Privacy policy

Effective date: September 22, 2026.

Octagon Clo LLC is responsible for personal information used to operate this store, manage purchases and provide customer service. This policy explains information collected through our storefront, checkout, customer accounts and communications. It is a notice about our practices, not consent to optional advertising.

Information and sources

We receive information you provide: name, email, delivery and billing address, contact details, order and return information, account details and messages. Shopify and payment providers process payment credentials; we receive transaction status and the limited payment information needed to manage an order, not your full payment-card security details. We also receive fulfilment and delivery updates from service providers.

Technical information can include IP address, device/browser details, security logs and website interactions. Cookies and similar storage support sessions, carts, preferences and, where enabled with the required permission, measurement and advertising. See our cookie policy. Do not include payment-card details, passwords, identity documents or sensitive health information in ordinary support messages.

Purposes and legal bases

We use order and contact information to take payment, fulfil purchases, provide account access, send transactional updates, manage returns and respond to requests. Where EU/UK data protection law applies, these activities rely on performance of a contract or steps requested before it. We keep records required for tax, accounting, product safety and other legal duties under legal obligation. Proportionate fraud prevention, service security, handling disputes and operating our business can rely on legitimate interests, balanced against individual rights.

Optional marketing communications and non-essential tracking rely on consent where required by law. You can withdraw consent without affecting prior lawful processing. Declining marketing does not prevent shopping or customer service. We do not use information collected for a support request as automatic permission to send promotional emails.

Recipients and Shopify

We share relevant information with Shopify for hosting, checkout, accounts and store operations; payment processors to process transactions; fulfilment providers and carriers to deliver orders; and service providers needed to handle communications, security and accounting. Advisers and authorities may receive information for legal obligations, claims or a lawful business transaction. Access should be limited to what the recipient needs. Optional analytics, advertising or support services may receive information when enabled and subject to the choices required by law; we update this notice and cookie information when materially changing those uses.

Shopify also processes some information for its own purposes, including platform security and, where applicable, services described in its consumer privacy policy. Depending on enabled Shopify services, this can include understanding interactions across merchants. Read Shopify’s Consumer Privacy Policy and use Shopify’s privacy portal for its independent processing. Our own responsibilities are not replaced by Shopify’s notice.

Advertising choices and US state rights

We do not sell personal information for money. Some advertising disclosures, if enabled, can be considered a sale, sharing or targeted advertising under US state law even without a payment. You can opt out through the persistent “Privacy choices / Do not sell or share” control in the footer. We honour applicable Global Privacy Control signals for sale/sharing and targeted-advertising opt-outs. We do not knowingly sell or share personal information of children under 16.

Depending on your location and the laws that apply, you may request access, a copy, correction, deletion, portability, an explanation of processing, restrictions on certain sensitive uses, or an opt-out of targeted advertising, sale/sharing or certain profiling. We do not use sensitive personal information to infer characteristics for advertising. We will not discriminate against you for exercising applicable rights. An authorised agent may submit a request with evidence of authority; we may proportionately verify identity before disclosing or changing personal data.

EU/EEA and UK rights

Where applicable, you have rights of access, correction, erasure, portability, restriction, objection to processing based on legitimate interests, and withdrawal of consent. You may object to direct marketing at any time and complain to your local data protection authority. There is no requirement to contact us before making a regulatory complaint. Contract or legal obligations can prevent deletion of some records; we explain a lawful refusal and available appeal or complaint options.

Requests and complaints

Contact us using the email, contact page or postal details below with “Privacy request” and what you want us to do. We request only information reasonably needed to locate your records and verify authority. We respond within the applicable legal period; where an extension is allowed, we explain it within the original period. If you disagree with a decision, reply with “Privacy appeal” for review, without limiting regulatory rights. Marketing emails provide an unsubscribe option. Transactional order or security messages may continue where necessary.

Retention, security and international processing

We retain personal information only for as long as needed for the purpose collected, including fulfilling purchases, accounting/tax obligations, handling claims, preventing abuse and documenting privacy choices. Retention depends on record type, legal requirements and whether an account, dispute or request remains active. Optional tracking identifiers have separate lifetimes described in the cookie policy. We delete or anonymise information when it is no longer needed, subject to lawful retention and backup cycles.

We use reasonable technical and organisational measures, including Shopify’s platform protections and access controls. No transmission or storage system is completely secure. We are based in the USA and providers may process information in other countries. Where required for EU/UK transfers, appropriate safeguards such as recognised adequacy decisions or applicable standard contractual clauses must apply. You may contact us about the safeguards relevant to your information.

Children and updates

This is a general-audience clothing store and is not directed to children. We do not knowingly collect personal information from children under 13. If you believe a child has provided information, contact us so we can review and delete it where required. We update the effective date when revising this policy and provide additional notice or obtain consent when the law requires it.

Nothing in this policy excludes or limits any mandatory consumer right. If the law applicable to your purchase gives you stronger rights, those rights take priority.

Contact

Contact Octagon Clo LLC at pirmin@manzsuite.com, through our contact page, or by post to 30 N Gould St Ste N, Sheridan, WY 82801, USA. This is our business correspondence address; contact us for the appropriate return destination before sending merchandise.