Privacy Policy

Last Updated: August 19, 2026

FixTimber operates the website located at https://fixtimber.us and provides the related online store, content, products, customer support, and other services described in this Privacy Policy collectively as the “Services.”

FixTimber’s store is hosted and supported by Shopify, which provides the ecommerce platform that enables us to offer the Services.

This Privacy Policy explains how FixTimber collects, uses, discloses, stores, and otherwise processes personal information when you:

• Visit or browse our website
• Create or use an account
• Place or manage an order
• Request a return or refund
• Contact customer support
• Subscribe to marketing
• Submit a review or other content
• Exercise a privacy right
• Otherwise interact with the Services

For purposes of applicable data protection law, FixTimber is generally the controller or data user responsible for personal information described in this policy, except where another organization acts independently as a controller.

If our Terms of Service conflict with this Privacy Policy regarding personal information, this Privacy Policy will control for the privacy-related matter.

1. Personal Information

“Personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or can reasonably be linked to an individual or household.

Personal information does not generally include information that has been aggregated, anonymized, or de-identified so that it cannot reasonably identify or be linked to an individual.

The information we process depends on how you interact with the Services, your location, the features you use, and applicable law.

2. Personal Information We Collect

We may collect the following categories of personal information:

Contact information

• Name
• Billing address
• Shipping address
• Email address
• Telephone number

Account information

• Account username or identifier
• Authentication information
• Saved addresses
• Preferences and settings
• Account activity

Order and transaction information

• Products viewed or purchased
• Shopping-cart contents
• Wishlist items, if available
• Order history
• Payment status
• Shipping and delivery information
• Returns, refunds, exchanges, and cancellations
• Discounts and promotional codes
• Customer service history

Payment-related information

Payment information may include:

• Payment method
• Billing details
• Transaction amount
• Payment confirmation
• Limited payment-card details, such as card type or last digits
• Fraud-prevention results

Complete payment-card information is generally collected and processed by Shopify Payments or another payment provider rather than directly stored by FixTimber.

Communications

We collect information you provide when you:

• Email or call us
• Submit a contact form
• Request customer support
• Submit a return or refund request
• Report a damaged or unsafe product
• Submit a privacy request
• Participate in a survey
• Provide feedback or a review

Communications may include photographs, videos, project information, product details, and other content you voluntarily provide.

Device and network information

• IP address
• Browser type
• Device type
• Operating system
• Language settings
• Network information
• Cookie identifiers
• Advertising identifiers
• Approximate location derived from an IP address
• Other technical identifiers

Website usage information

• Pages visited
• Products viewed
• Links clicked
• Referring website
• Search activity
• Cart and checkout activity
• Date and time of interaction
• Session duration
• Interaction with advertisements or marketing
• Website errors and performance information

Reviews and user content

If you submit content, we may collect:

• Review text
• Rating
• Name or display name
• Photographs or videos
• Product feedback
• Information about incentives or material connections, where applicable

Inferences

Where permitted, we or our service providers may derive limited inferences from activity, such as product interests, shopping preferences, or likely marketing interests.

3. Sources of Personal Information

We may collect personal information:

Directly from you

For example, when you:

• Place an order
• Create an account
• Contact us
• Request a return
• Subscribe to marketing
• Submit a review
• Exercise a privacy right

Automatically

We may collect information automatically through:

• Cookies
• Pixels
• Tags
• Local storage
• Analytics tools
• Advertising technologies
• Server logs
• Similar technologies

From Shopify and service providers

We may receive information from:

• Shopify
• Payment processors
• Fraud-prevention services
• Fulfillment providers
• Suppliers
• Shipping carriers
• Customer support providers
• Analytics providers
• Advertising and marketing providers

From third parties

We may receive information from:

• Social-media platforms
• Advertising partners
• Referral partners
• Publicly available sources
• Individuals authorized to communicate on your behalf

4. Information You Must Provide

Providing personal information is generally voluntary. However, some information is necessary to:

• Process payment
• Fulfill and deliver an order
• Create or secure an account
• Process a return or refund
• Verify a privacy request
• Respond to customer support
• Comply with legal obligations

If you do not provide necessary information, we may be unable to complete the requested transaction or service.

Do not send passwords, full payment-card numbers, banking credentials, government identification numbers, or unrelated sensitive information by email.

5. How We Use Personal Information

We may use personal information for the following purposes:

Providing the Services

• Processing orders and payments
• Confirming transactions
• Arranging fulfillment and shipping
• Providing tracking information
• Managing customer accounts
• Processing returns, refunds, and exchanges
• Responding to questions
• Providing customer support
• Managing warranties, recalls, or safety reports
• Remembering preferences
• Providing requested website features

Improving and personalizing the Services

• Understanding website usage
• Troubleshooting technical issues
• Improving navigation and checkout
• Analyzing product interest
• Developing store features
• Recommending relevant products
• Measuring customer experience

Marketing and advertising

Subject to applicable law and your choices, we may:

• Send promotional emails
• Send marketing messages where consent has been provided
• Display contextual advertising
• Display interest-based or targeted advertising
• Measure marketing performance
• Create marketing audiences
• Personalize promotional content

Security and fraud prevention

• Authenticating users
• Preventing payment fraud
• Detecting suspicious orders
• Protecting accounts
• Preventing malicious activity
• Securing the website
• Enforcing our policies
• Protecting customers and other persons

Legal and compliance purposes

• Complying with laws and regulations
• Maintaining tax and accounting records
• Responding to valid legal process
• Handling disputes and claims
• Enforcing contractual rights
• Investigating policy violations
• Cooperating with safety authorities
• Managing recalls
• Establishing or defending legal claims

Business operations

• Maintaining internal records
• Auditing transactions
• Managing suppliers and service providers
• Planning inventory and fulfillment
• Evaluating business performance
• Completing a merger, acquisition, financing, restructuring, or transfer of assets

6. Legal Bases for Processing

Where laws such as the GDPR or UK GDPR apply, we process personal information under one or more of the following legal bases:

Performance of a contract

We process information necessary to:

• Accept and fulfill orders
• Process payments
• Deliver products
• Provide customer support
• Handle returns and refunds
• Manage accounts

Legitimate interests

We may process information for legitimate business interests, including:

• Operating and improving the Services
• Preventing fraud
• Protecting website security
• Understanding business performance
• Providing customer support
• Defending legal claims
• Conducting permitted direct marketing

We consider whether these interests are overridden by your rights and interests.

Consent

We rely on consent where required, including for:

• Certain marketing communications
• Certain non-essential cookies
• Certain targeted advertising
• Other processing for which consent is legally required

You may withdraw consent at any time. Withdrawal does not affect processing that occurred before consent was withdrawn.

Legal obligations

We process information where necessary to comply with:

• Tax requirements
• Accounting rules
• Product safety obligations
• Consumer protection requirements
• Court orders
• Valid government requests
• Other legal duties

Protection of rights and safety

Where permitted, we may process information to protect the vital interests, safety, legal rights, or security of customers or other persons.

7. Cookies and Similar Technologies

FixTimber, Shopify, and service providers may use:

• Essential cookies
• Functional cookies
• Analytics cookies
• Advertising cookies
• Pixels
• Tags
• Local storage
• Similar technologies

These technologies may be used to:

• Keep the website operational
• Maintain shopping carts
• Remember preferences
• Authenticate accounts
• Prevent fraud
• Analyze website use
• Measure advertising
• Personalize content
• Support targeted advertising

Where required, non-essential cookies will be used only after obtaining applicable consent.

You may manage available choices through:

• Our website cookie or privacy preference tool
• Browser settings
• Device settings
• Global Privacy Control
• Our Your Privacy Choices page

Disabling all cookies may affect account access, shopping-cart functions, checkout, saved preferences, or other website features.

8. Global Privacy Control and Do Not Track

Where required by applicable law, we treat a recognized Global Privacy Control signal as a request to opt out of activities legally defined as sale, sharing, or targeted advertising for the browser and device transmitting the signal.

If the device can be associated with a recognized Shopify customer account, the preference may be applied more broadly where required or supported.

Other browser “Do Not Track” signals are not consistently standardized. We do not necessarily respond to such signals unless applicable law requires us to do so.

For more information, review our Your Privacy Choices page.

9. How We Disclose Personal Information

We may disclose personal information to the following recipients for legitimate business purposes:

Shopify

Shopify hosts and supports the online store and may process information to:

• Operate the ecommerce platform
• Process transactions
• Maintain security
• Prevent fraud
• Improve platform services
• Support features selected by FixTimber

Payment providers

Payment providers process transactions, verify payment methods, prevent fraud, and administer refunds.

Suppliers and fulfillment providers

Because products may be fulfilled through third-party suppliers or facilities, we may provide information necessary to fulfill an order, including:

• Customer name
• Shipping address
• Telephone number
• Email address where necessary
• Product and order details
• Delivery instructions

Suppliers and fulfillment providers are not authorized to use this information for unrelated purposes when acting solely on our behalf.

Shipping and logistics providers

Carriers and logistics providers receive information necessary to:

• Create shipping labels
• Transport packages
• Provide tracking
• Complete delivery
• Investigate delivery claims
• Process returns

Technology and operational providers

We may disclose information to providers supporting:

• Website hosting
• Cloud storage
• IT services
• Customer support
• Email delivery
• Account management
• Data analytics
• Fraud prevention
• Security monitoring

Advertising and marketing partners

Where permitted, advertising and marketing providers may receive:

• Cookie identifiers
• Device identifiers
• IP addresses
• Website activity
• Products viewed
• Advertising interaction information
• Limited customer audience information

These disclosures may be considered sale, sharing, or targeted advertising under certain laws.

Professional advisers

We may disclose information to accountants, auditors, insurers, banks, consultants, and legal advisers where reasonably necessary.

Government and legal recipients

We may disclose information when reasonably necessary to:

• Comply with applicable law
• Respond to valid legal process
• Protect legal rights
• Investigate fraud
• Address product safety
• Prevent harm
• Enforce our policies

Business transactions

Information may be transferred in connection with a merger, acquisition, financing, restructuring, bankruptcy, sale of assets, or transfer of the store, subject to applicable law.

With your direction or consent

We may disclose information when you direct us, request an integration, or otherwise provide valid consent.

10. Relationship With Shopify

The Services are hosted through Shopify.

Information submitted through the Services is transmitted to and processed by Shopify and its authorized service providers. This processing may occur in countries other than your country of residence.

Shopify may process personal information as:

• A service provider or processor acting for FixTimber
• An independent controller for certain platform operations and enhanced features

For information about Shopify’s independent privacy practices and available rights, visit:

Shopify Consumer Privacy Policy

For privacy requests relating to Shopify’s independent processing, visit:

Shopify Privacy Portal

Use of optional Shopify advertising, audience, or enhanced-services features depends on the settings and services enabled for our store.

11. Sale, Sharing, and Targeted Advertising

FixTimber does not sell personal information for money in the ordinary meaning of the word “sell.”

However, disclosures of identifiers, device information, cookie information, and website activity to advertising or analytics partners may be legally considered:

• Sale of personal information
• Sharing for cross-context behavioral advertising
• Processing for targeted advertising

Depending on your residence, you may have the right to opt out.

You may exercise an applicable opt-out right by:

• Using our website privacy preference tool
• Enabling Global Privacy Control
• Visiting our Your Privacy Choices page
• Emailing dovguorveethar@gmail.com
• Calling +1 (936) 260-5549

Use the subject line:

Privacy Choices Request

We do not knowingly sell or share the personal information of individuals under 16.

12. Direct Marketing

Subject to applicable law, we may use contact information to send marketing concerning FixTimber products, promotions, or store updates.

Where consent is required, we will not use personal information for direct marketing without obtaining the required consent or indication of no objection.

You may stop promotional emails by:

• Clicking the unsubscribe link in an email
• Emailing dovguorveethar@gmail.com
• Updating available account preferences

Opting out of marketing does not stop necessary communications about:

• Orders
• Payments
• Shipping
• Returns
• Security
• Product safety
• Policy or legal notices

We do not charge a fee for processing a valid direct-marketing opt-out request.

13. Third-Party Websites and Services

The Services may contain links to third-party websites or services.

Third parties operate independently and may collect information under their own privacy policies. We do not control their independent privacy or security practices.

Information posted in public or semi-public areas, including reviews or social-media content, may be visible and reused by other persons.

Review third-party policies before providing personal information.

A link does not necessarily constitute FixTimber’s endorsement of the third party.

14. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including:

• Providing the Services
• Maintaining an account
• Processing orders
• Handling returns, refunds, warranties, and safety issues
• Preventing fraud
• Resolving disputes
• Enforcing agreements
• Meeting tax, accounting, and legal obligations

Retention periods depend on:

• The type and sensitivity of the information
• The transaction or relationship
• Applicable legal requirements
• Limitation periods
• Fraud and security risks
• Whether an unresolved dispute or claim exists

When information is no longer reasonably required, we may delete, anonymize, or securely dispose of it, subject to backup and legal-retention requirements.

15. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

However, no system, storage method, or internet transmission can be guaranteed completely secure.

You are responsible for:

• Protecting account credentials
• Using a secure password where applicable
• Restricting access to your device
• Logging out of shared devices
• Notifying us of suspected unauthorized activity

Do not use unsecured email to send payment-card numbers, passwords, banking credentials, or government identification information.

If a legally reportable security incident occurs, we will provide notification to affected individuals or authorities as required by applicable law.

16. International Data Transfers

FixTimber operates from Hong Kong and uses service providers that may process information in other countries.

Your personal information may be transferred to, stored in, or processed in:

• Hong Kong
• The United States
• Canada
• Countries where Shopify operates
• Countries where suppliers, carriers, or service providers operate

Data protection laws in these locations may differ from those in your country.

Where the GDPR, UK GDPR, or similar law applies, we use a legally recognized transfer mechanism where required, such as:

• An adequacy decision
• European Commission Standard Contractual Clauses
• The applicable United Kingdom transfer addendum or agreement
• Another lawful transfer safeguard

You may contact us for additional information about applicable transfer safeguards.

17. Children’s Privacy

The Services are intended for adults and are not directed to children under 13.

We do not knowingly collect personal information directly from children under 13.

We also do not knowingly sell or share, as those terms are defined by applicable law, personal information belonging to individuals under 16.

If you believe a child has provided personal information without appropriate authorization, contact us at dovguorveethar@gmail.com.

We will review the request and delete the information where required.

18. Your Privacy Rights

Depending on your residence and applicable law, you may have the right to:

• Know whether we process your personal information
• Request access to personal information
• Receive a copy of personal information
• Request correction of inaccurate information
• Request deletion
• Request restriction of processing
• Object to certain processing
• Request data portability
• Withdraw consent
• Opt out of sale or sharing
• Opt out of targeted advertising
• Limit certain uses of sensitive personal information
• Appeal a privacy-request decision
• Lodge a complaint with a data protection authority
• Receive information about categories of information collected and disclosed

Rights may be subject to exceptions. For example, we may retain information needed to:

• Complete a transaction
• Prevent fraud
• Comply with law
• Maintain records
• Protect security
• Resolve disputes
• Establish or defend legal claims

We will not unlawfully discriminate against you for exercising a privacy right.

19. Hong Kong Privacy Rights

Under the Hong Kong Personal Data (Privacy) Ordinance, eligible individuals may request:

• Confirmation of whether FixTimber holds their personal data
• Access to personal data
• Correction of inaccurate personal data

A request must contain sufficient information to identify the requester and locate the relevant records.

We may charge a fee for a data access request only where permitted by applicable law and only to the extent permitted.

Direct-marketing opt-out requests will be processed without charge.

20. EEA and United Kingdom Rights

Where the GDPR or UK GDPR applies, you may have the right to:

• Access personal information
• Correct inaccurate or incomplete information
• Request erasure
• Restrict processing
• Object to processing
• Receive portable information
• Withdraw consent
• Object to direct marketing at any time
• Lodge a complaint with your local supervisory authority

Where processing is based on legitimate interests, you may object based on your particular circumstances.

We do not intend to make decisions based solely on automated processing that produce legal or similarly significant effects unless appropriate notice and safeguards are provided.

21. United States State Privacy Rights

Residents of certain U.S. states may have rights to:

• Know or access personal information
• Correct information
• Delete information
• Obtain portable information
• Opt out of sale
• Opt out of sharing
• Opt out of targeted advertising
• Limit certain sensitive-information processing
• Appeal a denied request
• Use an authorized agent
• Receive equal service for exercising a right

Availability depends on the law applying to FixTimber and the requester.

Further information is available on our Your Privacy Choices page.

22. Exercising Your Rights

To submit a privacy request, contact:

Email: dovguorveethar@gmail.com
Phone: +1 (936) 260-5549

Use one of the following subject lines:

• Privacy Rights Request
• Privacy Choices Request
• Data Access Request
• Privacy Request Appeal

Please provide:

• Your full name
• Email address associated with your order or account
• Country and state or province of residence
• The right you wish to exercise
• Relevant order information when necessary

Do not send unnecessary sensitive information with your initial request.

We will respond within the period required by applicable law.

23. Verification and Authorized Agents

We may verify your identity before processing access, correction, deletion, or portability requests.

Verification may involve matching information provided in the request with information already maintained by us.

Where permitted, an authorized agent may submit a request for you. We may require:

• Written authorization
• Proof of the agent’s authority
• Direct confirmation from you
• Identity verification
• Valid power-of-attorney documentation where applicable

We may decline a request if identity or authority cannot reasonably be verified.

Opt-out requests will not be subjected to unnecessary verification.

24. Appeals and Complaints

If we decline a request, residents of certain jurisdictions may have a right to appeal.

Submit an appeal to:

dovguorveethar@gmail.com

Use the subject line:

Privacy Request Appeal

You may also have the right to complain to a data protection regulator, including:

• The Office of the Privacy Commissioner for Personal Data in Hong Kong
• Your applicable U.S. state regulator
• Your local EEA data protection authority
• The United Kingdom Information Commissioner’s Office
• Another competent privacy authority

Please contact us first if you would like us to review or resolve a privacy concern.

25. Communication Preferences

You may opt out of promotional emails by using the unsubscribe link included in those messages.

After opting out, we may continue sending non-promotional communications necessary for:

• Orders
• Payments
• Shipping
• Returns
• Account security
• Product recalls
• Safety notices
• Legal obligations

If you receive marketing after unsubscribing, contact dovguorveethar@gmail.com.

26. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in:

• Our privacy practices
• Website features
• Service providers
• Products and operations
• Applicable laws
• Regulatory guidance

The updated policy will be posted with a revised “Last Updated” date.

We will provide additional notice or request consent where required by applicable law.

Material changes will generally apply prospectively unless otherwise legally permitted.

27. Contact Information

For privacy questions, requests, or complaints, contact:

Store Name: FixTimber
Website: https://fixtimber.us
Email: dovguorveethar@gmail.com
Phone: +1 (936) 260-5549
Business Address: Unit 809, 8/F, Brill Plaza, 84 To Kwa Wan Road, To Kwa Wan, Hong Kong

Customer Service Hours:
Monday–Friday, 10:00 AM–6:00 PM (GMT+8)
Closed on Saturdays, Sundays, and public holidays

General inquiries are normally answered within 1–2 business days. Formal privacy requests will be processed within the period required by applicable law.