Privacy policy

Last updated: August 10, 2026

This Privacy Policy explains how RB Creative Marketing LLC, operating ATHERYN ("ATHERYN", "we", "us" or "our"), collects, uses, stores, shares and otherwise processes personal information when you visit our online store, place an order, create an account, contact us, interact with our advertisements or otherwise use our services.

1. Information We Collect

Depending on how you interact with ATHERYN, we may collect the following categories of personal information.

Personal and Contact Information

  • Full name;
  • Email address;
  • Telephone number;
  • Billing address;
  • Shipping address;
  • Country or region;
  • Customer account information.

Order and Transaction Information

  • Products purchased;
  • Product size, colour or variation;
  • Order number;
  • Order value;
  • Payment status;
  • Shipping and tracking information;
  • Return, exchange and refund history;
  • Discounts, promotional codes or store credits used.

Payment Information

Payments are processed by Shopify and authorised third-party payment-service providers.

ATHERYN does not normally receive or store complete payment-card numbers or card security codes.

We may receive limited payment-related information, including:

  • Payment method type;
  • Transaction identifier;
  • Billing name and address;
  • Payment confirmation or status;
  • Fraud-screening or risk information.

Device and Usage Information

When you visit or interact with our website, certain information may be collected automatically, including:

  • Internet Protocol (IP) address;
  • Browser type;
  • Device type;
  • Operating system;
  • Approximate geographic location;
  • Pages and products viewed;
  • Shopping cart activity;
  • Search activity on the website;
  • Referring website or source;
  • Date and time of visits;
  • Cookie and similar technology identifiers;
  • Website interaction and performance data.

Customer Service Information

When you contact ATHERYN, we may collect the content of your communications, including:

  • Messages and emails;
  • Attachments;
  • Photographs and videos;
  • Complaint or return details;
  • Order-related information;
  • Records of communications with our customer-service team.

2. How We Collect Information

We may collect personal information:

  • Directly from you when you place an order, create an account, subscribe to communications or contact us;
  • Automatically when you browse or interact with our website;
  • From Shopify and payment providers;
  • From shipping, fulfilment and logistics providers;
  • From analytics and advertising providers;
  • From fraud-prevention and security providers;
  • From other service providers that help us operate the store.

3. How We Use Personal Information

ATHERYN may use personal information to:

  • Operate, maintain and improve our online store;
  • Accept, process and fulfil orders;
  • Process payments;
  • Arrange delivery and fulfilment;
  • Provide shipping and tracking information;
  • Process returns, exchanges and refunds;
  • Communicate with customers regarding their orders;
  • Provide customer support;
  • Respond to questions, complaints and requests;
  • Maintain customer accounts;
  • Detect, investigate and prevent fraud or unauthorised transactions;
  • Protect the security and integrity of our website and services;
  • Improve our products, services and customer experience;
  • Analyse website traffic and performance;
  • Understand how customers interact with our website;
  • Personalise content, products and recommendations where permitted;
  • Send marketing communications where permitted by applicable law;
  • Deliver and measure advertising;
  • Measure the effectiveness of marketing campaigns;
  • Comply with tax, accounting, regulatory and legal obligations;
  • Establish, exercise or defend legal claims;
  • Enforce our policies and terms.

4. Legal Bases for Processing

Where the UK General Data Protection Regulation, European Union General Data Protection Regulation or similar data-protection legislation applies, we process personal information using one or more applicable legal bases.

Performance of a Contract

We process personal information when necessary to accept, process, fulfil, deliver and manage your order or otherwise provide services you have requested.

Legitimate Interests

We may process personal information where reasonably necessary for our legitimate business interests, including customer service, fraud prevention, website security, business administration, service improvement and protecting our legal rights, provided those interests are not overridden by applicable privacy rights.

Consent

Where required, we rely on your consent for activities such as non-essential cookies, certain analytics technologies, personalised advertising and certain marketing communications.

You may withdraw your consent at any time, subject to applicable law.

Legal Obligations

We may process and retain personal information when necessary to comply with applicable legal, tax, accounting, regulatory, fraud-prevention or consumer-protection obligations.

5. Cookies and Similar Technologies

ATHERYN and our service providers may use cookies, pixels, tags, local storage and other similar technologies when you visit or interact with our website.

These technologies may be used to:

  • Operate essential website functionality;
  • Maintain your shopping cart;
  • Remember your preferences;
  • Enable secure checkout;
  • Authenticate users;
  • Prevent fraudulent activity;
  • Analyse website traffic and performance;
  • Understand customer interactions;
  • Measure advertising performance;
  • Personalise content or advertising where permitted.

Some cookies are necessary for the website to operate and may not require consent.

Where required by applicable law, non-essential cookies and similar technologies will only be used after obtaining the appropriate consent.

You may manage your cookie preferences through the cookie consent tools available on our website or through your browser settings.

Disabling certain cookies may affect the functionality or performance of some parts of the website.

6. Marketing Communications

ATHERYN may send promotional emails or other marketing communications where permitted by applicable law.

You may unsubscribe from marketing emails at any time by:

  • Using the unsubscribe link included in the marketing email; or
  • Contacting us at contact@atherynshop.com.

Unsubscribing from marketing communications does not prevent ATHERYN from sending necessary transactional or service-related communications, including order confirmations, payment notifications, shipping updates, refund notifications, security messages and customer-service responses.

7. How We Share Personal Information

ATHERYN may disclose personal information to service providers and other parties when reasonably necessary to operate our business and provide our services.

These parties may include:

  • Shopify;
  • Payment processors, payment gateways and financial institutions;
  • Shipping carriers and logistics providers;
  • Warehouses and fulfilment providers;
  • Customer-service providers;
  • Email, messaging and communication providers;
  • Cloud hosting and technology providers;
  • Analytics providers;
  • Advertising and marketing platforms;
  • Fraud-prevention and security providers;
  • Professional advisers, including legal and accounting providers.

We may also disclose personal information when reasonably necessary to:

  • Comply with applicable law or regulation;
  • Respond to a valid legal or governmental request;
  • Investigate suspected fraud or unlawful activity;
  • Enforce our agreements and policies;
  • Protect the rights, property or safety of ATHERYN, our customers or others.

Personal information may also be transferred as part of a merger, acquisition, financing, restructuring, sale of assets or similar business transaction, subject to applicable law.

8. Advertising, Sale and Sharing of Personal Information

ATHERYN does not sell personal information in exchange for direct monetary payment.

However, we may use analytics, advertising and marketing services that receive certain identifiers, device information or website activity in order to measure advertising, understand website usage or provide relevant advertising.

Depending on the privacy law applicable in your jurisdiction, certain advertising-related disclosures may be considered a "sale", "sharing" of personal information or processing for targeted advertising, even where no money is exchanged.

Where applicable law provides such rights, you may request to opt out of eligible sales, sharing, targeted advertising or certain profiling activities.

Available privacy and cookie controls may be provided through our website or you may contact us at contact@atherynshop.com.

9. International Data Transfers

ATHERYN is operated by RB Creative Marketing LLC in the United States and uses international technology, payment, advertising, fulfilment, logistics and other service providers.

As a result, your personal information may be transferred to, stored in or processed in countries outside your country of residence, including the United States.

Privacy and data-protection laws in those countries may differ from the laws in your country.

Where required by applicable law, we or our service providers will use legally recognised safeguards for international transfers, which may include adequacy decisions, contractual safeguards or other lawful transfer mechanisms.

10. Data Retention

ATHERYN retains personal information only for as long as reasonably necessary for the purposes for which it was collected and to comply with applicable legal and business requirements.

The appropriate retention period may depend on factors including:

  • The duration of our relationship with you;
  • Order and delivery requirements;
  • Return, refund and warranty periods;
  • Customer-service requirements;
  • Fraud-prevention and security requirements;
  • Tax and accounting obligations;
  • Regulatory requirements;
  • Applicable legal limitation periods;
  • Pending complaints, disputes or legal claims.

When personal information is no longer reasonably required, we may delete, anonymise or securely restrict access to it, subject to applicable law.

11. Data Security

ATHERYN uses reasonable technical, administrative and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

However, no method of transmission over the internet or electronic data-storage system can be guaranteed to be completely secure.

If you create an account, you are responsible for maintaining the confidentiality of your account credentials.

Please contact ATHERYN promptly if you believe your account or personal information has been accessed or used without authorisation.

12. Your Privacy Rights

Depending on your country, state or region of residence and applicable law, you may have certain rights regarding your personal information.

These rights may include the right to:

  • Request access to personal information we hold about you;
  • Request information about how your personal information is processed;
  • Request correction of inaccurate or incomplete information;
  • Request deletion of personal information;
  • Request restriction of certain processing;
  • Object to certain processing;
  • Withdraw consent where processing is based on consent;
  • Request data portability where applicable;
  • Opt out of direct marketing;
  • Opt out of certain targeted advertising activities;
  • Opt out of certain sales or sharing of personal information where applicable;
  • Object to certain types of profiling or automated processing where applicable;
  • Submit a complaint to an applicable data-protection or privacy authority.

Not every privacy right applies in every jurisdiction or in every circumstance.

ATHERYN may request information reasonably necessary to verify your identity before processing a privacy request.

Where permitted by applicable law, we may also require verification of the authority of a person making a request on your behalf.

We will respond to valid privacy requests within the timeframes required by applicable law.

To exercise an applicable privacy right, contact us at contact@atherynshop.com.

13. Children’s Privacy

Our website and services are intended for a general audience and are not specifically directed to children.

ATHERYN does not knowingly collect personal information from children in violation of applicable law.

If you are a parent or legal guardian and believe that a child has provided personal information to us without appropriate authorisation, please contact us at contact@officialatheryn.com.

14. Third-Party Websites and Services

Our website may contain links to websites, payment services, social media platforms or services operated by third parties.

ATHERYN does not control the independent privacy practices of third parties.

We encourage you to review the privacy policies of third-party websites and services before providing personal information to them.

15. Changes to This Privacy Policy

ATHERYN may update this Privacy Policy from time to time to reflect changes to our services, technology, business practices, service providers or legal obligations.

When this Privacy Policy is updated, the revised version will be published on our website with an updated "Last updated" date.

16. Data Controller and Business Information

For the purposes of applicable data-protection law, the business responsible for the processing of personal information described in this Privacy Policy is:

Contact

For questions about this Privacy Policy, our privacy practices or to exercise an applicable privacy right, contact:

ATHERYN

Email: contact@atherynshop.com