Privacy policy

Privacy Policy for Nudashape LLC

Effective Date: July 25, 2026

Nudashape LLC ("Nudashape," "Nuda," "we," "us," or "our") operates this store and website (nudashape.com), including all related information, content, features, tools, products, and services (the "Services"). Nudashape is powered by Shopify, which enables us to provide a curated shopping experience to you.

This Privacy Policy describes how we collect, use, store, and disclose your personal information when you visit, use, or make a purchase from the Site, participate in sizing or fit consultations, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described herein.

1. Information We Collect & Retention Schedule

"Personal information" refers to information that identifies or can reasonably be linked to you or another person. It does not include anonymous or de-identified data.

Below is a detailed breakdown of the categories of personal information we collect, our maximum retention periods, and the primary business purposes for collection:

Identifiers & Contact Details
- Examples: Full name, shipping/billing address, IP address, email address, phone number, and account credentials.
- Maximum Retention Period: Duration of active account + up to 7 years for tax and legal compliance.
- Primary Business Purpose: Account creation, order fulfillment, shipping logistics governed by our Shipping Policy, and transactional communications.
Financial & Commercial Information
- Examples: Payment card details, form of payment, transaction history, items viewed, added to cart/wishlist, or returned.
- Maximum Retention Period: Up to 7 years to fulfill accounting, audit, and tax obligations.
- Primary Business Purpose: Secure payment processing, order fulfillment, refund and return handling governed by our Refund Policy, and sales analytics.
Fit & Sizing Data
- Examples: Body measurements, sizing quiz inputs, or fit preferences voluntarily provided during support interactions.
- Maximum Retention Period: Duration of customer relationship or up to 4 years for sizing optimization.
- Primary Business Purpose: Providing personalized garment fit advice, size recommendations, and product optimization.
Device & Usage Information
- Examples: Browser type, device ID, operating system, network connection, IP address, clickstream data, scroll depth, and interaction logs.
- Maximum Retention Period: Duration of browsing session or up to 4 years for marketing analytics.
- Primary Business Purpose: Platform optimization, store performance, network security, and targeted advertising.
Cart & Session Activity
- Examples: Shopping bag items, checkout initiation, and abandoned session metrics.
- Maximum Retention Period: Up to 30 days via tracking cookies.
- Primary Business Purpose: Cart recovery communications and automated reminder messages via email or SMS/MMS.
Communications & Audio
- Examples: Call recordings, email correspondence, text/SMS history, or WhatsApp support chats.
- Maximum Retention Period: Up to 2 years for quality assurance and training.
- Primary Business Purpose: Resolving support inquiries, service continuity, and managing customer disputes.
User Content & Reviews
- Examples: Public product reviews, comments, ratings, or media tagged on our official social media channels.
- Maximum Retention Period: Retained until review is removed or account deletion is requested.
- Primary Business Purpose: Displaying social proof, community engagement, and marketing campaigns.

2. Notice Regarding Sensitive Personal Information

We do not collect or process Sensitive Personal Information (such as Social Security numbers, government ID numbers, genetic or biometric data, precise real-time geolocation, or health details). Please do not disclose or send sensitive personal information through our Site or customer support channels.

3. Relationship with Shopify & Platform Infrastructure

The Services are hosted by Shopify Inc., which collects and processes personal information about your access to and use of the Services to provide and improve the storefront. Information you submit will be transmitted to and shared with Shopify and its international affiliates.

Shopify Enhanced Features: To help protect and grow our business, we use Shopify enhanced features that incorporate aggregated data from your interactions with our store, other merchants, and Shopify. In these contexts, Shopify acts as an independent data controller responsible for responding to your privacy requests regarding such data.
To learn more, visit the Shopify Consumer Privacy Policy (https://www.shopify.com/legal/privacy) and the Shopify Privacy Portal (https://privacy.shopify.com/en).

4. How We Use Your Personal Information

Depending on how you interact with our Services, we use your personal information to:

Provide, Tailor, and Improve Services: Perform contracts, process payments, fulfill orders, arrange shipping per our Shipping Policy, handle returns/exchanges per our Refund Policy, enable reviews, and provide custom shapewear fit recommendations.
Customer Support & Communication: Provide responsive care, answer inquiries, and deliver transactional notices (e.g., order confirmations, shipping updates, delay notices, or policy changes).
Cart Recovery & Automated Messaging: Track shopping bag activity to send follow-up reminder notices via email or SMS/MMS when a cart is left incomplete.
Marketing & Targeted Advertising: Deliver newsletters, special offers, and promotional communications across email, SMS, or postal mail, and display relevant online ads via external ad networks (Meta, Google, TikTok, Bing).
Security & Fraud Prevention: Authenticate user accounts, detect and prevent fraudulent transactions or malicious activity, and protect platform integrity.
Legal Compliance: Comply with applicable legal obligations, court orders, or subpoenas, and enforce our Terms of Service.

5. Strict Mobile & SMS Consent Protection

Consumer SMS Consent Safeguard: Any data-sharing practices outlined in this policy do NOT apply to SMS opt-in consent.

We will never sell, rent, share, or lease your text messaging opt-in data or consent status to non-affiliated third parties for their own marketing purposes. Mobile opt-in data is shared strictly with vendors that directly operate, manage, and deliver our text messaging service on our behalf (such as platform aggregators and carriers).

Opt-Out: You may opt out of promotional text messages at any time by replying STOP to any SMS message or emailing support@nudashape.com.

6. Targeted Advertising & Cookie Preference Controls

We partner with third-party networks to measure marketing campaigns and serve interest-based advertisements across external platforms. You can learn more or opt out through industry portals:

Meta / Facebook: Meta Ad Settings (https://www.facebook.com/settings/?tab=ads)
Google: Google Ad Personalization (https://www.google.com/settings/ads/anonymous)
Bing: Bing Personalized Ads (https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads)
Digital Advertising Alliance: DAA Opt-Out Portal (http://optout.aboutads.info/)

Global Privacy Control (GPC)

If you visit our website with the Global Privacy Control (GPC) opt-out preference signal enabled on your browser, we automatically treat this as a valid request to opt out of targeted advertising for that device and session. If we can link the signal to your Shopify account, we will apply the opt-out at the account level.

7. Global Privacy Rights & Regional Choices

Depending on where you reside (including US states such as California, Virginia, Colorado, Connecticut, Texas, or international regions such as the UK and EEA), you may hold specific privacy rights:

Right to Access / Know: Request a copy of the specific pieces and categories of personal information we maintain about you.
Right to Delete: Request that we erase your personal data, subject to statutory tax, audit, and legal exceptions.
Right to Correct: Request corrections to inaccurate or incomplete personal records.
Right to Data Portability: Receive a copy of your personal data in a structured, commonly used format.
Right to Opt-Out of Sale/Sharing: Direct us not to share your data for targeted or cross-context behavioral advertising.
Nevada Residents: Nevada law grants residents the right to opt out of the sale of covered data. Submit requests with the subject line "Nevada Privacy Opt-Out" to support@nudashape.com.

To exercise any available rights, email us at support@nudashape.com or call +1 (917) 695-7105. We will verify your identity before processing your request.

8. Children’s Privacy

The Services are not intended for or directed to individuals under the age of 18 (or the age of majority in your jurisdiction). We do not knowingly collect, sell, or share personal information from children under 16 years of age. If a parent or guardian becomes aware that a child has provided us with personal information, please contact us immediately for deletion.