Effective Date: October 16, 2026

1. Who We Are
Peach Crate ("we", "us", "our")
Website: www.peachcrate.com
Email: hey@peachcrate.com
Controller for data protection purposes: Peach Crate

2. What Information We Collect
We collect information in three ways:

a) You give us directly: name, shipping address, billing address, email, phone number, order information, messages you send to customer support, and if you create an account, username and password.

b) Automatically: device information (IP address, browser type, operating system), how you use our site (pages viewed, time spent, links clicked), your approximate location from IP, and referral source.

c) From third parties: Shopify (our store platform), payment processors (Stripe, PayPal, Shopify Payments), shipping carriers, and analytics/advertising partners (Google Analytics, Meta Pixel).

We do not store your full credit card number. Payments are processed securely by our payment processors.

3. How We Use Your Information

• To process, fulfill and ship your orders and handle returns
• To send you order confirmations, tracking, and customer support messages
• To create and manage your account
• To improve our store, products and customer experience
• To prevent fraud and keep our store secure
• To send you marketing emails about new drops and offers, if you opt-in (you can unsubscribe anytime)

Legal basis (EU/CH/UK): performance of contract, legitimate interest in running our business and improving our services, consent for marketing, and compliance with legal obligations.

4. Cookies and Tracking
We use cookies, pixels and similar technologies to run our store (remember your cart), analyze traffic, and show you relevant ads.

This includes Shopify cookies, Google Analytics, Google Ads, and Meta Pixel. You can control or block cookies in your browser settings. Blocking cookies may make parts of our site not work. Learn more about Shopify cookies: https://www.shopify.com/legal/cookies

5. How We Share Your Information
We share information only when needed to run our business:

• With service providers: Shopify, payment processors, fulfillment centers, shipping carriers, customer support, IT and analytics providers
• With advertising partners: Google and Meta to show you relevant ads (this may be considered "sale" or "sharing" under California law)
• When required by law, to respond to legal requests, enforce our terms, or protect our rights
• In connection with a business transaction like a merger or sale

We do not sell your personal information for money.

6. International Transfers
We are based in Switzerland and use service providers in the US and other countries. Your information may be transferred and processed outside your country. When we do, we use adequate safeguards such as Standard Contractual Clauses approved by the EU Commission.

7. How Long We Keep Your Information
We keep order information as long as necessary to comply with tax and legal obligations (up to 10 years in Switzerland) and to handle returns, complaints and disputes. If you ask us to delete your data, we will delete it unless we must keep it for legal reasons.

8. Your Rights

EU / UK / Switzerland residents:
You have the right to access, correct, delete, restrict processing, object to processing, data portability, and to withdraw consent at any time. To exercise these rights, email hey@peachcrate.com. You also have the right to lodge a complaint with your local data protection authority. In Switzerland: FDPIC. In EU: your local supervisory authority.

California residents (CCPA / CPRA):
You have the Right to Know what personal information we collect, use and share, Right to Delete, Right to Correct inaccurate information, Right to Opt-Out of Sale/Sharing of personal information for cross-context behavioral advertising, and Right to Limit Use of Sensitive Personal Information. We do not use sensitive personal information beyond what is allowed. We do not knowingly sell personal information of anyone under 16.

To opt-out of advertising cookies that may be considered "sale/share": use the cookie preferences in our site footer or enable Global Privacy Control (GPC) in your browser. You can also email hey@peachcrate.com with subject "CCPA Rights Request".

We will not discriminate against you for exercising your rights.

Other US States (Colorado, Connecticut, Virginia, etc):
You have similar rights to know, delete, correct, and opt-out of targeted advertising and sale. Contact us to exercise them.

9. Security
We take reasonable measures to protect your information using organizational, technical and administrative safeguards. No internet transmission is 100% secure, so we cannot guarantee absolute security.

10. Children
Our site is not intended for children under 16 and we do not knowingly collect information from them. If you believe a child has provided us information, contact us to delete it.

11. Changes To This Policy
We may update this policy from time to time to reflect changes in our practices or legal requirements. We will post the updated version on our site and update the Effective Date.

12. Contact Us
For privacy questions or to exercise your rights, contact:
Email: hey@peachcrate.com