Privacy Policy
I AM ENDLESS CO | Effective: April 10, 2026 | Last Updated: April 10, 2026
I AM ENDLESS CO ("I AM ENDLESS," "we," "us," or "our") operates iamendless.co (the "Site"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our Site or make a purchase. By using our Site, you consent to the practices described here.
This policy covers our US domestic store. We currently ship within the United States only.
1. Information We Collect
A. Information You Provide Directly
-
Name, email address, and phone number
-
Billing and shipping address
-
Payment information (processed securely by Shopify Payments / Stripe — we never store full card numbers)
-
Account credentials if you create an account
-
Messages and enquiries sent to us via email or contact forms
B. Information Collected Automatically
-
IP address, browser type, operating system, and device type
-
Pages visited, time on site, clicks, and referring URLs
-
Shopping cart contents and purchase history
-
Cookie identifiers and session data (see Section 5)
C. Information from Third Parties
-
Shopify (our platform) may provide data about your interactions with our store
-
Social media platforms (Instagram, Facebook) may share limited data if you interact with our ads or pages, per your own privacy settings
-
Analytics providers such as Google Analytics provide aggregated usage data
2. How We Use Your Information
We use your information to:
-
Process, fulfil, and ship your orders
-
Send order confirmations, shipping updates, and receipts
-
Respond to your questions and provide customer support
-
Send marketing emails and promotions if you have opted in (you may unsubscribe at any time)
-
Personalise your experience on our Site
-
Analyse and improve our website, products, and business operations
-
Detect and prevent fraud and unauthorised transactions
-
Comply with legal obligations, including tax and accounting requirements
3. How We Share Your Information
We do not sell your personal information. We share your data only in the following circumstances:
-
Shopify (Platform Provider): Hosts our store and processes orders on our behalf. Shopify's privacy policy governs their use of your data.
-
Payment Processors: Shopify Payments and Stripe process transactions securely. They are PCI DSS compliant and we do not store your full payment card details.
-
Shipping Carriers: We share your name and delivery address with carriers (e.g., USPS, UPS, FedEx) to fulfil your order.
-
Email Marketing Providers: If you opt in to marketing, we may use a third-party email service (such as Klaviyo) to send promotional emails.
-
Analytics Providers: Google Analytics and similar tools help us understand how customers use our Site. This data is aggregated and does not identify you personally.
-
Legal Requirements: We may disclose your information if required by law, subpoena, or court order, or to protect the rights and safety of I AM ENDLESS CO, our customers, or the public.
-
Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.
4. California Privacy Rights (CCPA / CPRA)
If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the 2026 regulatory amendments, give you specific rights regarding your personal information:
-
Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you in the preceding 12 months, including sources, purposes of collection, and third parties we share it with.
-
Right to Delete: You may request that we delete your personal information, subject to certain legal exceptions.
-
Right to Correct: You may request that we correct inaccurate personal information we hold about you.
-
Right to Opt-Out of Sale or Sharing: We do not sell your personal information. We do not share your personal information for cross-context behavioural advertising without your consent.
-
Right to Limit Sensitive Information: You may request that we limit the use of your sensitive personal information to what is necessary to provide our products and services.
-
Right to Human Review of Automated Decisions: Where automated systems (including AI) make decisions that significantly affect you, you have the right to request human review of that decision. See Section 6 for details.
-
Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.
To exercise any of these rights, email us at hello@iamendless.co with the subject line "California Privacy Request." We will respond within 45 days. We may need to verify your identity before fulfilling your request.
Note: Under the 2026 CCPA regulations, personal information from individuals under 16 is automatically treated as sensitive personal information and subject to heightened protections.
5. Cookies & Tracking Technologies
We use cookies and similar tracking technologies to operate and improve our Site. Cookies are small data files stored in your browser.
Types of Cookies We Use
-
Essential Cookies: Required for the Site to function (e.g., maintaining your shopping cart and login session). These cannot be disabled.
-
Analytics Cookies: Help us understand how visitors use our Site (e.g., Google Analytics). Data is aggregated and anonymised.
-
Marketing Cookies: Used to show relevant ads on platforms like Instagram and Facebook. These are only set if you have opted in or interact with our social media.
You can control and delete cookies through your browser settings. Disabling certain cookies may affect the functionality of our Site.
6. Automated Technologies & Artificial Intelligence
We and our service providers use automated technologies and artificial intelligence ("AI") in operating our store and serving you. We are committed to being transparent about how these tools are used.
How AI Is Used
-
Fraud Detection: Shopify uses automated systems, including AI, to detect and prevent fraudulent transactions. These systems may automatically flag or decline transactions based on risk signals such as unusual purchase patterns, mismatched billing details, or device behaviour.
-
Internal Business Operations: We use AI-powered tools internally to help us run our business more efficiently — including managing orders, planning inventory, and preparing customer communications. These tools may process data related to your orders and your interactions with us.
-
Analytics & Site Optimisation: AI and machine learning tools may be used to analyse aggregated site usage patterns to help us improve our products and customer experience.
-
Customer Communications: We may use AI tools to help draft and review customer-facing responses. All communications with customers are reviewed and sent by a member of our team — we do not use automated chatbots or AI to respond to customers without human oversight.
Your Rights Regarding Automated Decisions
We do not use AI to make final determinations about refunds, returns, complaints, or account matters without human review. If an automated decision by Shopify's systems (e.g., a fraud flag) significantly affects your ability to purchase from us, you have the right to:
-
Request that a member of our team manually review the decision
-
Ask us to explain the basis for the decision
-
Ask us to correct any inaccurate data that may have contributed to it
To request human review of an automated decision, contact us at hello@iamendless.co with the subject "Automated Decision Review."
Note: As a Shopify merchant, we operate within Shopify's platform, which has its own automated systems. For more information on Shopify's use of AI and automated decision-making, please review Shopify's Privacy Policy at shopify.com/legal/privacy.
7. Data Retention
We retain your personal information for as long as necessary to fulfil the purposes described in this policy, comply with our legal obligations, resolve disputes, and enforce our agreements.
-
Order & Transaction Data: Retained for a minimum of 7 years for tax, accounting, and legal compliance purposes.
-
Marketing Preferences: Retained until you unsubscribe or request deletion.
-
Account Information: Retained while your account is active or until you request deletion.
-
Support Communications: Retained for up to 3 years to help us resolve future enquiries.
If you request deletion of your data, we will delete or anonymise it unless retention is required by law.
8. Data Security
We take the security of your personal information seriously. Our security measures include:
-
SSL/TLS encryption for all data transmitted to and from our Site
-
Shopify's PCI DSS Level 1 compliant payment processing
-
Access to personal data limited to authorised personnel on a need-to-know basis
-
Regular review of our security practices
No method of transmission over the internet or electronic storage is 100% secure. While we implement commercially reasonable safeguards, we cannot guarantee absolute security. In the event of a data breach that affects your rights, we will notify you as required by applicable law.
9. Third-Party Links
Our Site may contain links to third-party websites, including social media platforms and other services. These third parties have their own privacy policies, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party sites you visit.
10. Children's Privacy
Our Site is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected personal information from a child under 13, please contact us immediately at hello@iamendless.co and we will promptly delete it.
In accordance with 2026 CCPA regulations, personal information collected from individuals under 16 is automatically classified as sensitive personal information and is subject to additional protections.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will post the updated policy on this page with a new effective date. We encourage you to review this policy periodically. Your continued use of our Site after changes are posted constitutes your acceptance of the updated policy.
12. Contact Us
For questions about this Privacy Policy, to exercise your privacy rights, or for data-related requests:
Email: hello@iamendless.co
Subject line for privacy requests: "Privacy Request" or "California Privacy Request"
Subject line for AI/automated decision review: "Automated Decision Review"
Website: iamendless.co
We aim to respond to all privacy enquiries within 5 business days, and to verified consumer rights requests within 45 days as required by CCPA.