Login

Language

Cart

Your cart is empty

Privacy Policy

Last updated: 09/08/2026

AtticLegacy (“AtticLegacy,” “we,” or “us”) operates this store and website, including all associated information, content, features, tools, products, and services, to provide you with a personalized shopping experience (the “Services”). AtticLegacy is powered by Shopify, which enables us to provide you with the Services.

This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you visit, use, or make a purchase through the Services, or otherwise communicate with us. In the event of a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy will govern with respect to the collection, processing, and disclosure of your personal information.

By accessing or using any of the Services, you acknowledge that you have read, understood, and consented to the data practices described in this Privacy Policy.

1. Personal Information We Collect

In this Privacy Policy, “personal information” refers to data that identifies, relates to, or can reasonably be associated with you or another individual. This excludes data collected anonymously or de-identified so that it cannot be linked back to you. Depending on your interactions with the Services, your jurisdiction, and applicable law, we may collect and process the following categories of personal information:

  • Contact Information: Name, billing and shipping addresses, phone number, and email address.

  • Financial Information: Credit card, debit card, and financial account numbers, payment details, transaction records, and payment confirmations. (Note: Payment card information is securely processed by our payment providers; we do not store full payment card data on our servers.)

  • Account Information: Username, password, security questions, account preferences, and settings.

  • Transaction Information: Browsing history, items added to your cart or wishlist, purchase history, returns, exchanges, and cancellations.

  • Communications: Information you provide when communicating with us, such as customer support inquiries or feedback.

  • Device and Usage Information: IP address, browser type, operating system, unique device identifiers, and data about how and when you interact with and navigate the Services.

2. Sources of Personal Information

We obtain personal information from the following sources:

  • Directly from You: When you create an account, make a purchase, subscribe to our communications, or otherwise interact with the Services.

  • Automatically: From your device or browser through cookies, web beacons, and similar tracking technologies as you navigate our website.

  • Service Providers: Third parties engaged to facilitate our operations, who may collect or process data on our behalf.

  • Partners and Third Parties: Entities that help provide specific functionalities or services to you.

3. How We Use Your Personal Information

We process your personal information for the following legitimate business purposes:

  • Service Provision and Fulfillment: To process payments, fulfill orders, arrange for shipping, facilitate returns and exchanges, manage your account, and provide the agreed-upon Services.

  • Personalization and Improvement: To remember your preferences, recommend products, create a personalized shopping experience, and analyze data to enhance our Services.

  • Marketing and Advertising: To send promotional communications via email, SMS, or postal mail, and to display targeted online advertisements based on your activity on our Services and other websites.

  • Security and Fraud Prevention: To authenticate users, monitor for fraudulent, illegal, or malicious activity, secure our infrastructure, and protect public safety.

  • Customer Support: To respond to your inquiries, provide effective service, and maintain our business relationship.

  • Legal Compliance: To comply with applicable laws, respond to valid legal processes (including law enforcement requests), investigate potential violations, and enforce our Terms of Service.

4. How We Disclose Your Personal Information

In specific circumstances, we may share your personal information with third parties for legitimate purposes, including:

  • Service Providers and Vendors: Third parties performing services on our behalf, such as IT management, payment processing, data analytics, customer support, cloud storage, and logistics.

  • Business and Marketing Partners: To provide marketing services and targeted advertising. We use Shopify to support personalized advertising based on your online activity across different merchants and websites. Our partners use your data in accordance with their own privacy policies. Depending on your jurisdiction, you may have the right to opt out of targeted advertising [Insert Opt-Out Link Here].

  • User-Directed Disclosures: When you request us to share information, such as through social media integrations or login features.

  • Affiliated Companies: Within our corporate group for internal administrative and operational purposes.

  • Business Transfers: In connection with a merger, acquisition, bankruptcy, or sale of all or a portion of our assets.

  • Legal Compliance: To comply with applicable legal obligations, enforce our terms and policies, and protect the rights, property, and safety of AtticLegacy, our users, or third parties.

5. Relationship with Shopify

The Services are hosted by Shopify. Shopify collects and processes personal information regarding your access and use of the Services. Information submitted to the Services will be transmitted to and shared with Shopify and its third-party partners, which may be located in countries outside your jurisdiction.

To help protect and improve our business, we leverage Shopify’s advanced features, which integrate data obtained from your interactions with our store, other merchants, and Shopify itself. In these circumstances, Shopify acts as an independent data controller, responsible for processing your personal information and responding to your data rights requests. To learn more, please see Shopify’s Consumer Privacy Policy or exercise your rights through Shopify’s Privacy Portal.

6. Third-Party Websites and Links

The Services may contain links to third-party websites or platforms not affiliated with or controlled by us. We are not responsible for the privacy practices, security, or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

7. Data Security and Retention

We implement industry-standard technical and organizational measures designed to secure your personal information. However, no security system is impenetrable, and we cannot guarantee absolute security. We advise against transmitting sensitive information through unsecured channels.

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with our legal obligations, resolve disputes, and enforce our agreements.

8. Your Privacy Rights

Depending on your jurisdiction, you may have certain rights regarding your personal information. These rights are not absolute and may be subject to legal exceptions:

  • Right to Access / Know: Request a copy of the personal information we hold about you.

  • Right to Deletion: Request the deletion of your personal information.

  • Right to Correction: Request the correction of inaccurate or incomplete personal information.

  • Right to Data Portability: Request the transfer of your personal information to a third party in a structured, machine-readable format.

  • Right to Opt-Out of Targeted Advertising: You may opt out of the “sale” or “sharing” of your personal information for targeted advertising purposes [Insert Opt-Out Link Here]. If your browser sends a Global Privacy Control (GPC) signal, we will automatically treat that as an opt-out request for that device and browser. We do not currently recognize other “Do Not Track” signals.

  • Communication Preferences: You can opt out of receiving promotional emails at any time by clicking the unsubscribe link provided in our emails. You will continue to receive essential transactional and account-related communications.

Additional Rights for Residents of the European Economic Area (EEA) and the UK

If you reside in the European Economic Area or the UK, you also have the following rights:

  • Right to Object to Processing: Object to the processing of your personal information for certain purposes.

  • Right to Restriction of Processing: Request the restriction of processing your personal information under certain conditions.

  • Right to Withdraw Consent: Withdraw your consent at any time where we are relying on consent to process your data.

To exercise any of these rights, please contact us using the contact details provided below. We may need to verify your identity before fulfilling your request. You may also designate an authorized agent to submit requests on your behalf, provided they furnish proof of authorization. We will not discriminate against you for exercising your privacy rights.

9. International Data Transfers

We may transfer, store, and process your personal information in countries outside your country of residence. If we transfer personal information out of the European Economic Area (EEA) or the United Kingdom (UK), we will rely on appropriate data transfer mechanisms, such as the European Commission’s Standard Contractual Clauses or equivalent UK frameworks, to ensure adequate protection of your data.

10. Complaints

If you have concerns about our handling of your personal information, please contact us. If you are in the EEA or the UK and we are unable to resolve your complaint, you have the right to lodge a complaint with your local data protection authority.

11. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, operational needs, or legal requirements. We will post the updated policy on this page and revise the “last updated” date. We encourage you to review this policy periodically.

12. Contact Information

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

AtticLegacy

Email: ali.basma@atticlegacy.com

For the purposes of applicable data protection laws, AtticLegacy acts as the data controller of your personal information.