Privacy Policy

Last updated: August 11, 2025

Privacy Policy

Maverick & Co. operates this website and related services (the “Services”). We partner with Shopify to power our online store. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit, interact with, or make a purchase through the Services. If there is any conflict between our Terms of Service and this Privacy Policy regarding personal information, this Privacy Policy controls.

Please read this Privacy Policy carefully. By using the Services, you acknowledge that you have read and understand how we handle your information as described here.

Personal Information We Collect

“Personal information” means information that identifies, relates to, or could reasonably be linked to you. It does not include de‑identified or aggregated information. Depending on how you use the Services and your location, we may collect the following categories:

  • Contact details: name, billing and shipping address, phone number, email address.
  • Financial and transaction data: payment card details (processed by our payment providers), payment confirmations, order history, returns and exchanges.
  • Account information: username, password, preferences, settings, saved items/wishlists.
  • Device and network information: IP address, browser and device type, operating system, language, time zone, unique identifiers, and network information.
  • Usage information: pages viewed, products viewed or added to cart, search terms, clickstream and interaction data.
  • Communications: content of messages you send to us (e.g., customer support inquiries, reviews).
  • Inferences: insights drawn from the above to tailor content and improve Services.

Sources of Personal Information

  • Directly from you when you browse, create an account, make a purchase, or contact us.
  • Automatically via cookies, pixels, tags, log files, and similar technologies when you use the Services.
  • Service providers and partners who perform services for us or enable features (see “How We Disclose Personal Information”).

How We Use Personal Information

  • Provide, tailor, and improve the Services: process orders and payments, fulfill and deliver, manage accounts, remember preferences, recommend products, handle returns and exchanges, enable reviews.
  • Marketing and advertising: send promotional emails/SMS/postal mail (where permitted), and show online ads on our Services and third‑party sites based on your activity and preferences.
  • Security and fraud prevention: authenticate accounts, detect and investigate fraud or misuse, secure our systems.
  • Customer support and communications: respond to inquiries, provide updates about orders or account, and maintain our relationship with you.
  • Legal and compliance: comply with laws, respond to lawful requests, enforce our terms and policies.

How We Disclose Personal Information

We may disclose personal information in the following circumstances:

  • With Shopify (store hosting, checkout, payments, analytics, risk and fraud tools) and other service providers acting on our behalf for: IT and cloud hosting, payment processing, analytics, support, email/SMS, fulfillment, and shipping. Our current key providers include: Shopify, Google, Meta (Facebook/Instagram), Microsoft Advertising (Bing), Klaviyo (email/SMS), Freshdesk (support), and Hotjar (experience analytics).
  • With business and marketing partners to advertise and measure performance (they will use information per their own privacy notices). Depending on your location, you may have the right to opt out of “sale” or “sharing” of personal information or targeted advertising. See “Your Rights and Choices.”
  • With your consent or direction (e.g., shipping carriers, social media logins/widgets).
  • Within our corporate group and in connection with a business transaction (e.g., merger, acquisition).
  • For legal reasons: to comply with law, lawful requests, or to protect our rights, users, or the public.

Our Relationship with Shopify

Shopify hosts the Services and processes personal information to provide and improve the Services. Some enhanced features may rely on Shopify’s use of information from your interactions with our store and other merchants. In those cases, Shopify is responsible for that processing and for responding to requests to exercise your rights regarding Shopify’s use. To learn more about Shopify’s privacy practices and your choices, see the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

Behavioral Advertising and Analytics

We use analytics and advertising tools to understand usage and deliver relevant ads.

Industry choices: Network Advertising Initiative (NAI) at networkadvertising.org and Digital Advertising Alliance (DAA) at optout.aboutads.info.

Hotjar

We use Hotjar to better understand user behavior and improve the experience. Hotjar uses cookies and similar technologies to collect device information (e.g., IP address processed during your session and stored in de‑identified form), device type/screen size, browser info, country location, preferred language, and on‑site interactions. Hotjar stores this on our behalf in a pseudonymized profile and is contractually prohibited from selling the data. Learn more at Hotjar’s help center: About Hotjar.

Minors

The Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child provided personal information, contact us using the details below to request deletion.

Security and Retention

We implement reasonable technical and organizational measures to protect personal information. No method is 100% secure, and transmissions may not be secure in transit. Do not use unsecure channels to send sensitive information.

We retain personal information for as long as necessary to provide the Services, manage our business, comply with legal obligations, resolve disputes, and enforce agreements.

Automated Decision‑Making

We do not engage in fully automated decision‑making that produces legal or similarly significant effects about you. Shopify may use limited automated tools to help prevent fraud (e.g., temporary denylisting of IP addresses or payment cards associated with suspicious activity).

Your Rights and Choices

Depending on your location, you may have some or all of the following rights, subject to legal limitations:

  • Access/Know the personal information we hold about you.
  • Delete personal information we maintain about you.
  • Correct inaccurate personal information.
  • Portability to obtain a copy and request transfer to another service (where feasible).
  • Opt out of sale/sharing/targeted advertising (where applicable law defines these terms).
  • Manage marketing communications by using the unsubscribe link in our emails. We may still send non‑marketing messages (e.g., order updates).

If you reside in the UK or EEA

  • Object to or restrict processing for certain purposes.
  • Withdraw consent where we rely on consent. This will not affect prior processing.

You can exercise rights where indicated on the Services or by contacting us (see “Contact”). We may need to verify your identity and, where permitted, you may designate an authorized agent to act on your behalf. We will not discriminate against you for exercising your rights.

For information about how Shopify uses your personal information and related rights, see Shopify’s Privacy Portal.

International Transfers

We may transfer, store, and process your personal information outside your country of residence. If we transfer personal information from the UK or EEA, we rely on recognized transfer mechanisms, such as the European Commission’s Standard Contractual Clauses or UK‑approved equivalents, unless the destination has been deemed to provide an adequate level of protection.

Cookies

Cookies are small files placed on your device. We use functional, performance, analytics, and advertising cookies to operate and improve the Services, remember preferences, and understand usage.

Cookies Necessary for the Functioning of the Store

Name Function
_ab Access to admin.
_secure_session_id Storefront navigation.
cart Shopping cart.
cart_sig Checkout.
cart_ts Checkout.
checkout_token Checkout.
secret Checkout.
secure_customer_sig Customer login.
storefront_digest Customer login.
_shopify_u Update customer account.

Reporting and Analytics

Name Function
_tracking_consent Tracking preferences.
_landing_page Track landing pages.
_orig_referrer Track landing pages.
_s Shopify analytics.
_shopify_s Shopify analytics.
_shopify_sa_p Marketing and referrals analytics.
_shopify_sa_t Marketing and referrals analytics.
_shopify_y Shopify analytics.
_y Shopify analytics.

Cookie duration depends on whether it is a session or persistent cookie. Most persist from 30 minutes to two years. You can control cookies in your browser settings. Blocking cookies may impact site functionality. For general information, visit allaboutcookies.org. Blocking cookies may not fully prevent information sharing with third parties for advertising. See “Behavioral Advertising and Analytics” for opt‑out options.

Do Not Track

There is no consistent industry standard for responding to “Do Not Track” signals. We do not alter our practices when we detect a Do Not Track signal.

Complaints

If you have concerns about our handling of personal information, please contact us (see “Contact”). Depending on where you live, you may have the right to appeal our decision or lodge a complaint with your local data protection authority. For the EEA, a list of supervisory authorities is available here.

Changes to This Policy

We may update this Privacy Policy from time to time for operational, legal, or regulatory reasons. When we do, we will post the revised policy and update the “Last updated” date. Where required by law, we will provide additional notice.

Contact

If you have questions, want to exercise your rights, or make a complaint, contact us:

  • Email: support@maverickandco.co
  • Mailing Address (Hong Kong): Maverick Concept Limited, Unit F, 33/F, YHC Tower, 1 Sheung Yuet Road, Kowloon Bay, Hong Kong

For the purpose of applicable data protection laws, Maverick & Co. is the data controller of your personal information processed in connection with the Services.