Privacy policy

Last updated: April 5, 2026

BAEZ operates baezonline.com, baez.bz, and the BAEZ mobile application (the "App"), including all related information, content, features, tools, products, and services, in order to provide you with a curated shopping experience (collectively, the "Services"). Our e-commerce platform is powered by Shopify; our mobile app backend is powered by Supabase.

This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase through the Services — including through our iOS app — or otherwise communicate with us. Communications from BAEZ may be sent from @baezonline.com or @baez.bz addresses; both domains are operated by BAEZ.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand how your information is collected, used, and disclosed.

1. Personal Information We Collect

"Personal information" refers to information that identifies or can reasonably be linked to you. We may collect or process the following categories depending on how you interact with the Services:

Information you provide directly

Contact details — name, address, billing/shipping address, phone number, and email address.
Financial information — payment card information and transaction details processed by Shopify's payment providers.
Account information — username, password, security questions, preferences, settings, date of birth (optional), and social media handles (optional).
Order information — items viewed, carted, wishlisted, purchased, returned, exchanged, or cancelled.
Communications — information you include when contacting our support team.

Information collected automatically

Device information — device type, operating system, browser, IP address, and unique identifiers including mobile device identifiers (IDFV) on the iOS app.
Usage data — how and when you interact with the Services, including in-app navigation, screens viewed, and product browsing behavior.
Crash and diagnostics data — error logs and performance data collected by the App to identify and fix technical issues.
Push notification opt-in — if you grant permission, we collect a push notification token to send order updates and marketing messages via Apple Push Notification service (APNs). You can withdraw this permission at any time in your device settings.
Precise location — if you grant permission, the iOS app collects your device's GPS coordinates. Location data is used to determine your country for phone number formatting, provide shipping context, and support fraud prevention and order verification. You can withdraw this permission at any time in your device settings.
Cookie and tracking data — on our website, we use cookies and similar technologies as described in Section 5 below.

Information from third parties

Shopify — our e-commerce platform collects and processes data related to your orders and account.
Supabase — our app backend stores order events and fulfillment data received via Shopify webhooks.
Payment processors — collect payment information to process transactions on our behalf.
Analytics partners — may provide data about your interactions with our Services.

2. How We Use Your Personal Information

Provide and fulfill the Services. Process payments, fulfill orders, manage your account, arrange shipping, process returns and exchanges, and send order-related notifications.
App functionality. Display order status and history in the BAEZ iOS app using data received from Shopify webhooks.
Marketing and communications. Send marketing communications by email, SMS, or push notification about products, drops, and promotions. Emails may be sent from @baezonline.com or @baez.bz addresses.
Security and fraud prevention. Authenticate accounts, detect fraudulent or malicious activity, support fraud prevention and order verification, and protect the safety of the Services.
Customer support. Respond to inquiries and maintain our relationship with you.
Legal compliance. Comply with applicable law, respond to legal process, and enforce our terms and policies.
Service improvement. Analyze usage patterns and crash data to improve performance and user experience.

3. How We Disclose Personal Information

We may disclose your personal information in the following circumstances:

Service providers — Shopify (e-commerce platform), Supabase (app backend and data storage), payment processors, fulfillment partners, IT management, analytics, and customer support providers.
At your direction — for example, when you use social media integrations or shipping services.
Corporate affiliates — within our corporate group in connection with our business operations.
Legal and business transactions — in connection with a merger, acquisition, or bankruptcy; to comply with legal obligations; to enforce our terms; or to protect our rights and the rights of our users.

4. Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services. Information you submit may be transmitted to Shopify and to third parties in countries other than where you reside. Shopify may also use data from your interactions with our store — together with data from other merchants — to provide enhanced features.

To learn more about how Shopify uses your personal information and to exercise your rights, visit the Shopify Consumer Privacy Policy or the Shopify Privacy Portal.

5. Cookies

Our website uses cookies and similar technologies to power the Services, remember your preferences, and run analytics. For details on Shopify-specific cookies, see https://www.shopify.com/legal/cookies.

Most browsers accept cookies by default. You can set your browser to remove or reject cookies, but doing so may affect certain features of the Services.

When you visit our website with the Global Privacy Control opt-out signal enabled, we will treat this as a request to opt out of data sharing for targeted advertising. To learn more, visit https://globalprivacycontrol.org.

6. Your Rights and Choices

Depending on where you live, you may have some or all of the following rights. These rights are not absolute and may be subject to legal exceptions.

Right to Access / Know — request access to the personal information we hold about you.
Right to Delete — request that we delete personal information we hold about you. See Section 7 for California-specific deletion instructions.
Right to Correct — request that we correct inaccurate personal information.
Right of Portability — receive a copy of your personal information and, in certain circumstances, request transfer to a third party.
Right to Opt Out of Sale/Sharing — depending on where you reside, you may opt out of the sharing of your personal information for targeted advertising purposes. To exercise this right, email info@baezonline.com.
Right to Restrict Processing (EEA/UK) — ask us to stop or restrict processing of your personal information.
Withdrawal of Consent — where we rely on consent to process your information, you may withdraw consent at any time.
Managing Communication Preferences — opt out of marketing emails at any time using the unsubscribe link in our emails. You may still receive non-promotional communications about your account or orders.
Push Notification Preferences — you can withdraw consent to receive push notifications at any time through your device's notification settings.

We will not discriminate against you for exercising any of these rights. To submit a request, contact us at info@baezonline.com. We may need to verify your identity before processing your request. You may also designate an authorized agent to act on your behalf.

7. California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA).

Right to Know. You may request information about the categories and specific pieces of personal information we have collected about you, the sources of that information, our purposes for collecting it, and the categories of third parties with whom we share it.

Right to Delete. You may request that we delete personal information we have collected about you, subject to certain legal exceptions. To submit a deletion request, email info@baezonline.com and include your full name, the email address on your account, and a brief description of the data you wish deleted. We will acknowledge your request within 10 business days and respond substantively within 45 days, as required by California law. If we need additional time, we will notify you of the extension.

Right to Correct. You may request that we correct inaccurate personal information we hold about you.

Right to Opt Out of Sale or Sharing. To opt out, email info@baezonline.com or enable the Global Privacy Control signal in your browser.

Right to Limit Use of Sensitive Personal Information (CPRA). You may have the right to limit our use of sensitive personal information — including financial data collected during checkout — to purposes necessary to provide the Services. To exercise this right, contact us at info@baezonline.com.

No Sale of Data of Minors. We do not have actual knowledge that we sell or share personal information of individuals under 16 years of age.

Authorized Agents. You may designate an authorized agent to submit a request on your behalf. We will require proof of authorization and may verify your identity directly before processing the request.

8. SMS Marketing

We value your privacy and the information you consent to share in relation to our SMS marketing service. We use this information to send you text notifications (including order updates and abandoned checkout reminders), marketing offers, and transactional messages including review requests.

Opt-in data and consent for text messaging will not be shared with any third parties except messaging partners for the purpose of enabling and operating our text messaging program. Our website uses cookies to track items in your cart, including abandoned checkouts. This information is used to determine when to send cart reminder messages via SMS.

To opt out of SMS communications, reply STOP to any message or contact us at info@baezonline.com.

9. Children's Data

The Services are not intended for use by children. We do not knowingly collect personal information from anyone under the age of majority in their jurisdiction. If you are the parent or guardian of a child who has provided us with personal information, please contact us at info@baezonline.com to request deletion.

10. Security and Retention

We implement reasonable technical and organizational measures to protect your personal information. However, no security measures are perfect or impenetrable, and we cannot guarantee the security of information transmitted to us.

We retain your personal information for as long as necessary to maintain your account, provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements.

11. International Data Transfers

Your personal information may be transferred to, stored in, and processed in countries other than where you reside — including the United States. If we transfer personal information from the European Economic Area or United Kingdom, we rely on recognized transfer mechanisms such as the European Commission's Standard Contractual Clauses or equivalent instruments.

12. Third-Party Websites and Links

The Services may contain links to third-party websites or platforms. We are not responsible for the privacy practices or content of those sites. Information you share on third-party platforms may be visible to others beyond our control.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, legal requirements, or operational needs. We will post the revised version on this website and in the App, update the "Last updated" date, and provide notice as required by applicable law. We encourage you to review this policy periodically.

14. Contact Us

Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please email us at info@baezonline.com or contact us at 494 West Calle Primera, Suite 907, San Ysidro, CA 92173, US.

For Shopify-related privacy requests, visit https://privacy.shopify.com/en.