Privacy policy

Last updated: November 9, 2026

This policy explains how exokiss ("we", "us") collects, uses and shares personal information when you visit exokiss.com, buy from us or contact us. Questions: hello@exokiss.com.

What we collect

• Information you give us: name, email address, phone number, shipping and billing address, order details, and anything you write to us.
• Information collected automatically: device and browser details, IP address, pages viewed, products added to your bag, and how you reached our site. We collect this through cookies, pixels and similar tools.
• Payment information: handled by Shopify Payments and PayPal. We never see or store your full card number.

How we use it

• To process, make and deliver your order, and to send order and shipping updates.
• To answer your questions and provide customer service.
• To prevent fraud and keep our site secure.
• To send marketing emails and text messages, if you've signed up or as the law allows.
• To show you ads and measure how well our website and ads work.
• To meet our legal, tax and accounting obligations.

Who we share it with

We share personal information only with the service providers that help us run our shop:

• Shopify (our store and checkout platform)
• Shopify Payments and PayPal (payments)
• our manufacturing and fulfilment partner (to make and ship your order)
• UPS (delivery) and AfterShip (order tracking)
• Klaviyo (email and text messages)
• Meta (Facebook and Instagram), Google and YouTube, and TikTok (advertising and measurement)

We may also share information when the law requires it, to protect our rights, or as part of a business sale or merger.

We don't sell your personal information for money. Sharing information with advertising partners for targeted ads may count as "selling" or "sharing" under some US state laws. You can opt out here.

Shopify

Our store is hosted by Shopify, which processes personal information to provide and improve its services. Learn more in the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

Marketing emails and texts

We send marketing emails only if you sign up or buy from us and don't opt out. We send marketing texts only if you opt in. You can unsubscribe from emails with the link in every email. You can stop texts by replying STOP. Even after you opt out, we'll still send messages about your orders.

We do not share or sell your mobile phone number or text-message opt-in data with third parties or affiliates for their marketing purposes. Text-message consent is never shared with anyone except the providers who send our messages, such as Klaviyo. Full text-message terms: exokiss.com/pages/sms-terms.

Cookies and advertising

We use cookies and pixels from Shopify, Meta, Google and TikTok. Where the law requires it, we ask for your consent first. You can change your choices at any time with "Cookie preferences" in our website footer. If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of the sale or sharing of your information for that browser.

Your rights

Depending on where you live, you may have the right to:

• access or receive a copy of your personal information
• correct or delete it
• opt out of targeted advertising, or of the "sale" or "sharing" of your information
• withdraw your consent

These rights apply under, for example, the privacy laws of California, Virginia, Colorado, Connecticut, Texas, the UK and the EU. To use them, email hello@exokiss.com. We may need to verify your identity, and we'll reply within the time the law requires. You may use an authorised agent. We won't treat you differently for exercising your rights. If you're not happy with our answer, you can appeal by replying to us, or complain to your local data protection authority.

How long we keep information

We keep order records for as long as tax and accounting laws require. We keep marketing information until you unsubscribe or ask us to delete it.

Security

We use trusted providers and limit who can access your information. No system is completely secure, so please don't send sensitive information to us by email.

Children

Our website is not intended for children under 16, and we don't knowingly collect their personal information. If you believe a child has given us information, contact us and we'll delete it.

International transfers

Our service providers may store and process information in the United States and other countries. When information is transferred from the UK or the European Economic Area, we rely on recognised safeguards such as Standard Contractual Clauses.

Changes

We may update this policy from time to time. We'll post the new version here with a new "Last updated" date.

Contact

Email hello@exokiss.com.