Privacy policy

Last Updated: June 13, 2026

This Privacy Policy describes how drapecoo ("we", "us", or "our") collects, uses, and shares your personal information when you visit or make a purchase from drapecoo.shop (the "Site"). This policy complies with the California Consumer Privacy Act (CCPA/CPRA), the UK/EU General Data Protection Regulation (GDPR), the California Privacy Rights Act (CPRA), and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

1. Information We Collect

When you visit the Site, we automatically collect certain information about your device, including:

Device Information: IP address, browser type, operating system, time zone, and cookie data
Order Information: Name, billing/shipping address, payment information, email address, phone number
Usage Data: Pages visited, referral sources, interaction patterns, and browsing behavior

2. How We Collect Information

Directly from you: When you create an account, place an order, subscribe to our newsletter, or contact support
Automatically: Through cookies, web beacons, log files, and similar tracking technologies
From third parties: Payment processors (Shopify Payments, PayPal), analytics providers (Google Analytics), and advertising partners

3. How We Use Your Information

To process and fulfill your orders, including payment processing and shipping
To communicate with you regarding orders, returns, and customer support
To send marketing communications (with your consent where required by law)
To improve our website, products, and services
To detect and prevent fraud and ensure security
To comply with legal obligations and enforce our Terms of Service

4. Legal Basis for Processing (GDPR/UK)

We process your personal data under the following legal bases:

Contract: Processing necessary to fulfill your order
Consent: Marketing communications and non-essential cookies
Legitimate Interests: Website improvement, fraud prevention, and analytics
Legal Obligation: Tax, accounting, and regulatory compliance

5. Sharing Your Information

We share your information with:

Shopify Inc. — Our e-commerce platform provider
CJ Dropshipping — Order fulfillment and shipping partner
Payment Processors: Shopify Payments, PayPal, Stripe (as applicable)
Shipping Carriers: USPS, UPS, FedEx, DHL, Canada Post, Royal Mail (as applicable)
Analytics Providers: Google Analytics, Facebook Pixel (Meta)
Email Marketing: Shopify Email, Klaviyo (if applicable)

We do not sell your personal information to third parties as defined under CCPA/CPRA.

6. Your Privacy Rights

For California Residents (CCPA/CPRA):

Right to Know: Request disclosure of personal information collected, used, shared, or sold
Right to Delete: Request deletion of your personal information
Right to Correct: Request correction of inaccurate personal information
Right to Opt-Out: Opt-out of the sale/sharing of personal information (we do not sell data)
Right to Limit Use: Limit use of sensitive personal information
Right to Non-Discrimination: We will not discriminate against you for exercising your rights

For UK/EU Residents (GDPR):

Right to Access: Obtain a copy of your personal data
Right to Rectification: Correct inaccurate or incomplete data
Right to Erasure ("Right to be Forgotten"): Request deletion of your data
Right to Restrict Processing: Limit how we use your data
Right to Data Portability: Receive your data in a structured, machine-readable format
Right to Object: Object to processing based on legitimate interests or direct marketing
Right to Withdraw Consent: At any time, where processing is based on consent

For Canadian Residents (PIPEDA):

Right to access your personal information
Right to challenge the accuracy and completeness of your information
Right to withdraw consent (subject to legal or contractual restrictions)

7. Exercising Your Rights

To exercise any of these rights, please contact us at sopport@drapecoo.shop or mail us at:

drapecoo
484 Cemetery Rd
Ripley, WV 25271-0000
United States

We will respond within 30 days of receiving your request. We may need to verify your identity before processing your request.

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, including:

Order records: 7 years (for tax and accounting purposes)
Marketing preferences: Until you unsubscribe or withdraw consent
Account information: Until you request deletion or close your account
Server logs: 12 months

9. International Data Transfers

Your information may be transferred to and processed in the United States, where our servers are located. For UK/EU customers, we rely on appropriate safeguards including Standard Contractual Clauses (SCCs) approved by the European Commission to ensure adequate protection of your personal data.

10. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience. For detailed information, please see our Cookie Policy below.

11. Security

We implement appropriate technical and organizational measures to protect your personal information, including SSL encryption, secure payment processing, and access controls. However, no method of transmission over the Internet is 100% secure.

12. Children's Privacy

The Site is not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.