Privacy policy

Last updated: August 20, 2026

Lilith + Ghost ("Lilith + Ghost," "we," "us," or "our") operates this website and online store, including all related information, content, features, tools, products, and services (collectively, the "Services"), to provide our customers with a curated shopping experience.

Our store is powered by Shopify. We also use third-party services and integrations, including advertising, analytics, social media, payment, fulfillment, and marketing technologies, as described below.

This Privacy Policy explains how we collect, use, disclose, and otherwise process personal information when you visit or use our Services, make a purchase or other transaction, interact with our advertisements or social media accounts, subscribe to marketing, or otherwise communicate with us.

If there is a conflict between our Terms of Service and this Privacy Policy regarding the collection, processing, use, or disclosure of personal information, this Privacy Policy controls.

Please read this Privacy Policy carefully. By accessing or using the Services, you acknowledge that you have read and understand the practices described in this Privacy Policy.

Personal Information We Collect or Process

For purposes of this Privacy Policy, "personal information" means information that identifies, relates to, describes, or can reasonably be linked to you or another individual. Personal information does not include information that has been anonymized or de-identified so that it cannot reasonably be linked to an individual.

Depending on how you interact with our Services, where you live, and applicable law, we may collect or process the following categories of personal information:

Contact information, including your name, email address, telephone number, billing address, and shipping address.
Payment and transaction information, including your payment method, payment confirmation, transaction details, products purchased, returns, refunds, exchanges, and other order information. Payment card information may be processed directly by Shopify or our payment providers rather than stored directly by Lilith + Ghost.
Account information, including login information, preferences, settings, and information associated with a customer account.
Shopping activity, including products you view, search for, purchase, add to your cart, save, return, exchange, or otherwise interact with.
Communications, including information you provide when contacting us for customer service, making a request, submitting feedback, or otherwise communicating with us.
Device and technical information, including IP address, browser type, device type, operating system, network information, device identifiers, client identifiers, and similar technical information.
Usage and browsing information, including pages viewed, links clicked, referring pages, browsing behavior, interactions with our website, and the dates and times of those interactions.
Advertising and marketing information, including interactions with advertisements, marketing campaigns, emails, social media content, referral sources, and information used to measure advertising performance and conversions.
Approximate location information, which may be inferred from information such as your IP address.
Information collected through cookies and similar technologies, including pixels, tags, APIs, local storage, identifiers, and similar tracking technologies.

Sources of Personal Information

We may collect personal information:

Directly from you when you make a purchase, create an account, subscribe to marketing, contact us, submit information, or otherwise interact with the Services;
Automatically when you visit or interact with our website through cookies, pixels, tags, and similar technologies;
From Shopify and other service providers that help us operate our store;
From payment processors, suppliers, fulfillment providers, shipping carriers, analytics providers, and other service providers;
From advertising and marketing partners;
From social media platforms, including Facebook, Instagram, Pinterest, and other platforms with which you interact; and
From other third parties as permitted by applicable law.

How We Use Personal Information

Depending on how you interact with Lilith + Ghost, we may use personal information for the following purposes.

Providing and Improving Our Services

We use personal information to operate our store, process payments and orders, arrange fulfillment and shipping, facilitate returns and exchanges, provide order updates, maintain customer accounts, remember preferences, provide customer service, recommend products, and improve the Services.

Marketing and Advertising

We may use personal information to market Lilith + Ghost and our products, including to:

Send marketing and promotional emails to customers who have subscribed;
Display advertisements for our products on third-party platforms;
Personalize advertisements;
Measure advertising performance and conversions;
Understand whether an advertisement resulted in a visit, cart addition, purchase, or other action;
Create, use, or measure advertising audiences;
Retarget visitors who previously interacted with our website or products; and
Analyze and improve our marketing campaigns.

This may include advertising based on products you viewed, purchased, added to your cart, or otherwise interacted with.

Analytics and Personalization

We may use personal information and website activity to understand how visitors use our Services, analyze store performance, personalize shopping experiences, recommend products, troubleshoot problems, and improve our website, advertising, and Services.

Security and Fraud Prevention

We may use personal information to authenticate accounts and transactions, detect and prevent fraud, investigate potentially fraudulent, malicious, illegal, or unsafe activity, maintain the security of our Services, and protect Lilith + Ghost, our customers, and others.

Communications

We use personal information to answer questions, provide customer support, send transactional communications, provide order and shipping updates, administer accounts, and otherwise communicate with you about our business relationship.

Legal and Business Purposes

We may process personal information to comply with applicable laws, regulations, court orders, legal processes, or governmental requests; enforce our policies and agreements; establish, exercise, or defend legal claims; protect our rights and the rights of others; and conduct legitimate business operations.

Shopify

Our online store is hosted and powered by Shopify.

Shopify collects and processes personal information relating to your access to and use of our Services in order to provide ecommerce, payment, security, analytics, personalization, advertising, and other functionality.

Information submitted through our Services may be transmitted to and processed by Shopify and other providers, including providers located outside the jurisdiction where you live.

We may use Shopify features that combine information from interactions with our store with other information maintained by Shopify to provide enhanced functionality, analytics, fraud prevention, advertising, product improvement, and personalized experiences.

We currently use Shopify Network Intelligence, which allows certain customer data to be used with other Shopify data to improve Shopify products and provide advertising targeting and personalization for our store. Other Shopify merchants do not receive access to Lilith + Ghost customer data through this feature.

Where Shopify independently determines the purposes and means of processing personal information, Shopify is responsible for that processing in accordance with its own privacy notices.

You can learn more by reviewing Shopify's Consumer Privacy Policy and Shopify Privacy Portal.

Facebook and Instagram / Meta

We use services provided by Meta Platforms, Inc., including Facebook and Instagram, for social commerce, advertising, analytics, catalog management, conversion measurement, and marketing.

Our Shopify store is connected to Meta advertising and measurement technologies, which may include the Meta Pixel and related server-side or conversion technologies.

Depending on our configuration and your interaction with the Services, information made available to Meta may include:

Name;
Email address;
Telephone number;
Physical or shipping address;
IP address;
Approximate geolocation;
Browser and operating-system information;
Device and activity information;
Client or cookie identifiers;
Browsing behavior;
Products viewed;
Cart and checkout activity;
Purchases and transaction events; and
Interactions with advertisements or our Services.

We use these technologies to measure conversions, understand advertising performance, maintain product catalogs, create or measure advertising audiences, and deliver or personalize advertisements on Facebook, Instagram, and other Meta services.

Meta may process information according to its own privacy policy and terms.

We use Pinterest for product discovery, social commerce, analytics, advertising, catalog management, and marketing.

Our Shopify store uses the Pinterest Tag and Pinterest Conversions API, which are integrated with our store to measure conversions and campaign performance.

Depending on our configuration and your interaction with the Services, Pinterest may receive information concerning website activity, device or browser information, advertising interactions, products viewed, cart activity, checkout activity, purchases, and related conversion events.

Pinterest technologies may also use information or identifiers for attribution, measurement, audience creation, matching, and advertising purposes where enabled and permitted by applicable law.

Information processed by Pinterest is also subject to Pinterest's own privacy policy, advertising terms, and data terms.

Shop and Shopify Remarketing

We may participate in Shopify and Shop features that help customers discover products and receive relevant reminders.

Depending on your use of Shop and applicable settings, Shopify may provide eligible users with reminders or notifications concerning:

Abandoned carts;
Products that return to stock;
Product price reductions; and
Products or stores in which a shopper previously demonstrated interest.

Shopify controls certain processing associated with the Shop platform according to its own privacy practices.

Cookies and Similar Technologies

We, Shopify, and our service providers and advertising partners may use cookies, pixels, tags, APIs, local storage, and similar technologies.

These technologies may be used to:

Operate our website;
Maintain shopping carts and customer sessions;
Remember preferences;
Authenticate users;
Prevent fraud;
Understand website traffic and usage;
Analyze store performance;
Measure advertising effectiveness;
Attribute conversions;
Personalize shopping experiences;
Build or measure advertising audiences; and
Provide or personalize advertisements.

These technologies may collect information such as IP address, device and browser information, identifiers, approximate location, referring pages, pages viewed, products viewed, cart activity, purchases, and advertising interactions.

Our advertising technologies may include the Meta Pixel and related Meta technologies, the Pinterest Tag and Pinterest Conversions API, and technologies provided by Shopify.

Where required by applicable law, we will request consent before using certain non-essential cookies or similar technologies.

Shopify may automatically provide cookie-consent controls based on the region from which you access our Services.

Behavioral and Targeted Advertising

We may participate in interest-based, behavioral, personalized, or targeted advertising.

Information concerning your interactions with Lilith + Ghost may be used to help us provide advertisements that may be more relevant to you on Facebook, Instagram, Pinterest, Shop, and other websites, applications, or online platforms.

Under certain U.S. state privacy laws, some advertising-related disclosures of personal information may legally constitute a "sale," "sharing," or processing for "targeted advertising," even when Lilith + Ghost does not receive money in exchange for the information.

Depending on where you live, you may have the right to opt out of these activities.

We provide a Data Sharing Opt-Out mechanism through our website for customers in jurisdictions where applicable privacy laws provide such rights.

We also process qualifying Global Privacy Control (GPC) preference signals as required by applicable law.

Email Marketing

If you choose to subscribe to Lilith + Ghost marketing, we may use your email address and related information to send news, promotions, product announcements, discounts, and other marketing communications.

You may unsubscribe from promotional emails at any time using the unsubscribe link contained in our marketing emails.

Unsubscribing from marketing does not prevent us from sending non-promotional communications necessary to provide our Services, including order confirmations, shipping notifications, account communications, return information, and customer-service responses.

We do not currently use checkout SMS enrollment for marketing unless otherwise presented to you and consented to at the time of collection.

How We Disclose Personal Information

We may disclose personal information to:

Shopify, which provides our ecommerce platform and related services;
Payment processors and financial service providers;
Suppliers, vendors, dropshipping or fulfillment providers, and shipping carriers necessary to fulfill customer orders;
Hosting, IT, cloud storage, security, fraud-prevention, analytics, customer-service, and technology providers;
Advertising and marketing providers;
Meta Platforms, including Facebook and Instagram, where applicable;
Pinterest, where applicable;
Shopify and Shop services, where applicable;
Social media platforms and integrations when you interact with those features;
Professional advisers or other providers necessary to operate our business;
Third parties when you request, direct, or consent to a disclosure;
Parties involved in a merger, acquisition, financing, bankruptcy, sale of assets, reorganization, or similar business transaction; and
Government authorities, courts, law enforcement, or other parties when necessary to comply with applicable law or legal process or to protect our rights, customers, business, or others.

Our advertising, marketing, social media, and other third-party partners may process information according to their own privacy policies and terms.

Third-Party Platforms and Websites

Lilith + Ghost may maintain accounts, product catalogs, advertisements, or integrations with third-party platforms, including Facebook, Instagram, Pinterest, TikTok, Shop, and other online services.

When you interact with us through a third-party platform, that platform may independently collect and process personal information according to its own privacy policy and terms.

This Privacy Policy governs Lilith + Ghost's processing of personal information. It does not govern the independent privacy practices of third-party platforms or websites that we do not control.

Our Services may also contain links to third-party websites. We are not responsible for the privacy, security, accuracy, or practices of websites or platforms that we do not control.

Information you voluntarily make public or semi-public on social networks or other online platforms may be visible to and used by other users or third parties.

Children's Privacy

Our Services are not intended for children, and we do not knowingly collect personal information from children under the age of majority applicable in their jurisdiction.

If you are a parent or guardian and believe that a child has provided personal information to us, please contact us so that you may request its deletion.

As of the effective date of this Privacy Policy, we do not have actual knowledge that we "sell" or "share," as those terms are defined under applicable privacy laws, personal information belonging to individuals under 16 years of age.

Security and Retention

We use reasonable administrative, technical, and organizational safeguards intended to protect personal information.

However, no security system or method of transmission is completely secure, and we cannot guarantee absolute security.

We retain personal information for as long as reasonably necessary for the purposes for which it was collected, including to provide our Services, maintain customer accounts and transaction records, comply with legal, accounting, and tax obligations, prevent fraud, resolve disputes, and enforce our agreements and policies.

Your Privacy Rights and Choices

Depending on where you live and applicable law, you may have some or all of the following rights concerning your personal information:

Right to Access / Know: Request access to or information regarding personal information we maintain about you.
Right to Delete: Request deletion of certain personal information.
Right to Correct: Request correction of inaccurate personal information.
Right to Portability: Request a copy of certain personal information in a portable format.
Right to Opt Out of Sale, Sharing, or Targeted Advertising: Request that we not process or disclose certain personal information for activities legally defined as a sale, sharing, or targeted advertising.
Right to Withdraw Consent: Where our processing relies on consent, withdraw that consent where applicable.
Right to Appeal: Where provided by applicable law, appeal certain decisions concerning a privacy request.

These rights are not absolute and may apply only in certain circumstances.

You may exercise applicable rights through the privacy controls available through our Services, including our Data Sharing Opt-Out page where available, or by contacting us using the information below.

We will not discriminate against you for exercising applicable privacy rights.

We may need to verify your identity before completing a privacy request. Where permitted by applicable law, an authorized agent may submit certain requests on your behalf, subject to appropriate authorization and verification.

Global Privacy Control

If you visit our website using a browser or device that sends a qualifying Global Privacy Control ("GPC") opt-out preference signal, we will process that signal as required by applicable law for the browser or device from which the signal is sent.

Where Shopify can associate the applicable device or browser with a Shopify account, additional application of the preference may be provided by Shopify according to its systems and policies.

Other than legally recognized opt-out preference signals such as GPC where applicable, we may not respond to general "Do Not Track" browser signals.

International Transfers

We, Shopify, and our service providers may transfer, store, and process personal information in countries other than the country in which you live.

Where applicable law requires safeguards for international transfers, we or our service providers may rely on recognized legal mechanisms, contractual protections, adequacy decisions, or other lawful transfer mechanisms.

Complaints

If you have concerns about how Lilith + Ghost processes your personal information, please contact us using the information below.

Depending on where you live, you may also have the right to appeal our response or submit a complaint to an applicable privacy or data-protection authority.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes to our Services, technologies, integrations, business practices, or applicable legal requirements.

When we update this Privacy Policy, we will revise the "Last updated" date above and provide additional notice when required by applicable law.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, or would like to exercise an applicable privacy right, please contact us at:

Lilith + Ghost
Email: hello@lilithandghost.com