shomby Privacy Policy

Effective Date: January 7, 2026

shomby ("we," "us," or "our") operates a local commerce platform connecting users with businesses in the San Juan Islands. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our website, mobile applications, and related services (collectively, the "Platform"). By using the Platform, you consent to the practices described in this policy.

1. Information We Collect

Information You Provide

We collect information you provide directly, including: account registration information such as your name, email address, phone number, and password; order information including delivery address, order history, and payment method details; communications you send to us, businesses, or through customer support; and any other information you choose to provide, such as reviews or feedback.

Information Collected Automatically

When you use the Platform, we automatically collect certain information, including: device information such as device type, operating system, and unique device identifiers; log information including IP address, browser type, pages viewed, access times, and referring URL; location information based on your IP address or, with your permission, more precise location from your mobile device; and usage information about how you interact with the Platform, including search queries and features used.

Information from Third Parties

We may receive information from third parties, including: payment processors such as Stripe, who provide transaction confirmation and fraud prevention data; businesses on our Platform who may provide order fulfillment information; and analytics providers such as Google Analytics who help us understand Platform usage.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Platform
• Process transactions and send related information, including order confirmations and receipts
• Connect you with local businesses and facilitate orders
• Send you technical notices, updates, security alerts, and support messages
• Respond to your comments, questions, and customer service requests
• Communicate with you about products, services, offers, and events, and provide news and information we think will interest you
• Monitor and analyze trends, usage, and activities on the Platform
• Detect, investigate, and prevent fraudulent transactions, abuse, and other illegal activities
• Personalize and improve your experience on the Platform
• Comply with legal obligations and enforce our terms and policies

3. How We Share Your Information

We may share your information in the following circumstances:

With Businesses: When you place an order, we share necessary information with the business to fulfill your order, including your name, contact information, and order details.

With Service Providers: We share information with third-party vendors and service providers who perform services on our behalf, such as payment processing (Stripe), hosting, analytics, and customer support. These providers are contractually obligated to protect your information.

For Legal Reasons: We may disclose information if we believe disclosure is necessary to comply with applicable laws, regulations, or legal processes; protect the rights, property, or safety of shomby, our users, or others; or detect, prevent, or address fraud, security, or technical issues.

Business Transfers: If shomby is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or uses of your information.

With Your Consent: We may share information with third parties when you give us consent to do so.

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and store information about your interactions with the Platform. Cookies are small data files stored on your device that help us improve the Platform and your experience. We use cookies to remember your preferences and settings, authenticate your identity, analyze Platform traffic and usage, and deliver relevant content.

Most web browsers are set to accept cookies by default. You can usually modify your browser settings to decline cookies if you prefer, but this may affect your ability to use certain features of the Platform.

Google Analytics: We use Google Analytics to help us understand how users interact with the Platform. Google Analytics collects information such as how often users visit the Platform, what pages they visit, and what other sites they used prior to coming to the Platform. We use this information to improve the Platform and your experience. Google Analytics collects the IP address assigned to you on the date you visit the Platform, but not your name or other identifying information. Google's ability to use and share information collected by Google Analytics is restricted by the Google Analytics Terms of Service and the Google Privacy Policy. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on, available at https://tools.google.com/dlpage/gaoptout.

5. Data Retention

We retain your personal information for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. When we no longer need your information, we will securely delete or anonymize it. Account information is generally retained for as long as your account is active. Transaction records may be retained for up to seven years for tax and legal compliance purposes. You may request deletion of your account and associated data at any time, subject to legal retention requirements.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, secure authentication systems, regular security assessments, and access controls limiting who can view personal data. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

7. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

• Access and Portability: You may request a copy of the personal information we hold about you.
• Correction: You may request that we correct inaccurate or incomplete information.
• Deletion: You may request that we delete your personal information, subject to certain exceptions.
• Opt-Out of Marketing: You may opt out of receiving promotional communications by following the unsubscribe instructions in those messages or by contacting us.

To exercise these rights, please contact us using the information provided below. We will respond to your request within the timeframe required by applicable law.

8. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including:

• The right to know what personal information we collect, use, disclose, and sell
• The right to request deletion of your personal information
• The right to opt out of the sale or sharing of your personal information
• The right to non-discrimination for exercising your privacy rights

shomby does not sell personal information as defined under the CCPA/CPRA. To submit a request, please contact us using the information below. We may need to verify your identity before processing your request.

9. Children's Privacy

The Platform is not intended for children under the age of 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take steps to delete that information as quickly as possible. If you believe a child under 13 has provided us with personal information, please contact us.

10. Third-Party Links and Services

The Platform may contain links to third-party websites, services, or applications that are not operated by us. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you access through our Platform. We are not responsible for the privacy practices of third parties.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the "Effective Date" at the top of this policy and, where appropriate, providing additional notice such as an email notification or a prominent notice on the Platform. We encourage you to review this Privacy Policy periodically to stay informed about our practices.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

shomby
Email: support@shomby.com
San Juan Island, Washington