Privacy policy
Privacy Policy
Superellipse 3D Limited ("Superellipse," "we," "us," or "our")
Last Updated: January 7, 2025
This Privacy Policy describes how Superellipse 3D Limited (operating as Superellipse, superellipse.co) collects, uses, and discloses your Personal Information when you visit or make a purchase from our website https://superellipse.co (the "Site"), use our services, or otherwise interact with us.
By using our Site and services, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
We collect Personal Information from various sources, as described below:
a. Information You Provide to Us Directly:
* Contact Information: Such as your name, email address, billing address, shipping address (if physical goods are ever offered), and phone number (if provided), business name (if provided).
* Order Information: Details about the products or services you purchase.
* Payment Information: When you make a purchase, your payment information (e.g., credit card details, PayPal account information) is processed by our third-party payment processors (e.g., Shopify Payments, PayPal). We do not directly store your full credit card numbers on our servers.
* Account and Membership Information: If you create an account or subscribe to a membership (e.g., through services like Appstle Memberships), your username, password, membership status, team account details (if applicable), and other registration details.
* Communications: When you contact us with inquiries, provide feedback, or respond to surveys or questionnaires.
b. Information We Collect Automatically (Usage Data):
When you access the Site, our servers (and those of our third-party service providers, including Shopify, and potentially infrastructure services like Cloudflare for content delivery or AWS for specific backend functionalities) may automatically collect information about your device and how you interact with our Site. This may include:
* Device Information: IP address, browser type, operating system, device identifiers, information about your internet service provider.
* Usage Information: Pages you viewed, links you clicked, the time spent on pages, search queries, features used, customer tags assigned through automated scripts (which do not typically include direct personal identifiers like email addresses for these specific script functions), and other actions you take on the Site.
* Location Information: We may infer your general geographic location based on your IP address.
This information is collected using cookies, web beacons, log files, pixels, and similar technologies, as further detailed in Section 4.
c. Information from Third Parties:
We may receive information about you from third-party services, such as social media platforms if you interact with our brand on those platforms, or from analytics providers.
2. How We Use Your Information (And Our Lawful Bases for Processing)
We use your Personal Information for various purposes. For individuals in the European Economic Area (EEA), UK, and Switzerland, we rely on the following lawful bases for processing your Personal Information:
-
To Provide and Manage Our Services (Lawful Basis: Performance of a Contract with you; Our Legitimate Interests to operate and improve our services)
-
Fulfill your orders and provide you with the digital products or services you purchased.
-
Process your payments and prevent transactional fraud.
-
Create, manage, and maintain your account and/or membership, including team account functionality (e.g., using Appstle Memberships and custom AWS scripts for verification).
-
Communicate with you about your orders, account, services, or inquiries (e.g., transactional emails, service updates).
-
Provide customer support.
-
-
For Marketing and Advertising (Lawful Basis: Your Consent for most marketing activities, especially those involving cookies or electronic direct marketing; Our Legitimate Interests for certain types of pre-existing customer relationship marketing, subject to your right to opt-out)
-
Send you promotional communications, newsletters, and special offers via email (using services such as Klaviyo or Mailchimp, when implemented), if you have opted in to receive them (Consent). You can opt-out at any time by using the unsubscribe link in such emails or contacting us.
-
Personalize your experience by tailoring content and advertising to your interests. This includes using data collected through cookies and pixels from platforms such as Google Analytics, Pinterest Ads, Google Ads, and Meta (Facebook/Instagram) Ads to show you relevant ads on other websites (retargeting) and measure ad effectiveness. We will only do this where you have provided consent for the related cookies via our cookie consent banner, or where otherwise permitted by applicable law.
-
-
For Analytics and Improvement (Lawful Basis: Our Legitimate Interests to understand and improve our services; Your Consent for certain analytics cookies)
-
Perform research and analytics to understand how users interact with our Site and services.
-
Improve and optimize our Site, products, and services.
-
Monitor and analyze trends, usage, and activities to enhance user experience and service offerings.
-
-
To Comply with Legal Obligations (Lawful Basis: Legal Obligation)
-
Comply with applicable laws, regulations, legal processes, or governmental requests.
-
Protect our rights, privacy, safety, or property, and/or that of our affiliates, you, or others.
-
Enforce our terms and conditions.
-
3. How We Share Your Information
We may share your Personal Information with third parties in the following circumstances:
-
With Service Providers: We share information with third-party vendors, consultants, and other service providers who perform services on our behalf or help us operate our business. These may include:
-
Shopify: Our Site is hosted on Shopify Inc. They provide us with the online e-commerce platform that allows us to sell our products and services to you. You can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy.
-
Payment Processors: (e.g., Shopify Payments, PayPal) to securely process your payments.
-
Analytics Providers: (e.g., Google Analytics) to help us understand Site usage. We ensure that data sharing with Google Analytics for advertising features is subject to your consent.
-
Advertising Partners: Such as Meta (Facebook/Instagram), Google (for Google Ads), and Pinterest. We share information collected via cookies and pixels with these partners to enable us to show you targeted advertisements on their platforms and other websites, to measure the effectiveness of our campaigns, and to create custom or lookalike audiences. This sharing for targeted advertising may be considered a "sale" or "sharing" under certain U.S. state privacy laws (such as in California, Colorado, Virginia, etc.), for which you have the right to opt-out as described in Section 7 and on our "Do Not Sell or Share My Personal Information" page located here.
-
Email Marketing Platforms: When implemented, services like Klaviyo or Mailchimp to manage and send marketing email communications, based on your consent.
-
Infrastructure Providers:
-
Cloudflare: Used for content delivery network (CDN) services, DDoS protection, security, file delivery for digital asset downloads, and logging/analytics of network traffic and potential security threats. Cloudflare may collect and process certain technical data such as IP addresses, request headers, and usage patterns to help us protect our digital asset library, prevent abuse, and enforce our Terms of Service. Where possible, this data is anonymized or pseudonymized.
-
Amazon Web Services (AWS): Used for hosting custom scripts or backend functions, such as those that help cross-reference team licenses and verify team access between members for our membership services.
-
-
Membership Management Tools: Apps like Appstle Memberships to create and manage customer memberships and related functionalities.
-
Other service providers for customer support, fraud prevention, shipping (if applicable), etc.
These service providers are generally contractually obligated (or through their terms of service) to protect your information and use it only for the services we have engaged them to provide.
-
-
For Legal Reasons: We may disclose your information if required to do so by law or in the good faith belief that such action is necessary to comply with a legal obligation, protect and defend our rights or property, prevent or investigate possible wrongdoing, or protect the personal safety of users or the public.
-
Business Transfers: If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, receivership, sale of company assets, or transition of service to another provider, your Personal Information may be transferred as part of such a transaction as permitted by law and/or contract.
-
With Your Consent: We may share your information for other purposes with your explicit consent.
4. Cookies, Pixels, and Tracking Technologies
Our Site uses cookies and similar tracking technologies (such as web beacons, pixels, and tags from advertising partners like Google, Meta (Facebook/Instagram), and Pinterest) to collect and use Personal Information about you, to operate our website, and to serve interest-based advertising.
-
What are these technologies?
-
Cookies: Small data files placed on your device that allow us to recognize your browser, remember your preferences, and enable certain functionalities (like keeping items in your shopping cart).
-
Pixels/Tags/Web Beacons: Tiny pieces of code embedded on our Site (and in some emails) that transmit information about your interaction with our Site or emails to us or our third-party partners. For example, advertising pixels help us and our ad partners show you relevant ads on other websites based on your activity on our Site (retargeting) and measure the effectiveness of our ad campaigns.
-
-
How We Use Them & Types of Cookies:
-
Strictly Necessary Cookies: Essential for the Site to function (e.g., enabling cart functionality, security features, account login). These do not require consent but are active by default.
-
Performance & Analytics Cookies: Help us understand how visitors interact with our Site (e.g., which pages are popular, how users navigate) by collecting information anonymously or pseudonymously (e.g., Google Analytics). This helps us improve our Site.
-
Functional/Personalization Cookies: Allow the Site to remember choices you make (like language preference or region) and provide enhanced, more personal features.
-
Marketing & Advertising Cookies/Pixels: Used by us and our advertising partners (Meta/Facebook, Google, Pinterest) to:
-
Deliver advertisements more relevant to you and your interests on other websites and social media platforms.
-
Limit the number of times you see an advertisement.
-
Help measure the effectiveness of our advertising campaigns.
-
Build profiles about your interests.
-
-
-
Your Choices & Managing These Technologies:
-
Cookie Consent Banner: When you first visit our Site, particularly if you are from a region requiring opt-in consent (like the EEA, UK), you will be presented with a cookie consent banner. This banner allows you to accept all cookies, reject non-essential cookies, or customize your preferences for different categories of cookies (Performance, Functional, Marketing). We will only set non-essential cookies if you provide your explicit consent through this banner. You can typically change your cookie preferences at any time via a link or icon on our Site (often found in the footer or through the initial banner's settings).
-
Browser Settings: Most web browsers allow you to control cookies through their settings. You can usually set your browser to remove or reject browser cookies. Please note that if you choose to remove or reject cookies, this could affect the availability and functionality of some parts of our Site.
-
Advertising Opt-Outs:
-
You can opt out of targeted advertising from many ad networks by visiting their respective settings pages (e.g., FACEBOOK - https://www.facebook.com/settings/?tab=ads; GOOGLE - https://www.google.com/settings/ads/anonymous; PINTEREST - From your Pinterest account settings).
-
Industry opt-out portals like the Digital Advertising Alliance’s opt-out portal (http://optout.aboutads.info/) provide a centralized place to opt out from some interest-based advertising from participating companies.
-
-
U.S. State Specific Opt-Outs: Residents of certain U.S. states (such as California, Colorado, Virginia, etc.) have the right to opt out of the "sale" or "sharing" of their personal information for targeted advertising. You can exercise this right by visiting our "Do Not Sell or Share My Personal Information" page here, in our website footer, or by enabling a recognized opt-out preference signal like the Global Privacy Control (GPC) in your browser, which we are configured to honour.
-
5. Data Security
We take reasonable measures, including administrative, technical, and physical safeguards, to protect your Personal Information from loss, theft, misuse, and unauthorized access, disclosure, alteration, and destruction. Our store is hosted on Shopify, which implements its own robust security measures for the platform. However, no internet or email transmission is ever fully secure or error-free, so you should take special care in deciding what information you send to us. We encourage you to use strong passwords for your account and to keep your login credentials confidential.
6. Data Retention
We will retain your Personal Information only for as long as is necessary for the purposes set out in this Privacy Policy and to comply with our legal obligations (such as for tax, accounting, or other legal requirements, or to resolve disputes and enforce our agreements). For example, we retain your order information and account information for our records while your account is active and for a reasonable period thereafter, or as long as required by applicable law, unless and until you ask us to delete this information (subject to legal or operational needs that require retention).
7. Your Rights and Choices
Depending on your location and applicable data protection laws, you may have certain rights regarding your Personal Information. These may include:
-
The right to know more about and access your Personal Information that we collect and process.
-
The right to request correction of inaccurate Personal Information we hold about you.
-
The right to request deletion (erasure) of your Personal Information, subject to certain legal exceptions.
-
For residents of certain U.S. states (e.g., California, Colorado, Virginia):
-
The right to opt-out of the "sale" or "sharing" of your personal information for purposes of targeted advertising. You can exercise this right by visiting our "Do Not Sell or Share My Personal Information" page here, in our website footer, or by enabling a recognized opt-out preference signal like the Global Privacy Control (GPC) in your browser.
-
The right to limit the use and disclosure of sensitive personal information (if we collect it, which we generally do not for standard store operations).
-
The right to non-discrimination for exercising your privacy rights.
-
-
Other rights as afforded by applicable law (such as rights related to data portability or restriction of processing under GDPR, detailed further below).
To exercise any of these rights, please contact us using the details provided in Section 13 ("Contact Us"). We may need to verify your identity before processing your request. We will respond to your request within the timeframes required by applicable law.
8. Specific Rights for Residents of the European Economic Area (EEA), UK, and Switzerland
If you are a resident of the EEA, UK, or Switzerland, you have the following data protection rights under the GDPR (and its UK/Swiss equivalents):
-
The right to access, correct, update, or request deletion of your Personal Information.
-
The right to object to processing of your Personal Information when it's based on our legitimate interests (or those of a third party), and separately, the right to object at any time to processing of your Personal Information for direct marketing purposes.
-
The right to request restriction of processing of your Personal Information.
-
The right to data portability of your Personal Information (to receive it in a structured, commonly used, machine-readable format).
-
The right to withdraw consent at any time if we have collected and processed your Personal Information with your consent. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your Personal Information conducted in reliance on lawful processing grounds other than consent.
-
The right to lodge a complaint with a data protection authority about our collection and use of your Personal Information. For more information, please contact your local data protection authority.
If you wish to exercise any of these rights, please contact us at support@superellipse.co or via our contact page.
9. Specific Information for Canadian Residents (PIPEDA)
Canadian residents have rights regarding their personal information under the Personal Information Protection and Electronic Documents Act (PIPEDA). These include:
-
The right to access your personal information held by us.
-
The right to challenge the accuracy and completeness of your information and have it amended as appropriate.
-
Consent: We will obtain your consent for the collection, use, or disclosure of your personal information, except where otherwise permitted or required by law. You may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice.
-
We are accountable for the personal information we collect and have designated individuals responsible for our compliance with PIPEDA.
If you are a Canadian resident and wish to exercise these rights or have questions about our privacy practices, please contact us at support@superellipse.co.
10. Children's Privacy
Our Site is not intended for individuals under the age of 16. We do not knowingly collect Personal Information from children under 16. If we become aware that we have collected Personal Information from a child under 16 without verification of parental consent, we will take steps to remove that information from our servers. If you believe we might have any information from or about a child under 16, please contact us.
11. International Data Transfers
Your information, including Personal Information, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction. As our store is hosted on Shopify (a Canadian company with global operations) and we utilize other global service providers (e.g., in the United States for services like AWS, Google, Meta, Pinterest), your data may be processed in Canada, the United States, Ireland (for some Shopify EU data), or other countries where these service providers operate.
If we transfer Personal Information from the EEA, UK, or Switzerland to countries not deemed by the relevant authorities to provide an adequate level of data protection, we will rely on appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission (or the UK's Information Commissioner's Office, or Swiss authorities, as applicable), or other lawful transfer mechanisms to ensure your Personal Information receives an adequate level of protection.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top. You are advised to review this Privacy Policy periodically for any changes.
13. Contact Us
If you have any questions about this Privacy Policy, our privacy practices, or if you wish to exercise any of your rights, please contact us:
-
By Email: support@superellipse.co
-
Via our Contact Page: https://superellipse.co/pages/contact-us