Information We Collect

The personal information we collect depends on how you interact with Surflyn. It may include information you submit directly, information collected automatically, and information received from service providers.

Information you provide

• Contact details such as your name, email address, telephone number, billing address, and shipping address.
• Order details such as the products selected, purchase amount, delivery preferences, returns, and support history.
• Account details if account functionality is available, including login credentials and saved preferences.
• Communications you send through contact forms, customer support requests, reviews, surveys, or other correspondence.
• Marketing preferences, including whether you choose to receive or withdraw from promotional communications.

Information collected automatically

• Device and browser information, including IP address, browser type, operating system, language, and device identifiers.
• Usage information, including pages viewed, links selected, referral source, session duration, and interactions with store features.
• Approximate location information inferred from technical data such as an IP address.
• Cookie, pixel, and similar technology data used to remember preferences, analyze performance, and support relevant advertising where permitted.

Payment card information is generally processed by payment providers and is not stored by Surflyn in complete form. We may receive limited payment-related information, such as payment status, card type, or transaction reference.

Sources of Information

We may collect personal information from the following sources:

• Directly from you when you browse, purchase, create an account, subscribe, request support, or communicate with us.
• Automatically through your browser, device, cookies, pixels, log files, and related technologies.
• From Shopify, which provides the commerce platform used to operate the store.
• From payment processors, shipping providers, fraud prevention services, analytics providers, marketing partners, and customer support tools.
• From publicly available sources or information you choose to make public, where permitted by law.

How We Use Information

We use personal information for legitimate business and operational purposes, subject to applicable law.

Orders

To process payments, confirm purchases, prepare shipments, provide tracking information, handle returns, and maintain transaction records.

Service

To provide customer support, respond to questions, communicate about products, and manage account or warranty-related requests.

Experience

To remember preferences, personalize store content, improve navigation, and understand how visitors use the website.

Security

To detect suspicious activity, prevent fraud, protect accounts, enforce store terms, and maintain the reliability of our systems.

Communication

To send transactional messages and, where permitted, marketing communications that may be relevant to your interests.

Compliance

To satisfy legal obligations, respond to lawful requests, resolve disputes, preserve records, and protect legal rights.

How We Disclose Information

We may disclose personal information when reasonably necessary to operate the store, complete transactions, comply with law, or protect Surflyn and its customers.

• Shopify and technology providers that host, maintain, secure, analyze, or support the store.
• Payment processors and financial service providers involved in completing transactions or preventing fraud.
• Shipping carriers, logistics providers, and fulfillment-related services involved in delivering orders.
• Professional advisers, auditors, insurers, and legal representatives where their services are required.
• Advertising and analytics partners, subject to applicable consent and opt-out requirements.
• Government authorities or other parties when disclosure is required by law, legal process, or a valid public safety request.
• A successor organization in connection with a merger, acquisition, financing, restructuring, sale, or transfer of business assets.

We do not sell personal information for money. Certain privacy laws may define some advertising-related disclosures as a “sale” or “sharing.” Where those definitions apply, you may use the privacy controls described in this policy.

Cookies, Analytics, and Advertising

Cookies and similar technologies help the store function, remember your selections, maintain cart activity, measure performance, identify technical issues, and understand how visitors interact with the website.

Technology categories

• Essential technologies support checkout, account access, security, fraud prevention, and core site functionality.
• Preference technologies remember selections such as region, language, or other store settings.
• Analytics technologies help evaluate traffic, engagement, navigation patterns, and site performance.
• Advertising technologies may help measure campaigns or present more relevant advertising where permitted.

Browser settings may allow you to block or delete cookies. Restricting essential technologies may affect cart, checkout, account, or other store functions. Additional choices may also be available through our privacy preference page.

Retention and Security

We retain personal information for as long as reasonably necessary to provide services, maintain business and transaction records, meet legal or tax obligations, prevent fraud, resolve disputes, and enforce agreements.

Retention periods vary based on the type of information, the reason it was collected, contractual requirements, and applicable law. When information is no longer required, we may delete, anonymize, or securely isolate it.

We use reasonable administrative, technical, and organizational safeguards designed to protect information. No online transmission or storage system can be guaranteed completely secure, and you should use care when sharing information online.

Your Rights and Choices

Depending on where you live, you may have some or all of the following rights regarding your personal information:

• Request access to personal information we maintain about you.
• Request correction of inaccurate or incomplete personal information.
• Request deletion of personal information, subject to legal and operational exceptions.
• Request restriction of, or object to, certain processing activities.
• Request a portable copy of eligible information in a commonly used format.
• Withdraw consent where processing is based on consent.
• Opt out of certain targeted advertising, sharing, or sale activities where applicable law provides that right.
• Appeal a decision regarding a privacy request where local law provides an appeal process.

We may need to verify your identity before completing a request. Authorized agents may submit requests where permitted, but we may require proof of authority and additional verification. We will not unlawfully discriminate against you for exercising a privacy right.

Communication preferences

Marketing emails may include an unsubscribe option. Even after opting out of marketing, you may continue to receive transactional or service-related communications about orders, security, policy updates, or support requests.

Children's Privacy

Surflyn is not directed to children, and we do not knowingly collect personal information from children in violation of applicable law. Purchases should be made by adults or with the involvement of a parent or legal guardian.

If you believe a child has provided personal information to us without appropriate authorization, contact us so we can review the matter and take reasonable action.

International Visitors

Surflyn and its service providers may process information in countries other than the country where you live. Privacy and data protection laws in those countries may differ from local laws.

Where required, we use appropriate contractual, organizational, or other lawful measures intended to support international transfers of personal information.

Policy Updates

We may revise this Privacy Policy to reflect changes in our services, technology, legal requirements, or operating practices. The revised version will be posted on this page with an updated effective date.

When a change is material and additional notice is required, we may provide notice through the store, by email, or through another appropriate method.