PRIVACY POLICY

At Uppermost, we take your privacy seriously. This Privacy Policy explains what personal information we collect, how we use it, and what rights you have over it. It applies to all visitors and customers of getuppermost.com.

1. INFORMATION WE COLLECT

We collect personal information in three main ways:

Device & Usage Information When you visit our site, we automatically collect certain technical information, including your IP address, browser type and version, time zone, pages and products viewed, search terms, and how you interact with the site. We collect this data using cookies, log files, web beacons, pixels, and similar tracking technologies. This information helps us load the site correctly and improve your experience. It is shared with Shopify, our e-commerce platform, and Google Analytics.

Order Information When you make a purchase, we collect your name, billing and shipping address, email address, phone number, and payment information. We use this to process your order, arrange shipping, send order confirmations and invoices, screen for fraud, and communicate with you about your purchase. This information is shared with Shopify and any shipping or fulfillment partners necessary to complete your order.

Customer Support Information If you contact us for support, we may collect additional information you provide in the course of that interaction in order to resolve your issue.

2. HOW WE USE YOUR INFORMATION

We use the personal information we collect to:

Process and fulfill your orders, including payment and shipping
Send order confirmations, invoices, and shipping updates
Respond to your questions and provide customer support
Screen transactions for fraud and protect the security of our store
Improve our website and understand how customers use it
Send you marketing communications about our products and offers, where you have opted in or where we have a legitimate interest in doing so

3. SHARING YOUR INFORMATION

We do not sell your personal information. We share it only with trusted service providers who help us operate our business, including:

Shopify — our e-commerce platform. See Shopify's privacy policy at shopify.com/legal/privacy.
Google Analytics — to help us understand site usage. See Google's privacy policy at policies.google.com/privacy. You can opt out at tools.google.com/dlpage/gaoptout.
Shipping and fulfillment partners — to deliver your orders.
Payment processors — to securely handle transactions.

We may also disclose your information when required by law, such as in response to a subpoena, court order, or other legal process, or when necessary to protect our rights or the safety of others.

4. BEHAVIOURAL ADVERTISING

We may use your information to show you targeted advertisements on other platforms that we believe may be of interest to you. We and our advertising partners collect some of this information directly, and some through cookies or similar technologies.

You can opt out of targeted advertising through the following links:

Facebook/Meta: facebook.com/settings/?tab=ads
Google: google.com/settings/ads/anonymous

You can also opt out of multiple services at once through the Digital Advertising Alliance portal at optout.aboutads.info.

For more information on how targeted advertising works, visit the Network Advertising Initiative's educational page at networkadvertising.org/understanding-online-advertising/how-does-it-work.

5. COOKIES

Cookies are small files downloaded to your device when you visit our site. We use functional, performance, advertising, and analytics cookies to improve your browsing experience and understand how our site is used.

Essential Cookies (required for the store to function)

Cookie	Purpose
`_ab`	Admin access
`_secure_session_id`	Storefront navigation
`cart`	Shopping cart
`cart_sig`, `cart_ts`	Checkout
`checkout_token`, `secret`	Checkout process
`secure_customer_sig`	Customer login
`storefront_digest`	Customer login
`_shopify_u`	Customer account updates

Analytics & Reporting Cookies

Cookie	Purpose
`_tracking_consent`	Tracking preferences
`_landing_page`, `_orig_referrer`	Landing page tracking
`_s`, `_shopify_fs`, `_shopify_s`	Shopify analytics
`_shopify_sa_p`, `_shopify_sa_t`	Marketing & referral analytics
`_shopify_y`, `_y`	Shopify analytics

Most cookies we use are persistent and expire between 30 minutes and two years from the date they are set. Session cookies expire when you close your browser.

You can manage or block cookies through your browser settings, usually found under "Tools" or "Preferences." For guidance, visit allaboutcookies.org. Please note that disabling cookies may affect how parts of our site function. Blocking cookies also may not fully prevent data sharing with advertising partners — see Section 4 for opt-out options.

6. DO NOT TRACK

Our site does not currently alter its data collection practices in response to "Do Not Track" browser signals, as there is no consistent industry standard for honoring them.

7. MINORS

Our site is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at hi@getuppermost.com and we will promptly delete it.

8. DATA RETENTION

We retain your personal information for as long as necessary to fulfill the purposes described in this policy, including maintaining your order history and complying with legal obligations. If you would like us to delete your data, please see Section 9 below.

9. YOUR RIGHTS

California Residents (CCPA) You have the right to know what personal information we hold about you, to request a copy of it, to ask that it be corrected or deleted, and to opt out of certain uses. To exercise any of these rights, contact us at hi@getuppermost.com. You may also designate an authorized agent to submit requests on your behalf.

EEA Residents (GDPR) If you are located in the European Economic Area, we process your personal information under the following lawful bases: your consent; performance of a contract with you; compliance with legal obligations; protection of vital interests; public interest tasks; and our legitimate interests where they do not override your fundamental rights.

You have the right to access, correct, update, delete, or port your personal information. To exercise these rights, contact us at hi@getuppermost.com.

Your data is initially processed in Ireland and may be transferred to Canada or the United States for storage and further processing. For information on how these transfers comply with GDPR, see Shopify's GDPR Whitepaper at help.shopify.com/en/manual/your-account/privacy/GDPR.

Automated Decision-Making Shopify uses limited automated decision-making to prevent fraud, including temporary restrictions on IP addresses and credit cards associated with repeated failed transactions. These measures do not have a significant legal effect on you.

10. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, we will update the "Last Updated" date at the top of this page. We encourage you to review this page periodically.

11. CONTACT US

For questions, requests, or complaints about this Privacy Policy or our privacy practices, please contact us at:

Uppermost LLC 2708 Wilshire Blvd, Suite 420 Santa Monica, CA 90403 United States hi@getuppermost.com

If you are an EEA resident and are not satisfied with our response to a complaint, you have the right to lodge a complaint with your local data protection authority.