Privacy Policy

Last updated: August 18, 2025

ENEA Essentials operates this shop and website, including the data, content, features, tools, products, and services to provide you—the customer—with a curated shopping experience (the “Services”). ENEA Essentials uses Shopify technology to deliver the Services. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction through the Services, or when you otherwise communicate with us. In the event of any conflict between our Terms of Service and this Privacy Policy, this Privacy Policy governs with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using or accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand how your personal information is collected, used, and disclosed as described here.

---

Personal Information We Collect or Process

When we use the term “personal information,” we mean any data that identifies you or can reasonably be linked to you or another person. Personal information does not include de-identified or aggregated data that cannot identify you or be reasonably linked to you. Depending on how you interact with the Services, where you live, and what applicable law allows or requires, we may collect or process the following categories of personal information—including inferences drawn from that information:

• Contact details including your name, address, billing address, shipping address, phone number, and email address.

• Financial information including credit/debit card numbers and financial accounts, payment card details, financial account data, transaction details, payment method, payment confirmation, and other payment-related information.

• Account information including your username, password, security questions, preferences, and settings.

• Transaction information including items you view, add to cart, save to a wishlist, purchase, return, exchange, or cancel, as well as your past transactions.

• Communications with us including information you share when communicating with customer service or otherwise contacting us.

• Device information including details about your device, browser, or network connection, your IP address, and other unique identifiers.

• Usage information including information about how and when you interact with or navigate the Services.

Sources of Personal Information

We may collect personal information from the following sources:

• Directly from you including when you create an account, visit or use the Services, communicate with us, or otherwise provide personal information.

• Automatically through the Services including information from your device when you use our products or services or visit our websites, as well as via cookies and similar technologies.

• From our service providers including when we engage them to enable certain technology or they collect/process personal information on our behalf.

• From our partners or other third parties.

How We Use Your Personal Information

Depending on how you interact with us or which Services you use, we may use your personal information for the following purposes:

• Provide, personalize, and improve the Services. We use personal information to deliver the Services, including performing our contract with you, processing payments, managing orders, remembering your preferences and items of interest, sending account-related notices, handling purchases, returns, exchanges, or other transactions, creating/maintaining/managing your account, arranging shipping, facilitating returns/exchanges, enabling reviews, and offering a personalized shopping experience (e.g., product recommendations).

• Marketing and advertising. We may send commercial, advertising, and promotional communications by email, SMS, or postal mail, and display online ads for products or services on the Services or on other sites, including based on items you previously purchased, added to cart, or other activity on the Services.

• Security and fraud prevention. We use personal information to authenticate your account, provide a secure shopping and checkout experience, detect/investigate/address potential fraud, illegal, harmful, or malicious activity, protect public safety, and ensure the security of our Services. If you choose to create an account, you are responsible for keeping your credentials confidential.

• Communications with you. We use personal information to provide customer support, respond to requests, deliver services effectively, and maintain our business relationship with you.

• Legal reasons. We use personal information to comply with applicable law or respond to valid legal process (including requests from law enforcement or government authorities), to investigate or participate in discovery, potential or actual litigation, or other legal proceedings, and to enforce or investigate potential violations of our terms or policies.

How We Disclose Personal Information

In certain circumstances, we may disclose personal information to third parties for legitimate purposes consistent with this Privacy Policy, including:

• With Shopify, service providers, and other vendors that perform services on our behalf (e.g., IT management, payment processing, data analytics, customer support, cloud storage, order and shipping management).

• With business and marketing partners to provide marketing services and show advertising. For example, we use Shopify to support personalized advertising with third-party services, based on your online activity across different merchants and websites. Our partners will use your information according to their own privacy notices. Depending on where you live, you may have the right to direct us not to share information about you for personalized advertising based on cross-site activity. You can exercise objection rights here (see “Your Rights and Choices” below).

• With others at your direction or with your consent, for example to deliver products or when you use social media widgets or single-sign-on integrations.

• With our affiliates or otherwise within our corporate group.

• In connection with a business transaction (e.g., merger, insolvency), to comply with legal obligations (including subpoenas, search warrants, or similar requests), to enforce Terms of Service/policies, and to protect or defend the Services, our rights, and the rights of our users or others.

Relationship with Shopify

The Services are hosted on Shopify, which collects and processes personal information about your access to and use of the Services to provide and improve the Services. To deliver and improve the Services, information you submit to the Services will be transmitted to and shared with Shopify and third parties that may be located in countries other than your own. In addition, to help protect, develop, and improve our business, we use certain Shopify advanced features that incorporate data derived from your interactions with our store, with other merchants, and with the Shopify platform itself. For these advanced features, Shopify acts as a controller of your personal information, including responding to requests to exercise your rights relating to Shopify’s use of that information.

• Shopify Consumer Privacy Policy: https://www.shopify.com/legal/privacy

• Shopify Privacy Portal (exercise rights with Shopify): https://privacy.shopify.com/en

Third-Party Websites and Links

The Services may include links to websites or other online platforms operated by third parties. If you access sites not affiliated with or controlled by us, we encourage you to review their privacy and security policies and other terms. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information on them. Information you provide in public or semi-public areas—including on third-party social platforms—may be visible to others without limitations on our or third-party use. Inclusion of links does not imply endorsement unless expressly stated in the Services.

Children’s Data

The Services are not intended for use by minors, and we do not knowingly collect personal information from children as defined by applicable law in your jurisdiction. If you are a parent or legal guardian of a child who has provided personal information to us, please contact us using the details below to request deletion. As of the effective date of this Privacy Policy, we are not aware of “selling” or “sharing” (as those terms are defined by applicable law) personal information of individuals under 16 years of age.

Security and Retention of Your Information

Please note that no security measure is perfect or infallible, and we cannot guarantee “absolute security.” Information you send to us may not be protected during transmission. We encourage you not to use unsecure channels to send sensitive or confidential information.

We retain personal information for varying periods depending on factors such as the need to maintain your account, provide the Services, meet legal obligations, resolve disputes, or enforce applicable contracts and policies.

Your Rights and Choices

Depending on where you live, you may have some or all of the rights listed below with respect to your personal information. These rights are not absolute; they may apply only in certain circumstances, and we may deny a request where permitted by law.

• Right of access. You may have the right to request access to personal information we hold about you.

• Right to deletion. You may have the right to request that we delete personal information we hold about you.

• Right to correction. You may have the right to request that we correct inaccurate personal information we hold about you.

• Right to data portability. You may have the right to receive a copy of your personal information and to request transfer to a third party in certain cases.

• Right to opt out of sale/sharing/targeted advertising. Depending on your location, you may have the right to opt out of the “sale,” “sharing,” or processing of your personal information for “targeted advertising,” as defined by applicable privacy laws. You can exercise these rights here. If you visit our website with a Global Privacy Control (GPC) signal enabled, we will treat that visit as an opt-out request for the browser/device used, and—where we can associate the device with a Shopify account—we will apply the opt-out to that account as well. Learn more: https://globalprivacycontrol.org/. Except for GPC, we do not recognize other Do Not Track (DNT) signals from browsers or devices.

• Marketing preferences. You can opt out of promotional emails at any time using the unsubscribe option in our emails. We may still send non-promotional emails (e.g., about your account or orders).

You may exercise these rights where indicated in the Services or by contacting us using the details below. For more on how Shopify uses your personal information and your rights—including rights related to data processed by Shopify—visit https://privacy.shopify.com/en.

We will not discriminate against you for exercising your rights. We may need to verify your identity before processing requests, as permitted or required by law. Under applicable law, you may designate an authorized agent to submit requests on your behalf. We will require proof of authorization and may ask you to verify your identity directly. We will respond within a reasonable time as required by law.

Complaints

If you have a complaint about how we process your personal information, please contact us using the details below. Depending on where you live, you may have the right to appeal our decision by contacting us, or to lodge a complaint with your local data protection authority.

International Transfers

We may transfer, store, and process your personal information in the United States and in other locations where we or our service providers operate.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for operational, legal, or regulatory reasons. We will post the updated version on this website, update the “Last updated” date, and provide any required notices under applicable law.

Contact

If you have questions about our privacy practices or this Privacy Policy, or if you wish to exercise any of your rights, please email us at hello@eneaessentials.com, or write to us at:

225 Avery Lane, Los Gatos, CA, 95032, US