Privacy policy

Last updated: July 14, 2026

Welcome to throwflow 投の流れ. We operate this store and website, including all related information, content, features, tools, products, and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). throwflow 投の流れ is powered by Shopify, which enables us to provide the Services to you.  

This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.  

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described herein.  

1. PERSONAL INFORMATION WE COLLECT OR PROCESS
When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you. Personal information does not include data that is completely anonymous or de-identified. We may collect or process the following categories of personal information depending on how you interact with our Services:

  • Contact Details: Your name, shipping address, billing address, phone number, and email address.
  • Financial Information: Credit card, debit card, or financial account numbers, payment confirmation, and form of payment details. (Note: All payment processing is securely handled by our third-party processors).
  • Account Information: Your username, password, security questions, and saved account preferences.
  • Transaction Information: The items you view, put in your cart, add to your wishlist, purchase, return, exchange, or cancel, alongside your past order history.
  • Communications: Any information you include when communicating with us, such as customer support inquiries.
  • Device Information: Information about your device, browser, network connection, IP address, and unique tracking identifiers.
  • Usage Information: Data regarding your navigation and interactions with our website, including timestamps and browsing patterns.

2. PERSONAL INFORMATION SOURCES
We collect personal information from the following sources:

  • Directly From You: When you create an account, complete a purchase, subscribe to newsletters, or contact support.
  • Automatically Through the Services: Collected from your browser or device via cookies, web beacons, and similar tracking technologies when you browse our site.
  • From Service Providers & Partners: Third parties that process data on our behalf, such as payment processors, shipping carriers, and data analytics providers.

3. HOW WE USE YOUR PERSONAL INFORMATION (LAWFUL BASES)
Under the UK General Data Protection Regulation (UK GDPR), we rely on specific legal grounds to process your personal data. Depending on how you interact with us, we process your information under the following frameworks:

  • Performance of a Contract: We use your Contact Details, Financial Information, and Transaction Information to process payments, fulfill orders, arrange shipping, manage accounts, and facilitate returns/exchanges under our Terms of Service.
  • Our Legitimate Interests: We use your Device, Usage, and Communication data to improve and optimize our Services, prevent fraud or malicious activity, secure our payment ecosystem, and handle customer support requests.
  • With Your Explicit Consent: Where required by UK law, we rely on your clear opt-in consent to send marketing communications via email or text, and to deploy non-essential tracking cookies for targeted advertising. You have the absolute right to withdraw consent at any time.
  • Compliance with Legal Obligations: We use your information to comply with applicable tax, accounting, or consumer laws, or to respond to valid regulatory and law enforcement requests.

4. HOW WE DISCLOSE PERSONAL INFORMATION
In certain circumstances, we share your data with authorized third parties for legitimate operational and marketing purposes:

  • With Shopify and Core Vendors: To support payment processing, IT infrastructure, database management, cloud storage, and automated fulfillment.
  • With Marketing Partners: To serve tailored ads on third-party websites. We use Shopify enhanced advertising tools, which utilize tracking data based on your online patterns across various platforms. You may control these tracking preferences via your browser or cookie options.
  • Corporate Transactions: In the event of a merger, acquisition, or restructuring, your data may be transferred as a business asset.

5. RELATIONSHIP WITH SHOPIFY
Our store is hosted by Shopify Inc. Shopify processes your personal data to power our infrastructure and optimize our services. Additionally, we utilize Shopify's cross-merchant features to enhance business security and fraud prevention.

In these specific instances, Shopify acts as a data controller for that shared ecosystem data. To understand how Shopify processes your information, please read the Shopify Consumer Privacy Policy. To manage data rights handled natively by our host, you can visit the Shopify Privacy Portal.

6. THIRD PARTY WEBSITES AND LINKS
Our platform may provide hyperlinks to third-party portals or embedded applications. We do not control, guarantee, or assume liability for the privacy practices, tracking methods, or accuracy of information on third-party sites. Please review their independent privacy policies directly before interacting with them.

7. CHILDREN'S DATA
The Services are intended strictly for adults and are not directed toward children. We do not knowingly collect personal data from anyone under the age of 18 (or the age of majority in your jurisdiction). If a parent or guardian discovers their child has provided personal information to us, please contact us immediately for prompt deletion.

8. SECURITY AND RETENTION OF YOUR INFORMATION
While we execute rigorous technical and organizational measures to safeguard your account data, please note that no digital transmission over the internet can be guaranteed as 100% secure.

We retain your personal data only as long as necessary to maintain your active user account, fulfill our sales contracts, satisfy UK statutory tax and accounting retention requirements, or resolve legal disputes.

9. YOUR RIGHTS AND CHOICES (UK & EEA RESIDENTS)
Because you reside in the UK or the European Economic Area (EEA), you possess strong statutory rights regarding your personal data under the UK GDPR. These rights include:

  • Right to Access / Know: You can request a clear copy of all personal information we hold about you.
  • Right to Rectification: You can request that we immediately fix inaccurate or incomplete records.
  • Right to Erasure ("Right to be Forgotten"): You can ask us to delete your personal data under certain conditions.
  • Right to Restriction or Objection: You can object to our processing of your data for direct marketing or legitimate interest grounds.
  • Right to Data Portability: You can request your data be transferred to you or another provider in a structured, machine-readable format.
  • Right to Withdraw Consent: Where processing is based on consent, you may revoke it seamlessly at any time (such as clicking 'unsubscribe' in marketing emails).

To exercise any of these rights, please contact us at support@throwflow.co.uk. We do not discriminate or penalize you for exercising your privacy rights. We may verify your identity before fulfilling any request to prevent unauthorized access.

10. COMPLAINTS & REGULATORY DISCLOSURES
If you believe our processing of your personal data infringes upon UK data protection frameworks, you have the right to lodge an official complaint with your supervisory authority.

In the UK, this is the Information Commissioner’s Office (ICO) (www.ico.org.uk).

For residents within the EEA, you may contact your local national data protection supervisor.

11. INTERNATIONAL TRANSFERS
As we are powered by Shopify, your personal data will be transferred outside of the UK and EEA to secure servers located in Canada, the United States, and other global regions. To protect your data during these transfers, we rely exclusively on approved legal mechanisms, including the UK International Data Transfer Addendum and the European Commission's Standard Contractual Clauses (SCCs), ensuring an equivalent standard of protection.

12. CHANGES TO THIS PRIVACY POLICY
We reserve the right to modify this Privacy Policy to reflect technical, operational, or statutory updates. Any changes will be published transparently on this page with an updated "Last updated" date.

13. CONTACT US
For the purpose of applicable data protection laws, throwflow 投の流れ is the official data controller of your personal data. If you have any questions or wish to exercise your rights, please reach out via our official corporate channels:

Email: support@throwflow.co.uk

Physical Post: [Address]