StillHigh™ Privacy Policy

Last updated: September 28, 2025

StillHigh™ (“StillHigh,” “we,” “us,” or “our”) operates this store and website (the “Services”), powered by Shopify. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit, purchase, or otherwise use the Services. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls for the collection, processing, and disclosure of your personal information.

By using or accessing the Services, you acknowledge that you have read and understand this Privacy Policy.

---

1) Personal Information We Collect

“Personal information” means information that identifies or can reasonably be linked to you. We may collect the following categories (as permitted by law and depending on your interactions):

• Contact details — name, billing/shipping address, phone, email.
• Financial & transaction data — payment method details (processed by our providers), transaction history, order totals.
• Account info — username, password, preferences, settings.
• Usage & device data — IP address, browser, device, network, cookies, pages viewed, actions taken.
• Shopping activity — items viewed/added to cart/wishlist; purchases, returns, exchanges.
• Communications — support messages, email correspondence, reviews.
• Inferences — interests or preferences derived from the above.

De-identified or aggregated information is not considered personal information if it cannot reasonably be linked back to you.

2) How We Collect Information

• Directly from you — account creation, checkout, forms, support requests.
• Automatically — via cookies, pixels, SDKs, and similar technologies when you browse or use the Services.
• Service providers — payment, fulfillment, analytics, security, anti-fraud.
• Partners/third parties — marketing, advertising, social integrations (as permitted by law).

3) How We Use Your Information

• Provide & improve the Services — process orders/payments, fulfill, ship, returns/exchanges, account management, recommendations.
• Personalize & tailor — remember preferences, show relevant products, enhance your shopping experience.
• Marketing & advertising — send promos (email/SMS/post), show ads on our site and others (including interest-based ads).
• Security & fraud prevention — authenticate accounts, prevent abuse, protect our customers and platform.
• Customer support — respond to requests, troubleshoot, and maintain our relationship with you.
• Legal & compliance — comply with laws, enforce policies, respond to lawful requests.

4) How We Disclose Information

We may disclose personal information in the following circumstances:

• Shopify & service providers — IT, hosting, payments, fulfillment, shipping, analytics, support, cloud storage.
• Business & marketing partners — to deliver ads/measurement and marketing services in accordance with their privacy notices (where applicable law allows and with your choices).
• At your direction or with your consent — e.g., social logins, gift shipments.
• Affiliates — within our corporate group for purposes consistent with this Policy.
• Legal & safety — to comply with law or protect rights, property, or safety.
• Business transfers — merger, acquisition, reorganization, or bankruptcy.

5) Relationship with Shopify

Our Services are hosted by Shopify, which collects and processes personal information to power and improve the Services. Shopify may process your data across borders. In certain contexts, Shopify is responsible for responding to requests regarding data it processes to provide enhanced features across merchants.

• Shopify Privacy Policy: shopify.com/legal/privacy
• Shopify Privacy Portal (rights requests): privacy.shopify.com

6) Cookies & Similar Technologies

We use cookies, pixels, tags, and similar technologies to operate the site, remember preferences, analyze traffic, and personalize content/ads. You can control cookies via your browser settings. Note that disabling certain cookies may impact site functionality.

7) Your Rights & Choices

Depending on where you live, you may have some or all of the following rights (subject to legal limits):

• Access/Know — request a copy of the personal information we hold about you.
• Delete — request deletion of personal information we maintain about you.
• Correct — request correction of inaccurate personal information.
• Portability — request a machine-readable copy of certain information.
• Opt-out of sale/share & targeted advertising — where defined by law.
• Manage communications — opt out of marketing emails via the unsubscribe link (we may still send non-promotional messages like order updates).

You can exercise rights as indicated on the Services or by contacting us (see Contact below). For data processed by Shopify, see Shopify’s Privacy Portal.

Global Privacy Control (GPC): If you visit with a supported GPC signal enabled, where required by law we will treat it as an opt-out request for the device/browser used. Other than GPC, we do not respond to other “Do Not Track” signals.

Do Not Sell or Share My Personal Information: Manage your ad/transfer preferences here: /pages/privacy-choices.

8) Security & Retention

We employ administrative, technical, and physical safeguards designed to protect your information. No method of transmission or storage is fully secure, and we cannot guarantee “perfect security.” Do not use unsecure channels to share sensitive data.

We retain personal information for as long as needed to provide the Services, meet legal obligations, resolve disputes, and enforce agreements, then delete or de-identify it consistent with applicable law.

9) Children’s Data

The Services are not intended for children, and we do not knowingly collect personal information from individuals under the age of majority in their jurisdiction. As of the effective date, we do not have actual knowledge of “selling” or “sharing” personal information of individuals under 16. If you are a parent/guardian and believe a child provided information, please contact us to request deletion.

10) International Transfers

We may transfer, store, and process your information outside the country where you live. Where applicable (e.g., EEA/UK), we rely on recognized transfer mechanisms such as the European Commission’s Standard Contractual Clauses or UK equivalents, unless the destination has an adequacy decision.

11) Complaints & Appeals

If you have concerns about our processing, please contact us first so we can try to resolve them. Depending on your location, you may have the right to appeal our decision or lodge a complaint with your local data protection authority.

12) Changes to This Privacy Policy

We may update this Policy from time to time for operational, legal, or regulatory reasons. We will post updates on this page and revise the “Last updated” date above. Continued use of the Services after changes are posted constitutes acceptance of the updated Policy.

13) Contact Us

Questions about our privacy practices or this Policy, or to exercise your rights:

• info@stillhigh.com
• 719-431-1673
  

---

Thank you for being part of the StillHigh™ Tribe. Stay safe, stay seen, stay StillHigh.