Privacy Policy

This Privacy Policy explains how Drip4Kings collects, uses, shares and protects personal information when you visit the storefront, create an account, place an order or contact us. The store sells to consumers in every country our checkout serves, so this policy is written to meet the data protection law of the country where you live as well as Chilean law, including the higher standard that takes effect under Chilean Law 21,719 on December 1, 2026. Where your own law gives you more, your law applies.

1. Who is responsible for your information

The data controller is Drip4Kings SpA, RUT 78.536.452-K, trading as Drip4Kings, at Pasaje Los Almendros 512, La Cisterna, Santiago, Chile.

Privacy requests: support@drip4kings.com
WhatsApp: +56 9 7201 4450

2. Information we collect

• Contact and delivery data: name, email, phone number, billing address and shipping address.
• Order data: products, variants, quantities, prices, discounts, delivery, returns, refunds and payment status.
• Payment data: once enabled, the payment provider processes card or account credentials. We receive transaction identifiers, status, amount and limited method details, not your full card number or security code.
• Account data: account identifier, saved addresses and order history.
• Support data: messages and information you provide when requesting help, a return, a cancellation or a legal right.
• Device and usage data: IP address, browser, device, pages viewed and events collected by Shopify or optional analytics tools in accordance with your privacy choice.
• Local choices: region, wishlist, outfit-builder selection and privacy settings stored on your device.

3. Where information comes from

We receive information directly from you, automatically from the storefront and Shopify, and—when those services are enabled and involved in your transaction—from the relevant payment, fraud-prevention, shipping or support providers.

If you choose Continue with Google to sign in, Google shares with us, through Shopify, the basic profile its sign-in screen lists: the name, email address, language preference and profile picture of your Google account. We use them to create your customer account and sign you in; after that they are part of your account information. Signing in with Google does not subscribe you to marketing. Google handles the sign-in itself under its own privacy policy.

4. Why we use information, and on what legal basis

• To create the cart, process payment, confirm, prepare, ship and support an order.
• To manage accounts, cancellations, returns, refunds, warranty claims and customer service.
• To prevent fraud, protect the storefront and comply with payment-network requirements.
• To issue and retain tax, accounting and transaction records required by law.
• To remember choices or provide a feature you request.
• To measure or improve the storefront when analytics consent is required and has been given.
• To send promotions only when you have made a separate marketing choice, with a way to unsubscribe.

Depending on the activity and the law that applies, processing is necessary to enter into or perform the purchase contract, to comply with a legal obligation, to protect the storefront and customers, to pursue a legitimate interest that does not override your rights, or it rests on your consent. In the European Union, the European Economic Area and the United Kingdom these are the legal bases in Article 6(1)(b), (c), (f) and (a) of the GDPR respectively. You may withdraw consent for future processing at any time without affecting what was lawful before.

5. Who receives information

We disclose only the information reasonably needed by:

• Shopify, which hosts the storefront, account and checkout services.
• The payment provider shown at checkout, once activated, to authorise and settle payment.
• Fraud, security, hosting and technical providers used to operate and protect the store.
• Our fulfilment partner in China and the delivery carrier, which receive the recipient and order information needed to prepare and deliver the parcel.
• 17TRACK, our shipment-tracking provider. Through its Shopify app it receives the buyer's name, email address, phone number and delivery address together with the order information, and uses them to follow the parcel and update its delivery status in our store. The app's access to our store is set by 17TRACK and covers orders, including past ones, and customer records. When results load on our Track your order page, 17TRACK also receives the tracking number and the technical data of that visit; see the Cookie Policy. 17TRACK's app also runs a web pixel on the checkout and order status pages, which Shopify hosts. Shopify loads it on every visit to those pages, whatever you choose in our cookie controls, because 17TRACK has not marked it as needing consent. Through it 17TRACK can receive the events of those pages, including the checkout and the completed order, an identifier that Shopify assigns to your browser and technical data about the visit, and it can store its own identifier on your device. We keep it as part of the tracking service we use for your delivery, relying on our legitimate interest, and we have asked 17TRACK to make it follow your choice or to switch it off for our store.
• Email, support, analytics or advertising providers, only for the stated service and, where required, after the relevant consent.
• Authorities or professional advisers when disclosure is required by law or necessary to establish or defend a legal claim.

There is no active payment provider at the date of this version. Before enabling payments, we must review and identify the actual provider, its purposes, the data categories it receives, its location, subprocessors, security measures and the terms of any international transfer. This policy must be updated if that review reveals additional processing. Payment data is not sent to an inactive gateway.

We do not sell personal information for money. If a future advertising feature is treated as a sale, sharing or targeted advertising under a law that applies to you, we provide the required opt-out before using it; see Do not sell or share my personal information.

6. International transfers

Shopify and other service providers may process information outside your country, including in Chile, the United States and China. Order fulfilment requires limited delivery information to be sent to our fulfilment partner in China and to carriers in the delivery chain. According to its privacy policy, 17TRACK stores the order and customer information it receives on Tencent Cloud servers in the United States.

Where a transfer leaves the European Economic Area or the United Kingdom, it must rest on a lawful transfer mechanism, such as an adequacy decision or the Standard Contractual Clauses together with the safeguards required for that destination. For 17TRACK, its privacy policy (effective 23 June 2026) states that personal information leaving the European Economic Area is transferred under the standard contractual clauses approved by the European Commission or to a country that ensures an adequate level of protection. Before enabling payments or integrating a new provider that processes information across borders, we must review the destination countries, recipients, purposes, data involved, retention periods, security measures and the legal mechanism applicable to each transfer, and we do not claim the existence of contractual clauses, certifications or safeguards that have not been verified. You may ask us which mechanism covers a given transfer.

7. How long we keep information

We keep personal information only for as long as needed for the purpose collected, including order fulfilment, customer support, fraud prevention, tax and accounting obligations, dispute resolution and enforcement of agreements. Marketing information is kept until you unsubscribe or the purpose ends. Local wishlist and outfit data stay on your device until you clear them. When retention is no longer justified, information is deleted or anonymised, subject to legal holds and mandatory records.

8. Your rights

Wherever you live, you may ask us to access, correct, delete, block, restrict or object to the use of your personal information, withdraw consent, or receive a portable copy. Send a request to support@drip4kings.com and describe what you need. We may verify identity before acting, we answer within the period your law sets, and we do not discriminate against anyone for exercising a privacy right.

9. Rights in your country

• European Union, European Economic Area and United Kingdom: access, rectification, erasure, restriction, portability, objection including to direct marketing, withdrawal of consent, and the right not to be subject to a decision based solely on automated processing with legal or similarly significant effects, which we do not carry out. We answer within one month, extendable by two months for complex requests. You may complain to your national data protection authority or, in the United Kingdom, to the Information Commissioner's Office.
• Chile: the rights of access, rectification, cancellation and objection, and from December 1, 2026 the rights and procedures introduced by Law 21,719, including portability. You may complain to the Chilean Data Protection Agency once it is operational.
• Brazil: the rights under the LGPD, including confirmation of processing, access, correction, anonymisation, portability, deletion, information about sharing and revocation of consent. You may complain to the ANPD.
• United States: where a state privacy law applies to you, the rights to know, access, correct, delete, obtain a portable copy, and to opt out of sale, sharing or targeted advertising, with an appeal route where the state provides one. We honour the Global Privacy Control signal as an opt-out request for the browser it comes from.
• Canada: access to and correction of your personal information under PIPEDA and applicable provincial law, and the right to complain to the Office of the Privacy Commissioner of Canada.
• Australia and New Zealand: access and correction under the Australian Privacy Principles or the New Zealand Privacy Act, and the right to complain to the OAIC or the New Zealand Privacy Commissioner.
• Everywhere else: the rights your own data protection law gives you. Tell us where you live and we apply them.

10. Cookies and local storage

Essential technologies keep the session, cart, account and security functions working. Optional analytics, preference and marketing categories follow the choice available in our privacy controls, and in the EU, EEA, the United Kingdom and other countries that require prior consent they stay off until you accept. The tracking frame on our Track your order page, provided by 17TRACK, also loads when you ask for results by pressing Track or Show tracking. One exception does not follow your choice: the 17TRACK pixel on the checkout and order status pages, described in section 5. See the Cookie Policy and use Cookie Preferences in the footer to review your choice.

11. Marketing

Marketing is optional and is not a condition of purchase. Promotional messages identify the sender and include a way to unsubscribe. Where your law requires prior opt-in for marketing email or messaging, we send it only after that opt-in. Transactional messages about an order, a cancellation, security or a requested support case are not marketing.

12. Security

The storefront and checkout use Shopify-hosted services. Before enabling payments, we must verify the access configuration, permissions, payment provider, data flow and incident-response channels that apply to the real operation. If a breach affects your personal information, we notify you and the competent authority where the law requires it and within the deadline it sets. No system is perfectly secure. Do not send card security codes, passwords or other sensitive credentials through email, chat or WhatsApp.

13. Children

The store is not directed to children. A person under 18 should order only with a parent or legal guardian. Contact us if you believe a child supplied personal information without appropriate authorisation.

14. Changes and contact

We may update this policy when practices or legal requirements change. The current date and version remain at the top. Material changes are communicated where required.

Email: support@drip4kings.com
WhatsApp: +56 9 7201 4450
Seller: Drip4Kings SpA, RUT 78.536.452-K
Postal address: Pasaje Los Almendros 512, La Cisterna, Santiago, Chile