Privacy policy

Effective Date: May 28, 2026
Last Updated: May 28, 2026

This Privacy Policy describes how Mahj Palazzo (“Mahj Palazzo,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information when you visit mahjpalazzo.com, place an order, contact us, subscribe to marketing communications, or otherwise interact with our Shopify store and related services.

Mahj Palazzo sells Mahjong mats and related Mahjong and tabletop accessories. This Privacy Policy is intended to explain our privacy practices in a clear, customer-friendly way while also protecting our business and complying with applicable privacy requirements.

Please read this Privacy Policy carefully. By using our website or purchasing from us, you acknowledge that you have reviewed this Privacy Policy. Where required by law, we will request your consent for certain uses of personal information, such as marketing communications or non-essential cookies.

1. Scope of This Privacy Policy

This Privacy Policy applies to personal information we collect through our Shopify website and online store, purchases and order-related activity, checkout, payment, and shipping processes, customer accounts if you create or use one, wishlist features if you use them, customer service communications, email marketing and customer communications, SMS marketing or SMS reminders if enabled in the future, cookies, pixels, analytics tools, advertising tools, retargeting tools, performance-measurement tools, and similar technologies.

This Privacy Policy may also apply to product reviews, testimonials, customer photos, or other content you submit if those features are enabled in the future.

This Privacy Policy does not apply to websites, platforms, applications, or services that we do not own or control, even if they are linked from our website.

2. Personal Information We Collect

The personal information we collect depends on how you interact with our store. For example, we may collect different information from someone who only browses the website than from someone who places an order, contacts customer support, creates an account, saves an item to a wishlist, or subscribes to marketing communications.

For purposes of this Privacy Policy, “personal information” means information that identifies, relates to, describes, can reasonably be associated with, or could reasonably be linked to an individual or household, depending on applicable law.

3. Information You Provide Directly

We may collect personal information that you provide directly to us, including your name, email address, phone number if provided, billing address, shipping address, order details, customer account information if you create or use an account, wishlist activity if you use wishlist features, customer support messages, marketing preferences, and any other information you choose to provide when contacting us.

If product reviews, testimonials, customer photos, or other submitted-content features are enabled in the future, we may also collect the information you choose to submit through those features.

You may choose not to provide certain information, but doing so may prevent you from using certain features, placing an order, receiving customer support, or completing a transaction.

4. Order, Checkout, and Shopping Information

When you place an order or interact with our store, we may collect information related to your shopping activity. This may include products viewed, products added to your cart, products saved to a wishlist, products purchased, order history, checkout activity, payment confirmation or transaction status, shipping and delivery information, discount codes or promotions used if applicable, customer account activity if applicable, and abandoned checkout or cart activity if enabled.

We use this information to process purchases, confirm orders, arrange fulfillment and shipping, provide customer support, help prevent fraud, and improve the shopping experience.

5. Information Collected Automatically

When you visit our website, certain information may be collected automatically through cookies, pixels, analytics tools, server logs, and similar technologies. This may include your IP address, browser type and version, device type, operating system, referring website or source, pages viewed, products viewed, dates and times of visits, interactions with our website, approximate location inferred from your IP address, cookie identifiers or similar online identifiers, and information about how you interact with emails or advertisements where applicable.

We may use this information to operate and secure the website, remember preferences, understand customer behavior, measure site performance, improve our products and services, detect fraud, and support advertising or marketing activities where permitted by law.

6. Cookies, Pixels, Analytics, and Similar Technologies

Like many ecommerce websites, we may use cookies, pixels, tags, web beacons, analytics tools, and similar technologies.

Cookies are small files that are placed on your browser or device when you visit a website. They help websites function, remember preferences, understand how visitors use the site, and support marketing or advertising activities.

We may use necessary cookies to help the website function properly, including page navigation, shopping cart functionality, checkout, fraud prevention, customer privacy preferences, and secure access.

We may use functional or preference cookies to remember choices you make, such as region, currency, account preferences, wishlist activity, or other settings that improve your shopping experience.

We may use analytics and performance cookies to understand how visitors use our website, which pages and products are viewed, how customers arrive at the site, and how we can improve the store.

Where applicable, we may use advertising cookies, pixels, or similar technologies to help measure advertising performance, show relevant ads, retarget visitors, and understand how customers interact with our marketing.

You can usually adjust your browser settings to block or delete cookies. However, blocking certain cookies may affect website functionality, checkout, shopping cart features, wishlist features, customer account features, or your overall experience.

Where required by law, we will provide cookie notices, consent tools, or opt-out options. Depending on your location, you may also have rights to opt out of certain targeted advertising, data sharing, or sale-related activity as defined by applicable privacy laws.

7. How We Use Personal Information

We may use personal information to operate our website and Shopify store, process and confirm orders, process payments, prevent payment fraud, arrange fulfillment and shipping, provide delivery and order support, provide customer service, respond to questions or complaints, manage customer accounts if applicable, support wishlist functionality if used, manage replacements, refunds, store credit, or other order resolutions where applicable, send transactional communications, send marketing communications where you have subscribed or where otherwise permitted by law, personalize or improve the shopping experience, analyze website traffic and customer interactions, measure and improve advertising performance, detect and prevent fraud or unauthorized activity, comply with legal and accounting obligations, enforce our Terms of Service, Refund Policy, Shipping Policy, and other applicable policies, and protect our rights, property, business, customers, and others.

Transactional communications may include order confirmations, shipping updates, delivery notices, customer service replies, account-related notices, and other messages necessary to complete or support your purchase.

We use personal information only as reasonably necessary for the purposes described in this Privacy Policy or as otherwise permitted by applicable law.

8. Shopify, Checkout, and Payment Processing

Our store is hosted on Shopify. Shopify provides the ecommerce platform that allows us to operate our online store, display products, process checkout, manage orders, and provide related ecommerce services.

When you place an order, your information may be processed by Shopify and by payment providers involved in checkout and transaction processing. Payment details are processed through Shopify and/or third-party payment processors. We do not intentionally store full payment card numbers on our own systems.

Depending on your selected payment method, payment processors may collect and process information such as payment card details, billing address, transaction information, fraud-screening details, and payment confirmation. Their processing may also be governed by their own privacy policies and security practices.

Shopify may process personal information in accordance with its own privacy terms and policies. Certain Shopify features, privacy settings, customer privacy tools, cookie banners, data sharing opt-out pages, or Shopify Network Intelligence settings may also apply depending on how the store is configured and where customers are located.

Attorney-review placeholder: Confirm current Shopify privacy settings, Shopify Network Intelligence status, Shopify Audiences status, payment providers, and whether any additional Shopify privacy disclosures are required.

9. Order Fulfillment, Shipping, and Service Providers

To fulfill and deliver orders, we may share personal information with service providers involved in order processing, production, fulfillment, shipping, delivery, customer support, and related ecommerce operations.

These service providers may include Shopify, payment processors, fulfillment partners, production partners, shipping carriers, delivery providers, customer support tools, email or marketing platforms, analytics providers, advertising partners, fraud-prevention and security providers, Shopify apps or third-party ecommerce tools, and professional advisors such as accountants, attorneys, or compliance consultants where appropriate.

We share personal information with these parties only as reasonably necessary for the services they provide to us, to operate our store, to fulfill orders, to comply with legal obligations, or as otherwise described in this Privacy Policy.

10. Email, SMS, and Customer Communications

We may use your personal information to communicate with you about your orders, account, customer service requests, shipping updates, policy updates, and other transactional or service-related matters.

If you subscribe to marketing communications, we may send you promotional emails about products, launches, offers, content, or other updates. You may opt out of marketing emails at any time by using the unsubscribe link in our emails or by contacting us.

If you opt out of marketing communications, we may still send you non-promotional communications, such as order confirmations, shipping updates, customer support responses, legal notices, or account-related messages.

SMS/text messaging is not currently enabled, but we may use SMS/text messaging in the future if you provide any required consent. If abandoned cart or abandoned checkout SMS reminders are used in the future, cookies or similar technologies may be used to determine when a cart reminder should be sent.

Attorney-review placeholder: Confirm whether SMS marketing, abandoned cart SMS, abandoned checkout emails, or cart reminder tools are enabled before publishing. If SMS is used, include any required carrier, consent, opt-out, and non-sharing language.

11. Advertising, Retargeting, and Analytics

We may use analytics and advertising tools to understand how customers interact with our website, measure marketing performance, improve our products and website, and show relevant advertisements.

Depending on our store setup, this may include Shopify analytics, Google Analytics, Google Ads, Meta/Facebook Pixel, Pinterest Tag, TikTok Pixel, email marketing analytics, Shopify Audiences, or other advertising, analytics, or performance-measurement providers.

We may use or share information such as website activity, purchase activity, product views, cart activity, wishlist activity, email interactions, device identifiers, cookie identifiers, and similar data with analytics or advertising partners.

Certain privacy laws may define some advertising-related disclosures as a “sale,” “sharing,” or targeted advertising, even when personal information is not sold for money. Where required by law, we will provide applicable opt-out rights or preference tools.

Attorney-review placeholder: Confirm which analytics, advertising, retargeting, pixel, tag, and email marketing tools are installed before publishing.

12. How We Share Personal Information

We may disclose personal information to vendors and service providers who perform services on our behalf, including Shopify, payment processors, fulfillment partners, shipping carriers, customer support tools, cloud storage providers, analytics providers, marketing platforms, advertising partners, fraud-prevention providers, security providers, and technical support providers.

Where applicable, we may share information with marketing or advertising partners to help measure campaigns, show relevant ads, understand customer interactions, or improve marketing performance.

We may share information when you ask us to do so, consent to the sharing, use a feature that requires sharing, or interact with third-party tools, social media widgets, review platforms, or integrations.

We may share information when we believe it is necessary to comply with applicable law, regulation, legal process, subpoena, court order, government request, tax obligation, or other legal requirement. We may also share information to enforce our policies, protect our rights, investigate fraud, prevent harm, maintain security, or protect the rights, safety, and property of our business, customers, or others.

If we are involved in a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar business transaction, personal information may be disclosed or transferred as part of that transaction, subject to applicable law.

We may also share information with attorneys, accountants, insurers, compliance advisors, and other professional advisors where reasonably necessary for business, legal, tax, accounting, or compliance purposes.

We do not sell personal information for money. However, as noted above, certain privacy laws may define some advertising, analytics, or marketing-related disclosures as a “sale,” “sharing,” or targeted advertising.

13. User-Generated Content

Product reviews, testimonials, and customer photo submissions are not currently enabled, but they may be added in the future.

If our website later allows product reviews, testimonials, customer photos, comments, or other user-generated content, any content you submit for public display may be visible to other visitors.

Please do not submit personal information that you do not want to be publicly visible. We are not responsible for how other users or third parties may use information that you choose to make public.

Attorney-review placeholder: Include or revise this section if reviews, testimonials, customer photos, or public submissions are enabled.

14. How Long We Retain Personal Information

We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Retention periods may depend on whether we need the information to process or support an order, provide customer support, manage an account, support fraud prevention and security, comply with legal, tax, accounting, and recordkeeping obligations, resolve disputes, address chargebacks or payment issues, enforce our policies, or comply with applicable law.

If you request deletion of your personal information, we will review and respond to your request in accordance with applicable law. We may retain certain information where necessary or permitted for legal, compliance, fraud-prevention, accounting, dispute-resolution, or legitimate business purposes.

15. Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information.

However, no method of transmission over the Internet, method of electronic storage, website, platform, or payment system is completely secure. We cannot guarantee absolute or perfect security.

You should avoid sending sensitive or confidential information to us through insecure channels. If you believe your account, order, or communication with us has been compromised, please contact us promptly.

16. Your Privacy Choices and Rights

Depending on where you live, you may have certain rights regarding your personal information. These rights may include the right to request access to the personal information we maintain about you, request details about how we collect, use, disclose, or share your information, request correction of inaccurate personal information, request deletion of certain personal information, request a copy of certain personal information in a portable format, opt out of certain targeted advertising, sale, or sharing of personal information where applicable, withdraw consent where processing is based on consent, restrict or object to certain processing where applicable, appeal a decision we make about a privacy request where applicable, and designate an authorized agent to submit a request on your behalf where permitted by law.

These rights are not absolute and may apply only in certain circumstances. We may decline or limit a request where permitted by law, such as when we need to retain information for legal, tax, accounting, fraud-prevention, security, dispute-resolution, or order-related purposes.

To exercise privacy rights, please contact us at hello@mahjpalazzo.com.

We may need to verify your identity before responding to certain requests. Verification may require information such as your email address, order details, or other information reasonably necessary to confirm your identity. If you use an authorized agent, we may require proof that the agent is authorized to act on your behalf.

We will not discriminate against you for exercising privacy rights available to you under applicable law.

17. U.S. State and California Privacy Rights

Residents of certain U.S. states, including California, may have additional privacy rights under applicable state privacy laws.

Depending on your location and whether applicable legal thresholds are met, these rights may include the right to know or access categories and specific pieces of personal information collected, the right to request deletion of personal information, the right to request correction of inaccurate personal information, the right to opt out of the sale or sharing of personal information, the right to opt out of targeted advertising, the right to limit certain uses or disclosures of sensitive personal information where applicable, the right to non-discrimination for exercising privacy rights, the right to use an authorized agent where permitted, and the right to appeal certain privacy-request decisions where applicable.

We do not intentionally collect sensitive personal information for the purpose of inferring characteristics about you in the ordinary course of selling Mahjong mats and related accessories.

We do not knowingly sell or share personal information of individuals under 16 years of age.

If our use of advertising, analytics, pixels, Shopify tools, or other technologies is considered a “sale,” “sharing,” or targeted advertising under applicable privacy law, you may have the right to opt out. Where required, we will provide a “Your Privacy Choices,” “Do Not Sell or Share My Personal Information,” or similar opt-out mechanism.

Our website may recognize Global Privacy Control or similar legally required opt-out signals if supported by our Shopify configuration and applicable law.

Attorney-review placeholder: Confirm whether CCPA/CPRA or other U.S. state privacy laws currently apply based on revenue, customer volume, data practices, targeted advertising, Shopify settings, and applicable legal thresholds.

18. International Visitors, Canada, Europe, and the UK

Mahj Palazzo currently primarily serves customers in the United States, but visitors or customers may access the website from other countries, including Canada, Europe, or the United Kingdom.

If you access our website or place an order from outside the United States, your personal information may be transferred to, stored in, or processed in the United States or other countries where we, Shopify, our service providers, or our partners operate. These countries may have privacy laws that differ from those in your country.

Where required by applicable law, we will rely on appropriate legal bases and transfer mechanisms for cross-border processing of personal information.

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with similar privacy laws, you may have additional rights, such as the right to access, correct, delete, restrict, object to processing, withdraw consent, or lodge a complaint with a data protection authority.

Where applicable, our legal bases for processing personal information may include performance of a contract, such as processing and fulfilling your order; consent, such as for certain marketing communications or cookies where required; legitimate interests, such as improving our store, preventing fraud, and securing our services; and compliance with legal obligations, such as tax, accounting, regulatory, or consumer-protection requirements.

Attorney-review placeholder: Confirm whether the store intentionally targets or sells to customers in Canada, the European Economic Area, the United Kingdom, or other jurisdictions requiring additional privacy disclosures, consent mechanisms, or cross-border transfer terms.

19. Children’s Privacy

Our website and products are not directed to children. We do not knowingly collect personal information from children under the age required by applicable law.

If you believe that a child has provided personal information to us, please contact us at hello@mahjpalazzo.com so we can review and take appropriate action.

20. Third-Party Websites and Links

Our website may contain links to third-party websites, platforms, tools, or services that we do not own or control.

We are not responsible for the privacy practices, security practices, content, or policies of third-party websites or services. We encourage you to review the privacy policies of any third-party websites or services you interact with.

21. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, Shopify settings, service providers, or business operations.

When we update this Privacy Policy, we will revise the “Last Updated” date above. If required by law, we may provide additional notice or request consent for material changes.

Your continued use of our website after an updated Privacy Policy is posted means that you acknowledge the updated Privacy Policy, except where separate consent is required by law.