Privacy policy

Privacy Policy

Last updated: May 2026

DumbFix ("we", "us", "our") operates the website www.dumbfix.com. This policy explains what personal data we collect, how we use it, who we share it with, and your rights as a customer — including rights under GDPR (UK and EEA residents) and CCPA (California residents).

1. What We Collect

We collect the following information when you place an order, create an account, or browse our site:

Identity data: name, email address
Contact data: shipping address, phone number (if provided)
Payment data: payment is processed by Shopify Payments and third-party processors (e.g. Stripe, PayPal). We never see or store your full card number.
Order data: products purchased, order history, returns
Technical data: IP address, browser type, pages visited, time spent on site, referring URL — collected automatically via cookies and Shopify analytics
Marketing data: email marketing preferences (only if you opt in)

2. How We Use Your Data

To process and fulfill your orders (including passing your name and address to our fulfillment supplier)
To send order confirmations, shipping notifications, and tracking updates
To respond to customer service inquiries
To prevent fraud and maintain the security of our store
To improve our website and product selection through analytics
To send promotional emails — only if you have explicitly opted in. You can unsubscribe at any time.
To run targeted advertising on platforms such as Meta (Facebook/Instagram) and TikTok — only using anonymized or hashed data where permitted by those platforms' policies

3. Who We Share Your Data With

We do not sell your personal data. We share it only with the following third parties as necessary to operate our business:

Shopify Inc. — our ecommerce platform. Shopify stores and processes order data on our behalf. See Shopify's privacy policy at shopify.com/legal/privacy.
Tradelle — our product fulfillment supplier. We share your name, shipping address, and order details so your order can be shipped. Tradelle does not use this data for marketing.
Payment processors — Shopify Payments, Stripe, or PayPal, depending on your checkout method. These processors handle your payment data under their own PCI-compliant privacy policies.
Shipping carriers — Your name and shipping address are shared with the carrier responsible for delivering your order (e.g. USPS, UPS, DHL).
Marketing platforms — If you opt in to marketing, we may use services such as Klaviyo or Mailchimp for email. We also use pixel tracking from Meta and TikTok for advertising purposes. You can opt out of interest-based advertising via your platform settings or via optout.aboutads.info.
Analytics — We use Google Analytics and/or Shopify Analytics to understand site traffic. This data is aggregated and anonymized.

4. Cookies

Our site uses cookies to:

Keep your cart and session active
Analyze site traffic (analytics cookies)
Enable retargeting advertising (ad platform cookies from Meta and TikTok)

You can control cookies through your browser settings. Blocking certain cookies may affect your ability to use the site or complete a purchase.

5. Data Retention

We retain your order data for a minimum of 7 years to comply with tax and accounting obligations. Marketing email data is retained until you unsubscribe. You may request deletion of your personal data at any time (see Section 6), subject to legal retention requirements.

6. Your Rights

All customers:

You can request a copy of the personal data we hold about you
You can request correction of inaccurate data
You can unsubscribe from marketing emails at any time using the unsubscribe link in any email
You can request deletion of your personal data by emailing support@dumbfix.com (subject to legal retention requirements)

UK and EEA residents (GDPR): You have the right to access, rectify, erase, restrict processing, and port your personal data. You also have the right to object to processing based on legitimate interests. To exercise these rights, email support@dumbfix.com. You also have the right to lodge a complaint with your national data protection authority.

California residents (CCPA): You have the right to know what personal information we collect and how it is used, the right to delete your personal information, and the right to opt out of the sale of your personal information. We do not sell personal information. To submit a request, email support@dumbfix.com.

7. Data Security

We use Shopify's infrastructure, which maintains industry-standard security including SSL/TLS encryption, PCI compliance for payment processing, and regular security monitoring. No method of transmission over the internet is 100% secure, but we take reasonable steps to protect your information.

8. International Transfers

DumbFix serves customers in the USA, Canada, UK, and Australia. Your data may be stored and processed in the United States where Shopify's primary servers are located. By placing an order, you consent to this transfer. Where required by law (e.g. GDPR), such transfers are protected by appropriate safeguards.

9. Children

Our site is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe we have collected data from a child, please contact us immediately at support@dumbfix.com.

10. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of our site after changes are posted constitutes your acceptance of the updated policy.