Privacy policy
Ellerand operates the website at ellerand.com and the online store you are shopping on. This Privacy Policy explains what personal information we collect, where it comes from, why we use it, who we disclose it to, and the choices you have over it. It covers our website, our checkout, our customer support, and our marketing. Our store is hosted and powered by Shopify, so some of the processing described below is carried out by Shopify and by other service providers on our behalf.
Last updated: July 29, 2026
In this policy, "we", "us" and "our" mean Ellerand. "Personal information" means information that identifies you or that can reasonably be linked to you. If you have a question about anything here, write to us at support@ellerand.com and we will answer it.
Personal information we collect and process
The information we hold about you depends on how you use the store. Someone who only browses the site leaves us far less information than someone who places an order. The categories below describe everything we may collect.
Contact details
Your first and last name, your email address, your phone number, your shipping address, and your billing address. We use these to identify your order, to reach you about it, and to get the parcel to the right place. If you enter a different name and address for delivery, such as when an order is a gift, we hold those details too.
Payment and financial information
Your payment method type, your billing address, the currency and amount of the transaction, and the authorization result returned by the processor. Full payment card numbers are collected in the checkout by our payment processors and are not stored on our systems. What we retain is a record of the transaction and a partial identifier such as the card brand and the last four digits, which is what we need to match a payment to an order, issue a refund, or answer a billing question. We also hold records of refunds, chargebacks, and payment disputes.
Account information
If you create an account or log in to check your orders, we hold your login email, the login records tied to it, your saved addresses, your saved preferences, and your order history. Account authentication is handled through Shopify, so we do not hold your password in readable form. If you use a one time code to log in rather than a password, we hold the record that the code was issued and used.
Order and transaction information
The products you bought, quantities, order value, taxes, any discount or promotional code you applied, the shipping method you chose, the carrier and tracking number, delivery status, and any return, exchange, or refund connected to the order. We also hold the date and time of the order and the store the order was placed through.
Communications with us
The content of messages you send to support@ellerand.com, replies you send to our emails, notes you add to an order at checkout, and our answers to you. If you call the support line on +1 205 287 9987, we hold a record that the call happened and the notes we take about it. We keep these so that the next person who picks up your case can see what has already been said.
Device and browser information
Your IP address, the general location that IP address suggests, your device type, your operating system, your browser type and version, your language and time zone settings, screen size, and identifiers stored in cookies or similar technologies on your device. We also record the page or advertisement that referred you to us.
Usage information
How you move through the store: pages and products you viewed, how long you stayed, searches you ran on the site, items you added to the cart, checkouts you started, and whether you completed an order. If you receive our emails, we may record whether an email was opened and which links in it were clicked.
Where this information comes from
Directly from you
Most of what we hold, you gave us. You type it into the checkout, into an account form, into a newsletter signup box, or into an email to support. If you choose not to give us a piece of information we ask for, we may not be able to complete your order or answer your question.
Automatically through the site
Cookies, pixels, tags, software development kits, and server logs record device and usage information while you use the store. Some of this is unavoidable if the site is going to work at all, because the cart and the checkout have to recognize your session. The rest is analytics and advertising, and it is subject to the choices described further down this page.
From our service providers
Companies that run parts of the store for us pass information back to us. Shopify supplies order and session data, our payment processors supply payment authorization results and fraud signals, our shipping and fulfillment partners supply tracking and delivery events, and our email platform supplies delivery and engagement records.
From partners
Advertising and analytics platforms give us reports about the performance of our advertising, such as which campaign an order can be attributed to and aggregate information about the kinds of people responding to it. Where you interact with us on a social platform, that platform may pass us limited information according to its own terms and the settings on your account there.
How we use personal information
Providing the store and fulfilling orders
To show you the site, keep your cart, take payment, verify the payment, send order confirmations and shipping notifications, hand the correct address to the carrier, handle returns and refunds, and answer questions about an order. This is the core reason we hold your information, and we cannot sell you anything without it.
Customer support
To identify you when you contact us, look up your order, resolve delivery problems, process a return authorization, and keep a record of what was agreed. Support records also tell us where the store is confusing people, which is how most of our fixes get found.
Marketing and advertising
To send you marketing emails if you asked for them, to tell you about products and offers, and to advertise on other platforms. Some of that advertising is personalized, which means information about your activity on our site, or an identifier tied to your browser, is used to decide which advertisements you are shown and to measure whether those advertisements led to a purchase. You can opt out of that at any time. See Your Privacy Choices at ellerand.com/pages/data-sharing-opt-out.
Security and fraud prevention
To detect and stop fraudulent orders, stolen card use, account takeover, automated abuse, and attacks on the site. This involves checking order and device signals against fraud rules run by Shopify and by our payment processors, and holding records long enough to deal with a dispute or a chargeback.
Improving the store
To understand which pages work, where people abandon the checkout, which products are being looked at, and whether a change we made helped or hurt. We use aggregated and statistical reporting for this wherever it is enough, and it usually is.
Legal compliance
To meet tax, accounting, consumer protection, and record keeping obligations, to respond to lawful requests from authorities, to enforce our terms, and to establish, exercise, or defend legal claims.
How we disclose personal information
We do not sell your personal information for money. We do disclose it to the companies that make the store run, and, unless you tell us otherwise, to advertising partners in a way that some privacy laws define as selling or sharing. The categories are as follows.
Shopify
Shopify hosts our store and processes almost everything you enter into it, including checkout and account data. Shopify acts as our service provider and processor for that work, and also processes some information for its own purposes as described in its own privacy policy.
Payment processors
Payment card and payment method details go directly to the processor that handles the transaction. Processors use that information to authorize the payment, run fraud checks, and settle funds to us, and they hold it under their own privacy terms and under card network rules.
Shipping and fulfillment partners
The fulfillment partner that picks and packs your order and the carrier that delivers it receive your name, delivery address, phone number or email address for delivery notifications, and the contents of the parcel. International shipments also require us to pass customs information to the carrier and to customs authorities.
Analytics and advertising partners
Analytics providers receive usage and device information so we can measure how the store performs. Advertising platforms receive identifiers and event information, such as a page view or a purchase, so that our advertising can be targeted and measured. This is the disclosure that the opt out on Your Privacy Choices controls.
Professional advisors and other service providers
Our email platform, our customer support tools, our accountants, and our legal advisors receive personal information where they need it to do the job we engaged them for, and only for that purpose.
Business transactions
If Ellerand is involved in a merger, acquisition, financing, reorganization, or sale of assets, customer information may be disclosed to the parties involved and may transfer to a buyer as part of that transaction. We would expect any buyer to continue handling it under terms consistent with this policy.
Legal reasons
We disclose personal information where we are required to by law, by a subpoena, a court order, or a lawful request from a public authority, and where disclosure is necessary to protect our rights, protect the safety of any person, investigate fraud, or enforce our terms.
Our relationship with Shopify
This store is built on Shopify. That means Shopify provides the hosting, the shopping cart, the checkout, the customer account system, and much of the underlying data storage. When you place an order, the information you type is processed by Shopify on our behalf under our agreement with them. Shopify also processes certain information for its own purposes, including to operate, secure, and improve its platform and its own services. Shopify explains its practices, including what it does as a processor for merchants like us and what it does as a controller in its own right, at https://privacy.shopify.com/en. We recommend reading it alongside this policy, because both apply to your visit here.
Cookies and similar technologies
Cookies are small files stored on your device by your browser. Pixels, tags, local storage, and software development kits do similar jobs. We and our partners use them for three broad purposes.
-
Strictly necessary. Keeping you logged in, remembering your cart between pages, applying a discount code, running the checkout, load balancing, and blocking abuse. The store cannot function without these, and they cannot be switched off from within the site.
-
Performance and analytics. Counting visits, measuring which pages are used, and finding errors and slow pages. These help us fix the store rather than target you.
-
Advertising. Advertising pixels placed by platforms we advertise on. They record events such as a page view, an add to cart, or a purchase, tie them to an identifier for your browser or device, and let those platforms select advertising for you and report on whether our advertising worked.
You have several ways to control this. Your browser settings let you block or delete cookies, and most browsers also offer a private browsing mode; be aware that blocking all cookies will break the cart and the checkout. Where a cookie banner or a privacy settings link is shown to you on our store, the choices you make there are applied to analytics and advertising cookies. You can also use the account settings and advertising preference controls offered by the individual advertising platforms. Finally, you can send a Global Privacy Control signal from your browser, which is described under your rights below. Browser "Do Not Track" settings are not standardized and we do not respond to them; we respond to Global Privacy Control instead.
Third party websites and links
Our site links out to other websites, including payment pages, carrier tracking pages, and social media profiles. Advertising we run appears on platforms we do not control. Once you follow a link away from ellerand.com, this policy no longer applies and the privacy policy of that site or platform does. We do not control how those companies collect or use information, and we are not responsible for their content or their practices. Read their policies before giving them information.
Children
Our store is intended for adults. It is not directed to children, we do not knowingly market to children, and we do not knowingly collect personal information from anyone under 16 years of age. If you believe a child has given us personal information, contact us at support@ellerand.com and we will delete it. We do not knowingly sell or share the personal information of anyone under 16 for targeted advertising.
Security
We take reasonable steps to protect personal information, including using a hosting platform that encrypts data in transit and at rest, restricting access to order and customer data to the people who need it to do their work, requiring more than one factor of authentication on the accounts that hold that data, and relying on payment processors that operate under card industry security standards rather than handling raw card numbers ourselves. No website, no server, and no method of transmission is completely secure, so we cannot promise absolute security. If you believe your account or your order has been compromised, tell us immediately.
How long we keep information
We keep personal information for as long as we need it for the purpose we collected it for, and then for as long as the law requires. In practice that means order and transaction records are kept for the period required by tax, accounting, and consumer protection rules, and long enough to handle a return, a refund under our 30 day guarantee, a chargeback, or a legal claim. Support correspondence is kept while it is useful for handling your case and the history behind it. Marketing records are kept until you unsubscribe, and after that we keep a minimal record of your unsubscribe so that we do not email you again by mistake. Analytics and advertising records are kept for the retention period set by the relevant platform. When information is no longer needed, we delete it or aggregate it so that it no longer identifies you.
Your rights and choices
Depending on where you live, you may have some or all of the following rights over the personal information we hold about you.
-
Access. Ask us to confirm whether we hold personal information about you and to give you a copy of it, along with information about how it is used and who it is disclosed to.
-
Deletion. Ask us to delete personal information we hold about you. We may need to keep some of it, for example records of a completed order that we are legally required to retain, and we will tell you if that is the case.
-
Correction. Ask us to correct personal information that is inaccurate or incomplete, such as a misspelled name or an old address.
-
Portability. Ask us to provide your personal information in a portable, machine readable format, or to send it to another company where that is technically feasible.
-
Opting out of sale or sharing for targeted advertising. Tell us to stop disclosing your information to advertising partners for personalized advertising. See Your Privacy Choices.
-
Marketing preferences. Stop marketing emails at any time by using the unsubscribe link at the bottom of any marketing email, or by emailing us and asking. You will still receive transactional messages about orders you have placed, because those are not marketing.
-
No discrimination. We will not deny you goods or services, charge you a different price, or give you a lower quality of service because you exercised a privacy right.
To make a request, email support@ellerand.com from the email address you used to order, or call +1 205 287 9987. We will need to verify your identity before we act, usually by confirming details of a recent order, and we may ask for more information if the first attempt does not match. An authorized agent may make a request on your behalf if they provide written permission signed by you, and we may still contact you to confirm it. We respond within the time period required by the law that applies to you, and we will tell you if we need an extension and why.
Global Privacy Control
Global Privacy Control is a signal your browser or a browser extension can send automatically to every site you visit, telling that site not to sell or share your personal information for targeted advertising. Where the law requires us to honor it, we treat it as a valid request to opt out for the browser it is sent from. Because the signal is tied to a browser and device rather than to you as a person, you need to enable it in each browser and on each device you use. You can find out how to turn it on at https://globalprivacycontrol.org/.
Additional rights in the United Kingdom and the European Economic Area
If you are in the United Kingdom or the European Economic Area, you also have the following rights, in addition to those listed above.
-
Objection. You can object to our processing of your personal information where we rely on our legitimate interests, including profiling connected to direct marketing. Where you object to direct marketing, we will stop, without exception.
-
Restriction. You can ask us to limit how we use your personal information while a dispute about its accuracy or our legal basis is being resolved. During a restriction we will store the information but not otherwise use it, except where the law allows.
-
Withdrawal of consent. Where our use of your information depends on your consent, such as marketing emails or optional cookies, you can withdraw that consent at any time. Withdrawing consent does not make our earlier use of the information unlawful, and it does not affect processing we carry out on a different legal basis.
Our legal bases for processing are: performance of our contract with you, for taking and fulfilling your order; legitimate interests, for security, fraud prevention, improving the store, and running our business; consent, for marketing and for optional cookies; and legal obligation, for tax, accounting, and responses to lawful requests.
California
If you are a California resident, you have the right to know what personal information we collect, use, disclose, and sell or share, the right to delete it, the right to correct it, and the right to receive it in a portable form. You also have the right to opt out of the sale of your personal information and of its sharing for cross context behavioral advertising. As explained above, our use of advertising pixels means information about your activity on our store can be disclosed to advertising platforms, and California law treats that as selling or sharing even where no money is paid for your data. You can exercise that right in either of the two ways set out on our Your Privacy Choices page: send a Global Privacy Control signal from your browser, or email support@ellerand.com and ask us to stop. There is no form to fill in, because we handle these requests by hand. We do not knowingly sell or share the personal information of consumers under 16 years of age. We will not discriminate against you for exercising any of these rights. The categories of personal information listed at the top of this policy are the categories we have collected and the categories we may disclose to the recipients named under "How we disclose personal information".
Complaints
If you are unhappy with how we have handled your personal information or your request about it, contact us first at support@ellerand.com. Tell us what happened and what you want done, and a person will look at it. If you are not satisfied with our answer, you have the right to complain to the data protection authority where you live or work. In the United Kingdom that is the Information Commissioner's Office; in the European Economic Area it is the supervisory authority in your country; and in the United States you may be able to raise the matter with your state attorney general. You may also have the right to appeal a decision we make on your request, and if that right applies to you we will tell you how to use it when we respond.
International transfers
We are based in the United States, and the companies that host our store, process our payments, and run our email and advertising are located in the United States and in other countries. If you order from outside the United States, your personal information will be transferred to, stored in, and processed in the United States and in other countries whose data protection laws may differ from the laws where you live. Where we transfer personal information out of the United Kingdom or the European Economic Area, we rely on transfer mechanisms recognized under the applicable law, such as the standard contractual clauses approved for that purpose, together with the contractual protections in our agreements with our service providers.
Changes to this policy
We update this policy when our practices change, when we add or remove a service provider that matters to your privacy, or when the law requires it. The current version is always the one published on this page, and the date at the top tells you when it was last changed. If a change is significant, we will make that clear on the site and, where the law requires it, we will contact you directly. Continuing to use the store after an update means the updated policy applies to you.
Contact us
Ellerand is the controller of the personal information described in this policy. If you have a question, a request about your information, or a complaint, reach us at any of the following.
-
Email: support@ellerand.com
-
Phone: +1 205 351 3692
-
Postal address: Ellerand, 29146 Renee St, Andalusia, AL 36421, United States
Email is the fastest route and gives us a written record, which helps if your request needs to be verified. Please note that our postal address is not a returns address. Returns need authorization from us first, so email us and we will send the return instructions and the return address with the authorization.