Privacy policy

Last updated: September 4, 2026 · Effective date: September 4, 2026 · Version v1.3

This Privacy Policy ("Store Policy") explains how Soulog Inc., located at 8 The Green, Ste A, Dover, DE 19901, United States ("Soulog," "we," "us," or "our"), collects, uses, discloses, retains, and protects personal information in connection with the Soulog online store at soulog.com and the customer account pages at account.soulog.com (together, the "Store").

1. Scope

This Store Policy applies to personal information Soulog processes in connection with the Store. The Store is operated on the Shopify commerce platform and includes Store browsing, cart activity, checkout and payment, order fulfillment and returns, customer-support messaging, marketing email, and the analytics and advertising technologies used on the Store.

This Store Policy does not cover the Soulog applications, Soulog Sense devices, voiceprints, Backtrack, or Soulog AI. Those products and features are governed by the separate Soulog Privacy Policy and applicable feature-specific notices. Where a practice differs between the two documents, this Store Policy governs the Store and the Soulog Privacy Policy governs the applications, devices, and Soulog AI.

The Store is offered only in the United States. This Store Policy is written for United States users and United States privacy laws.

2. Personal Information We Collect

We strive to collect only the personal information reasonably necessary to provide, secure, and improve the Store and complete the transactions you request. The categories below depend on the Store features, settings, transaction, and payment method you use.

2.1 Information You May Provide or Create

Order and contact information. Name, email address, phone number, shipping address, and billing address.
Payment information. Card or wallet details are collected and processed directly by the payment provider you select at checkout. Soulog does not receive or store full payment-card numbers. We receive limited transaction information such as the card brand, the last four digits, the authorization result, and a transaction identifier.
Store account information. If you create a Store account, we collect your email address, saved addresses, order history, and Store credit balance. Authentication is handled through Shopify customer-account services at account.soulog.com and may involve a one-time code sent to your email address or signing in with Shop.
Communications. Customer-support chat messages, emails you send us, product reviews, and survey or feedback responses.
Marketing sign-up information. The email address you submit to receive marketing email.

2.2 Information Collected Automatically

Device and connection information. IP address, browser type and version, operating system, device type, screen characteristics, time zone, and language settings.
Browsing and interaction information. Pages and products viewed, the site or advertisement that referred you, on-Store searches, links clicked, session timing, and cart, checkout, and purchase events, including order value.
Cookies and similar identifiers. Cookie identifiers and persistent device identifiers set by Soulog, by the service providers described in Section 4, and by the third parties described in Section 4.2. Section 6 describes these technologies and your controls.

2.3 Information From Other Sources

Payment and fraud-prevention providers, which return authorization results and risk signals.
Shipping carriers, which return delivery and tracking status.
Analytics and advertising partners, which return aggregated campaign, audience, and conversion-measurement data.
The Shopify platform, which provides order, account, and fraud-related information generated by its commerce and integrity functions, including account attributes you authorize when you choose to sign in with Shop.

Listing a category above does not mean that Soulog collects it in every case. We collect information only when the relevant feature, transaction, permission, or circumstance applies.

3. How We Use Your Personal Information

We use personal information to:

accept, process, fulfill, ship, and track orders, and handle returns, exchanges, and refunds;
process payments and prevent, detect, and investigate fraud, chargebacks, abuse, and security incidents;
create, authenticate, and maintain a Store account and its saved addresses and order history;
respond to support requests and communicate with you about orders, shipping, product availability, and service or security matters;
send marketing email where you have signed up, and measure whether those messages are opened and acted on;
measure and improve the Store, including traffic, page performance, merchandising, and checkout completion;
conduct advertising and advertising measurement, including cross-context behavioral advertising and remarketing, as described in Section 4.2;
detect, investigate, and prevent fraud, abuse, security incidents, and violations of our terms; and
comply with law, respond to lawful process, protect rights and safety, and establish, exercise, or defend legal claims.

4. Who We Disclose Personal Information To

We do not sell personal information for monetary consideration. In limited circumstances and for specific purposes, we disclose personal information to the parties described below.

4.1 Service Providers

We disclose personal information to service providers only as reasonably necessary for them to perform services for us or at your direction. Each is engaged under written terms that govern its handling of the information. Where a provider qualifies as a service provider or contractor under applicable state privacy law, disclosure to that provider acting on our instructions is not treated as a sale or sharing under that law.

Shopify Inc. — the commerce platform that hosts the Store. Shopify processes order, account, cart, checkout, and browsing information to operate the Store and provides hosting, security, and administrative tooling.
Payment and fraud-prevention providers — the provider you select at checkout may include Shopify Payments, Shop Pay, Stripe, PayPal, Apple Pay, Google Pay, or Klarna, as displayed at checkout. Each processes payment and billing information under its own privacy policy. A fraud-prevention service may receive order and transaction information to assess risk and return risk signals to us.
Shipping and fulfillment providers — carriers and fulfillment partners receive the name, address, phone number, email address, and other delivery information needed to deliver your order and handle returns.
Order management systems — software used to manage orders, inventory, and fulfillment may receive name, delivery address, phone number, email address, and order details and may return fulfillment information such as tracking numbers to the Store.
Klaviyo, Inc. — our email-marketing platform. Klaviyo receives your email address, name, order history, on-Store engagement, and IP address and sets a persistent browser identifier so that engagement can be attributed across visits. Under our current arrangement, Klaviyo is treated as a service provider and is restricted from selling personal information, sharing it for cross-context behavioral advertising, or using it outside the business purposes we specify.
QuickCEP — the platform through which we provide customer service on the Store. Through Store application permissions it receives order history and customer-record information, including name, email address, phone number, and address, and it sets a browser identifier so that a support conversation can continue across visits. Under our current arrangement, QuickCEP is treated as a service provider and is subject to restrictions on sale, cross-context behavioral advertising sharing, and use outside our specified business purposes.
Storefront operations and on-site messaging applications — applications installed on the Store may render pages, manage content, display promotional or subscription messages, and support Store operations. They process information needed for those functions; some set a browser identifier to control message frequency or record whether you have responded, and an application receives your email address when you submit it through that application.
Professional and administrative service providers — accounting, tax, audit, legal, and similar advisers, where reasonably necessary.

4.2 Advertising and Analytics Third Parties

We use analytics and advertising technologies on the Store that transmit personal information to companies that can also observe activity on other websites and applications. Those companies may associate what you do on the Store with activity observed elsewhere and use the result to select, deliver, price, and measure advertising. Under California, Colorado, Connecticut, Virginia, and comparable state privacy laws, these disclosures may constitute a "sale," "sharing" for cross-context behavioral advertising, or "targeted advertising."

The information transmitted may include IP address; cookie and device identifiers; pages and products viewed; referring URL and page title; browser, operating-system, screen, and time-zone characteristics; and cart, checkout, and purchase events, including order value.

Google LLC — through Google Analytics, Google Ads, and the Shopify Google & YouTube sales channel. Google receives browsing and conversion information associated with identifiers it sets in the browser and with the IP address, for measurement, audience creation, remarketing, and bid optimization. Google Signals is enabled and permits Google to associate activity with a signed-in Google account and link it across devices used by that account. Enhanced Conversions may transmit a hashed form of the email address or phone number provided at checkout so that a purchase can be matched to an advertising interaction.
Meta Platforms, Inc. — through the Meta Pixel and Meta Conversions API integrated through the Facebook and Instagram sales channel on Shopify. Meta receives pages and products viewed, referring URL, IP address, browser and device characteristics, and cart, checkout, and purchase events, associated with an identifier Meta sets in the browser. The same events may also be transmitted from the Store server through the Conversions API. Advanced Matching may transmit hashed forms of the email address, phone number, name, and address provided at checkout so that an event can be matched to a Facebook or Instagram account.
Shopify Inc., in its platform-data capacity — separately from the service-provider role described in Section 4.1, Shopify may combine information generated on the Store with information generated across the Shopify platform for purposes Shopify describes as product improvement, advertising targeting, and personalization for our Store. Under the current configuration, this processing is enabled; disabling it may also disable certain connected commerce functions.

Consent signals. Advertising and analytics tags described above read a consent or privacy-choice signal before they run. Under the current configuration, when you opt out as described in Section 8, the signal is set to denied for advertising and analytics. From that point we stop disclosing your personal information to those third parties for cross-context behavioral advertising, and we instruct those services not to use your information to personalize or measure advertising. Some technical identifiers may remain in your browser after you opt out; they are not used for advertising purposes.

4.3 At Your Direction

Certain features allow you to share information or connect the Store with another person, application, platform, or service. When you choose to share or connect, the recipients or services you authorize may access the information you select, subject to the settings and access controls available in the Store. Third-party services are governed by their own terms and privacy policies.

4.4 Legal, Safety, and Enforcement Purposes

We may access, preserve, or disclose personal information when we reasonably believe it is necessary to comply with applicable law or valid legal process; enforce our Terms of Service; detect, investigate, or prevent fraud, abuse, security incidents, or technical issues; or protect the rights, property, safety, and security of Soulog, our users, other individuals, or the public.

4.5 Corporate Transactions

We may disclose or transfer personal information in connection with the evaluation, negotiation, financing, or completion of a proposed or actual merger, acquisition, reorganization, bankruptcy, sale of all or part of our business or assets, or similar corporate transaction, subject to appropriate confidentiality, security, notice, and choice requirements under applicable law.

4.6 Aggregated or De-Identified Information

We may use or disclose aggregated or de-identified information that cannot reasonably be used to identify you, subject to safeguards designed to prevent re-identification where required by law.

5. Sale, Sharing, and Targeted Advertising Summary

Soulog does not sell personal information for monetary consideration. The Store does, however, use the advertising and analytics technologies described in Section 4.2, and the resulting disclosures may constitute a sale, sharing for cross-context behavioral advertising, or targeted advertising under applicable state privacy law. You may opt out as described in Section 8. Soulog does not knowingly sell or share the personal information of consumers we know to be under 16 years of age.

6. Cookies and Similar Technologies

The Store uses cookies, local storage, pixels, and software development kits. These technologies may include:

Strictly necessary technologies — used to maintain sessions and carts, complete checkout, authenticate Store accounts, balance load, and protect against fraud and abuse. These cannot be disabled through Store controls because the Store cannot function without them.
Preference technologies — used to remember language, currency, region, and notices you have dismissed. They can generally be controlled through your browser, although some convenience features may stop working.
Analytics and performance technologies — used to measure traffic, page performance, and Store usage so that we can improve the Store. You can opt out as described in Section 8.
Advertising technologies — used to build audiences, measure conversions, and personalize advertising on other websites and applications. You can opt out as described in Section 8.
Customer-messaging and email-attribution technologies — used to recognize a browser across visits so that support conversations can continue and marketing-email engagement can be attributed. These can be controlled in part through browser controls and the marketing unsubscribe mechanism described in Section 9.

Global Privacy Control. We honor the Global Privacy Control ("GPC") signal. If your browser or a browser extension transmits GPC, we treat it as a request to opt out of the sale and sharing of personal information for that browser.

Consent banner. The Store's consent-request behavior is maintained regionally through the commerce platform for the regions in which we sell. Where applicable law requires consent for a non-essential technology, we will request consent before using it. Where an opt-out right applies, the opt-out methods described in Section 8 remain available.

Browser controls. You can block or delete cookies through your browser settings. Blocking strictly necessary cookies may prevent parts of the Store, including checkout, from working.

7. Retention and Deletion

We retain personal information only for as long as reasonably necessary for the purposes described in this Store Policy, taking into account the type and sensitivity of the information, the transaction involved, security needs, our relationship with you, and applicable legal, tax, accounting, consumer-protection, and dispute-resolution requirements.

Order, payment, and tax records are retained for the period required by tax, accounting, and consumer-protection law and as reasonably necessary to handle returns, warranty claims, chargebacks, and disputes.
Store account information is retained while the account is open and is deleted or de-identified after closure, subject to applicable transaction-record retention requirements.
Support and communication records are retained for the period reasonably necessary to resolve the matter, handle recurrence, and meet legal obligations.
Marketing lists are retained until you unsubscribe, after which we keep only the minimal suppression record necessary to honor your choice.
Analytics information is currently retained for 14 months, measured from your most recent activity, after which it is deleted or retained only in aggregated form.
Advertising identifiers are retained by the third parties described in Section 4.2 under their own policies and retention periods. Cookies expire according to the lifetime set for each cookie or when you delete them.

Limited records may be retained where required or permitted by law, including for tax, accounting, fraud prevention, security, dispute resolution, and enforcement. Residual copies may remain temporarily in access-restricted backups until overwritten in the normal course of backup rotation.

8. Your Choices and Privacy Rights

Depending on the state where you live and subject to applicable exceptions, you may have the right to confirm whether we process your personal information and access it; obtain a portable copy; correct inaccurate personal information; delete personal information; opt out of the sale or sharing of personal information, targeted advertising, and certain profiling; appeal a privacy-request decision; and exercise applicable rights without unlawful discrimination.

8.1 How to Opt Out of Sale and Sharing

Use the "Your Privacy Choices" link in the footer of the Store, which opens soulog.com/pages/data-sharing-opt-out.
Enable Global Privacy Control in your browser or through a browser extension. We honor it automatically for that browser.
Email privacy@soulog.com with your request and the state where you live.

8.2 What the Opt-Out Does and Does Not Cover

Opting out stops the disclosures to the advertising and analytics third parties described in Section 4.2 to the extent those disclosures constitute sale, sharing, or targeted advertising under applicable law. It does not stop processing by service providers acting on our instructions, processing strictly necessary to accept and fulfill orders, take payment, prevent fraud, secure the Store, or comply with law, or certain platform-data processing carried out by Shopify under its own terms as described in Section 4.2.

8.3 Browser and Account Scope of Opt-Out

Your opt-out is recorded in the browser you use to make it and therefore applies to that browser and device. You may need to repeat the choice on each browser and device and again if you clear cookies or browsing data. Where you are signed in to a Store account, we also apply your choice to that account where technically feasible.

8.4 Submitting and Verifying Other Requests

Submit access, correction, deletion, and portability requests by emailing privacy@soulog.com. Describe your request and the state where you live. We may ask for information reasonably necessary to verify your identity, residence, request, or an authorized agent's authority. We respond within the period required by applicable law and may extend the response period where permitted by law. If we deny a request, we will explain the basis and, where applicable, how to appeal.

8.5 Sensitive Personal Information and Financial Incentives

The Store may process account-authentication information that is treated as sensitive personal information under California law when combined with credentials that permit access to an account. We use and disclose such information only for authentication, account security, and fraud prevention and do not use or disclose sensitive personal information for purposes that create a right to limit under California law. We do not offer a financial incentive or a price or service difference in exchange for personal information.

Please see Schedule 1 for additional U.S. state privacy disclosures.

9. Marketing Communications

We send marketing email only where you have signed up for it. Every marketing email contains an unsubscribe link, and you may also email privacy@soulog.com to be removed. After you unsubscribe, we retain a minimal suppression record so that we do not email you again.

Unsubscribing from marketing does not stop transactional or service messages that relate to a purchase or your Store account, such as order confirmations, shipping and delivery notices, refund and return notices, security notices, or material changes to our terms or this Store Policy.

10. Security

We use safeguards designed to protect personal information, taking into account the nature and sensitivity of the information, the way it is processed, and relevant risks. Depending on the circumstances, these safeguards may include organizational, personnel, physical, and technical measures such as authentication, access controls, encryption in transit and at rest where appropriate, logging, monitoring, vulnerability management, and incident-response procedures.

For the Store, data in transit is protected using TLS, and payment-card data is handled by payment providers that are represented as PCI-DSS compliant and is not stored by Soulog as a complete card number.

No method of electronic transmission or storage is completely secure. You are responsible for protecting your Store account credentials and devices. If you believe your account or information has been compromised, contact security@soulog.com. If a security incident affects personal information, we investigate, contain, and remediate it and provide notice when and as required by applicable law.

11. Data Location and Transfer

The Store is offered only in the United States. Store and order data is processed on the Shopify commerce platform and stored on infrastructure Shopify operates for that purpose. Certain service providers and advertising and analytics partners described in Sections 4.1 and 4.2 are international companies and may process information on infrastructure located outside the United States in accordance with their own terms and applicable law. For an advertising or analytics partner this is typically limited information such as an IP address or cookie identifier. For a carrier, fulfillment partner, order-management system, or customer-service platform it may include delivery information such as name, delivery address, phone number, and email address.

12. Children and Teens

The Store is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you do not meet the legal age requirement for adults in your jurisdiction, please do not use our services. We do not knowingly sell or share the personal information of consumers we know to be under 16 years of age. Purchases must be made by a person who has reached the age of majority where they live, or with the involvement and consent of a parent or legal guardian. If you believe a child has provided personal information to the Store, contact privacy@soulog.com and we will investigate and delete it as required by law.

13. Third-Party Services and Links

The Store may link to or connect with third-party websites, applications, payment providers, social-media services, app-store listings, or other services. Their independent privacy practices are governed by their own policies. Review those policies before providing information or enabling a connection. Soulog is not responsible for a third party's independent privacy practices.

14. Changes to This Store Policy

We may update this Store Policy to reflect changes in the Store, law, providers, or our practices and will post the updated version with a new "Last updated" date. For a material change, including the addition of a new category of personal information disclosed for advertising, we will provide advance notice through the Store, by email, or by another appropriate method before the change takes effect and will obtain affirmative consent where required by law.

15. Contact Us

Purpose	Contact
Privacy questions and rights requests	privacy@soulog.com
Security reports	security@soulog.com
Help and support	support@soulog.com
Controller and operator	Soulog Inc., 8 The Green, Ste A, Dover, DE 19901, United States

Opt out of the sale and sharing of personal information: "Your Privacy Choices" in the Store footer or soulog.com/pages/data-sharing-opt-out
If you need this Store Policy in an accessible alternative format, contact support@soulog.com.

Schedule 1 – Special Terms for the United States

These U.S. Special Terms supplement the Soulog Online Store Privacy Policy by providing additional disclosures under applicable U.S. state privacy laws. They apply only where the relevant disclosure is required and the applicable law applies to Soulog. If these U.S. Special Terms conflict with the main Store Policy, these U.S. Special Terms control for the relevant U.S. state disclosure.

1. California Disclosures

The following supplemental disclosures apply to California residents. Because Soulog has not commercially launched the Services to the general public as of the Effective Date, the table below describes the categories Soulog expects to collect upon launch, rather than a complete historical record of public-user collection during the preceding 12 months.

1.1 Categories of Personal Information Expected to Be Collected Upon Launch

California Category	Store Examples	Expected Business or Commercial Purposes	Disclosed for Advertising
Identifiers	Name, email address, phone number, postal address, IP address, cookie and device identifiers, and Store account identifier.	Order fulfillment, payment, support, account management, marketing, analytics, advertising, and fraud prevention.	Yes — IP address, cookie and device identifiers, and, where enabled, hashed email address or phone number for conversion matching.
Commercial information	Products viewed, cart contents, orders, order value, returns, and subscription or plan interest.	Order fulfillment, support, merchandising, analytics, and conversion measurement.	Yes — as part of conversion and audience measurement.
Internet or other electronic network activity	Pages and products viewed, referring URL, page title, on-Store searches, clicks, session timing, and browser/device characteristics.	Store operation, performance measurement, analytics, and advertising.	Yes.
Approximate geolocation	City- or region-level location inferred from IP address. The Store does not collect precise geolocation through ordinary commerce functions.	Fraud prevention, tax and shipping estimation, regional content, and analytics.	Yes — through the IP address.
Commercial transaction records	Transaction identifier, card brand and last four digits, authorization result, and billing address.	Payment, refunds, chargeback and fraud handling, and accounting.	No.
Audio, electronic, visual, or similar information	None is collected through ordinary Store functions. Audio recordings, voiceprints, and transcripts are addressed in the separate Soulog Privacy Policy.	Not applicable to ordinary Store functions.	No.
Sensitive personal information	Account-authentication information when combined with credentials that permit access to an account. The Store does not collect product-side biometric information or precise geolocation through ordinary commerce functions.	Authentication, account security, and fraud prevention.	No.

1.2 California Consumer Rights

Right to Know and Access. You may request information about the categories and specific pieces of personal information Soulog has collected about you, the categories of sources, the business or commercial purposes, and the categories of third parties to whom information was disclosed, sold, or shared.
Right to Deletion. You may request deletion of personal information collected from or about you, subject to applicable exceptions.
Right to Correction. You may request correction of inaccurate personal information maintained about you.
Right to Opt Out. You may opt out of sale or sharing for cross-context behavioral advertising as described in Section 8 of the main Store Policy.
Right to Non-Discrimination. Soulog will not unlawfully discriminate against you for exercising an applicable privacy right.

1.3 Other California Information

Shine the Light. Soulog does not disclose personal information to third parties for their own direct-marketing purposes.
Children Under 16. Soulog does not knowingly sell or share the personal information of consumers under 16.
Financial Incentives. Soulog does not currently offer a financial incentive or a price or service difference in exchange for the collection, sale, or sharing of personal information.
Sensitive Personal Information. Soulog does not use or disclose sensitive personal information for purposes that create a right to limit under California law.

2. Disclosures for Other U.S. States

This Section supplements the main Store Policy for residents of Colorado, Connecticut, Delaware, Iowa, Indiana, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, and other states with applicable consumer privacy laws, but only when the applicable law applies to Soulog.

2.1 Mandatory Disclosures

Categories Processed. Soulog processes the Store categories described in Section 2 of the main Store Policy and Section 1.1 of this Schedule. Purposes are described in Section 3. Depending on the Store function, Soulog may disclose those categories to the recipients described in Section 4. The Store uses advertising and analytics technologies that may constitute sale, targeted advertising, or cross-context behavioral advertising sharing under applicable state law, as described in Sections 4.2, 5, and 8.

2.2 State Privacy Rights

Depending on your state of residence and subject to applicable exceptions, you may have rights to confirm processing, access, obtain a portable copy, correct, delete, opt out of sale or targeted advertising, opt out of certain profiling, withdraw consent where applicable, obtain information about disclosure recipients, appeal a denial, and exercise rights without unlawful discrimination or retaliation.

2.3 How to Exercise Your Rights

You, or an authorized agent where permitted by law, may submit a request by emailing privacy@soulog.com or through any privacy-choice control made available by the Store. Soulog may use commercially reasonable methods to verify your identity, residence, request, and the authority of an authorized agent. Requests are processed subject to applicable exceptions, technical feasibility, and the rights of other individuals.

2.4 Time to Respond and Appeals

Soulog will respond within the period required by applicable law. Where a 45-day response period applies, Soulog may extend that period as permitted by law when reasonably necessary and will notify you of the extension. If Soulog denies a request and applicable law provides an appeal right, you may appeal by replying to the decision or emailing privacy@soulog.com.

3. Nevada Disclosures

Soulog does not sell "covered information" as defined under Nevada law. Requests concerning Nevada privacy rights may be submitted to privacy@soulog.com.