Privacy policy
Last updated: June 19, 2026
Privacy policy
Summit Soul operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). Summit Soul is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.
Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.
Personal Information We Collect or Process
When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or that has been de-identified. We may collect or process the following categories, depending on how you interact with the Services and where you live:
- Contact details including your name, billing address, shipping address, phone number, and email address.
- Financial information including payment card information, transaction details, form of payment, and payment confirmation.
- Account information including your username, password, preferences and settings.
- Transaction information including the items you view, add to cart, purchase, return, exchange or cancel, and your past transactions.
- Communications with us including the information you include when you contact us.
- Device information including your device, browser, network connection, IP address, and other unique identifiers.
- Usage information including how and when you interact with or navigate the Services.
Personal Information Sources
We may collect personal information directly from you; automatically through the Services (including through cookies and similar technologies); from our service providers; and from our partners or other third parties.
How We Use Your Personal Information
- Provide, Tailor, and Improve the Services - to perform our contract with you, process payments, fulfill and ship your orders, manage your account, handle returns and exchanges, enable reviews, and tailor and improve your shopping experience.
- Marketing and Advertising - to send marketing communications by email, text or post, and to show you online advertisements, including based on your activity on the Services.
- Security and Fraud Prevention - to authenticate your account, secure payments, and detect or act on fraudulent or unsafe activity.
- Communicating with You - to provide customer support and maintain our relationship with you.
- Legal Reasons - to comply with applicable law and respond to valid legal process.
- Use of AI tools - we use artificial-intelligence tools to help draft customer-service replies and analyze sales and store performance. A member of our team reviews AI-assisted customer communications before they are sent. We do not use AI to make automated decisions that have legal or similarly significant effects on you, and we do not permit these tools to use your personal information to train their models.
Legal Bases for Processing (EEA and UK customers)
If you are in the European Economic Area or the United Kingdom, we process your personal information under the following legal bases:
- Performance of a contract (Article 6(1)(b)) - to process and fulfill your orders, manage your account, arrange shipping, and handle returns, exchanges, and cancellations.
- Consent (Article 6(1)(a)) - to send marketing where consent is required, and to set non-essential cookies and similar technologies. You may withdraw consent at any time without affecting processing carried out before withdrawal.
- Legitimate interests (Article 6(1)(f)) - to secure our Services and prevent fraud, understand and improve how our Services are used, and carry out direct marketing where permitted.
- Compliance with a legal obligation (Article 6(1)(c)) - to meet our tax, accounting, consumer-protection, and other legal requirements.
Cookies and Similar Technologies
We and our service providers use cookies, pixels, tags, and similar technologies to operate the Services, remember your preferences, understand usage, and deliver and measure advertising. We group them as:
- Strictly necessary - required to run the store, keep you signed in, remember your cart, and process checkout. These cannot be switched off.
- Analytics and performance - help us understand how visitors use the Services (for example, Shopify analytics and Google Analytics).
- Marketing and advertising - used to show relevant ads and measure performance, including the Meta (Facebook) Pixel, Google Ads, and email and SMS tools such as Klaviyo.
Managing your choices. When you first visit the Services from the European Economic Area or the United Kingdom, we present a cookie consent banner, and non-essential cookies (analytics and marketing) are not set until you accept them. You can change or withdraw your choices at any time through the cookie settings link on our site. If you are in the United States, you can opt out of the "sale" or "sharing" of your information for targeted advertising through our Your Privacy Choices page. We honor the Global Privacy Control (GPC) browser signal as described below.
How We Disclose Personal Information
We may disclose your personal information: with Shopify and other vendors who perform services on our behalf (IT, payment processing, analytics, customer support, cloud storage, fulfillment and shipping); with business and marketing partners to advertise to you (you may opt out as described below); when you direct or consent to disclosure; with our affiliates; and in connection with a business transaction, to comply with legal obligations, or to protect our rights and the rights of others.
Service Providers and Partners We Work With
The main third parties that process personal information on our behalf or in connection with the Services are below. Each uses your information under its own privacy notice.
- Shopify - e-commerce platform, hosting, checkout, and store analytics.
- Shopify Payments and PayPal - payment processing.
- Printify and its print providers - made-to-order production and shipping.
- Klaviyo - email and SMS marketing and related analytics.
- Meta Platforms (Facebook and Instagram) - advertising and conversion measurement via the Meta Pixel.
- Google - website analytics (Google Analytics) and advertising (Google Ads).
- Judge.me - collecting and displaying product reviews.
- TrackingMore and shipping carriers - order tracking and delivery updates.
Relationship with Shopify
The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services. Information you submit will be transmitted to and shared with Shopify and third parties that may be located in countries other than where you reside, to provide and improve the Services. To learn more about how Shopify uses your personal information, visit the Shopify Consumer Privacy Policy, and depending on where you live, the Shopify Privacy Portal.
Third Party Websites and Links
The Services may link to websites operated by third parties. We are not responsible for the privacy or security of those sites, and our inclusion of links does not imply endorsement. Please review their policies before providing information.
Children's Data
The Services are not intended for children, and we do not knowingly collect personal information about children under the age of majority in your jurisdiction. Parents or guardians may contact us to request deletion. We do not have actual knowledge that we "share" or "sell" personal information of individuals under 16.
Security and Retention of Your Information
No security measures are perfect, and information you send may not be secure in transit; please do not use unsecure channels for sensitive information. How long we retain personal information depends on whether we need it to provide the Services, comply with legal obligations, resolve disputes, or enforce our policies.
Your Rights and Choices
Depending on where you live, you may have rights to: access/know, delete, correct, and port your personal information; and to opt out of the "sale"/"share" of your information or its use for targeted advertising (exercise this on our Your Privacy Choices page). If you visit with Global Privacy Control enabled, we treat it as an opt-out request for that browser/device, and for an associated account where possible. Other than GPC, we do not recognize other "Do Not Track" signals. You may opt out of promotional emails any time via the unsubscribe link.
If you reside in the UK or European Economic Area, you may also: object to or request restriction of processing; and withdraw consent where we rely on it (without affecting prior processing). We will not discriminate against you for exercising these rights, and we may need to verify your identity. You may use an authorized agent with proof of authorization.
Complaints
If you have complaints about how we process your personal information, please contact us. Depending on where you live, you may appeal our decision or lodge a complaint with your local data protection authority. For the EEA, see the list of supervisory authorities on the EDPB website. In the UK, you may contact the Information Commissioner's Office (ICO) at ico.org.uk.
International Transfers
We may transfer, store and process your personal information outside the country you live in, including in the United States. Where we transfer personal information out of the EEA or UK, we rely on recognized transfer mechanisms such as the European Commission's Standard Contractual Clauses (or the UK equivalent), unless the destination provides an adequate level of protection. Where applicable, our US-based service providers may also be certified under the EU-US Data Privacy Framework and its UK Extension.
EU and UK Representatives
Because we offer goods to customers in the European Economic Area and the United Kingdom from outside those regions, we have appointed representatives you can contact on data-protection matters:
EU Representative (GDPR Article 27):
HONSON VENTURES LIMITED
gdpr@honsonventures.com
3, Gnaftis House flat 102,
Mesa Geitonia, 4003,
Limassol, CY
UK Representative (UK GDPR Article 27):
HONSON VENTURES LIMITED
gdpr@honsonventures.com
3, Gnaftis House flat 102,
Mesa Geitonia, 4003,
Limassol, CY
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will post the revised version, update the "Last updated" date, and provide notice as required by law.
Contact
For any questions about this Privacy Policy, or to exercise your rights, email us at or write to us at 8196 Pawtucket Dr, Huntington Beach, CA, 92646, US. For the purpose of applicable data protection laws, we are the data controller of your personal information.