Privacy policy

privacy policy

last updated: may 17, 2026

we collect, use, and store some of your information when you shop with us. this page explains what, why, and what you can do about it. plain language, no traps. if you ever have questions, write to privacy@blursociety.com.

who we are

blur society operates this website and store (blursociety.com ). we sell apparel direct to customers in the united states and canada. our e-commerce platform is shopify, which processes payments and hosts the site infrastructure.

when this policy says "we," "us," or "blur society," that means blur society. when it says "you," it means anyone using this site — visitor, account holder, or customer.

if there's ever a conflict between this privacy policy and our terms of service, this policy wins for anything related to personal information.

what we collect

we only collect what we need. here's the full list:

you give us directly when you:

  • create an account → name, email, password
  • place an order → billing and shipping address, phone number, payment details (processed by shopify — we don't store full card numbers)
  • contact us → whatever you write in the message
  • subscribe to email → email address, optional name
  • leave a review → name, review text, rating, optional photo
  • redeem a discount or referral → code, sometimes a referring email

we collect automatically when you visit:

  • device info → ip address, browser type, operating system, screen size
  • usage info → pages viewed, products clicked, time on site, referrer url
  • cookie data → preferences, cart contents, session info
  • approximate location → country, region, sometimes city (from your ip)

we receive from third parties:

  • payment confirmation → from shopify payments / stripe / etc.
  • shipping status → from carriers (canada post, ups, fedex, usps, dhl)
  • review data → from judge.me (if you submit a review through them)
  • ad performance → from meta, google, tiktok if you arrive via paid ads

we don't collect biometric data, government id numbers, health data, or location data more precise than your shipping address.

why we collect it

to run the store and process your orders.

  • charge your card
  • ship to the right address
  • send order and shipping confirmations
  • handle returns and exchanges
  • maintain your account

to communicate with you.

  • transactional emails (order confirmations, shipping updates, return labels)
  • customer support replies
  • marketing emails (only if you opt in — unsubscribe link in every one)
  • announcements about drops or restocks (if subscribed)

to improve the store.

  • analyze which pages and products get traffic
  • identify and fix bugs
  • understand which marketing channels work
  • personalize what you see (recommended products, recently viewed)

to keep things safe.

  • detect and prevent fraud
  • block suspicious activity
  • comply with legal obligations (tax records, court orders, etc.)

for advertising — only if applicable.

  • show you products you've viewed if you visit other sites (retargeting via meta, google, tiktok)
  • measure ad performance
  • you can opt out of this — see "your rights" below

we don't sell your personal information to data brokers. we don't rent mailing lists. period.

who we share it with

we share only with parties who need it to do their job. they're contractually bound to use it only for the purpose we hired them for.

we share with for what
shopify inc. running the store, hosting, payment processing
payment processors (stripe, shop pay) charging your card
shipping carriers (canada post, ups, fedex, usps, dhl) delivering your order
fulfillment partner picking and packing
email platform (klaviyo or similar) sending transactional and marketing emails
review platform (judge.me) hosting product reviews
analytics (google analytics, shopify analytics) understanding site usage
advertising platforms (meta, google, tiktok) showing relevant ads and measuring performance
customer support tools replying to your questions

we may also share information:

  • with you, when you ask us to (e.g., forwarding a tracking link)
  • when you direct us to (e.g., logging in with shop pay shares info with shop)
  • in a business transaction (if blur society is ever sold, merged, or acquired, your data may transfer — but the new owner is bound by this same policy or you'll be notified)
  • as required by law (court orders, subpoenas, lawful government requests, tax authorities)
  • to protect rights (preventing fraud, enforcing our terms, protecting safety)

shopify's role

shopify isn't just our platform — they also process some of your information directly to provide and improve their own services and the broader merchant ecosystem. shopify's processing of your data is governed by shopify's consumer privacy policy (privacy.shopify.com/en).

you can exercise your privacy rights directly with shopify at the same link.

cookies and tracking

we use cookies and similar technologies (pixels, web beacons, local storage) for:

  • essential — cart, login, checkout (cannot be turned off without breaking the site)
  • functional — remembering preferences, recently viewed
  • analytics — understanding traffic and behavior
  • advertising — retargeting and measurement

you can disable cookies in your browser settings. essential cookies will still run because the site won't work without them. analytics and advertising cookies can be opted out via the cookie banner on your first visit, or by visiting your-rights.blursociety.com (placeholder — we'll set up a cookie preferences page once advertising is live).

some browsers send a global privacy control (gpc) signal. if your browser does this, we treat it as an opt-out of sale/sharing of personal information for advertising purposes.

how long we keep your information

  • account info — as long as your account is active, plus 12 months after closure
  • order records — 7 years (required by tax law in canada and most us states)
  • support emails — 3 years
  • marketing email subscriptions — until you unsubscribe
  • cookies and analytics — depends on the cookie, typically 30 days to 2 years (set by each provider)

after these periods, your data is either deleted or anonymized so it can't be linked back to you.

your rights

depending on where you live, you may have some or all of these rights:

  • know — see what personal information we hold about you
  • access — get a copy of your information
  • correct — fix anything that's wrong
  • delete — ask us to remove your information (we may keep some for legal reasons like tax records)
  • portability — receive your data in a structured, common format
  • opt out of sale or sharing — for california, virginia, colorado, connecticut, utah, and any state with similar rules — opt out of having your data shared with advertising partners
  • opt out of marketing — unsubscribe from any email anytime (link at the bottom of every email)
  • non-discrimination — we won't deny you service or charge you more for exercising any of these rights

to make a request: email privacy@blursociety.com with:

  1. which right you're exercising
  2. enough info for us to verify it's actually you (your account email or order number)

we'll respond within 30 days for california requests, 30 days for canadian requests, and 45 days for other us states. if we need more time, we'll tell you why.

you can also designate an authorized agent to make a request on your behalf — they'll need written authorization from you and we may verify directly with you.

canadian residents: you also have the right to file a complaint with the office of the privacy commissioner of canada (priv.gc.ca) if you believe we've mishandled your information. quebec residents are additionally covered by law 25 and may contact the commission d'accès à l'information (cai.gouv.qc.ca).

california residents: see the "california disclosures" section below for additional rights under the ccpa/cpra.

california disclosures (ccpa / cpra)

in the past 12 months, we may have collected the following categories of personal information defined by california law:

  • identifiers (name, email, ip address, account id)
  • customer records (billing and shipping addresses, phone)
  • commercial information (order history, products viewed)
  • internet activity (browsing, click data)
  • geolocation (approximate, from ip)
  • inferences (from your activity, for personalization)

we collect this for the business and commercial purposes described in "why we collect it" above.

we don't knowingly sell personal information of consumers under 16. we don't process sensitive personal information for purposes other than those allowed under cpra.

your california rights are the same as listed above: know, access, delete, correct, portability, opt out of sale/sharing, non-discrimination.

to exercise: privacy@blursociety.com.

children

this site is not intended for children. we don't knowingly collect personal information from anyone under 16. if you're a parent or guardian and believe your child has given us information, email privacy@blursociety.com and we'll delete it.

we don't sell or share personal information of anyone under 16 with our actual knowledge.

security

we take reasonable measures to protect your information — encryption in transit (https/tls), restricted access to systems, regular security reviews by shopify. but no system is perfectly secure. don't send sensitive information through unsecured channels (like sms or unencrypted email).

if there's ever a breach affecting your information, we'll notify you within the timeline required by law (typically 30–60 days, depending on jurisdiction).

if you have an account, you're responsible for keeping your password safe. don't share it. use a password manager.

third-party links

we may link to other sites (instagram, brand partners, news articles). this policy only covers our site. if you click out to another site, their policy applies. we're not responsible for what they do with your information.

international users

we ship to the united states and canada only. if you somehow end up on this site from outside us/ca, please be aware that:

  • your information will be processed in canada and the united states
  • privacy protections in canada and the us may differ from your home jurisdiction
  • we don't claim compliance with gdpr (eu/uk) because we don't accept orders from those regions

if you place an order from outside us/ca, the order will be refunded automatically and your information will be deleted within 30 days unless we're legally required to retain it.

changes to this policy

we may update this policy as our practices change or as laws evolve. when we do:

  • the "last updated" date at the top of this page changes
  • material changes will be flagged via a site-wide banner for at least 7 days
  • if you have an account and we make material changes, we'll email you
  • continued use of the site after the effective date means you accept the updated policy

how to contact us

for privacy questions, requests, or complaints: email privacy@blursociety.com

for everything else: email support@blursociety.com

by mail: attn: privacy blur society 313-600 rochester avenue, coquitlam, british columbia

we respond to legitimate privacy inquiries within 30 days.