Privacy Policy 

Last updated: 7 April 2026.

Midnight Fae operates this store and website using Shopify to provide you with a curated shopping experience (the "Services"). This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase through the Services or otherwise communicate with us.

Please read this policy carefully. By using the Services, you acknowledge that you have read and understood it.

1. Personal information we collect

"Personal information" refers to information that identifies or can reasonably be linked to you. We may collect the following, depending on how you interact with the Services:

• Contact details — name, address, phone number, email
• Financial information — payment card details, transaction information
• Account information — username, password, preferences
• Transaction information — items viewed, purchased, returned, or cancelled
• Communications — messages sent to us, including support enquiries
• Device information — IP address, browser type, unique identifiers
• Usage information — how and when you interact with the Services

2. How we collect your information

We collect personal information from the following sources:

• Directly from you when you create an account, make a purchase, or contact us
• Automatically through the Services via cookies and similar technologies
• From service providers who collect or process information on our behalf
• From partners or other third parties

3. How we use your information

We use your personal information to:

• Provide and improve the Services — process orders, payments, returns, and exchanges; manage your account; arrange shipping; personalise your experience
• Marketing and advertising — send promotional communications and show relevant advertisements based on your activity
• Security and fraud prevention — authenticate accounts, detect fraudulent or malicious activity, and secure the Services
• Customer communications — respond to enquiries and provide support
• Legal compliance — comply with applicable law, respond to legal requests, and enforce our terms and policies

4. How we disclose your information

We may disclose your personal information in the following circumstances:

• With Shopify and service providers who perform functions on our behalf (payment processing, shipping, data analytics, cloud storage)
• With business and marketing partners for advertising purposes — you may opt out of targeted advertising here
• When you direct or consent to disclosure, such as through social media integrations
• Within our corporate group or affiliates
• In connection with a business transaction, legal obligation, or to protect our rights and the rights of our users

5. Our relationship with Shopify

The Services are hosted by Shopify, which processes personal information to provide and improve the Services. Information you submit may be shared with Shopify and third parties in other countries. Shopify is responsible for processing your personal information in connection with its enhanced features. To learn more, visit the Shopify Consumer Privacy Policy or exercise your rights via the Shopify Privacy Portal.

6. Third-party websites and links

The Services may link to third-party websites. We are not responsible for their privacy or security practices. Information shared on public or semi-public platforms may be visible to others beyond our control.

7. Children's data

The Services are not intended for children. We do not knowingly collect personal information from anyone under the age of majority in their jurisdiction. If you believe a child has provided us with their information, please contact us and we will delete it. We do not knowingly sell or share personal information of individuals under 16.

8. Security and retention

No security measure is perfect. We recommend you do not share sensitive information over unsecure channels. We retain your personal information for as long as necessary to maintain your account, provide the Services, comply with legal obligations, and resolve disputes.

9. Your rights

Depending on where you live, you may have the following rights:

• Access / Know — request access to personal information we hold about you
• Delete — request deletion of your personal information
• Correct — request correction of inaccurate information
• Portability — receive a copy of your information or request transfer to a third party
• Opt out of targeted advertising — exercise your right here; we also honour Global Privacy Control signals automatically
• Communication preferences — unsubscribe from promotional emails at any time via the unsubscribe link

If you reside in the UK or EEA, you additionally have the right to:

• Object to or restrict processing of your personal information
• Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at hello@midnightfae.com. We will not discriminate against you for exercising your rights. We may need to verify your identity before processing your request. Authorised agents may act on your behalf with appropriate proof of authorisation.

For rights related to data processed by Shopify directly, visit https://privacy.shopify.com/en.

10. Complaints

If you have concerns about how we process your personal information, please contact us at hello@midnightfae.com. Depending on where you live, you may have the right to appeal our decision or lodge a complaint with your local data protection authority. EEA residents can find the relevant supervisory authority here.

11. International transfers

Your personal information may be transferred, stored, and processed outside the country where you reside. Where we transfer personal information out of the EEA or UK, we rely on recognised transfer mechanisms such as the European Commission's Standard Contractual Clauses or equivalent UK contracts, unless the destination country has been deemed to provide adequate protection.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal or regulatory reasons. The revised policy will be posted on this website with an updated "Last updated" date. Notice will be provided as required by applicable law.

13. Contact

For questions about this Privacy Policy, our privacy practices, or to exercise your rights, email us at hello@midnightfae.com. For the purposes of applicable data protection law, Midnight Fae is the data controller of your personal information.