Privacy Policy

Who we are

This Privacy Policy describes how XT Filters (“XT,” “we,” “us”) collects, uses, and shares personal information when you visit our storefront, create an account, place an order, or contact support.

If you have privacy questions, use our contact form and mark the topic as general, or email the address we provide in support replies. We will route privacy requests to the appropriate team.

Information we collect

We collect information you provide and information generated when you use the site:

• Identity & contact: name, email, phone, shipping and billing addresses
• Account: login credentials managed via Shopify Customer Account, profile name, saved addresses
• Order: products purchased, amounts, payment status (card details are handled by Shopify/payment processors — we do not store full card numbers on our storefront)
• Support: messages, order numbers, photos you send for claims
• Technical: IP address, browser type, device, approximate location derived from IP, pages viewed, and similar analytics or security logs
• Cookies and similar technologies: session, cart, preferences, and analytics as described below

How we use information

We use personal information to:

• Process, fulfill, and ship orders; send order and shipping confirmations
• Provide customer support, returns, warranty claims, and account features
• Detect fraud, abuse, and security incidents; enforce our Terms of Service
• Improve the storefront, product catalog, and shopping experience
• Comply with legal obligations (tax, accounting, consumer law)
• Send transactional messages; marketing only where permitted and with opt-out where required

Legal bases (where applicable)

Depending on your region, we may process data based on contract performance (fulfilling your order), legitimate interests (security, improvement, fraud prevention), consent (certain cookies or marketing), and legal obligation.

Sharing & processors

We share data with service providers who help run the store — not for their independent marketing without a lawful basis. Typical categories include: Shopify (commerce platform, checkout, customer accounts); payment processors and fraud tools via checkout; shipping carriers and fulfillment partners; email or support tools if connected to the contact form; and analytics providers if enabled.

We may disclose information if required by law, court order, or to protect rights, safety, and property. In a merger, acquisition, or asset sale, customer data may transfer under continued privacy protections where required.

International transfers

Our storefront and Shopify infrastructure may process data in countries other than yours (including where Shopify and its subprocessors operate). Where required, transfers rely on appropriate safeguards such as standard contractual clauses or equivalent mechanisms provided by the platform.

Cookies & similar technologies

We use cookies and similar technologies to operate the cart and session, remember preferences, keep you signed in to Customer Account flows, measure site performance, and protect against abuse.

Essential cookies (cart, session, checkout, account, security) are required for the store to work and are set regardless of region.

Analytics cookies (Google Analytics 4) measure how the storefront is used. In the European Economic Area, the United Kingdom, Switzerland, and Brazil we ask for your consent before setting them, and they stay off until you accept. In other countries we load analytics without a consent banner. You can change a previous choice with Cookie settings in the footer where that control is shown.

You can also control cookies through your browser settings. Blocking essential cookies may prevent checkout or account features from working correctly.

Retention

We retain order and account records as long as needed to fulfill contracts, provide support, meet tax and legal requirements, and resolve disputes. Support messages and claim photos are kept for a reasonable period related to the request, then deleted or anonymized when no longer needed.

Security

We use commercially reasonable technical and organizational measures, including HTTPS on the storefront and reliance on Shopify’s security for checkout and Customer Account. No method of transmission or storage is completely secure; please use a strong unique password for your account.

Your rights

Depending on where you live, you may have rights to access, correct, delete, or export personal data; object to or restrict certain processing; withdraw consent; and lodge a complaint with a supervisory authority.

To exercise rights, contact us with enough detail to verify your identity and request. Account profile and addresses can also be updated while signed in. We will respond within the timeframes required by applicable law.

Children

Our store is directed to adults purchasing professional optical equipment. We do not knowingly collect personal information from children under 16 (or the age required in your jurisdiction). If you believe a child has provided data, contact us so we can delete it.

Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of the policy page reflects the latest revision. Material changes will be posted on this page; continued use of the store after changes constitutes notice where permitted by law.

Contact

Privacy requests: use the contact form on this site and include “Privacy” in your message, or reply to a support email with the same subject. Order-related privacy questions are fastest with your order number.