Privacy policy

Effective Date: May 28, 2026

Last Updated: May 28, 2026

This Privacy Policy explains how Mahj Palazzo ("we," "us," or "our") collects, uses, shares, and protects personal information. It covers your use of mahjpalazzo.com, including shopping, placing orders, contacting us, and signing up for marketing messages.

Mahj Palazzo sells Mahjong mats and tabletop accessories. This policy explains our privacy practices and your choices.

Please read this policy carefully. Where required by law, we ask for consent before using personal information for activities such as marketing or non-essential cookies.

Summary

We collect information you give us, order and checkout data, and automatic data from cookies, pixels, logs, and similar tools.
We use that data to run our online store, fill orders, support customers, improve our site, and send marketing where allowed.
We may share data with Shopify, payment processors, shippers, analytics tools, advertising partners, and other service providers as needed.
This policy also explains your privacy choices, retention, security, international transfers, children's privacy, third-party links, and contact details.

1. Scope of This Privacy Policy

This policy covers personal information collected through our online store and related services. These include browsing, orders, checkout, payments, shipping, customer accounts, wishlists, support, email marketing, and SMS marketing if enabled. It also covers cookies, pixels, analytics, advertising, retargeting, and similar technologies.

It may also apply to product reviews, feedback, customer photos, or other content you submit if those features are enabled later.

It does not apply to websites, apps, platforms, or services we do not own or control, even if we link to them.

2. Personal Information We Collect

The information we collect depends on how you use our store. Browsing the site, placing an order, contacting support, creating an account, saving wishlist items, and subscribing to marketing may involve different types of data.

For this Privacy Policy, personal information means information that identifies, relates to, describes, or can reasonably be linked to a person or household, depending on the law that applies.

3. Information You Provide Directly

We may collect information you give us, including:

name
email address
phone number, if provided
billing address
shipping address
order details
customer account details if you create or use an account
wishlist activity if you use wishlist features
customer support messages
marketing preferences
any other information you choose to send us

If product reviews, feedback, customer photos, or other submitted-content features are enabled later, we may also collect the information you choose to share through those features.

You can choose not to provide some information, but that may stop you from using some features, placing an order, getting support, or completing a transaction.

4. Order, Checkout, and Shopping Information

When you shop with us, we may collect:

products viewed
products added to your cart
products saved to a wishlist
products purchased
order history
checkout activity
payment confirmation or transaction status
shipping and delivery details
discount codes or promotions used, if any
customer account activity, if any
abandoned checkout or cart activity, if enabled

We use this information to process purchases, confirm orders, arrange fulfillment and shipping, provide support, help prevent fraud, and improve the shopping experience.

5. Information Collected Automatically

When you visit our website, cookies, pixels, analytics tools, server logs, and similar tools may collect information automatically, including:

IP address
browser type and version
device type
operating system
referring website or source
pages viewed
products viewed
visit dates and times
interactions with our website
approximate location from your IP address
cookie IDs or similar online IDs
information about how you interact with emails or ads, where allowed

We use this information to run and secure the website, remember preferences, understand customer behavior, measure site performance, improve our products and services, detect fraud, and support marketing where allowed by law.

6. Cookies, Pixels, Analytics, and Similar Technologies

Like many ecommerce websites, we use cookies, pixels, tags, web beacons, analytics tools, and similar technologies.

Cookies are small files placed on your browser or device when you visit a website. They help websites work, remember preferences, understand how people use the site, and support marketing.

We may use:

necessary cookies to keep the site working, including navigation, cart features, checkout, fraud prevention, privacy settings, and secure access
functional or preference cookies to remember choices such as region, currency, account settings, wishlist activity, or other settings
analytics and performance cookies to understand how visitors use the site, which pages and products are viewed, and how we can improve the store
advertising cookies, pixels, or similar tools to measure ads, show relevant ads, retarget visitors, and understand how people interact with our marketing

You can usually change your browser settings to block or delete cookies. Blocking some cookies may affect the site, checkout, cart features, wishlist features, account features, or your overall experience.

Where required by law, we will provide cookie notices, consent tools, or opt-out options. Depending on where you live, you may also have rights to opt out of targeted ads, data sharing, or sale-related activity under applicable privacy laws.

7. How We Use Personal Information

We may use personal information to:

run our website and Shopify store
process and confirm orders
process payments
prevent payment fraud
arrange fulfillment and shipping
provide delivery and order support
provide customer service
respond to questions or complaints
manage customer accounts, if applicable
support wishlist features, if used
manage replacements, refunds, store credit, or other order resolutions, where applicable
send transactional messages
send marketing messages where you subscribed or where the law allows it
personalize or improve the shopping experience
analyze website traffic and customer interactions
measure and improve advertising performance
detect and prevent fraud or unauthorized activity
comply with legal and accounting duties
enforce our Terms of Service, Refund Policy, Shipping Policy, and other policies
protect our rights, property, business, customers, and others

Transactional messages may include order confirmations, shipping updates, delivery notices, customer service replies, account notices, and other messages needed to support your purchase.

We use personal information only as reasonably needed for the purposes in this Privacy Policy or as otherwise allowed by law.

8. Shopify, Checkout, and Payment Processing

Our store is hosted on Shopify. Shopify provides the ecommerce platform that lets us run our online store, show products, process checkout, manage orders, and provide related ecommerce services.

When you place an order, your information may be processed by Shopify and by payment providers used for checkout and transaction processing. Payment details are handled through Shopify and or third-party payment processors. We do not keep full payment card numbers on our own systems.

Depending on the payment method you choose, payment processors may collect and process payment card details, billing address, transaction information, fraud-screening details, and payment confirmation. Their handling of that data may also be governed by their own privacy policies and security practices.

Shopify may process personal information under its own privacy terms and policies. Certain Shopify features, privacy settings, customer privacy tools, cookie banners, data sharing opt-out pages, or Shopify Network Intelligence settings may also apply depending on how the store is set up and where customers are located.

9. Order Fulfillment, Shipping, and Service Providers

To fulfill and deliver orders, we may share personal information with service providers involved in order processing, production, fulfillment, shipping, delivery, customer support, and related ecommerce work.

Service providers like Shopify, payment processors, and shipping carriers help with various aspects of the business.

We share personal information with these parties only as reasonably needed for the services they provide, to run our store, to fulfill orders, to meet legal duties, or as otherwise explained in this Privacy Policy.

10. Email, SMS, and Customer Communications

We may use your personal information to contact you about your orders, account, customer service requests, shipping updates, policy updates, and other transactional or service-related matters.

If you sign up for marketing messages, we may send promotional emails about products, launches, offers, content, or other updates. You can opt out of marketing emails at any time by using the unsubscribe link in our emails or by contacting us.

If you opt out of marketing messages, we may still send non-promotional messages, such as order confirmations, shipping updates, customer support replies, legal notices, or account-related messages.

SMS text messaging is not currently enabled, but we may use it in the future if you give any required consent. If abandoned cart or abandoned checkout SMS reminders are used later, cookies or similar tools may be used to decide when a reminder should be sent.

11. Advertising, Retargeting, and Analytics

We may use analytics and advertising tools to understand how customers interact with our website, measure marketing performance, improve our products and website, and show relevant ads.

Depending on our store setup, this may include Shopify analytics, Google Analytics, Google Ads, Meta or Facebook Pixel, Pinterest Tag, TikTok Pixel, email marketing analytics, Shopify Audiences, or other advertising, analytics, or performance tools.

We may use or share data such as website activity, purchase activity, product views, cart activity, wishlist activity, email interactions, device IDs, cookie IDs, and similar data with analytics or advertising partners.

Some privacy laws may treat certain advertising-related disclosures as a sale, sharing, or targeted advertising, even when no money changes hands. Where required by law, we will provide the right opt-out tools or preference settings.

12. How We Share Personal Information

We share personal data with vendors like Shopify, payment processors, and shipping carriers for various services.

Where appropriate, we may share information with marketing or advertising partners to help measure campaigns, show relevant ads, understand customer interactions, or improve marketing performance.

We may share information when you request it, consent to it, or use features involving third-party services.

We may also share information when we believe it is needed to follow the law, regulation, legal process, subpoena, court order, government request, tax duty, or other legal requirement. We might share data to enforce rules, safeguard rights, prevent fraud, ensure safety, and protect business interests.

If we are involved in a merger, acquisition, financing, restructuring, sale of assets, bankruptcy, or similar business transaction, personal information may be disclosed or transferred as part of that transaction, subject to applicable law.

We may also share information with attorneys, accountants, insurers, compliance advisors, and other professional advisors where reasonably needed for business, legal, tax, accounting, or compliance purposes.

We do not sell personal information for money. However, certain privacy laws may treat some advertising, analytics, or marketing-related disclosures as a sale, sharing, or targeted advertising.

13. User-Generated Content

Product reviews, feedback, and customer photo submissions are not currently enabled, but they may be added later.

If our website later allows product reviews, feedback, customer photos, comments, or other user-generated content, any content you submit for public display may be visible to other visitors.

Please do not submit personal information that you do not want to be public. We are not responsible for how other users or third parties may use information that you choose to make public.

14. How Long We Retain Personal Information

We keep personal information for as long as reasonably needed to meet the purposes described in this Privacy Policy, unless a longer period is required or allowed by law.

Retention periods may depend on whether we need the information to process or support an order, provide customer support, manage an account, support fraud prevention and security, comply with legal, tax, accounting, and recordkeeping duties, resolve disputes, address chargebacks or payment issues, enforce our policies, or comply with law.

If you ask us to delete your personal information, we will review and respond under applicable law. We may keep certain information where needed or allowed for legal, compliance, fraud-prevention, accounting, dispute-resolution, or legitimate business purposes.

15. Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information.

No method online is entirely secure, including transmission, storage, websites, platforms, and payment systems. We cannot promise perfect security.

You should avoid sending sensitive or confidential information through insecure channels. If you think your account, order, or communication with us has been compromised, please contact us promptly.

16. Your Privacy Choices and Rights

Depending on where you live, you may have certain rights regarding your personal information. These rights may include the right to:

request access to the personal information we maintain about you
request details about how we collect, use, disclose, or share your information
request correction of inaccurate personal information
request deletion of certain personal information
request a copy of certain personal information in a portable copy or portable format
opt out of certain targeted advertising, sale, or sharing of personal information where applicable
withdraw consent where processing is based on consent
restrict or object to certain processing where applicable
appeal a decision we make about a privacy request where applicable
designate an authorized agent to submit a request on your behalf where permitted by law

These rights are not absolute. They may apply only in certain cases. We may decline or limit a request where the law allows it, such as when we need to keep information for legal, tax, accounting, fraud-prevention, security, dispute-resolution, or order-related purposes.

To exercise privacy rights, please contact us at hello@mahjpalazzo.com.

We may need to verify your identity before responding to certain requests. Verification may require your email address, order details, or other information reasonably needed to confirm your identity. If you use an authorized agent, we may require proof that the agent is authorized to act for you.

We will not discriminate against you for exercising privacy rights available under applicable law.

17. U.S. State and California Privacy Rights

Residents of certain U.S. states, including California, may have extra privacy rights under applicable state privacy laws.

Your location and meeting applicable legal thresholds determine the rights you may have, including the right to know or access categories and specific pieces of personal information collected, the right to request deletion of personal information, the right to request correction of inaccurate personal information, the right to opt out of the sale or sharing of personal information, the right to opt out of targeted advertising, the right to limit certain uses or disclosures of sensitive personal information where applicable, the right to non-discrimination for exercising privacy rights, the right

We do not intentionally collect sensitive personal information to infer characteristics about you in the normal course of selling Mahjong mats and related accessories.

We do not knowingly sell or share personal information of individuals under 16 years of age.

If our use of advertising, analytics, pixels, Shopify tools, or other technologies is treated as a sale, sharing, or targeted advertising under applicable privacy law, you may have the right to opt out. Where required, we will provide a Your Privacy Choices, Do Not Sell or Share My Personal Information, or similar opt-out mechanism.

Our website may recognize Global Privacy Control or similar legally required opt-out signals if supported by our Shopify setup and applicable law.

18. International Visitors, Canada, Europe, and the UK

Mahj Palazzo currently mainly serves customers in the United States, but visitors or customers may access the website from other countries, including Canada, Europe, or the United Kingdom.

If you access our website or place an order from outside the United States, we may transfer, store, or process your personal information in the United States or other countries where we, Shopify, our service providers, or our partners operate. Those countries may have privacy laws that differ from the laws in your country.

Where required by law, we will rely on proper legal bases and transfer methods for cross-border processing of personal information.

If you are located in the European Economic Area, the United Kingdom, or another place with similar privacy laws, you may have extra rights, such as the right to access, correct, delete, restrict, object to processing, withdraw consent, or lodge a complaint with a data protection authority.

Where applicable, our legal bases for processing personal information may include:

performance of a contract, such as processing and fulfilling your order
consent, such as for certain marketing messages or cookies where required
legitimate interests, such as improving our store, preventing fraud, and securing our services
compliance with legal duties, such as tax, accounting, regulatory, or consumer-protection requirements

19. Children's Privacy

Our website and products are not directed to children. We do not knowingly collect personal information from children under the age required by applicable law.

If you believe that a child has provided personal information to us, please contact us at hello@mahjpalazzo.com so we can review the issue and take appropriate action.

20. Third-Party Websites and Links

Our website may contain links to third-party websites, platforms, tools, or services that we do not own or control.

We are not responsible for the privacy practices, security practices, content, or policies of third-party websites or services. We encourage you to review the privacy policies of any third-party websites or services you use.

21. Changes to This Privacy Policy

We may update this policy to reflect changes to our practices, technology, legal requirements, or Shopify settings.

When we update this Privacy Policy, we will change the Last Updated date above. If required by law, we may provide extra notice or ask for consent for major changes.

Your continued use of our website after an updated Privacy Policy is posted means that you accept the updated policy, except where separate consent is required by law.