privacy policy generator.
gdpr + ccpa compliant privacy policy for ecommerce stores
> business details
platform
>data & tools
data collected
payment processors
analytics / marketing tools
email / SMS marketing platforms
>audiences & compliance
> preview
# Privacy Policy, ACME Outdoor
_Last updated: 2026-04-21_
## Who We Are
[ACME Outdoor](https://acmeoutdoor.com) is operated by **ACME Outdoor LLC**.
Our registered address is: 123 Trail St, Denver, CO 80202, USA.
For all privacy enquiries, please contact us at **privacy@acmeoutdoor.com**.
Our store runs on the **Shopify** platform.
## Information We Collect
We collect the following types of personal information:
- Name
- Email address
- Shipping address
- Billing address
- IP address
- Payment information (processed by third party)
- Browsing behaviour
- Purchase history
## How We Use Your Information
We use the information we collect to:
- Process and fulfil your orders, including sending order confirmations and shipping updates
- Manage your account and provide customer support
- Send marketing communications (where you have consented or we have a legitimate interest)
- Improve our website and personalise your experience
- Comply with legal obligations and prevent fraud
## Legal Basis for Processing (GDPR)
We process your personal data under the following legal bases:
- **Contract performance:** To fulfil your orders and manage your account.
- **Legitimate interests:** To improve our services, prevent fraud, and send relevant marketing to existing customers.
- **Consent:** For email marketing where explicitly opted in, and for non-essential cookies.
- **Legal obligation:** To comply with tax, accounting, and other legal requirements.
## Sharing With Third Parties
We share your information with the following categories of third-party service providers:
**Payment processors:** Stripe, Shopify Payments. Your payment details are handled directly by these processors and are not stored on our servers.
**Analytics & marketing:** Google Analytics 4, Meta Pixel. These tools help us understand how visitors use our site and measure campaign performance.
**Email & SMS marketing platforms:** Klaviyo. We share your contact details with these platforms to send you marketing communications (where consented).
**Shipping & fulfilment providers:** We share your delivery address and contact information with couriers and logistics partners to fulfil your orders.
**Shopify platform:** As our ecommerce platform, Shopify processes your data in accordance with their own privacy policy.
We do not sell your personal information to third parties.
## International Data Transfers
Some of our service providers are based outside your country. Where we transfer personal data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or equivalent mechanisms.
## Data Retention
We retain your personal data for **7 years for financial records, 3 years for marketing data**. After this period, data is securely deleted or anonymised. Order records may be retained for longer periods to comply with tax and accounting legal requirements.
## Your Rights
### GDPR Rights
If you are located in the EU or UK, you have the following rights:
- **Right of access:** Request a copy of the personal data we hold about you.
- **Right to rectification:** Request correction of inaccurate data.
- **Right to erasure:** Request deletion of your data ('right to be forgotten').
- **Right to restrict processing:** Ask us to limit how we use your data.
- **Right to data portability:** Receive your data in a machine-readable format.
- **Right to object:** Object to processing based on legitimate interests or for direct marketing.
- **Right to withdraw consent:** Withdraw consent at any time where processing is consent-based.
To exercise these rights, email **privacy@acmeoutdoor.com**. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.
### CCPA Rights (California Residents)
California residents have the following additional rights under the CCPA/CPRA:
- **Right to know:** Request details about the categories and specific pieces of personal information we have collected about you.
- **Right to delete:** Request deletion of your personal information, subject to certain exceptions.
- **Right to opt-out of sale/sharing:** We do not sell personal information. You may opt out of sharing for cross-context behavioural advertising.
- **Right to correct:** Request correction of inaccurate personal information.
- **Right to limit use of sensitive personal information.**
- **Right to non-discrimination:** We will not discriminate against you for exercising your privacy rights.
To submit a CCPA request, email **privacy@acmeoutdoor.com** or use the 'Do Not Sell or Share My Personal Information' link in our website footer.
## Cookies
We use cookies and similar tracking technologies. For full details of the cookies we set, their purposes, and how to manage your preferences, please see our **[Cookie Policy]({your-cookie-policy-url})**.
## Children's Privacy
Our store is not directed at children under the age of 13 (or 16 in the EU). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
## Changes to This Policy
We may update this Privacy Policy from time to time. The 'Last updated' date at the top of this page reflects the most recent revision. We will notify you of material changes by email or by posting a prominent notice on our website.
## Contact Us
For any privacy-related queries or to exercise your rights:
- **Email:** privacy@acmeoutdoor.com
- **Website:** https://acmeoutdoor.com
- **Address:** 123 Trail St, Denver, CO 80202, USA
---
> **Note:** This template was generated by a free tool. Review it with a qualified lawyer before publishing.> worked example
With defaults set to ACME Outdoor on Shopify, using Stripe + Shopify Payments, Google Analytics 4 + Meta Pixel, Klaviyo, with both GDPR and CCPA enabled, the generator produces a 12-section policy. The GDPR block lists all six legal bases and the full eight subject rights. The CCPA block covers the five CPRA rights including the opt-out-of-sharing right. The third-party section explicitly names all selected tools by category.
takeaway, Produces a dual-jurisdiction privacy policy that names your actual tech stack, not a generic template.
> when operators reach for this
- Shopify founder adding a Klaviyo integration who needs to update their privacy policy to name the new data processor.
- WooCommerce operator entering the EU market for the first time who needs a GDPR-compliant policy with proper legal bases.
- DTC brand's in-house lawyer using the output as a structured first draft to review and redline.
- Agency delivering a compliance checklist to a client: generate privacy + cookie policies before site launch.
- Compliance manager auditing five portfolio stores to ensure each names the correct analytics and payment tools.
> the calculation
- sections
who we are → info we collect → how we use it → legal basis (GDPR) → third parties → transfers → retention → your rights → cookies cross-ref → children → changes → contact - GDPR rights block
access, rectification, erasure, restrict processing, portability, object, withdraw consent (rendered when GDPR or UK GDPR is enabled) - CCPA rights block
know, delete, opt-out of sale/sharing, correct, limit sensitive PI, non-discrimination (rendered when CCPA is enabled) - third-party section
payment processors + analytics + email/SMS + shipping + platform, named explicitly from selections - disclaimer
Every generated policy ends with a lawyer-review reminder. This is a template, not legal advice.
> related calculators, store policies
- return policy generatorreturns & refunds policy template for shopify, woocommerce or custom stores
- shipping policy generatorprocessing times, zones, carriers, cut-offs, one form fills the lot
- terms & conditions generatorecommerce t&cs covering orders, refunds, ip, liability
- cookie policy generatorper-tool cookie tables for ga4, meta pixel, klaviyo and more