Legal Basis for Processing Your Data

Required for the website to function. Includes your shopping cart session, login state, checkout progress, and security tokens. These cannot be disabled without breaking the site.

Help us understand how visitors interact with our store — which pages are most visited, where visitors come from, and how they navigate. Data is aggregated and used to improve the site.

Remember your preferences between visits — such as your selected region (US or Canada) and currency, so you do not have to re-select them on every visit.

Only activated with your consent. Used to measure the effectiveness of advertising and, where you have agreed, to deliver relevant ads on other platforms such as Google and Meta.

Our entire store is built on and hosted by Shopify. They process your order data, payment data (through Shopify Payments), account data, and session data as our data processor. Shopify is certified to the highest security standards including PCI DSS Level 1. See Shopify's Privacy Policy for full details of their processing.

Payment gateways such as Shopify Payments, PayPal, and others available at checkout receive the payment information you enter at checkout. They process and settle your payment on our behalf. We do not receive your full card number. Each processor operates under its own PCI-DSS compliance programme and privacy policy.

Your name, delivery address, and phone number (where provided) are shared with the postal or courier service we use to ship your order — for example USPS, UPS, FedEx, or Canada Post. This data is used solely to deliver your parcel and provide tracking updates. Carriers may retain delivery records as required by their own operating rules.

We use Google Analytics to understand how visitors use our website. Google receives anonymised or pseudonymised data about your browsing session. We have enabled IP anonymisation so your full IP address is not stored by Google. Google Analytics data is governed by Google's privacy policy. We do not permit Google to use your data for Google's own advertising purposes without consent.

If you have opted in to marketing emails, your email address and name are stored with the email platform we use to send those campaigns (such as Shopify Email or a connected email service provider). This service provider processes your data exclusively on our instructions and may not use it for their own marketing purposes.

We may disclose your personal information if we are legally required to do so — for example, in response to a court order, subpoena, or other lawful request from a governmental or regulatory authority in the UK, USA, or Canada. We will notify you if such a disclosure is made unless we are legally prohibited from doing so.

Your Privacy Rights

California residents hold rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), and other US states with comprehensive privacy laws have substantially equivalent rights which we also honour.

Canadian customers are protected by the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial legislation. Quebec residents have additional rights under Law 25 (Act Respecting the Protection of Personal Information in the Private Sector).

You are added to our marketing list only if you actively tick the marketing opt-in box at checkout or subscribe through our website. Pre-checked boxes do not constitute consent, and we do not use them. Canadian customers are protected by Canada's Anti-Spam Legislation (CASL), which requires a clear, separate, express consent action before any commercial electronic message may be sent.

Every promotional email we send contains a clearly visible, single-click unsubscribe link at the bottom of the email. Clicking it immediately removes you from all future marketing communications. Alternatively, you can email us at info@ewwsportsshoes.com with the subject line "Unsubscribe" and we will remove you manually within 10 business days. Unsubscribing from marketing emails has no effect on transactional emails about your active orders.

Emails confirming your order, your payment, your shipment tracking number, and your refund are not marketing communications. They are essential service messages required to complete the transaction you initiated. Once your order is fully resolved, you will receive no further emails unless you have opted into marketing or contact us again.

For a broader opt-out — including opting out of analytics tracking, retargeting cookies, or requesting deletion of your data — please use our dedicated Privacy Opt-Out Request Form at ewwsportshoes.com/pages/privacy-opt-out-request-form. We process all opt-out requests within 30 days.

All data transmitted between your browser and our store is encrypted via TLS (HTTPS). Look for the padlock in your browser's address bar.

Payment data is handled exclusively by PCI DSS Level 1 certified processors. We never store raw payment card data on our own systems.

Shopify's infrastructure includes DDoS protection, regular security audits, and access controls that limit who can access customer data within the platform.

Access to your personal data within our team is limited to staff who need it to process your order or respond to your support queries. All access is role-based.

When you place an order from the US or Canada, your personal data is transmitted to and processed within those countries (for example, by Shopify's servers and by US and Canadian shipping carriers). These transfers are necessary to fulfil your contract with us (deliver your order). Under UK GDPR, we ensure appropriate safeguards are in place for such transfers, including relying on UK adequacy regulations or standard contractual clauses as applicable.

Shopify Inc. is a Canadian company (headquartered in Ottawa, Ontario) with server infrastructure in the United States. Shopify processes order and customer data on our behalf under their Data Processing Agreement, which incorporates Standard Contractual Clauses for UK GDPR compliance. Canada is a country with an adequacy finding under UK GDPR.

Google Analytics processes anonymised website usage data on US servers. We rely on Google's Standard Contractual Clauses for this transfer. IP anonymisation is enabled so your full IP address is not transferred to Google's servers.

We do not knowingly collect personal information from children under the age of 13. If we become aware that we have inadvertently collected personal information from a child under 13 without verified parental consent in violation of the Children's Online Privacy Protection Act (COPPA), we will delete that information as soon as reasonably practicable.

We do not knowingly collect or process personal information from minors under the age of majority in any Canadian province or territory (18 in most provinces; 19 in British Columbia, Nova Scotia, and New Brunswick) without the express consent of a parent or legal guardian.

Contact Us About Privacy

Regulatory authorities: US customers may also contact the Federal Trade Commission (FTC) at ftc.gov or their state Attorney General. California residents may contact the California Privacy Protection Agency (CPPA) at cppa.ca.gov. Canadian customers may contact the Office of the Privacy Commissioner of Canada at priv.gc.ca. UK customers may contact the Information Commissioner's Office (ICO) at ico.org.uk.

Eww Sports Shoes · Wellnessmasco Ltd · Reg. 15150625

Privacy Policy · Effective 22 June 2026 · Applies to customers in the United States and Canada