Privacy policy

Miss Cat 🐈Hug Squishy provides services. This Privacy Policy explains how we collect, use, disclose, and protect your personal information. Under applicable data protection laws, we are the data controller of your personal information.

This store is powered by Shopify. Shopify acts as a data processor and processes personal information related to your access and purchases on our behalf to provide and improve the services.

Please read this Privacy Policy carefully. By using and accessing any services, you indicate that you have read this Privacy Policy and understand the collection, use, and disclosure of your information described herein.

We collect the following categories of personal information.

When we use the term “personal information,” we mean any information that can identify, relate to, describe, be reasonably associated with, or be reasonably directly or indirectly linked to a particular consumer or household, including information inferred or derived from such information. Personal information does not include: information from lawfully public government records; deidentified or anonymized information that cannot identify a particular individual; and aggregate consumer information.

Depending on how you interact with the services, where you reside, and what applicable law permits or requires, we may collect or process the following categories of personal information, including inferences drawn from such information:

Contact information includes your real name, alias, shipping address, billing address, email address, phone number, and account name or online identifier.

Records information includes your signature, payment card information (credit or debit card number), bank account number or other financial information, transaction details, payment confirmations, and transaction records.

Commercial information includes products you view, products you add to cart, products you add to wish lists, products you purchase, return or exchange records, and your historical transactions and purchasing habits.

Account and preference information includes your username, password, security questions, preferences, and account configuration.

Communication information includes content you provide when communicating with us, such as customer support inquiries, email correspondence, survey responses, or records of promotional participation.

Device and network activity information includes your device type, browser type, network connection information, IP address, device identifiers, cookie identifiers, and interaction data about how you browse and use the services (including search queries, browsing history, session duration, etc.).

Geolocation data includes approximate geolocation inferred from IP address, and the location corresponding to the mailing address you provide.

Inferences means inferences drawn from the above personal information to create consumer profiles reflecting your preferences, interests, and characteristics in order to personalize your shopping experience. We do not use sensitive personal information to infer your characteristics or for targeted advertising purposes unless we obtain your explicit consent or as otherwise required by law.

Sources of Personal Information
We collect personal information through the following channels:

(1) Directly from You
When you create an account, place an order, send a customer service inquiry, subscribe to marketing communications, or participate in a survey, you directly provide relevant information to us.

(2) Automatically Collected
When you visit or use the services, we automatically collect your device information, browsing behavior, and interaction data through cookies, pixel tags, and similar technologies.

(3) From Service Providers
Our technology, payment, logistics, and other service providers may transmit personal information related to you to us in the course of providing services on our behalf.

(4) From Business Partners
Our marketing, analytics, and advertising partners may provide us with information related to you to help us optimize our services and advertising.

(5) From Shopify
As our platform provider, Shopify collects and processes personal information when you visit our store and may transmit it to us to support order fulfillment, fraud prevention, and platform improvement.

Limitations on Use of Inferences
We may draw inferences from the personal information we collect from you to personalize your experience, recommend relevant products, and improve the services. Such inferences are used only for the purposes described in this Privacy Policy and will not be used to infer sensitive personal information or legally protected characteristics unless we obtain your explicit consent or as otherwise authorized by law.

How We Use Your Personal Information
We use your personal information for the following purposes based on how you interact with the services and applicable law. Each processing activity is based on one of the legal bases described below.

Providing, Customizing, and Improving the Services
Processing activities: fulfilling orders, processing payments, arranging shipments, handling returns and exchanges, creating and managing accounts, remembering preferences, sending transactional notifications, supporting product review features, and personalizing the shopping experience (including product recommendations based on purchase history).

Marketing and Advertising
We send marketing and promotional messages by email, SMS, or mail; and display relevant product or service advertisements on the services or other websites based on products you previously purchased or added to cart.

Security and Fraud Prevention
Verifying accounts, providing a secure payment and shopping experience, detecting and investigating potential fraud, illegal, unsafe, or malicious activity, protecting public safety, and securing the services.

Account Security Notice: If you choose to use the services and register an account, you are responsible for protecting the security of your account credentials. We strongly recommend that you do not disclose your username, password, or other access information to anyone. We use your personal information to provide you with customer support and to provide effective services and maintain business relationships.

Legal Reasons
Complying with applicable law or responding to valid legal process (including requests from law enforcement or government agencies); investigating or participating in civil discovery, potential or actual litigation, or other adversarial legal proceedings; enforcing or investigating possible violations of our terms or policies. We do not use sensitive personal information to infer your characteristics or for targeted advertising purposes unless we obtain your separate consent or as otherwise required by law. If we process sensitive personal information based on consent, you have the right to withdraw that consent at any time.

How We Disclose Personal Information
We may disclose your personal information to third parties in the following circumstances, subject to this Privacy Policy. Such circumstances may include:

Service Providers and Affiliates
We share information with Shopify, suppliers, and other third parties that provide services on our behalf, including IT management, payment processing, data analytics, customer support, cloud storage, fulfillment, and shipping services. These service providers process personal information only in accordance with our instructions and are contractually prohibited from using the information for other purposes.

We work with business and marketing partners to provide marketing services and display advertisements to you. For example, we use Shopify to support personalized advertising through third-party services based on your online activity across different merchants and websites. Our business and marketing partners will use your information in accordance with their own privacy statements. When you instruct, request, or otherwise consent to our disclosure of information to third parties, such as through a shipping address or social media widget or login integration. In connection with a merger, acquisition, bankruptcy, or similar business transaction, your personal information may be transferred as an asset. We will notify you as required by applicable law and ensure that the recipient continues to be bound by this Privacy Policy or lawfully obtains your consent again.

Legal Requirements
Complying with any applicable legal obligations, including responding to subpoenas, search warrants, and similar requests; enforcing applicable terms of service or policies; protecting or defending the services, our rights, and the rights of users or others.

Relationship with Shopify
The services are hosted by Shopify. Shopify, as our data processor, collects and processes personal information on our behalf when you access and use the services, in order to provide and improve the services. Information you submit to the services will be transmitted to and shared with Shopify and third parties that may be located outside your country of residence in order to provide and improve the services for you. In addition, to help protect, grow, and improve our business, we use certain Shopify enhancements that incorporate data and information obtained from your interactions with our store, other merchants, and Shopify. To provide these enhancements, Shopify may use personal information collected about your interactions with our store, other merchants, and Shopify. In these cases, Shopify processes your personal information as a data controller (or business), rather than solely as our data processor. This means that Shopify’s use of your personal information is governed by its own privacy policy, and Shopify is responsible for responding to your requests to exercise personal information rights regarding such processing. To learn more about how Shopify uses your personal information and any rights you may have, you can visit the Shopify Consumer Privacy Policy. Depending on where you reside, you may have certain rights with respect to your personal information. You may submit requests through the Shopify Privacy Portal.

Third-Party Websites and Links
The services may contain links to websites, plug-ins, applications, or other online platforms operated by third parties. These links are provided for your convenience only. When you click a link and leave the services, you will be subject to the terms and privacy policy of that third-party website or platform, not this Privacy Policy.

We do not control, endorse, warrant, or assume any responsibility for the content, privacy practices, security, or accuracy of any third-party website or platform. We recommend that you carefully read the privacy policy and terms of use of any third-party website or platform before submitting personal information to it.

Important Notice Regarding Public Disclosures: Information you share through public areas of the services (such as product reviews or community features) or third-party social networking platforms may be viewed, collected, and used by other users, users of third-party platforms, or the public. Such disclosures are not governed by this Privacy Policy, and we cannot control their subsequent use. Please be cautious when publicly sharing personal information.

Children’s Data and Protection of MinorsThe services are not directed to children, and we do not knowingly collect, use, or disclose personal information from children. Under the CCPA/CPRA, we do not “sell” or “share” (as defined by applicable law) the personal information of consumers under 16 years of age, and as of the effective date of this Privacy Policy, we have no actual knowledge of any such situation. If you are a parent or guardian of a child under 13 and believe that we have collected their personal information, please contact us to request deletion.
Security and Retention of InformationWe take reasonable technical and organizational security measures designed to protect the personal information we process from unauthorized access, disclosure, alteration, or destruction. Such measures include, but are not limited to, encryption of data in transit (such as SSL/TLS), access controls, and employee privacy and security training.
Limitations of Security: Please note that no security measure is perfect or impenetrable, and we cannot guarantee “perfect security.” Any information you send to us may not be secure during transmission. We recommend that you do not communicate sensitive or confidential information to us using insecure channels. If you choose to use the services and register an account, you are responsible for protecting the security of your account credentials. We strongly recommend that you do not share your username, password, or other access information with others.
Data RetentionThe length of time we retain your personal information depends on a variety of factors. We determine retention periods based on the following criteria:Account information: retained during the life of your account and for a reasonable period after account closure to meet legal requirements;Transaction records: retained for the period necessary to satisfy tax, accounting, and compliance requirements;Marketing data: deleted or anonymized after you opt out of marketing communications or within a reasonable period after our last interaction with you (typically no more than 24 months);Customer service communication records: retained as necessary to resolve related issues and for the applicable statute of limitations for dispute resolution.When the retention period expires or the processing purpose has been achieved, we will delete or anonymize your personal information, or securely store it and restrict processing during any period in which further processing is prohibited by law.
Your Rights and ChoicesDepending on where you reside, you may have some or all of the following rights. Please note: these rights are not absolute and may apply only in specific circumstances. In some cases, we may deny your request as permitted by law. We will not discriminate against you for exercising these rights.
Right to Know/Access: You have the right to request confirmation of whether we process your personal information and to obtain a copy of the personal information we hold about you, as well as information about the purposes of processing, categories, recipients, and retention periods.
Right to Deletion: You have the right to request that we delete the personal information we have stored about you, subject to legal retention obligations.
Right to Correction: You have the right to request that we correct inaccurate personal information we hold about you and to request that incomplete personal information be completed.
Right to Data Portability: In certain circumstances, you have the right to receive the personal information you provided to us in a structured, commonly used, and machine-readable format, and to request that we transmit that information directly to another data controller where technically feasible.
Right to Opt Out of “Sale/Sharing”: You have the right to opt out of our “sale” of your personal information or its “sharing” for cross-context behavioral advertising. Under the CPRA, the right to opt out has been expanded to “sharing,” including targeted advertising based on your activity across different merchants and websites. If you visit this website with a Global Privacy Control (GPC) opt-out preference signal enabled, we will, depending on your location, automatically treat it as an opt-out request for the device and browser used to access the website. If we are able to link the device sending the signal to a Shopify account, we will apply the opt-out request to that account. To learn more about Global Privacy Control, please visit https://globalprivacycontrol.org/. Except for Global Privacy Control, we do not recognize other “Do Not Track” signals sent from your browser or device.
We will not deny you services, charge different prices, or provide a different level or quality of services because you exercised the above rights.
If you reside in the United Kingdom or the European Economic Area, in addition to the general rights above, you may also exercise the following rights:
Right to Object: You have the right to object, on grounds relating to your particular situation, to processing we carry out based on legitimate interests or public interest. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or that are necessary for the establishment, exercise, or defense of legal claims.
ComplaintsIf you object to the way we process your personal information, you have the right to lodge a complaint or grievance. We recommend that you first contact us using the contact information provided at the end of this policy so that we have the opportunity to respond directly and resolve your concerns. We encourage you to contact us before filing a formal complaint with a supervisory authority. This allows us to understand the situation more quickly and seek a resolution. We are committed to taking any concerns you raise seriously and responding within the timeframes required by applicable law.
International Data TransfersWe may transfer your personal information to jurisdictions outside your country of residence, including to Shopify’s servers located in Canada and the United States, and to storage facilities of other service providers we use. Such transfers are necessary to perform our contract with you, operate the services, and achieve the purposes described in this Privacy Policy.
If we transfer personal information collected in the European Economic Area (EEA) or the United Kingdom to third countries outside those areas, and such third country has not received an adequacy decision from the European Commission or the relevant UK authority, we will rely on recognized lawful transfer mechanisms under applicable data protection law, such as the European Commission’s Standard Contractual Clauses, or any equivalent contract issued by the relevant UK authority, as applicable, unless the data transfer is to a country recognized as providing an adequate level of protection.
Changes to This Privacy PolicyWe reserve the right to revise this Privacy Policy from time to time to reflect changes in our practices, updates to service features, or for operational, legal, or regulatory reasons.
Implementation of Changes: The revised Privacy Policy will be posted on this website, and the “Last Updated” date at the top of the page will be updated. Unless otherwise required by law, the revised version will be effective as of the date of posting.
Contact InformationIf you have any questions about this Privacy Policy or wish to exercise any of the rights available under this policy, please contact us at:Email: 17876043945@163.com
Under applicable data protection laws, Miss Cat 🐈Hug Squishy is the data controller of your personal information. If you are located in the European Economic Area or the United Kingdom, Miss Cat 🐈Hug Squishy is the data controller; if you are located in other jurisdictions, Miss Cat 🐈Hug Squishy is the corresponding personal information processor or controller (as defined by local law). We will respond to your request within the timeframes required by applicable law. Before processing your request, we may need to verify your identity, as permitted or required by applicable law.