Privacy policy
Privacy Policy
Qomfrt (“we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit our online store, make a purchase, contact us, or otherwise interact with our services.
For privacy questions or requests, contact support@qomfrtco.com.
1. Scope and Responsibility
This Privacy Policy applies to personal information processed in connection with the Qomfrt online store, customer service, order fulfillment, returns, and related communications.
For the processing activities that we determine, the business operating Qomfrt is responsible for your personal information and acts as the data controller where that term applies.
Certain service providers, including payment providers and Shopify, may also process information for their own purposes under their respective privacy notices.
This policy explains our practices; it does not replace any consent required by law. Visiting our website or placing an order does not, by itself, constitute consent to optional advertising or marketing activities.
2. Personal Information We Collect
The information we collect depends on how you interact with us and which services you use.
Contact and delivery information. This includes your name, email address, billing address, shipping address, and telephone number when provided or required to arrange your purchase or delivery.
Order and transaction information. This includes the products, sizes, colors, and quantities ordered; amounts paid; discounts; order numbers; payment status; transaction references; delivery information; and records of returns, exchanges, refunds, or payment disputes.
Account information. If you create or use a customer account, we process information associated with that account, including contact details, saved preferences, and order history.
Customer service information. This includes messages, requests, feedback, and photographs or other materials you choose to provide when contacting us about an order or product.
Device and browsing information. Depending on your privacy choices and the technologies used, this may include your IP address, browser and device information, cookie identifiers, approximate location inferred from your IP address, pages viewed, products viewed, cart activity, referring pages, and interactions with our website.
Preferences and marketing information. This includes subscription choices, consent records, opt-out requests, and, where permitted, interactions with our marketing messages or advertisements.
We receive information directly from you, automatically through our website, and from providers involved in your transaction, such as Shopify, payment processors, and delivery partners. Where enabled and legally permitted, analytics or advertising providers may also supply information about interactions with our campaigns.
Please do not send full payment card details, security codes, banking passwords, government identification documents, or medical records through ordinary customer service messages.
3. How We Use Personal Information
We use personal information to process payments, confirm orders, arrange delivery, provide customer support, and manage returns, exchanges, refunds, and other after-sales services.
We also use information to maintain customer accounts, remember relevant preferences, troubleshoot technical issues, improve our website, and understand how customers interact with our products and services.
Where permitted and subject to the required choices or consent, we use information to send marketing communications, measure campaign performance, and provide relevant product recommendations or advertising.
For security and compliance purposes, we use information to detect suspected fraud, investigate unauthorized transactions, maintain business records, respond to lawful requests, and establish, exercise, or defend legal claims.
We limit our use of personal information to purposes that are relevant to our relationship with you or otherwise permitted by applicable law.
4. Legal Bases for Processing
Where applicable data protection law requires a legal basis, we rely on the basis appropriate to the particular activity.
Contract performance. We process information needed to accept and fulfill your order, arrange payment and delivery, and provide services connected with your purchase.
Legal obligations. We process information to meet applicable accounting, tax, consumer protection, and other legal requirements.
Legitimate interests. Where permitted, we process information to secure our services, prevent fraud, respond to inquiries, resolve disputes, and improve our operations. We consider the impact on your rights and do not rely on legitimate interests where those rights override the proposed processing.
Consent. We obtain consent where required for optional tracking, personalized advertising, or marketing communications. You may withdraw consent without affecting the lawfulness of processing carried out before withdrawal. These distinctions are relevant to the legal-basis disclosures required for merchants subject to the GDPR. (Shopify Help Center)
Information necessary to fulfill an order is not optional for that transaction. If you do not provide it, we may be unable to complete your purchase. Optional marketing consent is not a condition of purchase.
5. Shopify and Payment Processing
Our store is hosted on Shopify. Shopify processes personal information to provide the commerce platform and related services that support browsing, checkout, orders, and store operations.
Depending on the service, Shopify may process information on our behalf or act independently for purposes described in its own privacy notices. Its Shopify Consumer Privacy Policy explains how it handles information when customers interact with merchants and Shopify services. (Shopify)
Where Shopify Network Intelligence or related Enhanced Services are enabled, Shopify may use information about your activity in our store together with information from your interactions with Shopify and other merchants. These services can support personalization, analytics, security, and advertising. Information may be processed by Shopify and relevant third parties in other countries, subject to applicable privacy requirements and your consent or opt-out choices. (help.shopify.com)
You may also exercise applicable rights concerning Shopify’s own processing through the Shopify Privacy Portal, including requesting access or deletion and limiting certain advertising uses. Requests concerning Qomfrt’s processing should be sent to support@qomfrtco.com. (Shopify Privacy)
Payments are handled by the payment providers available at checkout, including Shopify Payments where enabled. The relevant provider processes the payment information needed for the selected method. We use transaction records and payment confirmations to manage orders, refunds, and billing inquiries.
6. When We Disclose Personal Information
We disclose information when reasonably necessary for the purposes described in this policy.
Store and operational providers. Relevant information is provided to Shopify and providers supporting hosting, business systems, customer service, and related store functions.
Payment and delivery providers. Payment processors, banks, fraud-prevention providers, fulfillment partners, shipping carriers, and customs or delivery intermediaries receive information needed to process payments, deliver orders, and resolve transaction issues.
Analytics and advertising partners. Where these services are used, and subject to applicable consent and opt-out requirements, relevant identifiers, website interactions, transaction events, or marketing information may be disclosed for measurement and advertising purposes.
Professional advisers and authorities. Information may be disclosed to advisers, insurers, regulators, courts, or public authorities where necessary for legal obligations, legitimate investigations, or the protection of rights.
Business transfers. If the business undergoes a merger, acquisition, restructuring, or sale, relevant information may be disclosed to participants in that transaction, subject to appropriate safeguards and applicable legal restrictions.
We also disclose information when you request or authorize a specific disclosure. Providers acting on our behalf are expected to handle information within the scope of their services and applicable contractual obligations.
7. Cookies, Analytics, and Advertising Choices
Our website uses cookies and similar technologies. Depending on the features enabled, these technologies support essential store functions, preferences, analytics, and advertising.
Essential technologies help operate functions such as the shopping cart, checkout, security, and privacy preference storage. Optional technologies may help measure website usage, personalize content, or evaluate advertising campaigns. Shopify’s Cookie Policy provides further information about cookies used in its services. (Shopify)
Where consent is required, optional technologies requiring that consent will not be activated before you make the relevant choice. You may decline optional tracking without losing access to ordinary purchasing functions.
Where displayed, use the website’s cookie banner or Cookie preferences control to review or change your choices. You can also manage cookies through your browser, although blocking essential cookies may affect website functionality. Contact support@qomfrtco.com if you need assistance.
Sale, Sharing, and Targeted Advertising
Certain advertising-related disclosures can qualify as a “sale” or “sharing” of personal information, or processing for “targeted advertising,” under applicable privacy laws—even when no money is exchanged for the information. (help.shopify.com)
Where applicable, you may opt out through the Your Privacy Choices or Do Not Sell or Share My Personal Information control provided on the website, or by contacting support@qomfrtco.com.
We honor legally recognized opt-out preference signals, including Global Privacy Control, as required by applicable law. Such a signal generally applies to the browser or device transmitting it, with broader application where legally required and technically associated with your account. (Agência de Privacidade da Califórnia)
Legacy browser “Do Not Track” settings should not be treated as a substitute for these controls. Except where required by law, we do not interpret a legacy Do Not Track signal as a separate, comprehensive privacy request.
Opting out does not necessarily remove all advertising. It limits the covered uses of your information for personalized advertising.
8. Marketing Communications
We send promotional communications only where legally permitted and obtain consent when required.
You may unsubscribe from marketing emails using the unsubscribe option included in those messages or by contacting support@qomfrtco.com.
If an SMS marketing program is offered and you enroll, the consent terms and opt-out instructions presented for that program apply. Consent to receive promotional messages is not required to purchase a product.
Unsubscribing from marketing does not prevent us from sending necessary non-promotional communications, such as order confirmations, delivery updates, refund notices, or responses to your requests.
We may retain a limited record of your opt-out so that we can continue to respect it.
9. Data Retention
We retain personal information for no longer than reasonably necessary for the relevant purpose, subject to applicable legal requirements.
Order, payment, and refund records are retained according to transaction needs, accounting and tax obligations, and applicable dispute periods.
Customer service records are retained as needed to resolve inquiries, support after-sales obligations, and address related claims. Account information is retained while the account remains in use, subject to deletion requests and lawful retention requirements.
Marketing information is retained while there is an appropriate basis to use it. After an opt-out, limited suppression records may remain to prevent further unwanted marketing.
Technical and security records are retained according to their operational purpose, security relevance, and applicable system settings.
When information is no longer needed, we delete it or de-identify it as appropriate. A deletion request does not require us to remove records that we must retain under applicable law, but retained information remains subject to appropriate restrictions.
10. International Data Transfers
Our providers and business partners may process personal information outside your country. Those countries may have different data protection laws.
Where applicable law restricts an international transfer, we use a legally recognized transfer mechanism. Depending on the circumstances, this may include an adequacy decision or approved contractual safeguards, together with additional protections where required.
For information transferred from the European Economic Area, safeguards may include the European Commission’s Standard Contractual Clauses where appropriate. Equivalent requirements apply to transfers governed by other relevant data protection laws. You may contact us for information about safeguards relevant to your data. (Comitê Europeu de Proteção de Dados)
An international transfer is not treated as authorized solely because you visited the website or placed an order.
11. Security and Fraud Prevention
We take reasonable administrative, technical, and organizational measures appropriate to the personal information we handle and the risks involved.
Access to customer information is limited according to operational need. We also work with relevant providers to support secure transactions and investigate suspected misuse.
No website, transmission method, or storage system can be guaranteed completely secure. Please protect your account credentials and contact us promptly if you suspect unauthorized activity.
Payment or fraud-prevention tools may automatically assess transactions and flag or decline activity. Contact us if you believe a transaction has been incorrectly affected. We will assist with available review procedures, including human review where required by applicable law.
12. Your Privacy Rights
Your rights depend on your location, the applicable law, and whether the relevant legal requirements apply to our processing.
Access, Correction, and Deletion
You may have the right to ask whether we process your personal information, request access or a copy, correct inaccurate information, and request deletion.
You may also have rights to receive certain information in a portable format, restrict processing, object to specified uses, or withdraw consent.
These rights are subject to applicable conditions and exceptions. For example, some information may need to be retained to complete a transaction, comply with a legal obligation, or address a legal claim.
European Economic Area, United Kingdom, and Switzerland
Where applicable European or UK data protection law applies, relevant rights may include access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. You may also have protections concerning decisions based solely on automated processing that produce legal or similarly significant effects.
You may complain to the competent data protection authority. Where the GDPR applies, we generally respond to rights requests within one month, subject to permitted extensions and applicable procedural requirements. We will explain any extension or refusal as required. Comparable rights are assessed under the applicable UK or Swiss legislation. (Comitê Europeu de Proteção de Dados)
United States
Where applicable state privacy law covers our processing, residents may have rights to know, access, correct, delete, obtain a portable copy, and opt out of specified sales, sharing, or targeted advertising. Additional rights may apply to certain sensitive information or profiling activities.
Where the California Consumer Privacy Act applies, covered requests to know, correct, or delete generally receive a substantive response within 45 calendar days, subject to a permitted extension and notice. Different deadlines apply to certain opt-out requests. (Departamento de Justiça da Califórnia)
We will not unlawfully discriminate against you for exercising your privacy rights. Where your state provides a right to appeal, you may request an internal review of our decision using the contact method below. (Agência de Privacidade da Califórnia)
How to Submit a Request
Email support@qomfrtco.com and describe the request. You may use the subject line “Privacy Request”, although no special wording is required.
To protect your information, we may request reasonable details to verify your identity where verification is necessary. We will not require unnecessary sensitive information or require you to create an account solely to submit a request.
An authorized representative may submit a request where permitted by law. We may need evidence of that authorization.
Requests are generally handled without charge. Any refusal, limitation, or permitted fee will be explained as required by applicable law.
If you disagree with our response, contact us with the subject “Privacy Appeal” or otherwise clearly request a review. This does not restrict your right to contact a competent regulator.
13. Children’s Privacy
Our shopping services are intended for a general audience and are not directed to children under 13. Products intended for children should be purchased by a parent or other authorized adult.
We do not knowingly collect personal information directly from children under 13 without any authorization required by applicable law. We also do not knowingly sell or share personal information of individuals under 16 for cross-context behavioral advertising.
If you believe a child has provided personal information inappropriately, contact support@qomfrtco.com so we can investigate and take appropriate action.
14. Public Content and Third-Party Services
If you submit a product review or other content for public display, information included in that submission may become visible to other visitors. Avoid including private contact details, payment information, or sensitive personal information.
Our website may contain links to third-party websites or optional third-party services. Their privacy practices are governed by their own notices.
This does not remove our responsibility for disclosures we make or for providers processing information on our behalf.
15. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our services, data practices, or applicable legal requirements.
The revised policy will be published on this page. Where required, we will provide an additional notice of material changes before they take effect and obtain consent for new processing that requires it.
A policy update does not retroactively authorize processing that required consent or another legal basis.
16. Contact Us
For privacy questions, complaints, accessibility assistance, or requests concerning your personal information, contact:
Qomfrt — Privacy Support
Email: support@qomfrtco.com
Please describe your concern and provide enough information for us to identify the relevant interaction. Do not include passwords, complete payment card numbers, or card security codes.