Privacy Policy

01 Information We Collect

Information you provide directly

When you browse, register an account, place an order, subscribe to our newsletter, enter a promotion, or contact us, we may collect:

• Identity data: first name, last name, username or similar identifier.
• Contact data: billing address, shipping address, email address, and phone number.
• Financial data: payment card details (processed and tokenized by our payment processors — we do not store full card numbers).
• Transaction data: details of purchases, returns, and other transactions you carry out through the Site.
• Profile data: your purchase history, preferences, Radko Rewards membership details, and feedback.
• Communications data: records of correspondence when you contact our customer care team.

Information collected automatically

When you visit the Site our servers and third-party analytics tools automatically collect:

• Technical data: IP address, browser type and version, operating system, device type, time zone, and referring URL.
• Usage data: pages you visit, links you click, search queries, time spent on pages, and navigation paths.
• Cookie data: see Section 4 – Cookies & Tracking for full details.

Information from third parties

• Payment processors (e.g., Shopify Payments, PayPal) may share transaction confirmations and fraud-screening data with us.
• Social media platforms (e.g., Facebook, Instagram, Pinterest) may share aggregate engagement data when you interact with our social content or ads.
• Shipping partners share delivery status updates and address validation data.

02 How We Use Your Information

We use the information we collect for the following purposes:

We will not use your personal information for purposes that are incompatible with those listed above without first obtaining your consent.

03 Sharing Your Information

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. We may share your data with:

Service providers

We engage trusted service providers who process data on our behalf and are bound by data-processing agreements. These include:

• Shopify Inc. – e-commerce platform, checkout, and payments infrastructure.
• Payment processors (e.g., Stripe, PayPal, Shopify Payments) – to authorize and process transactions.
• Shipping & fulfillment partners (e.g., UPS, FedEx, USPS) – to deliver your orders.
• Email marketing platforms (e.g., Klaviyo) – to send newsletters and promotional communications.
• Customer support tools – to manage inquiries and returns.
• Analytics providers (e.g., Google Analytics) – to understand website usage.
• Advertising networks (e.g., Google Ads, Meta) – to serve targeted advertisements.

Legal disclosures

We may disclose your information if required by law, court order, or governmental authority, or when we reasonably believe disclosure is necessary to protect the rights, property, or safety of SHI SHI LLC, our customers, or others.

Business transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or part of our assets, your information may be transferred as part of that transaction. You will be notified via email and/or a prominent notice on the Site.

04 Cookies & Tracking Technologies

We use cookies, pixel tags, web beacons, and similar tracking technologies to enhance your experience, analyze Site performance, and deliver relevant advertising.

Types of cookies we use

Managing cookies

You can manage your cookie preferences at any time using the Cookie Preferences banner displayed on your first visit to the Site. You may also configure your browser to block or delete cookies; however, disabling strictly-necessary cookies will impair core Site functionality.

For interest-based advertising opt-out options, visit optout.aboutads.info (DAA) or youronlinechoices.eu (EDAA).

05 Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, including for the purposes of satisfying any legal, accounting, or reporting requirements.

• Customer account data – retained while your account is active and for 5 years after account closure, in case of warranty claims or legal disputes.
• Order & transaction records – retained for 7 years to comply with tax and financial regulations.
• Marketing preferences & email lists – retained until you unsubscribe or request deletion.
• Customer support communications – retained for 3 years after the matter is resolved.
• Cookies & analytics data – see the cookie table in Section 4 for individual retention periods.

When your data is no longer needed we will securely delete or anonymize it.

06 Your Rights & Choices

Depending on your jurisdiction, you may have the following rights regarding your personal information:

For all customers (United States)

• Opt-out of marketing emails – use the "Unsubscribe" link in any promotional email, or email us at privacy@shishillc.com.
• Access your account data – log in to your account at your account portal to review your order history and profile information.

California residents (CCPA / CPRA)

If you are a California resident you have the right to:

• Know what personal information we have collected about you, the sources, purposes, and third parties with whom it is shared.
• Delete personal information we have collected from you (subject to certain exceptions).
• Correct inaccurate personal information.
• Opt out of the sale or sharing of personal information. (We do not sell personal information as defined by the CCPA.)
• Non-discrimination – we will not discriminate against you for exercising your rights.

EEA / UK residents (GDPR / UK GDPR)

If you are located in the European Economic Area or the United Kingdom you have the right to:

• Access, rectify, or erase your personal data.
• Restrict or object to certain processing activities.
• Data portability — receive your data in a structured, machine-readable format.
• Withdraw consent at any time where processing is based on consent.
• Lodge a complaint with your local supervisory authority.

How to submit a request

To exercise any of the above rights, please contact us using the details in Section 11 or email privacy@shishillc.com. We will respond within 30 days (California: 45 days; GDPR: 30 days). We may ask you to verify your identity before processing your request.

07 Children's Privacy

The Site is intended for use by adults and is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us immediately at privacy@shishillc.com and we will take prompt steps to delete it.

08 Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, and destruction. These include:

• TLS/SSL encryption for all data transmitted between your browser and our servers.
• Payment card data tokenization — full card details are never stored on our servers.
• Access controls ensuring only authorized employees can access personal data.
• Regular security assessments and PCI DSS-compliant payment infrastructure via Shopify.

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security. In the event of a data breach that presents a risk to your rights we will notify you and the relevant authorities as required by applicable law.

09 Third-Party Links

The Site may contain links to third-party websites, plug-ins, and applications (including social media buttons, retailer locators, and flipbook catalogues). Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices. We encourage you to read the privacy notice of every website you visit.

10 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes we will:

• Update the "Last updated" date at the top of this page.
• Post a notice on the Site's home page for at least 30 days.
• Send an email notification to customers with active accounts if the change materially affects their rights.

Your continued use of the Site after the effective date of the updated Policy constitutes your acceptance of the changes.

11 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out to us: