterns, referral sources (how you found us), search queries on our site, and shopping cart activity.

Location Data: Approximate geographic location based on your IP address (city and state level, not precise GPS location).

Network Information: Internet Service Provider (ISP), IP address, and connection type.

Information from Third Parties

We may receive additional data from external sources, including:

Payment Processors (e.g., Shopify Payments, PayPal): Transaction confirmations and fraud prevention signals.

Analytics Providers (e.g., Google Analytics): Aggregated traffic and demographic data regarding how visitors interact with our website. Advertising partners (e.g., Meta, Google Ads): Conversion tracking data used to inform us which ads led to purchases.

Social media platforms: If you interact with us via Instagram, Facebook, or TikTok, we may receive information from your public profile.

2. How We Use Your Information

We use the collected data for specific and clearly defined purposes:

Purpose | Legal Basis

Processing and fulfilling your orders, including shipping and delivery | Contractual necessity

Sending order confirmations, shipping notifications, and delivery updates | Contractual necessity

Processing refunds, exchanges, and warranty claims | Contractual necessity

Creating and managing your customer account | Your consent / Contractual necessity

Responding to your questions, complaints, and customer service requests | Legitimate interests

Sending promotional emails, sales announcements, and style recommendations | Your consent (opt-in required)

Personalizing your shopping experience (e.g., size recommendations, saved preferences) | Legitimate interests

Detecting and preventing fraud, unauthorized transactions, and abuse | Legitimate interests / Legal obligations

Analyzing website traffic, sales trends, and customer behavior to improve our store | Legitimate interests

Complying with legal obligations, tax requirements, and regulatory mandates | Legal obligations

Managing contests, promotions, or surveys you choose to participate in | Your consent

We will never use your information for purposes incompatible with those listed above without prior notice and, where necessary, your consent.

3. How We Share Your Information

We never sell your personal information to data brokers. Never.

We share your data only in the following limited circumstances:

A. Service Providers (Data Processors)

We partner with trusted third-party companies to help us operate our business. These providers receive only the data necessary to perform their specific functions:

Payment processing: Shopify Payments, Stripe, PayPal — used to securely process transactions.

Shipping and logistics: USPS, UPS, FedEx, DHL — used to deliver your orders. We share your name and delivery address.

Email marketing: Klaviyo, Mailchimp — used to send newsletters and promotional emails (only if you have opted in).

Analytics: Google Analytics — used to understand website usage patterns. This data is aggregated and does not personally identify you. Customer Support: Helpdesk platforms used to store records of your customer service tickets.

Cloud Hosting Services: Shopify and Amazon Web Services (AWS)—used to host our online store and securely store data.

All service providers are contractually required to protect your information and are strictly prohibited from using it for any purpose other than providing services to us.

B. Legal Requirements

We may disclose your information when required by law, including:

Responding to valid subpoenas, court orders, or legal processes

Cooperating with law enforcement or regulatory agencies

Enforcing our Terms of Service, or protecting the rights, property, or safety of Shoe Comfort, our customers, or others

Detecting and preventing fraud or security threats

C. Business Transfers

In the event of a merger, acquisition, bankruptcy, or the sale of all or part of our assets, your personal information may be transferred to the acquiring entity. We will notify you via email and/or by posting a prominent notice on our website before your information becomes subject to a new privacy policy.

D. With Your Consent

We may share your information for purposes not mentioned above if you provide explicit and informed consent.

4. Cookies and Tracking Technologies

We use cookies and similar technologies to ensure the website functions correctly and to improve your experience.

Types of Cookies We Use

Strictly Necessary Cookies

Cookies essential for the website to operate. They handle your shopping cart, login sessions, payment security, and the checkout process. If you disable these cookies, core website functions will not work properly.

Analytical Cookies

These help us understand how visitors use our website—such as which pages are popular, where users leave, and how people find us. We use Google Analytics for this purpose. The data collected is aggregated and cannot be used to identify individuals.

Marketing Cookies

Used to display relevant advertisements and measure the effectiveness of marketing campaigns. These cookies may be set by us or by third-party advertising partners (such as Meta [Facebook/Instagram] and Google). They track your browsing behavior across different websites to build an advertising profile.

Preference Cookies

These remember your settings (such as language, currency, recently viewed items, and size preferences) so you do not have to re-enter them.

Managing Cookies

You can manage cookies in the following ways:

Your browser settings: Most browsers allow you to block or delete cookies. Please consult your browser's help documentation for specific instructions. Our Cookie Banner: When you first visit our website, the cookie consent banner allows you to choose whether to accept or reject non-essential cookies.

Opt-out Tool: Please visit aboutads.info (http://www.aboutads.info/choices/) to opt out of interest-based advertising from companies participating in that program.

Disabling certain cookies may limit your ability to use some features of our website.

"Do Not Track" (DNT) Signals

Some browsers send "Do Not Track" (DNT) signals to the websites you visit. Currently, there is no uniform standard regarding how websites should respond to DNT signals. At this stage, Shoe Comfort does not alter its data collection practices in response to DNT signals. However, you can control data collection via the cookie management tools described above.

5. Data Security

We take the security of your information very seriously and have implemented multiple protective measures:

Encryption: All data transmitted between your browser and our servers is encrypted using TLS (Transport Layer Security) and 256-bit encryption technology. Payment data is tokenized—your full card number is never stored on our servers.

Access Control: Employee access to personal data is restricted based on the "need-to-know" principle and protected by multi-factor authentication.

PCI DSS Compliance: Our payment processing environment complies with the Payment Card Industry Data Security Standard (PCI DSS).

Regular Monitoring: We monitor for system vulnerabilities and conduct regular security assessments.

Important Note: No method of internet transmission or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security. In the unlikely event of a data breach affecting your personal information, we will notify you and the relevant regulatory authorities as required by applicable law.

6. Your Rights and Choices

Depending on your place of residence, you may have specific rights regarding your personal information:

A. California Residents — CCPA / CPRA Rights

Under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), California residents have the following rights:

Right to Know

You may request a copy of the personal information we have collected about you over the past 12 months, including:

Categories of personal information collected

Specific pieces of personal information collected

Sources from which the information was collected

Business purpose for collecting the information

Categories of third parties with whom the information is shared

Right to Delete

You may request that we delete the personal information we have collected from you, subject to certain exceptions (e.g., information needed to complete a transaction, detect fraud, fulfill legal obligations, or exercise free speech).

Right to Correct

You may request that we correct inaccurate personal information we hold about you.

Right to Opt Out of Sale or Sharing

We do not sell your personal information as defined by the CCPA. If our practices change in the future, we will update this policy and provide a clear "Do Not Sell or Share My Personal Information" link on our website.

Right to Limit Use of Sensitive Personal Information

If we collect sensitive personal information (such as payment data), you may request that we limit the use of that information to what is necessary to provide the service.

Right to Non-Discrimination

We will not discriminate against you for exercising any rights granted by the CCPA/CPRA. You will receive the same quality of service regardless of whether you exercise your privacy rights.

How to Exercise Your Rights

Please contact us via email at info@shoecomforts.com with the subject line "CCPA Request" and specify which right you wish to exercise. We will verify your identity before processing the request and respond within 45 days. We will notify you if an extension is required.

Authorized Agent

You may designate an authorized agent to make a request on your behalf. The agent must provide written authorization signed by you, and we may also verify your identity directly.

B. Right to Opt Out of Email Marketing

Every promotional email we send includes an unsubscribe link at the bottom. You may also send an email with the subject line "Unsubscribe" to info@shoecomforts.com. Opting out of marketing emails will not affect transaction-related notifications (such as order confirmations, shipping updates, etc.).

In accordance with the CAN-SPAM Act, we will process your unsubscribe request within 10 business days.

C. Account Holders—Access and Control

If you have created a Shoe Comfort account, you can:

Update personal information in your account settings

View order history

Manage marketing preferences

7. Children's Privacy

Shoe Comfort does not knowingly collect personal information from children under the age of 13. Our products and services are intended for adults. If we discover that we have inadvertently collected information from a child under 13, we will delete it immediately.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at info@shoecomforts.com, and we will take immediate action.

This policy complies with the Children's Online Privacy Protection Act (COPPA).

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this policy:

Data Type Retention Period

Account Information Duration of account + 2 years after receiving a deletion request

Order and Transaction Records 7 years (tax and accounting compliance requirements)

Customer Service Communication Records 3 years from the date of the last interaction

Marketing Preferences and Consent Records Until you withdraw consent + 1 year (compliance records)

Website Analytics Data 26 months (aggregated data; cannot identify individuals)

Cookie Data Depends on cookie type (see Section 4)

When data is no longer needed, we securely delete or anonymize it so that it can no longer be associated with you.

9. Third-Party Links

Our website may contain links to third-party websites, including social media platforms, review sites, or partner retailer websites. We are not responsible for the privacy practices or content of these external websites. We recommend that you review the privacy policy of each website you visit.

Links appearing on our website do not imply our endorsement of the linked website or its operator.

10. Changes to This Privacy Policy

We may update this policy from time to time to reflect changes in our business practices, technology, legal requirements, or other factors. When we make significant changes:

We will update the "Effective Date" at the top of this page.

For significant changes (e.g., new categories of data collection or changes in data sharing practices), we will notify you at least 30 days before the changes take effect, either via email (if you have an account) or by posting a prominent notice on our website.

We encourage you to review this policy periodically. Your continued use of our website after the changes are posted constitutes your acceptance of the updated policy.