Privacy Policy

Effective date: July 22, 2026
Last updated: July 22, 2026

Qubzi ("Qubzi," "we," "us," or "our") operates qubzi.com and is the controller of the personal information described in this Privacy Policy, except where a service provider acts as an independent controller for its own stated purposes. This Policy explains how we collect, use, disclose, retain, and protect personal information when you visit our website, create or use an account, place or track an order, contact or chat with us, subscribe to marketing, submit a review, or use a product-customization or image-upload feature.

Our store is hosted by Shopify. Shopify also processes information about visitors and customers for purposes described in the Shopify Consumer Privacy Policy. Please read that notice together with this Policy.

1. Who We Are and How to Contact Us

Controller: Qubzi
Website: https://qubzi.com
Business address: 95 Jefryn Blvd E, Deer Park, New York 11729, United States
Email: supports@qubzi.com
Phone: +1 (707) 705-1617

For a privacy or data-rights request, use the subject line Privacy Request. We may need to verify your identity before completing a request.

2. Personal Information We Collect

Depending on how you interact with us, we may collect the following categories of personal information:

• Identity and contact information: name, email address, telephone number, billing address, shipping address, account identifiers, and similar contact details.
• Order, account, and commercial information: products viewed, searched for, placed in a cart, purchased, reviewed, returned, or exchanged; order and customer numbers; discount use; transaction dates; delivery preferences; order status; tracking numbers; carrier events; returns; refunds; and customer-service history.
• Payment information: billing details, payment method, payment status, fraud or risk signals, and transaction identifiers. Full payment-card numbers are handled by Shopify and payment providers and are not stored by us in ordinary store records.
• Communications: messages and information submitted through Shopify Inbox or another chat feature, our contact form, email, telephone, return requests, surveys, and other customer-support channels. This may include the page, product, cart, or order associated with the conversation.
• Newsletter and marketing information: email address, subscription status, consent or opt-out records, campaign engagement, and the source and time of signup.
• Reviews and user content: display name, email address, rating, review text, questions and answers, photos or videos, review source, moderation data, purchase-verification or order-link information, and technical information used to prevent fraudulent reviews.
• Customization files and instructions: images, artwork, text, selections, production instructions, filenames, file metadata, and the order or cart item to which an upload relates. An uploaded image may contain a person's likeness or other personal information if you choose to include it.
• Device, network, and usage information: IP address, browser and device type, operating system, language, approximate location derived from IP address, referring URL, pages viewed, searches, clicks, cart and checkout events, session information, cookie or pixel identifiers, and timestamps.
• Advertising and inference information: ad interactions, attribution and conversion events, audience membership, and preferences or likely interests inferred from shopping and browsing activity.
• Compliance and security information: authentication information, consent records, Global Privacy Control signals, abuse reports, suspected fraud, chargeback information, and records needed to establish, exercise, or defend legal claims.

3. Sources of Personal Information

We collect personal information:

• Directly from you, including when you check out, create an account, contact us, chat with us, subscribe, submit a review, request tracking information, or upload a customization file.
• Automatically from your device, through cookies, pixels, tags, local storage, server logs, and similar technologies.
• From Shopify and our service providers, including payment providers, fraud-prevention providers, fulfillment and production partners, carriers, 17TRACK, communications providers, Judge.me, and security providers.
• From advertising and analytics partners, including Google and Meta, such as campaign, attribution, audience, and conversion information.
• From other people, for example when someone purchases a gift for you, provides your delivery information, or submits content that concerns you.

4. Why We Use Personal Information and Our Legal Bases

Where the laws of the European Economic Area (EEA), United Kingdom, Switzerland, or another jurisdiction require a legal basis, we rely on the following bases:

• To provide the store and perform our contract with you: operate accounts and checkout; process payment; confirm, produce, customize, fulfill, deliver, and track orders; process returns, exchanges, refunds, and cancellations; and provide requested support.
• To comply with law: maintain tax, accounting, transaction, product-safety, consumer-protection, sanctions, and other legally required records; respond to valid legal process; and handle rights requests.
• For our legitimate interests: secure and maintain our services; prevent fraud, abuse, and chargebacks; troubleshoot and improve the customer experience; manage our business and vendors; understand non-intrusive service performance; and establish, exercise, or defend legal claims. We balance these interests against your rights and do not rely on legitimate interests to place non-essential advertising technologies where consent is legally required.
• With your consent: send optional marketing; use non-essential analytics, advertising, or personalization technologies where consent is required; publish optional review media or other user content at your request; and process other optional information for a purpose we explain when asking for consent. You may withdraw consent at any time, without affecting earlier lawful processing.

Information marked as required during checkout or account creation is necessary to enter into or perform a contract with you. If you do not provide it, we may be unable to accept payment, fulfill or deliver an order, authenticate you, or provide the requested service. Newsletter signup, reviews, optional chat fields, and customization uploads are voluntary, although an upload may be necessary if you choose a customized product that requires one.

5. How Specific Features Use Information

Orders, Checkout, Payments, Fulfillment, and Delivery

Shopify and our payment providers process order, payment, contact, device, and risk information to complete transactions and prevent fraud. We disclose the minimum information needed to production partners, warehouses, carriers, customs agents, and other fulfillment providers to produce, ship, deliver, return, or replace an order.

Order Tracking and 17TRACK

When you use our order-tracking page or receive tracking updates, we and 17TRACK may process an order number, tracking number, carrier, destination, delivery events, contact information used to authenticate the request, and device or usage information. We use this information to display shipment progress, send requested delivery updates, investigate delivery issues, and support returns or claims. Carriers may act as independent controllers under their own privacy notices.

Chat, Contact Forms, and Customer Support

Our live chat is provided through Shopify Inbox. Chat may associate your message with contact, account, order, page, product, device, or cart context so that we can respond. Our contact form collects name, email address, optional telephone number, and message content. Please do not send payment-card numbers, government identifiers, health information, or other sensitive information through chat or a general contact form.

Newsletter and Direct Marketing

If you subscribe, we use your email address and signup record to send news, product updates, or offers. Where required, we send marketing only with consent. You can unsubscribe at any time through the link in a marketing email or by contacting us. Unsubscribing from marketing does not stop transactional or service messages about an order or account.

Reviews and Judge.me

We use Judge.me to provide review functionality. Judge.me may process customer and order-link information to invite, authenticate, or mark a review as connected to a purchase; it may also process your name, email, rating, review, media, IP address, device information, and moderation or fraud signals. Review text, display name, rating, and media you submit for publication may be visible publicly. Do not include another person's personal information or content you do not have permission to publish. Contact us if you want to request removal or correction of a review; some verification and legal records may still be retained where permitted.

Customized Products and Image Uploads

If a product offers customization, we use your file and instructions to preview, produce, fulfill, and support that item. We may disclose them to Shopify, secure file-storage providers, and the production or fulfillment partner making the item. Upload only content that you own or are authorized to use. Do not upload government IDs, payment information, health information, intimate images, images of children without lawful parental authority, biometric templates, or other highly sensitive information. We do not use uploaded images to identify a person or infer sensitive characteristics.

Security and hCaptcha

Some forms, including our privacy-choice form, use hCaptcha, provided by Intuition Machines, Inc., to distinguish legitimate activity from bots and abuse. hCaptcha may process device, network, interaction, and risk information for this purpose. See the hCaptcha Privacy Policy.

6. Cookies, Pixels, and Similar Technologies

We and selected partners use cookies, pixels, tags, local storage, and similar technologies for the following purposes:

• Strictly necessary: security, network transmission, authentication, cart, checkout, payment, fraud prevention, locale, and privacy-choice functions.
• Functional: remembering preferences and enabling optional chat, review, tracking, or personalization features.
• Analytics: measuring visits, searches, navigation, errors, and store performance, including through Google services where enabled.
• Advertising: measuring campaigns, attributing conversions, creating or using audiences, limiting or personalizing ads, and understanding actions such as page views, product views, add-to-cart, checkout, and purchase, including through Google and Meta technologies where enabled.
• Reviews: operating and measuring Judge.me review features and preventing review abuse where enabled.

These technologies may collect or receive IP addresses, cookie and device identifiers, page URLs, referrers, browser and device information, approximate location, and shopping or conversion events. If advanced matching or a similar feature is enabled, an advertising provider may also receive transformed (for example, hashed) contact information for matching. We do not intentionally send custom-upload contents, general contact-form messages, or payment-card numbers to advertising or analytics providers.

Where applicable law requires consent for non-essential technologies, consent is our legal basis. You may use any cookie-preference control displayed on our site, adjust browser settings, withdraw marketing consent, or contact us. United States residents can also use Your Privacy Choices. Browser settings may not control every pixel or server-side technology.

We treat a recognized Global Privacy Control (GPC) signal as a request to opt out of sale, sharing, or targeted advertising for the browser and device where required by applicable law. A general "Do Not Track" signal is not standardized and may not produce the same result; use GPC or our privacy-choice page for an applicable opt-out request.

For more information about partner practices and controls, see the Google Privacy Policy, Meta Privacy Policy, Judge.me Privacy Policy, and Shopify Consumer Privacy Policy.

7. How We Disclose Personal Information

We disclose personal information only as reasonably necessary for the purposes described in this Policy, including to:

• Shopify and commerce providers that host the store and provide accounts, checkout, payment, fraud prevention, messaging, email, analytics, and related commerce services.
• Payment processors and financial institutions to authorize payments, issue refunds, prevent fraud, and resolve disputes.
• Production, fulfillment, customs, carrier, return, and tracking providers, including 17TRACK, to make and deliver products and handle delivery events, returns, and claims.
• Communications and support providers, including Shopify Inbox and our email providers, to send and manage messages.
• Review providers, including Judge.me, to collect, verify, moderate, publish, and manage reviews.
• Analytics and advertising providers, including Google and Meta, where enabled and subject to applicable choices, for measurement, attribution, audience, and advertising purposes.
• Security and abuse-prevention providers, including hCaptcha, to protect forms, accounts, transactions, and the site.
• Professional advisers and authorities, such as accountants, auditors, insurers, lawyers, regulators, courts, and law enforcement when reasonably necessary or legally required.
• Parties to a business transaction, such as a prospective purchaser, investor, lender, or successor, subject to appropriate confidentiality and legal safeguards.
• Other recipients at your direction or with your consent.

Service providers are permitted to process information only for contracted purposes, subject to applicable agreements and law. Some providers, such as payment networks, carriers, Shopify for certain services, Google, or Meta, may also act as independent controllers for purposes explained in their own notices.

8. United States State Privacy Notice

This section supplements the rest of the Policy for residents of United States states with applicable comprehensive privacy laws.

Categories Collected, Used, and Disclosed

During the preceding 12 months, we may have collected and disclosed for the business and commercial purposes described above: identifiers and contact information; customer-record and payment-related information; commercial and transaction information; internet or other electronic-network activity; approximate geolocation; audio, electronic, visual, or similar information such as review or customization media; inferences; and limited sensitive personal information needed for account access, payment, security, or fulfillment. Sources are described in Section 3 and recipient categories in Section 7.

We do not use or disclose sensitive personal information to infer characteristics about you or for purposes other than those permitted by applicable law. We do not knowingly sell or share personal information of people under 16.

Sale, Sharing, and Targeted Advertising

We do not sell personal information for money. However, disclosures through advertising cookies, pixels, or similar technologies to Google, Meta, or other advertising partners may be considered a "sale," "sharing," or processing for "targeted advertising" under certain state laws. During the preceding 12 months, the categories involved may have included identifiers such as IP address, cookie or device IDs, and transformed contact identifiers where matching was enabled; internet or network activity; commercial information; approximate location; and related inferences. The recipient category is advertising and analytics partners. The purposes are campaign measurement, attribution, audience services, and advertising.

To opt out, visit Your Privacy Choices or enable a recognized GPC signal. The device-level choice applies to the browser and device used. If the form offers an account-level option, provide the email associated with your account to extend the request to that account. You may also email supports@qubzi.com.

Your State Privacy Rights

Subject to applicable law and exceptions, you may have the right to request access to or confirmation of personal information we process; obtain specific pieces or a portable copy; correct inaccuracies; delete information; opt out of sale, sharing, targeted advertising, or certain profiling; limit certain uses of sensitive personal information; and receive equal service without unlawful discrimination. California residents may also request information about certain disclosures for direct marketing under California's "Shine the Light" law.

You may submit a request through the contact details in Section 15. An authorized agent may submit a request where permitted, but we may require proof of authority and verification of your identity. If we deny a request, residents of states that provide an appeal right may reply with the subject Privacy Appeal and explain the basis for the appeal. We will respond within the period required by applicable law.

Financial Incentives

We do not currently offer a program that we treat as a financial incentive or bona fide loyalty program under applicable United States state privacy laws in exchange for personal information. If we introduce one, we will provide any required notice and terms before you opt in.

9. EEA, United Kingdom, and Switzerland Rights

Subject to applicable law, you may request access, correction, deletion, restriction, or portability of personal data; object to processing based on legitimate interests or to direct marketing; and withdraw consent at any time. You also have the right to lodge a complaint with the data-protection authority in the country where you live, work, or believe an infringement occurred.

We do not use personal information to make decisions based solely on automated processing that produce legal or similarly significant effects. Automated fraud, security, and payment-risk signals may help us or our providers flag a transaction for review.

10. International Data Transfers

We operate from the United States and use providers and production, fulfillment, support, analytics, and advertising partners in multiple countries. Your personal information may therefore be processed outside the country where you live, including in the United States, Canada, the United Kingdom, the EEA, China, or other countries that may have different data-protection laws.

Where required, we use an adequacy decision, contractual protections such as the European Commission's Standard Contractual Clauses, the United Kingdom International Data Transfer Agreement or Addendum, or another lawful transfer mechanism. You may contact us to request more information about applicable safeguards.

11. Retention

We retain personal information only for as long as reasonably necessary for the purpose collected, taking into account legal, accounting, tax, fraud-prevention, warranty, dispute, security, and enforcement obligations. In general:

• Order, payment-status, fulfillment, return, refund, tax, and transaction records may be retained for up to seven years after the transaction, or longer if law or an active claim requires.
• Account information is retained while the account is active and afterward as needed to maintain transaction records, prevent fraud, or comply with law.
• Chat, contact-form, and customer-support records are ordinarily retained for up to 24 months after the matter closes, unless needed for an order record, dispute, safety issue, or legal claim.
• Newsletter information is retained until you unsubscribe or it is no longer needed. We may retain a minimal suppression record to honor your opt-out.
• Reviews and related user content may remain while published or until a valid removal request is completed. Verification, moderation, and legal records may be retained longer where necessary.
• Customization files are retained only as long as needed to preview, produce, fulfill, support, return, or defend a claim concerning the customized item, after which they should be deleted or de-identified. Production providers may retain copies under their documented retention rules.
• Cookie, analytics, and advertising information is retained according to the relevant technology, consent, configuration, and provider settings, and is deleted or de-identified when no longer needed.

We may retain de-identified information that cannot reasonably be linked to you.

12. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including access controls, secure transport, payment-provider controls, vendor management, and data minimization. No system is completely secure, and we cannot guarantee absolute security. If you believe your account or information has been compromised, contact us promptly.

13. Children

Our services are not directed to children under 16, and we do not knowingly collect, sell, or share their personal information. If you believe a child has provided personal information, contact us so we can investigate and delete it where required. A parent or legal guardian must control any lawful order or upload involving a minor.

14. Third-Party Sites and Changes to This Policy

Our site may link to third-party websites or services that have their own privacy practices. We are not responsible for those independent practices.

We may update this Policy to reflect changes in our services, vendors, or legal obligations. We will update the date above and provide additional notice where required. We will request fresh consent before materially different processing where applicable law requires it.

15. Contact and Rights Requests

Send privacy questions, requests, or complaints to:

Qubzi — Privacy
95 Jefryn Blvd E
Deer Park, New York 11729
United States
supports@qubzi.com
+1 (707) 705-1617