> ## Documentation Index
> Fetch the complete documentation index at: https://docs.headlesscommerce.io/llms.txt
> Use this file to discover all available pages before exploring further.
# Storefront Privacy Policy Template
> A customizable privacy policy template for merchants to use in their storefronts
# Storefront Privacy Policy Template
**This is a template, not legal advice.** You must customize all `[BRACKETED]` placeholders with your own business information before using it. We strongly recommend having a legal professional review the final version for your jurisdiction.
**How to use this template:**
1. Copy the text below
2. Replace all `[BRACKETED]` placeholders with your information
3. Remove any optional sections that don't apply to your business
4. Have a legal professional review the final version
5. Host it on your storefront (e.g., at `/privacy-policy`)
***
## Privacy Policy
**Effective Date:** `[DATE]`
This Privacy Policy describes how **`[YOUR STORE NAME]`** ("we", "us", or "our") collects, uses, and protects your personal information when you visit or make a purchase from our online store.
***
### 1. Information We Collect
**Information you provide:**
| Data | When Collected |
| ---------------- | ------------------------------------------------- |
| Name | Account registration, checkout |
| Email address | Account registration, checkout, newsletter signup |
| Phone number | Checkout (for delivery updates) |
| Shipping address | Checkout |
| Billing address | Checkout |
| Account password | Account registration (stored securely hashed) |
**Information collected automatically:**
| Data | Purpose |
| ------------------------ | ------------------------------ |
| Cart session ID | Maintaining your shopping cart |
| Browser type and version | Ensuring compatibility |
| Pages visited | Improving our store experience |
If you collect additional data (e.g., birthday for loyalty programs, size preferences, etc.), list them here:
* `[ADDITIONAL DATA ITEM]` — `[PURPOSE]`
* `[ADDITIONAL DATA ITEM]` — `[PURPOSE]`
### 2. How We Use Your Information
We use your personal information to:
* **Process and fulfill orders** — Including shipping, payment processing, and order confirmations
* **Manage your account** — If you create a customer account
* **Communicate with you** — Order status updates, delivery notifications, and customer support
* **Prevent fraud** — Detecting and preventing fraudulent transactions
* **Comply with legal obligations** — Tax records, regulatory requirements
With your consent, we may also use your email to send:
* Promotional offers and discounts
* New product announcements
* Newsletter content
You can unsubscribe at any time by clicking the "unsubscribe" link in any marketing email or contacting us at `[YOUR EMAIL]`.
### 3. Payment Information
We use **`[Stripe / TossPayments / YOUR PAYMENT PROVIDER]`** to process payments. Your payment card information is sent directly to the payment processor and **is never stored on our servers**. We only receive a payment confirmation reference.
For more information, see:
* `[Stripe's Privacy Policy: https://stripe.com/privacy]`
* `[TossPayments Privacy Policy: https://www.tosspayments.com/privacy]`
### 4. Who We Share Your Data With
We share your personal information only with service providers necessary to operate our store:
| Service Provider | Purpose |
| --------------------------------- | ----------------------------------------------- |
| Headless Commerce | Commerce platform (order processing, inventory) |
| `[Stripe / TossPayments]` | Payment processing |
| `[SHIPPING CARRIER NAME]` | Order delivery |
| `[EMAIL PROVIDER, if applicable]` | Transactional and marketing emails |
We do **not** sell your personal information to third parties.
### 5. Data Retention
| Data | Retention Period |
| ------------------------- | ------------------------------------------------- |
| Order records | `[3-5]` years (for tax and legal compliance) |
| Customer accounts | Until you request deletion |
| Cart sessions | Automatically cleared after 30 days of inactivity |
| Marketing consent records | Duration of consent + `[3]` years |
### 6. Your Rights
If you are located in the EU/EEA, you have the right to:
* **Access** — Request a copy of the personal data we hold about you
* **Rectification** — Request correction of inaccurate data
* **Erasure** — Request deletion of your data ("right to be forgotten")
* **Portability** — Receive your data in a structured, machine-readable format
* **Restriction** — Request that we limit how we use your data
* **Object** — Object to processing based on legitimate interests
* **Withdraw consent** — Withdraw consent for marketing at any time
To exercise these rights, contact us at `[YOUR EMAIL]`. We will respond within 30 days.
한국에 거주하시는 경우, 다음의 권리가 있습니다:
* **열람권** — 수집된 개인정보의 열람을 요청할 수 있습니다
* **정정·삭제권** — 부정확한 정보의 정정 또는 삭제를 요청할 수 있습니다
* **처리정지 요구권** — 개인정보 처리의 정지를 요청할 수 있습니다
* **동의 철회권** — 이전에 제공한 동의를 언제든지 철회할 수 있습니다
권리 행사를 원하시면 `[YOUR EMAIL]`로 연락해 주십시오. 10일 이내에 회신드리겠습니다.
**개인정보 보호책임자:** `[NAME]`
**연락처:** `[EMAIL / PHONE]`
### 7. Cookies
We use the following cookies:
| Cookie | Type | Purpose | Duration |
| -------------- | --------- | ------------------------------ | -------- |
| Cart session | Essential | Maintaining your shopping cart | 30 days |
| Authentication | Essential | Keeping you logged in | Session |
If you use analytics or marketing cookies, list them here:
| Cookie | Type | Purpose | Duration |
| --------------- | --------- | ----------- | ------------ |
| `[COOKIE NAME]` | Analytics | `[PURPOSE]` | `[DURATION]` |
| `[COOKIE NAME]` | Marketing | `[PURPOSE]` | `[DURATION]` |
You can manage cookie preferences through your browser settings.
### 8. Children's Privacy
Our store is not directed to individuals under the age of `[14/16]`. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.
### 9. International Data Transfers
Your data may be processed in countries outside your jurisdiction. We ensure appropriate safeguards are in place through our platform provider (Headless Commerce) and payment processor.
### 10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. `[We will also notify you via email for material changes.]`
### 11. Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights:
* **Business name:** `[YOUR BUSINESS NAME]`
* **Email:** `[YOUR EMAIL]`
* **Address:** `[YOUR ADDRESS]`
* **Phone:** `[YOUR PHONE NUMBER]`
If we are unable to resolve your concern, you may lodge a complaint with your local data protection authority.
**사업자등록번호:** `[YOUR BUSINESS NUMBER]`
**통신판매업 신고번호:** `[YOUR SELLER REGISTRATION NUMBER]`
**개인정보 보호책임자:** `[NAME]` (`[EMAIL]`)
분쟁이 해결되지 않는 경우, 개인정보보호위원회([https://www.pipc.go.kr](https://www.pipc.go.kr)) 또는 한국소비자원([https://www.kca.go.kr)에](https://www.kca.go.kr\)에) 신고하실 수 있습니다.