Privacy policy

Privacy Policy

Last Updated: July 23, 2026

This Privacy Policy describes how Sinoita (“Sinoita,” “we,” “us,” or “our”) collects, uses, stores, discloses, and protects personal information when you visit, use, or make a purchase from www.sinoita.com (the “Site”), create an account, contact Customer Support, or otherwise interact with our services (collectively, the “Services”).

By using the Site, you acknowledge that you have received and reviewed this Privacy Policy. Where applicable law requires consent—for example, for certain non-essential cookies or marketing communications—we will request that consent separately.

1. Who We Are

Sinoita is an independently operated U.S. online retail store offering women’s apparel and selected fashion accessories. Sinoita is the controller of personal information under applicable UK and European data protection laws and the “business” or equivalent responsible party under applicable U.S. state privacy laws.

Our store is hosted on Shopify, which provides the e-commerce platform used to display products, operate checkout, process orders, and support store functionality.

2. Personal Information We Collect

Depending on how you interact with the Services, we may collect the following categories of personal information:

• Contact and identification information: Name, billing address, shipping address, email address, and phone number.
• Order and commercial information: Products viewed or purchased, order number, order history, selected size or color, delivery details, returns, exchanges, refunds, and transaction records.
• Payment and transaction information: Payment method, payment status, billing details, transaction identifiers, and limited payment information provided by payment processors. We do not store complete payment card numbers on our own servers.
• Account information: Login details, saved addresses, preferences, and account activity if you create a customer account.
• Customer Support information: Messages, return requests, product reviews, photographs or videos submitted in connection with damaged or incorrect items, and other communications with us.
• Device and usage information: IP address, browser type, device type, operating system, time zone, pages viewed, referring website, interactions with the Site, and approximate location derived from an IP address.
• Cookie and advertising information: Cookie identifiers, pixels, tags, advertising identifiers, campaign information, conversion events, and interactions with advertisements where applicable.
• Marketing preferences: Email subscription status, communication preferences, and interactions with promotional messages.
• Inferences: General interests or product preferences derived from shopping and browsing activity.

We do not intentionally request government identification numbers, health information, biometric information, precise geolocation, or other highly sensitive information unless it is reasonably necessary and clearly disclosed. Please do not send unnecessary sensitive information through Customer Support.

3. Sources of Personal Information

We may collect personal information from:

• You directly when you browse, place an order, or contact us;
• Your device through cookies and similar technologies;
• Shopify and its affiliated services;
• Payment processors and financial service providers;
• Shipping, logistics, and order fulfillment partners;
• Customer Support, fraud prevention, and security providers;
• Advertising and analytics partners when their services are enabled and your privacy choices permit their use; and
• Public or legally available sources where permitted.

4. How We Use Personal Information

Where we rely on legitimate interests, those interests may include operating the store, maintaining security, preventing fraud, improving customer experience, managing legal claims, and communicating with customers. We consider whether those interests are overridden by your privacy rights.

5. Information Required to Complete a Purchase

Certain information, including your name, shipping address, contact information, order details, and valid payment information, is necessary to process and deliver an order. If you do not provide required information, we may be unable to complete your purchase, provide delivery, process a return, or respond to a request.

6. Payment Information

Payments are processed through Shopify and supported third-party payment providers. Depending on the options displayed at checkout, these providers may include Shopify Payments, PayPal, card networks, Apple Pay, Google Pay, and Shop Pay.

Sinoita does not store or have direct access to your complete credit or debit card number. Payment providers process payment information under their own privacy notices and security practices.

7. Cookies and Similar Technologies

We use cookies, pixels, tags, local storage, and similar technologies for the following purposes:

• Essential cookies: Operate the shopping cart, checkout, account login, security, fraud prevention, and other necessary functions.
• Functional cookies: Remember customer preferences and improve Site functionality.
• Analytics cookies: Measure traffic, Site performance, and how customers interact with our Services.
• Advertising cookies: Measure campaigns, attribute conversions, limit repeated advertisements, and support relevant advertising where permitted.

Depending on our current Site configuration, analytics and advertising providers may include Shopify-supported services, Google Analytics, Google Ads, Pinterest, Meta, or similar providers. The services actually active on the Site may change as our business tools change.

Where required by law, non-essential analytics and advertising technologies will be used only after you provide consent. You may manage available choices through the cookie banner or the “Cookie Preferences” link displayed on the Site. You may also manage cookies through your browser settings, although disabling essential cookies may prevent certain Site functions from working.

8. How We Disclose Personal Information

We may disclose personal information to the following categories of recipients when reasonably necessary:

• E-commerce platform providers: Including Shopify, which hosts and supports our online store.
• Payment providers: To authorize, process, and secure payments.
• Fulfillment and delivery partners: To prepare, ship, track, and deliver orders.
• Technology and operational providers: Including hosting, security, fraud prevention, customer service, communications, and technical support providers.
• Analytics and advertising partners: To measure performance and support advertising when those services are enabled and permitted by your privacy choices.
• Professional advisers: Including legal, accounting, insurance, and compliance advisers where necessary.
• Government or legal authorities: Where disclosure is required by law, legal process, court order, or a valid government request.
• Business transaction recipients: In connection with a merger, acquisition, financing, restructuring, sale of assets, or similar business transaction.

Sinoita does not sell personal information for monetary compensation. However, certain disclosures involving advertising identifiers, website activity, approximate location, hashed identifiers, or conversion information may be considered a “sale,” “sharing,” or targeted advertising under some U.S. state privacy laws.

9. California Notice at Collection

The following table summarizes the categories of personal information we may collect from California consumers and the purposes for which they may be used.

During the preceding 12 months, we may have disclosed these categories to the service providers and recipients described in this Policy for operational and business purposes.

When advertising or conversion tools are enabled, identifiers, Internet activity, approximate location, and related inferences may be disclosed to advertising or analytics partners. Such disclosure may be treated as “sharing” for cross-context behavioral advertising under California law.

We do not use sensitive personal information to infer characteristics about consumers. We do not knowingly sell or share the personal information of consumers under 16 without the affirmative authorization required by applicable law.

10. California Privacy Rights

Where the California Consumer Privacy Act, as amended, applies to Sinoita, California residents may have the right to:

• Know the categories and specific pieces of personal information collected;
• Know the sources, purposes, and categories of recipients;
• Request deletion of personal information, subject to legal exceptions;
• Request correction of inaccurate personal information;
• Opt out of the sale or sharing of personal information;
• Limit certain uses or disclosures of sensitive personal information where applicable;
• Receive equal service and not be discriminated against for exercising a right;
• Use an authorized agent to submit a request where permitted.

To submit a request, email hello@sinoita.com with the subject line “Privacy Request,” or use our Do Not Sell or Share My Personal Information page.

We may request information reasonably necessary to verify your identity and locate your records. Information collected for verification will be used only for that purpose. An authorized agent may be required to provide proof of authorization, and we may ask you to confirm the request directly.

11. Other U.S. State Privacy Rights

Depending on your state of residence and applicable law, you may have rights to access, correct, delete, or obtain a portable copy of your personal information, and to opt out of targeted advertising, sale, or certain profiling activities.

If we deny a privacy request and applicable law gives you a right to appeal, you may submit an appeal by replying to our decision or emailing hello@sinoita.com with the subject line “Privacy Request Appeal.”

12. UK and European Privacy Rights

If you are located in the United Kingdom or European Economic Area, applicable data protection law may provide the following rights:

• Access your personal information;
• Correct inaccurate or incomplete information;
• Request deletion of personal information;
• Request restriction of processing;
• Object to processing based on legitimate interests;
• Object to direct marketing at any time;
• Request data portability;
• Withdraw consent where processing is based on consent;
• Request safeguards relating to solely automated decisions that produce legal or similarly significant effects; and
• Lodge a complaint with an applicable supervisory authority.

We generally respond to valid UK or EEA privacy requests within one month. Where legally permitted, this period may be extended for complex or multiple requests, and we will notify you of the extension.

UK residents may lodge a complaint with the UK Information Commissioner’s Office. EEA residents may lodge a complaint with the data protection authority in their country of residence, work, or the location of the alleged infringement.

13. International Data Transfers

Sinoita operates from the United States and uses service providers that may process personal information in the United States and other countries. Therefore, personal information may be transferred outside your country or region of residence.

Where applicable law requires transfer safeguards, we use recognized legal mechanisms such as adequacy decisions, the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Agreement or UK Addendum, or another legally permitted transfer mechanism.

You may contact us for additional information about safeguards relevant to your personal information.

14. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy. Retention periods depend on the type of information, the reason it was collected, legal requirements, and whether the information is needed to resolve disputes or protect legal rights.

For example:

• Order, transaction, tax, and payment records are retained for the period required by applicable accounting, tax, consumer protection, and legal requirements.
• Account information is generally retained while the account remains active and for a reasonable period after closure where necessary.
• Customer Support records are retained until the matter is resolved and for any additional period necessary for fraud prevention, disputes, or legal claims.
• Marketing information is retained until you unsubscribe or we no longer need it. We may retain a limited suppression record to respect your opt-out.
• Cookie and analytics information is retained according to the duration of the applicable cookie or service configuration.

When information is no longer required, we may delete, anonymize, or securely archive it as permitted by law.

15. Data Security

We use reasonable administrative, technical, and organizational safeguards to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

These safeguards may include HTTPS/TLS encryption, access controls, secure payment processing, fraud monitoring, and service-provider security measures. However, no online transmission or electronic storage method can be guaranteed to be completely secure.

16. Marketing Communications

If you subscribe to marketing communications, we may send information about products, promotions, offers, and store updates.

You may unsubscribe at any time by using the unsubscribe link in a marketing email or by contacting us. Opting out of marketing will not stop transactional messages concerning your orders, deliveries, returns, account, or legal notices.

17. Automated Tools and Profiling

We and our providers may use automated tools to detect suspected fraud, assess transaction risk, analyze Site activity, or personalize content and advertising.

We do not use solely automated decision-making that produces legal or similarly significant effects unless it is legally permitted and appropriately disclosed. Where applicable law requires it, you may request information, human review, or an opportunity to challenge a decision.

18. Children’s Privacy

Our Site is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

If you believe a child has provided personal information to us, please contact us so we can review the matter and take appropriate action. We do not knowingly sell or share personal information belonging to consumers under 16 without the authorization required by applicable law.

19. Third-Party Websites

The Site may contain links to third-party websites, applications, or services. Sinoita is not responsible for the privacy, security, content, or practices of third parties. We recommend reviewing their privacy notices before providing personal information.

20. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our Services, business practices, technology, or legal requirements.

The revised version will be posted on this page with a new “Last Updated” date. Where required, we will provide additional notice or request consent before a material change takes effect.

21. Contact Us

To ask a privacy question, exercise a privacy right, or submit a complaint, please contact us using the information below:

Store Name: Sinoita
Website: www.sinoita.com
Business Type: Independently Operated U.S. Online Retail Store
Business Address: 12750 Centralia St, Lakewood, CA 90715, United States
Privacy Email: hello@sinoita.com
Support Phone: +1 562-504-6202
Support Hours: Monday – Saturday: 9:00 AM – 6:00 PM Eastern Time (ET)
Sunday: Closed

We aim to respond to general Customer Support inquiries within 24–48 business hours. Verified privacy requests will be handled within the timeframe required by applicable law.