Privacy policy

Last Updated: August 10, 2026

Whalexi operates this store and website, including all related information, content, features, tools, products, and services, in order to provide you, the customer, with an online shopping experience for women’s apparel and related products.

This Privacy Policy describes how Whalexi collects, uses, discloses, stores, and protects your personal information when you visit, use, or make a purchase through our website, communicate with us, or otherwise interact with our services.

Our store currently serves customers in the following markets:

• United States

• United Kingdom

• Australia

• Canada

This Privacy Policy applies to customers and visitors from these markets, subject to applicable privacy and data protection laws in your jurisdiction.

Our store is powered by Shopify, which enables us to provide our online store, checkout, payment processing, order management, and other related services.

If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, use, processing, storage, and disclosure of your personal information.

Please read this Privacy Policy carefully. By accessing or using our website and services, you acknowledge that you have read and understood this Privacy Policy.

Personal Information We Collect or Process

When we use the term “personal information,” we mean information that identifies, relates to, describes, or can reasonably be linked to you or another individual.

Depending on applicable law, similar terms such as “personal data” may also be used.

Personal information does not include information that has been anonymized, aggregated, or de-identified so that it cannot reasonably identify or be linked to you.

Depending on how you interact with our website, where you are located, and applicable law, we may collect or process the following categories of personal information.

Contact Information

This may include:

• Name

• Email address

• Phone number

• Billing address

• Shipping address

• Account contact details

Order and Transaction Information

This may include:

• Products you view, add to cart, purchase, return, exchange, or cancel

• Order number

• Purchase history

• Return and refund history

• Shipping and delivery information

• Customer service records related to your order

Payment Information

This may include:

• Payment method details

• Billing information

• Payment confirmation details

• Transaction details

Please note that payment card information is generally processed by Shopify, payment processors, or other secure payment service providers.

We do not intentionally store full credit card or debit card numbers on our own systems.

Account Information

If you create an account, we may collect:

• Username or account login information

• Password or authentication credentials

• Account preferences

• Saved addresses

• Order history

• Communication preferences

Communications With Us

When you contact us, we may collect information you provide, including:

• Customer support inquiries

• Return or exchange requests

• Product questions

• Feedback or reviews

• Photos or documents you submit in connection with damaged, defective, or incorrect products

Device and Technical Information

We may collect information about your device and browsing activity, including:

• IP address

• Browser type

• Device type

• Operating system

• Referring URLs

• Pages viewed

• Date and time of visits

• Cookie identifiers

• Device identifiers

• Other similar technical information

Usage Information

We may collect information about how you interact with our website, including:

• Products viewed

• Search activity

• Cart activity

• Checkout activity

• Website navigation behavior

• Interaction with marketing emails or advertisements

Sources of Personal Information

We may collect personal information from the following sources.

Directly From You

For example, when you:

• Place an order

• Create an account

• Subscribe to emails

• Contact customer support

• Request a return or exchange

• Submit a review or inquiry

• Provide information during checkout

Automatically Through Our Website

We may collect information automatically when you visit or use our website, including through cookies, pixels, tags, log files, and similar technologies.

From Shopify and Service Providers

We may receive personal information from Shopify and other service providers that help us operate our store, process payments, fulfill orders, provide customer support, analyze website performance, prevent fraud, and provide marketing services.

From Business and Marketing Partners

We may receive information from advertising networks, analytics providers, marketing platforms, social media platforms, and other third-party partners where permitted by applicable law.

How We Use Your Personal Information

We may use your personal information for the following purposes.

Providing and Improving Our Services

We use your personal information to operate our store and provide our services, including to:

• Process and fulfill orders

• Process payments

• Arrange shipping and delivery

• Provide order confirmations and tracking updates

• Process returns, exchanges, refunds, and cancellations

• Manage your customer account

• Respond to customer service inquiries

• Maintain order records

• Improve our website, products, and customer experience

• Personalize your shopping experience, such as showing products that may be relevant to your interests

Marketing and Advertising

We may use your personal information to send marketing and promotional communications where permitted by applicable law, including:

• Email promotions

• Product updates

• Special offers

• Abandoned cart reminders

• Personalized advertisements

• Retargeting advertisements on third-party platforms

Where applicable law requires consent before sending certain marketing communications or using certain advertising technologies, we will seek consent as required.

You may opt out of promotional emails at any time by using the unsubscribe link included in our marketing emails.

Even if you opt out of marketing communications, we may still send non-promotional messages, such as:

• Order confirmations

• Shipping updates

• Refund notifications

• Account notices

• Security notices

• Policy updates

• Customer service messages

Security and Fraud Prevention

We may use your personal information to:

• Verify transactions

• Detect and prevent fraud

• Protect against unauthorized access

• Secure our website and checkout process

• Investigate suspicious, fraudulent, illegal, unsafe, or malicious activity

• Enforce our policies and terms

If you create an account, you are responsible for maintaining the confidentiality of your login credentials.

Communicating With You

We may use your personal information to communicate with you about:

• Orders

• Payments

• Shipping

• Returns and refunds

• Product inquiries

• Customer support issues

• Policy updates

• Account-related matters

Legal and Compliance Purposes

We may use your personal information to:

• Comply with applicable laws and regulations

• Respond to lawful requests from government authorities or regulators

• Enforce our Terms of Service and policies

• Protect our rights, property, customers, and business interests

• Resolve disputes

• Establish, exercise, or defend legal claims

• Participate in legal proceedings where necessary

Legal Bases for Processing

Where applicable data protection law requires us to identify a legal basis for processing personal information, including for customers in the United Kingdom, we may process personal information based on one or more of the following grounds:

Performance of a Contract

We may process personal information when necessary to provide products or services you have requested, including to:

• Process your order

• Process payment

• Deliver your order

• Manage returns or refunds

• Provide customer service

Legitimate Interests

Where permitted by applicable law, we may process personal information where necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests.

These interests may include:

• Preventing fraud

• Securing our website

• Improving our services

• Understanding website performance

• Managing customer relationships

• Protecting our legal and business interests

Consent

Where required, we may process personal information based on your consent, including for certain:

• Marketing communications

• Advertising activities

• Cookies

• Tracking technologies

Where processing is based on consent, you may withdraw your consent at any time, subject to applicable law.

Legal Obligations

We may process personal information when necessary to comply with legal, tax, accounting, regulatory, or other obligations that apply to us.

Cookies and Similar Technologies

Our website may use cookies, pixels, tags, local storage, and similar technologies to support website functionality, analytics, advertising, personalization, and fraud prevention.

Cookies may help us:

• Remember items in your cart

• Maintain your session

• Enable checkout functionality

• Remember preferences

• Understand website performance

• Analyze visitor behavior

• Provide relevant advertising

• Measure advertising effectiveness

• Improve the customer experience

Depending on where you live, certain non-essential cookies or tracking technologies may only be used after obtaining any consent required by applicable law.

You may be able to manage cookies through your browser settings or any cookie preference tools made available on our website.

However, disabling certain cookies may affect the functionality of our website, including shopping cart, account, and checkout features.

How We Disclose Personal Information

We may disclose your personal information to third parties for legitimate business, operational, legal, and commercial purposes as described below.

Shopify

Our store is powered by Shopify.

Shopify may collect and process personal information in connection with:

• Hosting our online store

• Operating checkout

• Processing transactions

• Managing orders

• Providing analytics

• Supporting fraud prevention

• Providing security

• Enabling other store functions

Service Providers

We may disclose personal information to vendors and service providers that perform services on our behalf, including:

• Payment processors

• Shipping carriers

• Fulfillment providers

• Warehousing providers

• Customer support providers

• Email service providers

• IT and cloud service providers

• Analytics providers

• Fraud prevention providers

• Marketing and advertising providers

• Website and technology providers

These service providers may process personal information only as necessary to perform their services or as otherwise permitted by applicable law and their applicable agreements and privacy policies.

Shipping and Fulfillment Partners

Because Whalexi serves customers in the United States, United Kingdom, Australia, and Canada, we may share information necessary to process and deliver orders with shipping carriers, logistics providers, and fulfillment partners.

This information may include:

• Customer name

• Shipping address

• Phone number

• Email address

• Order number

• Product information

• Delivery instructions where applicable

This information is used to fulfill and deliver your order and to provide delivery-related services.

Marketing and Advertising Partners

We may disclose or make certain information available to marketing, analytics, and advertising partners to help us:

• Provide relevant advertisements

• Measure advertising performance

• Understand customer engagement

• Improve marketing campaigns

• Provide personalized marketing where permitted

Depending on where you reside and applicable law, you may have the right to opt out of certain uses or disclosures of your personal information for targeted advertising, sale, or sharing.

Legal, Safety, and Business Purposes

We may disclose personal information if reasonably necessary to:

• Comply with legal obligations

• Respond to subpoenas, court orders, warrants, or lawful government requests

• Cooperate with regulators and law enforcement

• Protect our rights, property, customers, employees, or business

• Detect or prevent fraud or security incidents

• Enforce our policies

• Establish or defend legal claims

• Complete a business transaction, such as a merger, acquisition, financing, reorganization, or sale of assets

Relationship With Shopify

Our store is hosted and supported by Shopify.

Information you provide through our website may be transmitted to and processed by Shopify and other service providers.

These providers may operate or process information in countries other than your country of residence.

Shopify may process personal information to provide, protect, improve, and support the services used by our store.

Shopify may also independently process certain information as described in its own privacy notices and policies.

To learn more about Shopify's privacy practices, you may review Shopify's applicable Consumer Privacy Policy and Privacy Portal.

Depending on where you live, you may also have privacy rights regarding information processed by Shopify.

International and Cross-Border Data Transfers

Whalexi serves customers in:

• United States

• United Kingdom

• Australia

• Canada

Because we operate an international online store and use global service providers, your personal information may be transferred, stored, accessed, or processed outside the country or region where you live.

For example, personal information may be processed in countries where Shopify, payment providers, analytics providers, shipping providers, cloud providers, or other service providers maintain operations or infrastructure.

The countries involved may vary depending on the service provider and the services being used.

Where required by applicable law, we will take appropriate steps or rely on legally recognized mechanisms intended to protect personal information transferred internationally.

For customers in the United Kingdom, this may include applicable safeguards recognized under UK data protection law for restricted international transfers.

For customers in Australia, overseas disclosure or handling of personal information will be addressed in accordance with applicable Australian privacy requirements where those requirements apply to us.

For customers in Canada, personal information transferred to or processed by service providers outside Canada will be handled in accordance with applicable Canadian federal and provincial privacy requirements where those requirements apply to us. Personal information processed outside Canada may also be subject to the laws of the jurisdiction in which it is processed.

Where practicable and required by applicable law, additional information regarding overseas recipients or their locations may be made available upon request.

Third-Party Websites and Links

Our website may include links to third-party websites, applications, platforms, tools, or services.

These third-party websites and services are not necessarily operated or controlled by Whalexi.

If you visit a third-party website, you should review its:

• Privacy policy

• Terms and conditions

• Cookie practices

• Security practices

We are not responsible for the privacy, security, accuracy, availability, or content of third-party websites or services, except where applicable law provides otherwise.

The inclusion of a third-party link does not necessarily imply endorsement of that third party or its services.

Children’s Privacy

Our website and services are intended for general adult consumers and are not directed toward children.

We do not knowingly collect personal information from children in circumstances where parental or guardian consent is required by applicable law.

If you are a parent or guardian and believe that a child has provided us with personal information improperly, please contact us at:

info@whalexi.com

We will review the request and take appropriate action where required by applicable law.

As of the effective date of this Privacy Policy, we do not have actual knowledge that we sell or share personal information of individuals under 16 years of age, as those terms may be defined under applicable United States privacy laws.

Security of Your Information

We use reasonable administrative, technical, and organizational measures designed to help protect personal information against:

• Unauthorized access

• Unauthorized disclosure

• Loss

• Misuse

• Alteration

• Destruction

However, no method of transmission over the internet or method of electronic storage is completely secure.

Accordingly, we cannot guarantee absolute security.

You should avoid sending sensitive or confidential information to us through unsecured communication channels.

Retention of Personal Information

We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, including to:

• Provide our services

• Fulfill orders

• Maintain customer accounts

• Process returns and refunds

• Provide customer support

• Comply with legal obligations

• Meet tax, accounting, and reporting requirements

• Resolve disputes

• Enforce our agreements and policies

• Prevent fraud

• Protect our business and customers

Retention periods may vary depending on:

• The type of information

• The purpose for which it was collected

• Our operational requirements

• The nature of our relationship with you

• Applicable legal requirements

When personal information is no longer reasonably required, we may delete, anonymize, or otherwise securely dispose of it, subject to applicable legal requirements.

Your Privacy Rights and Choices

Your privacy rights may vary depending on the country, state, province, territory, or region where you live and whether a particular privacy law applies to Whalexi.

You may have some or all of the rights described below.

Right to Access or Know

You may have a particular privacy law applies to Whalexi.

You may have some or all of the rights described below.

Right to Access or Know

You may have the right to request access to personal information that we maintain about you or information about how we collect, use, or disclose that information.

Right to Delete

Where provided by applicable law, you may have the right to request deletion of certain personal information that we maintain about you.

Certain exceptions may apply, including where information must be retained for legal, transactional, fraud prevention, accounting, or other permitted purposes.

Right to Correct

You may have the right to request correction of inaccurate or incomplete personal information that we maintain about you.

Right to Data Portability

Where applicable, you may have the right to request certain personal information in a portable or commonly used format.

Right to Opt Out of Sale, Sharing, or Targeted Advertising

For residents of certain United States states and other jurisdictions where applicable privacy laws provide these rights, you may have the right to opt out of certain processing involving:

• Sale of personal information

• Sharing of personal information

• Targeted advertising

• Certain forms of profiling

These rights apply only where the relevant legal definitions and requirements apply to our activities.

Where required by applicable law and technically supported, we may recognize applicable browser-based opt-out preference signals.

Right to Object to or Restrict Processing

Customers in the United Kingdom and certain other jurisdictions may have the right, in certain circumstances, to:

• Object to particular processing

• Request restriction of processing

• Object to direct marketing

These rights are subject to applicable law and may depend on the legal basis and purpose of the processing.

Right to Withdraw Consent

Where we rely on your consent to process personal information, you may withdraw that consent at any time.

Withdrawal of consent does not affect the lawfulness of processing that occurred before consent was withdrawn.

Rights of Customers in the United Kingdom

If you are located in the United Kingdom and applicable UK data protection law applies to our processing, you may have rights relating to your personal information, including rights concerning:

• Access

• Correction

• Erasure

• Restriction of processing

• Data portability

• Objection to certain processing

• Withdrawal of consent

• Complaints to the relevant data protection authority

These rights may be subject to legal limitations, exemptions, and verification requirements.

Rights of Customers in Australia

If you are located in Australia and applicable Australian privacy law applies to Whalexi, you may have rights regarding the personal information we hold about you, including rights to:

• Request access to personal information

• Request correction of inaccurate personal information

• Make a privacy complaint

• Obtain information about how personal information is handled

Applicable exceptions and limitations may apply.

Rights of Customers in Canada

If you are located in Canada and applicable Canadian federal or provincial privacy law applies to Whalexi, you may have rights regarding your personal information, which may include rights to:

• Request access to personal information that we hold about you

• Request correction of inaccurate or incomplete personal information

• Obtain information about how your personal information is collected, used, or disclosed

• Withdraw consent in circumstances where processing is based on consent, subject to applicable legal or contractual restrictions

• Raise concerns regarding our handling of your personal information

• Make a complaint to the applicable federal or provincial privacy authority where permitted by law

The specific rights available to you may depend on your province or territory, the nature of our activities, and the privacy laws that apply.

These rights may be subject to legal limitations, exceptions, and identity verification requirements.

Rights of Customers in the United States

Privacy rights in the United States may vary depending on your state of residence and whether the applicable state privacy law applies to Whalexi.

Depending on applicable law, you may have rights such as:

• Accessing or knowing what personal information is collected

• Requesting deletion

• Requesting correction

• Obtaining a portable copy of certain information

• Opting out of certain sales or sharing of personal information

• Opting out of certain targeted advertising

• Limiting certain uses of sensitive personal information where applicable

• Appealing certain privacy request decisions where applicable

The availability and scope of these rights depend on applicable law.

How to Exercise Your Rights

To exercise any applicable privacy rights, please contact us at:

Email: info@whalexi.com
Phone: +44 7315 842967

Please provide sufficient information for us to understand and process your request.

We may need to verify your identity before completing certain privacy requests.

Depending on applicable law, you may also be permitted to designate an authorized agent or representative to submit a request on your behalf.

Where required, we may ask for information confirming that the representative is authorized to act for you.

We will not unlawfully discriminate against you for exercising your applicable privacy rights.

Managing Communication Preferences

You may opt out of receiving promotional emails by clicking the unsubscribe link included in our marketing emails.

You may also contact us to request that we stop sending certain promotional communications.

If you opt out of promotional communications, we may still send transactional, administrative, or service-related messages, including:

• Order confirmations

• Shipping notices

• Delivery updates

• Refund updates

• Customer service communications

• Account notices

• Security notices

• Policy-related communications

Privacy Complaints

If you have concerns or complaints about how we collect, use, disclose, or protect your personal information, please contact us first at:

Email: info@whalexi.com

We will review your concern and respond as appropriate.

Depending on where you live and applicable law, you may also have the right to raise your complaint with an appropriate privacy or data protection authority.

For example, this may include the relevant data protection or privacy regulator in:

• The United Kingdom

• Australia

• Canada

• Your applicable United States state or jurisdiction

For customers in Canada, the appropriate regulator may include the Office of the Privacy Commissioner of Canada or an applicable provincial privacy authority, depending on the circumstances and applicable law.

Nothing in this Privacy Policy is intended to prevent you from exercising any right to contact an appropriate regulator where applicable.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

• Our business practices

• Technologies

• Products or services

• Service providers

• Markets

• Legal requirements

• Regulatory requirements

• Operational requirements

When we update this Privacy Policy, we will revise the “Last Updated” date at the top of this page and post the updated version on our website.

Where required by applicable law, we may provide additional notice regarding material changes.

We encourage you to review this Privacy Policy periodically.

Markets Covered by This Privacy Policy

Whalexi currently offers eligible products and services to customers in:

• United States

• United Kingdom

• Australia

• Canada

The collection, use, disclosure, and protection of personal information may be subject to different legal requirements depending on the customer's location.

Where local privacy or data protection laws provide rights or protections that cannot legally be limited by this Privacy Policy, those applicable legal rights and protections will continue to apply.

Contact Us

If you have any questions about this Privacy Policy, our privacy practices, or would like to exercise any applicable privacy rights, please contact us:

Whalexi

Email: info@whalexi.com
Phone: +44 7315 842967
Office Address: 225 Connaught Road, Luton, LU4 8ET, United Kingdom
Business Hours: Monday to Friday, 9:00 AM – 5:00 PM

Our office address is our business contact address and does not necessarily represent the physical location where customer personal information is stored or processed.

For purposes of applicable data protection laws that use the concept of a “data controller,” Whalexi is the controller of personal information processed in connection with our store, except where Shopify or another third party acts as an independent controller under its own privacy policy.

Where other privacy laws use different terminology, Whalexi will handle personal information in accordance with the responsibilities applicable to it under those laws.