Last updated: June 22nd, 2025

This Privacy Policy describes how eternashop.us (the “Site” or “we”) collects, uses, and discloses your Personal Information when you visit or make a purchase from the Site.

At Eterna, we care about your privacy and are committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, and protect your information when you visit our website or purchase our products.

Please read this Privacy Policy carefully.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the "last updated" date, and take any other steps required by applicable law.

How We Collect and Use Your Personal Information

To provide the Services, we collect and have collected over the past 12 months personal information about you from a variety of sources, as set out below. The information that we collect and use varies depending on how you interact with us.

In addition to the specific uses set out below, we may use information we collect about you to communicate with you, provide or improve the Services, comply with any applicable legal obligations, enforce any applicable terms of service, and to protect or defend the Services, our rights, and the rights of our users or others.

What Personal Information do we collect?

The types of personal information we collect depend on how you interact with Eterna and use our website and services. When we refer to “personal information,” we mean data that identifies, relates to, describes, or could reasonably be linked to you. The sections below explain the categories and specific types of personal information we may collect.

Information We Collect Directly from You

We collect personal information you voluntarily provide to us when you interact with our store or contact our team. This may include:

• Contact details such as your name, email address, phone number, and shipping address.

• Order information, including your billing and shipping details, payment confirmation, and order history.

• Account information like your username, password, and other credentials used for account security (if applicable).

• Customer support information, including any messages or feedback you send us when communicating through our contact forms or support tools.

Some features of our services may require you to submit this information directly. Choosing not to provide certain details may limit your access to some features.

Information We Collect About Your Usage

We may also automatically gather certain data about how you interact with our website (“Usage Data”). This helps us improve your experience and optimize performance.

To collect Usage Data, we may use technologies like cookies, pixels, and similar tracking tools (“Cookies”). These technologies allow us to understand how users access and browse the site.

Usage Data may include:

• Device type and browser info

• Your IP address and location

• Network connection details

• Pages visited and time spent on site

• Referral links and how you arrived at the site

• Interactions with content, buttons, and checkout flow

Cookies

Like many websites, we use Cookies on our Site. For more specific information about the Cookies used in connection with powering our store through Shopify, please visit: https://www.shopify.com/legal/cookies.

We use cookies to enhance and operate our Site and Services (including remembering your preferences and actions), perform analytics, and better understand how users interact with our platform. These purposes align with our legitimate interests to manage, improve, and optimize your experience with Eterna.

Additionally, we may allow third-party providers and partners to use Cookies on our Site in order to personalize the services, content, and advertising both here and across other websites.

Most browsers are set to accept Cookies by default. However, you can update your browser settings to remove or reject Cookies at any time. Please note that doing so may affect how certain features on our Site function. Blocking Cookies may limit some user functionality and prevent full access to the Services.

Blocking Cookies may also not fully restrict our ability to share usage data with trusted third parties, such as advertising or analytics partners.

Our Site supports the Global Privacy Control (GPC) signal, which allows you to opt out of certain data uses or disclosures. If you notify us of your GPC preference, we will treat it as a valid opt-out request for the browser or device associated with the signal. If we can connect that device to a Shopify account, we will also apply that opt-out request to the entire account.

To learn more about GPC, visit https://globalprivacycontrol.org.

Aside from GPC, we do not currently respond to other "Do Not Track" signals that may be sent from your browser or device.

Information We Obtain from Third Parties

We may also collect information about you from third parties, including vendors and service providers who gather data on our behalf. These third parties may include:

• Service providers that support our Site and Services, such as Shopify.

• Payment processors collect and process payment details (e.g., billing address, credit/debit card information, and other payment data) to fulfill your orders and ensure smooth transactions by our contract with you.

• When you visit our Site, engage with our emails, or interact with our ads or services, we—or our partners—may use online tracking technologies to collect additional data automatically. These technologies may include pixels, web beacons, cookies, SDKs, and other third-party tools.

Any personal information collected from third parties will be handled by this Privacy Policy.

For more on this topic, see the section below titled Third Party Websites and Links.

How We Disclose Personal Information

In certain cases, we may share your personal information with third parties for purposes such as contract fulfillment, legal compliance, and legitimate business operations. These disclosures will always align with this Privacy Policy. Scenarios where disclosure may occur include:

• With vendors or third-party service providers who perform functions on our behalf (e.g., IT services, payment processing, analytics, customer support, cloud storage, fulfillment, and shipping).

• With marketing and business partners who assist with advertising and promotional efforts. These partners may use your information according to their privacy policies.

• When you request, direct, or consent to the sharing of specific information, for example, to complete a purchase, integrate with a social media login, or interact with a widget or plug-in.

• With our corporate affiliates or within our business group, in line with our legitimate interest in managing Eterna as a successful business.

• In the event of a business transaction, such as a merger, acquisition, reorganization, or bankruptcy.

• To comply with legal obligations, such as responding to subpoenas, court orders, or law enforcement requests, or to enforce our terms of service and protect the rights, safety, and property of Eterna, our users, or others.

Your Rights

Depending on where you live, you may have some or all of the rights listed below about your personal information. However, these rights are not absolute and may apply only in certain circumstances, and, in certain cases, we may decline your request as permitted by law.

• Right to Access / Know: You may have a right to request access to personal information that we hold about you, including details relating to thowwe use and share your information.

• Right to Delete: You may have a right to request that we delete personal information we maintain about you.

• Right to Correct: You may have a right to request that we correct the inaccurate personal information we maintain about you.

• Right of Portability: You may have a right to receive a copy of the personal information we hold about you and to request that we transfer it to a third party, in certain circumstances and with certain exceptions.

• Right to Opt out of Sale or Sharing or Targeted Advertising: You may have a right to direct us not to “sell” or “share” your personal information or to opt out of the processing of your personal information for purposes considered to be “targeted advertising”, as defined in applicable privacy laws.

Please note that if you visit our Site with the Global Privacy Control opt-out preference signal enabled, depending on where you are, we will automatically treat this as a request to opt out.

• Restriction of Processing: You may have the right to ask us to stop or restrict our processing of personal information.

• Withdrawal of Consent: Where we rely on consent to process your personal information, you may have the right to withdraw this consent.

• Appeal: You may have a right to appeal our decision if we decline to process your request. You can do so by replying directly to our denial.

• Managing Communication Preferences: We may send you promotional emails, and you may opt out of receiving these at any time by using the unsubscribe option displayed in our emails to you. If you opt out, we may still send you non-promotional emails, such as those about your account or orders that you have made.

You may exercise any of these rights where indicated on our Site or by contacting us using the contact details provided below.

We will not discriminate against you for exercising any of these rights. We may need to collect information from you to verify your identity, such as your email address or account information, before providing a substantive response to the request. By applicable laws, you may designate an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require that the agent provide proof you have authorized them to act on your behalf, and we may need you to verify your identity directly with us. We will respond to your request promptly as required under applicable law.

Security and Retention of Your Information

We take appropriate steps to protect your personal information, but no security system is completely secure. We cannot guarantee absolute security, especially when information is being transmitted online. For your safety, please avoid sending sensitive data through insecure channels.

We retain your personal information for as long as necessary based on factors such as maintaining your account, delivering services, complying with legal requirements, resolving disputes, or enforcing agreements and policies.

Children’s Data

Our services are not intended for children, and we do not knowingly collect personal information from individuals under the age of 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us so we can delete that information.

As of the date of this policy, we do not knowingly “sell” or “share” the personal data of anyone under 16 years of age, as those terms are defined under applicable law.

International Users

Please note that we may transfer, store, and process your personal information outside of your country of residence. This includes processing by our team members and trusted third-party service providers who operate in other countries.

If your personal information is transferred out of Europe, we will rely on recognized transfer safeguards such as the European Commission's Standard Contractual Clauses or equivalent agreements approved by the UK or other appropriate authorities—unless the destination country is deemed to have adequate data protection standards.

Complaints

If you have concerns about how Eterna handles your personal information, we encourage you to contact us using the information provided below. Should our response not satisfy your concerns, you may, depending on your location, have the right to appeal our decision. You can do this by contacting us again or by complaining to your local data protection authority. For users within the EEA, a list of data protection supervisory authorities is available here.