Privacy policy

Last updated: June 10, 2026

The Rare Steps operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). The Rare Steps is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase using the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described.

Personal Information We Collect or Process

When we use the term "personal information," we refer to information that identifies or can reasonably be linked to you. This does not include anonymised or de-identified data. We may collect or process the following, depending on how you interact with the Services:

Contact details — name, address, billing/shipping address, phone number, and email address
Financial information — payment card details, transaction information, and payment confirmation
Account information — username, password, security questions, preferences and settings
Transaction information — items viewed, added to cart, purchased, returned, or exchanged
Communications — information you share when contacting us for support or enquiries
Device information — browser type, IP address, device identifiers, and network information
Usage information — how and when you interact with or navigate the Services

Personal Information Sources

We may collect personal information from the following sources:

Directly from you, when you create an account, visit the Services, or communicate with us
Automatically through the Services, via cookies and similar technologies
From our service providers, who collect or process information on our behalf
From our partners or other third parties

How We Use Your Personal Information

We may use your personal information to:

Provide, tailor, and improve the Services — including order processing, fulfillment, shipping, returns, account management, and personalised recommendations
Marketing and advertising — including email, SMS, and online advertising (such as Meta/Instagram ads via Meta Pixel) based on your activity on our store
Security and fraud prevention — to authenticate accounts, protect against fraudulent or malicious activity, and secure the Services
Customer communication — to respond to enquiries, provide support, and maintain our relationship with you
Legal compliance — to comply with applicable law, respond to legal process, and enforce our terms and policies

How We Disclose Personal Information

We may disclose your personal information to third parties in the following circumstances:

With Shopify and service providers who support our operations (payment processing, shipping, data storage, analytics, customer support)
With business and marketing partners, including Meta, to deliver relevant advertising based on your activity
When you direct or consent to disclosure, such as through social login integrations or product reviews
Within our corporate group or affiliates
In connection with a business transaction, legal obligation, or to protect our rights and the rights of our users

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information to provide and improve the Services. Information submitted through the Services may be shared with Shopify and third parties in other countries. To learn more, visit the Shopify Consumer Privacy Policy or the Shopify Privacy Portal.

Third Party Websites and Links

The Services may link to third-party websites. We are not responsible for the privacy practices or content of those sites. Review their privacy policies independently before sharing any personal information.

Children's Data

The Services are not intended for use by children under the age of majority. We do not knowingly collect personal information from minors. If you believe a child has provided us with their information, contact us and we will delete it promptly. We do not knowingly sell or share personal information of individuals under 16 years of age.

Security and Retention

We take reasonable measures to protect your personal information, but no system is completely secure. Avoid sharing sensitive information over unsecured channels. We retain your personal information for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce our policies.

Your Rights and Choices

Depending on where you live, you may have the right to:

Access personal information we hold about you
Request deletion of your personal information
Request correction of inaccurate information
Receive a portable copy of your data
Opt out of promotional communications at any time via the unsubscribe link in our emails

To exercise any of these rights, contact us at the details below. We may need to verify your identity before processing your request. We will not discriminate against you for exercising these rights.

Complaints

If you have concerns about how we handle your personal information, contact us directly. You may also have the right to lodge a complaint with your local data protection authority.

International Transfers

Your personal information may be transferred, stored, or processed outside your country of residence. Where required, we rely on recognised transfer mechanisms such as Standard Contractual Clauses.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. We recommend reviewing this page periodically.

Contact

For any questions about this Privacy Policy or to exercise your rights, email us at theraresteps@gmail.com. We aim to respond within 2–3 business days.