Privacy policy

PRIVACY POLICY

Last updated: September 1, 2026

Promise Cookies LLC, doing business as Promises From Heaven, operates this store and website, including all related information, content, features, tools, products, and services, to provide you, the customer, with a curated shopping experience (the “Services”). Promises From Heaven is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls regarding the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using or accessing any of the Services, you acknowledge that you have read and understand the collection, use, and disclosure of your information as described in this Privacy Policy.

Personal Information We Collect or Process

When we use the term “personal information,” we are referring to information that identifies or can reasonably be linked to you or another person. Personal information does not include information collected anonymously or de-identified so that it cannot identify or reasonably be linked to you.

We may collect or process the following categories of personal information, including inferences drawn from this information, depending on how you interact with the Services, where you live, and as permitted or required by applicable law:

Contact details, including your name, billing address, shipping address, phone number, and email address.
Financial information, including payment card information, financial account information, transaction details, form of payment, payment confirmation, and other payment details.
Account information, including your username, password, security questions, preferences, and settings.
Transaction information, including items you view, place in your cart, add to a wishlist, purchase, return, exchange, or cancel, as well as your previous transactions.
Communications with us, including information you provide when contacting us or submitting a customer-support inquiry.
Device information, including information about your device, browser, network connection, IP address, and other unique identifiers.
Usage information, including information about how and when you interact with or navigate the Services.

Sources of Personal Information

We may collect personal information from the following sources:

Directly from you, including when you create an account, visit or use the Services, place an order, communicate with us, subscribe to marketing communications, or otherwise provide personal information.
Automatically through the Services, including from your device when you visit our website or use our products or services, and through cookies and similar technologies.
From our service providers, including when we engage them to provide technology or other services and they collect or process personal information on our behalf.
From our partners or other third parties, as permitted by applicable law.

How We Use Your Personal Information

Depending on how you interact with us or which Services you use, we may use personal information for the following purposes:

Providing, Tailoring, and Improving the Services. We use personal information to provide the Services, perform our contract with you, process payments, fulfill and ship orders, remember your preferences and products you are interested in, send notifications related to your account or orders, process purchases and other transactions, create and manage accounts, facilitate permitted refunds or replacements, enable reviews, and provide a customized shopping experience. We may also use this information to improve our products, Services, and customer experience.
Marketing and Advertising. With your consent where required, we may use personal information to send marketing, advertising, and promotional communications by email, text message, or postal mail. We may also use information to display advertisements for products or services on the Services or other websites, including advertisements based on products you previously purchased, viewed, or placed in your cart and other activity on the Services.
Security and Fraud Prevention. We use personal information to authenticate accounts, provide a secure payment and shopping experience, detect, investigate, prevent, or take action regarding possible fraudulent, illegal, unsafe, or malicious activity, protect public safety, and secure our Services. If you create an account, you are responsible for protecting your account credentials and should not share your username, password, or other access information with anyone.
Communicating with You. We use personal information to provide customer support, respond to inquiries, provide effective Services, send order and shipping updates, and maintain our business relationship with you.
Legal Reasons. We may use personal information to comply with applicable laws, respond to valid legal processes or requests from law-enforcement or government agencies, participate in civil discovery or litigation, enforce our terms and policies, and investigate possible violations of our terms, policies, or legal rights.

How We Disclose Personal Information

In certain circumstances, we may disclose personal information to third parties for legitimate purposes subject to this Privacy Policy. These circumstances may include:

With Shopify, Mailchimp, payment processors, shipping carriers, fulfillment providers, technology vendors, and other service providers that perform services on our behalf, including payment processing, data analytics, customer support, cloud storage, order fulfillment, shipping, email marketing, and text-message marketing.
With business and marketing partners that provide marketing services or advertise to you. For example, we use Shopify to support personalized advertising through third-party services based on online activity across different merchants and websites. These partners use information in accordance with their own privacy notices.
When you direct or request us to disclose information, or otherwise consent to disclosure, such as when information must be provided to a shipping carrier to deliver your order or when you use social-media widgets or login integrations.
With our affiliates or within our corporate group, if applicable.
In connection with a business transaction such as a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets.
When required to comply with applicable legal obligations, respond to subpoenas, search warrants, court orders, or similar requests, enforce our terms or policies, or protect the Services, our business, our rights, or the rights and safety of our customers or others.

Depending on where you reside, you may have the right to direct us not to sell or share personal information for targeted advertising based on activity across different businesses, websites, or services. You can exercise applicable opt-out rights through our Data Sharing Opt-Out page.

Relationship With Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services to provide and improve the Services.

Information submitted through the Services will be transmitted to and shared with Shopify and other service providers, which may be located in countries other than where you reside, to provide and improve the Services.

To help protect, grow, and improve our business, we may use Shopify features that incorporate data and information obtained from interactions with our store, other merchants, and Shopify. To provide these features, Shopify may use personal information collected from your interactions with our store, other merchants, and Shopify. In these circumstances, Shopify is responsible for processing personal information, including responding to certain requests to exercise privacy rights regarding Shopify’s use of that information.

To learn more about how Shopify uses personal information and the rights that may be available to you, please review the Shopify Consumer Privacy Policy and visit the Shopify Privacy Portal.

Cookies and Similar Technologies

We and our service providers may use cookies, pixels, tags, and similar technologies to operate and improve the Services, remember preferences, understand how visitors use the website, measure the effectiveness of advertising, provide personalized experiences, and support security and fraud prevention.

Depending on where you live, you may be able to manage certain cookie and privacy preferences through the cookie banner or privacy controls displayed on our website.

Third-Party Websites and Links

The Services may contain links to websites or online platforms operated by third parties. If you follow a link to a website not affiliated with or controlled by us, you should review that website’s privacy and security policies and other applicable terms.

We do not guarantee and are not responsible for the privacy, security, accuracy, completeness, or reliability of third-party websites. Information you provide through public or semi-public venues, including third-party social-networking platforms, may be viewable and used by other users or third parties.

The inclusion of a link does not necessarily indicate our endorsement of the third-party platform, its content, or its owners or operators.

Children’s Data

The Services are not intended for use by children, and we do not knowingly collect personal information from children under the age of majority in their jurisdiction.

If you are the parent or legal guardian of a child who has provided personal information to us, you may contact us using the contact information below to request that the information be deleted.

As of the effective date of this Privacy Policy, we do not have actual knowledge that we sell or share, as those terms may be defined under applicable law, the personal information of individuals under 16 years of age.

Security and Retention of Your Information

No security system is perfect or impenetrable, and we cannot guarantee perfect security. Information sent to us may not be secure while in transit. Please do not use unsecured channels to send sensitive or confidential information.

How long we retain personal information depends on factors such as whether the information is needed to maintain an account, fulfill an order, provide the Services, comply with legal obligations, resolve disputes, prevent fraud, or enforce contracts and policies.

Your Rights and Choices

Depending on where you live, you may have some or all of the rights described below. These rights are not absolute, may apply only in certain circumstances, and may be subject to exceptions permitted by applicable law.

Right to Access or Know. You may have the right to request access to personal information we maintain about you.
Right to Delete. You may have the right to request that we delete personal information we maintain about you.
Right to Correct. You may have the right to request correction of inaccurate personal information.
Right to Portability. You may have the right to receive a copy of certain personal information and, in some circumstances, request that it be transferred to a third party.
Right to Opt Out of Sale, Sharing, or Targeted Advertising. Depending on where you reside, you may have the right to opt out of the sale or sharing of personal information or the processing of personal information for targeted advertising. You can exercise applicable rights through our Data Sharing Opt-Out page.

If you visit our website with the Global Privacy Control preference signal enabled, we will treat it as an opt-out request for the device and browser you use where required by applicable law. If Shopify can associate the device sending the signal with a Shopify account, the opt-out request may also be applied to that account. To learn more, visit Global Privacy Control.

Other than Global Privacy Control signals where applicable, we do not currently respond to other “Do Not Track” signals sent by browsers or devices.

Managing Communication Preferences

With your consent where required, we may send promotional emails or text messages.

You can unsubscribe from promotional emails at any time by clicking the unsubscribe link included in those emails. If you unsubscribe from promotional messages, we may still send non-promotional communications, including information about your account, purchases, preorders, shipping, or customer-service requests.

You may opt out of promotional text messages at any time by replying STOP. Reply HELP for assistance. Consent to receive marketing text messages is not a condition of purchase. Message and data rates may apply.

Exercising Your Privacy Rights

You may exercise applicable rights through the options provided within the Services or by contacting us using the contact information below.

We will not discriminate against you for exercising a privacy right. We may need to verify your identity before processing a request, as permitted or required by applicable law.

You may be permitted to designate an authorized agent to make a request on your behalf. Before accepting a request from an authorized agent, we may require proof that you authorized the agent to act for you and may require you to verify your identity directly with us.

We will respond to verified requests within the timeframe required by applicable law.

To learn more about how Shopify processes personal information and handles applicable privacy requests, visit the Shopify Privacy Portal.

Complaints

If you have a complaint about how we process personal information, please contact us using the contact information below.

Depending on where you live, you may have the right to appeal our response to your request or submit a complaint to your local privacy or data-protection authority.

International Transfers

We may transfer, store, and process personal information outside the country where you live.

If personal information is transferred outside the European Economic Area or United Kingdom, we will rely on recognized transfer mechanisms, such as the European Commission’s Standard Contractual Clauses or equivalent mechanisms recognized by the appropriate United Kingdom authority, unless the destination country has been determined to provide an adequate level of protection.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes to our practices or for operational, legal, or regulatory reasons.

We will post the revised Privacy Policy on this website, update the “Last updated” date, and provide any additional notice required by applicable law.