PRIVACY POLICY

Last updated: September 9, 2026

This Privacy Policy describes how Ghostie (“Ghostie,” “we,” “us,” or “our”) collects, uses, stores, and, where applicable, shares personal information when you visit, use, make a purchase from, or otherwise interact with our online store and related services (collectively, the “Services”).

Our store uses Shopify to provide and manage the Services.

DATA CONTROLLER

Data Controller: Marc Priante
Contact Address: Avinguda de Cerdanyola, 08173 Sant Cugat del Vallès, Barcelona, Spain
Email: support@ghostiehome.com

By using our Services, you acknowledge that you have read this Privacy Policy and have been informed about how your personal information is handled.

1. PERSONAL INFORMATION WE COLLECT

Depending on how you interact with our store, we may collect and process the following categories of personal information:

• Identification and contact information: first and last name, billing address, shipping address, email address, and telephone number.
• Order and transaction information: products purchased, products added to your cart, returns, exchanges, cancellations, transaction amounts, and other information related to your orders.
• Payment information: information necessary to process and confirm transactions. Payments may be processed by Shopify Payments, PayPal, or other payment service providers depending on the payment method selected.
• Communications: information you provide when contacting us, including when making an inquiry, requesting assistance, or submitting a complaint.
• Technical and device information: IP address, browser type, device information, operating system, identifiers, and information related to your connection.
• Store usage information: information about how you browse, access, and interact with our website and Services.

A telephone number provided during checkout may be used as necessary for order management, fulfillment, shipping, delivery, and communications relating to your order.

2. HOW WE COLLECT PERSONAL INFORMATION

We may collect personal information:

• Directly from you when you place an order, provide information during checkout, contact us, or otherwise use our Services.
• Automatically when you use our website through cookies and similar technologies.
• Through Shopify and service providers that help us provide the Services.
• Through payment processors, fulfillment providers, shipping and logistics companies, analytics providers, marketing providers, and other service providers necessary to operate our store.

3. HOW WE USE PERSONAL INFORMATION

ORDER MANAGEMENT AND FULFILLMENT

We use personal information as necessary to process purchases, manage payments, fulfill orders, arrange shipping and delivery, and manage returns, exchanges, cancellations, issues, and refunds.

CUSTOMER SUPPORT

We use personal information to respond to inquiries, resolve issues, provide customer support, and communicate with you regarding your orders or our Services.

LEGAL COMPLIANCE

We may process certain personal information to comply with applicable legal, tax, accounting, administrative, consumer-protection, and regulatory obligations.

SECURITY AND FRAUD PREVENTION

We may use personal information to detect, investigate, and prevent fraudulent, illegal, or potentially harmful activity and to protect our store, customers, and Services.

MARKETING AND COMMERCIAL COMMUNICATIONS

Where permitted by applicable law, we may use certain personal information to send you information about our products, promotions, offers, or other updates.

Where consent is required, you may withdraw your consent at any time.

IMPROVING OUR SERVICES

We may analyze how customers interact with our store to improve its functionality, performance, security, marketing, and overall shopping experience.

4. LEGAL BASES FOR PROCESSING

Where the General Data Protection Regulation (GDPR) or similar data-protection laws apply, we may process personal information on one or more of the following legal bases:

• Performance of a contract: where processing is necessary to process and fulfill your purchase or provide a service you have requested.
• Compliance with legal obligations: where we are required to retain or use information to comply with applicable law.
• Consent: where you have expressly consented to a particular processing activity.
• Legitimate interests: where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms.

5. HOW WE SHARE PERSONAL INFORMATION

We may disclose personal information to third parties where reasonably necessary to operate our store and provide the Services.

These third parties may include:

• Shopify.
• Payment processors and payment gateways.
• Fulfillment, shipping, logistics, and delivery providers.
• Technology and hosting providers.
• Analytics and security providers.
• Marketing and advertising providers, where applicable.
• Professional advisers and service providers necessary for our business operations and legal compliance.
• Government authorities, regulators, courts, law enforcement agencies, or other competent authorities where disclosure is required by law.

We seek to limit the information shared to what is reasonably necessary for the relevant service or purpose.

6. SHOPIFY

Our store is hosted and operated using Shopify.

Shopify may collect and process certain personal information relating to your access to and use of our store in order to provide its services, process transactions, maintain platform security, prevent fraud, and provide other functionality.

Certain personal information may be processed directly by Shopify in accordance with its own terms and privacy practices.

For more information about how Shopify processes personal information, you may review Shopify's Privacy Policy.

7. COOKIES AND SIMILAR TECHNOLOGIES

Our website may use cookies and similar technologies that are necessary for its operation, security, functionality, and provision of the Services.

Where applicable and permitted by law, we may also use analytics, personalization, marketing, or advertising cookies and similar technologies.

Where applicable law requires consent before certain cookies or technologies may be used, we will seek such consent as required.

You may manage available privacy and cookie preferences through the privacy tools provided on our website and, where applicable, through your browser or device settings.

8. DATA RETENTION

We retain personal information for as long as reasonably necessary to fulfill the purposes for which it was collected.

Certain information may be retained for longer periods where necessary to:

• Comply with legal, tax, accounting, or regulatory obligations.
• Handle claims or potential liabilities.
• Prevent fraud and abuse.
• Resolve disputes.
• Establish, exercise, or defend legal claims.
• Protect our legitimate business interests where permitted by law.

When personal information is no longer required and applicable retention periods have expired, it will be deleted, anonymized, or otherwise handled in accordance with applicable law.

9. INFORMATION SECURITY

We take reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, use, alteration, disclosure, loss, or destruction.

However, no method of transmission over the Internet or electronic storage system can guarantee absolute security.

We recommend that users avoid sending particularly sensitive information through insecure communication channels.

10. CHILDREN'S PRIVACY

Our Services are not intended for children to make purchases independently where they are not legally permitted to do so.

We do not knowingly collect personal information from children in violation of applicable law.

If you are a parent or legal guardian and believe that a child has improperly provided us with personal information, please contact us at support@ghostiehome.com so that we can review the situation and take appropriate action.

11. YOUR PRIVACY RIGHTS

Depending on where you live and the law applicable to you, you may have some or all of the following rights regarding your personal information:

• The right to request access to personal information we hold about you.
• The right to request correction of inaccurate or incomplete information.
• The right to request deletion of your personal information.
• The right to request restriction of certain processing.
• The right to object to certain processing.
• The right to data portability, where applicable.
• The right to withdraw consent at any time where processing is based on consent.
• The right to appeal or challenge certain decisions regarding privacy requests where provided by applicable law.

Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.

To exercise an applicable privacy right, contact us at:

support@ghostiehome.com

We may request information reasonably necessary to verify your identity before processing certain requests.

Your rights may vary depending on your place of residence and applicable law.

12. U.S. PRIVACY RIGHTS

Residents of certain U.S. states may have additional rights under applicable state privacy laws.

Depending on your state of residence and whether the relevant law applies to our business, these rights may include the right to request access to, correction of, or deletion of certain personal information, as well as rights relating to certain uses or disclosures of personal information.

Where applicable, you may also have rights regarding targeted advertising, profiling, or the sale or sharing of personal information as those terms are defined under applicable law.

We will process valid privacy requests in accordance with the laws applicable to us.

To submit a privacy request, contact us at:

support@ghostiehome.com

13. MARKETING COMMUNICATIONS

Where you have consented to receive marketing communications, or where another lawful basis permits us to send them, we may send information regarding products, promotions, offers, and updates.

You may unsubscribe from marketing emails at any time by using the unsubscribe mechanism included in the communication or by contacting us.

Unsubscribing from marketing communications will not prevent us from sending transactional or service communications that are necessary in connection with your orders, payments, deliveries, returns, security, or other Services you have requested.

14. INTERNATIONAL DATA TRANSFERS

Because we use Shopify and other service providers that may operate internationally, your personal information may be processed in countries other than the country where you live.

Where required by applicable data-protection law, international transfers of personal information will be made using recognized safeguards or transfer mechanisms, such as adequacy decisions, standard contractual clauses, or other legally recognized mechanisms.

15. THIRD-PARTY LINKS AND SERVICES

Our store may contain links to websites, social networks, applications, or services operated by third parties.

We do not control and are not responsible for the privacy or security practices of third-party websites or services.

We encourage you to review their privacy policies before providing personal information to them.

16. COMPLAINTS

If you have concerns about how we process your personal information, please contact us first at:

support@ghostiehome.com

We will review your request and respond as required by applicable law.

Where applicable, you may also have the right to lodge a complaint with the data-protection or privacy authority responsible for your jurisdiction.

Because the data controller operates from Spain, complaints concerning processing subject to Spanish or European data-protection law may also be directed, where applicable, to the Spanish Data Protection Agency (Agencia Española de Protección de Datos — AEPD).

17. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes to our Services, practices, technology, service providers, or applicable legal requirements.

When we make changes, we will publish the updated version on our website and update the “Last updated” date at the top of this Policy.

18. CONTACT

For questions regarding this Privacy Policy, our privacy practices, or your personal information, please contact:

Ghostie

Data Controller: Marc Priante

Contact Address:
Avinguda de Cerdanyola
08173 Sant Cugat del Vallès, Barcelona
Spain

Email: support@ghostiehome.com