Privacy policy
Privacy Policy
This Privacy Policy describes how madisonwigsboutique.com (the “Site”, “we”, “us”) collects, uses, and discloses your personal information when you visit or make a purchase from the Site.
Last updated: August 14, 2025
Contact
After reviewing this policy, if you have questions, want more information about our privacy practices, or would like to make a complaint, contact us:
Email: MadisonWigs@MadisonWigsBoutique.com
Mail: 7017 170A Ave NW, Edmonton AB T5Z 0G9, Canada
Collecting Personal Information
When you visit the Site, we collect certain information about your device and how you interact with the Site, and information necessary to process your purchases. “Personal Information” means any information about an identifiable individual. Below is what we collect and why.
Device information
-
Purpose of collection: to load the Site accurately for you and to perform analytics on Site usage to optimize our Site.
-
Source of collection: collected automatically when you access our Site using cookies, log files, web beacons, tags, or pixels.
-
Disclosure for a business purpose: shared with our processor Shopify and our analytics/advertising partners as described below.
-
Personal Information collected: version of web browser, IP address, time zone, cookie identifiers, what pages/products you view, search terms, and how you interact with the Site.
Order information
-
Purpose of collection: to provide products or services to you; process your payment; arrange shipping; provide invoices and/or order confirmations; communicate with you; screen orders for potential risk or fraud; and, when in line with the preferences you share with us, provide information or advertising relating to our products or services.
-
Source of collection: collected from you.
-
Disclosure for a business purpose: shared with Shopify, payment processors (e.g., Shopify Payments, PayPal), fraud-prevention tools, and shipping carriers.
-
Personal Information collected: name, billing address, shipping address, payment information (including credit card details or other payment tokens), email address, phone number.
Customer support information
-
Purpose of collection: to provide customer support and resolve inquiries.
-
Source of collection: collected from you when you contact us (email, contact forms, social DMs).
-
Disclosure for a business purpose: shared with our help and communication tools (e.g., Shopify, Klaviyo, Google Workspace) solely to respond to your requests.
-
Personal Information collected: the information you provide in your message and account/order details as needed to assist you.
Marketing & communications (including SMS)
-
Purpose of collection: to send email and SMS updates, offers, education, and cart/checkout reminders in line with your preferences and applicable law.
-
Source of collection: collected from you when you opt in (e.g., at checkout, via pop-up, or by texting a keyword).
-
Disclosure for a business purpose: shared with our email/SMS provider (Klaviyo) and advertising platforms as described below.
-
Personal Information collected: name, email address, phone number, marketing preferences, message interaction data (e.g., opens, clicks, unsubscribes), and limited device data for deliverability.
Minors
The Site is not intended for individuals under the age of 13. We do not knowingly collect Personal Information from children. If you are a parent or guardian and believe your child has provided us Personal Information, please contact us to request deletion.
Sharing Personal Information
We share your Personal Information with service providers to help us provide our services and fulfill contracts with you, as described above. For example:
-
We use Shopify to power our online store. Read how Shopify uses Personal Information here: https://www.shopify.com/legal/privacy.
-
We use Klaviyo to send email and SMS messages and to manage marketing preferences.
-
We use Google Analytics to understand Site usage and improve performance.
-
We may share information to comply with laws and regulations, to respond to lawful requests (e.g., subpoenas), or to protect our rights.
Behavioural Advertising
We use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For example:
-
We use Google Analytics. Learn more: https://www.google.com/intl/en/policies/privacy/. Opt-out: https://tools.google.com/dlpage/gaoptout.
-
We may share information about your use of the Site, your purchases, and your interaction with our ads on other websites with our advertising partners (e.g., Meta, Google Ads, TikTok). This can occur via cookies, pixels, or similar technologies.
For more information on targeted advertising, visit the Network Advertising Initiative’s educational page: https://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.
Opt-out of targeted ads:
-
Facebook/Instagram: https://www.facebook.com/settings/?tab=ads
-
Bing: https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads
-
You can also visit the Digital Advertising Alliance opt-out portal: https://optout.aboutads.info/.
SMS/Text Marketing Program
By opting in to receive SMS/text messages from Madison Wigs (e.g., by entering your phone number at checkout, subscribing via pop-up, or texting a keyword), you agree to receive recurring marketing messages and cart/checkout reminders at the mobile number provided. Consent is not a condition of purchase. Message frequency varies. Message and data rates may apply.
-
Opt-out: Reply STOP to cancel at any time.
-
Help: Reply HELP for help or contact MadisonWigs@MadisonWigsBoutique.com.
-
Data use: We process your phone number, message content, and interaction data (delivery, clicks) to operate the program and keep our records.
-
Service providers & carriers: Messages are sent via our SMS provider (Klaviyo) and routed through mobile carriers. Carriers are not liable for delayed or undelivered messages.
-
Your choices: You can also adjust preferences (email vs SMS) via the unsubscribe links provided or by contacting us.
For details on how we handle your Personal Information in connection with SMS, see “Collecting Personal Information” and “Sharing Personal Information” above.
Using Personal Information
We use your Personal Information to provide our services, including: offering products for sale; processing payments; shipping and fulfilling orders; communicating with you; screening orders for risk; and keeping you up to date on new products, services, and offers in line with your preferences.
Lawful Basis (EEA/UK visitors)
If you are in the EEA/UK, we process your personal information under one or more of the following lawful bases:
-
Your consent;
-
Performance of a contract with you;
-
Compliance with legal obligations;
-
Protection of vital interests;
-
Tasks carried out in the public interest;
-
Our legitimate interests (which do not override your rights and freedoms).
Retention
When you place an order, we retain your Personal Information for our records unless and until you ask us to erase it. For more information on your right of erasure, see “Your rights” below.
Automatic Decision-Making
We do not engage in fully automated decision-making that has a legal or similarly significant effect using customer data. Our processor Shopify uses limited automated decision-making to prevent fraud, including:
-
Temporary blacklist of IP addresses associated with repeated failed transactions (for a limited number of hours).
-
Temporary blacklist of credit cards associated with blacklisted IP addresses (for a limited number of days).
Your Rights
GDPR (EEA/UK)
If you are a resident of the EEA/UK, you have the right to access the Personal Information we hold about you, to port it to a new service, and to request correction, update, or erasure. To exercise these rights, contact us using the details in “Contact.” Your Personal Information may be initially processed in Ireland and transferred outside Europe (including to Canada and the United States). Learn more about Shopify’s GDPR approach: https://help.shopify.com/en/manual/your-account/privacy/GDPR.
CCPA/CPRA (California)
If you are a California resident, you have the right to:
-
Know the categories and specific pieces of Personal Information we collect and how we use and disclose it;
-
Correct inaccurate Personal Information;
-
Delete your Personal Information (subject to exceptions);
-
Opt out of sharing for cross-context behavioral advertising.
We do not sell Personal Information for money. To exercise your rights, contact us using the details in “Contact.”
Cookies
A cookie is a small amount of information that’s downloaded to your device when you visit our Site. We use functional, performance, advertising, and social media/content cookies to make your browsing experience better and to understand how the Site is used.
We use the following cookies to optimize your experience and provide our services. (Cookie names and durations may change over time—see Shopify’s current list: https://www.shopify.com/legal/cookies.)
Cookies Necessary for the Functioning of the Store
|
Name |
Function |
Duration |
|
_ab |
Used in connection with access to admin. |
2y |
|
_secure_session_id |
Used in connection with navigation through a storefront. |
24h |
|
_shopify_country |
Used in connection with checkout. |
session |
|
_shopify_m |
Managing customer privacy settings. |
1y |
|
_shopify_tm |
Managing customer privacy settings. |
30min |
|
_shopify_tw |
Managing customer privacy settings. |
2w |
|
_storefront_u |
To facilitate updating customer account information. |
1min |
|
_tracking_consent |
Tracking preferences. |
1y |
|
c |
Used in connection with checkout. |
1y |
|
cart |
Used in connection with shopping cart. |
2w |
|
cart_currency |
Used in connection with shopping cart. |
2w |
|
cart_sig |
Used in connection with checkout. |
2w |
|
cart_ts |
Used in connection with checkout. |
2w |
|
cart_ver |
Used in connection with shopping cart. |
2w |
|
checkout |
Used in connection with checkout. |
4w |
|
checkout_token |
Used in connection with checkout. |
1y |
|
dynamic_checkout_shown_on_cart |
Used in connection with checkout. |
30min |
|
hide_shopify_pay_for_checkout |
Used in connection with checkout. |
session |
|
keep_alive |
Buyer localization. |
2w |
|
master_device_id |
Merchant login. |
2y |
|
previous_step |
Used in connection with checkout. |
1y |
|
remember_me |
Used in connection with checkout. |
1y |
|
secure_customer_sig |
Customer login. |
20y |
|
shopify_pay |
Used in connection with checkout. |
1y |
|
shopify_pay_redirect |
Used in connection with checkout. |
30min/3w/1y |
|
storefront_digest |
Customer login. |
2y |
|
tracked_start_checkout |
Used in connection with checkout. |
1y |
|
checkout_one_experiment |
Used in connection with checkout. |
session |
Reporting and Analytics
|
Name |
Function |
Duration |
|
_landing_page |
Track landing pages. |
2w |
|
_orig_referrer |
Track landing pages. |
2w |
|
_s |
Shopify analytics. |
30min |
|
_shopify_d |
Shopify analytics. |
session |
|
_shopify_s |
Shopify analytics. |
30min |
|
_shopify_sa_p |
Shopify analytics (marketing/referrals). |
30min |
|
_shopify_sa_t |
Shopify analytics (marketing/referrals). |
30min |
|
_shopify_y |
Shopify analytics. |
1y |
|
_y |
Shopify analytics. |
1y |
|
_shopify_evids |
Shopify analytics. |
session |
|
_shopify_ga |
Shopify & Google Analytics. |
session |
Cookie controls: Most browsers accept cookies by default. You can remove or block cookies in your browser settings; doing so may affect Site functionality. Blocking cookies may not completely prevent information sharing with third parties such as advertising partners. To exercise your choices with those parties, see “Behavioural Advertising” above.
Do Not Track
Because there is no consistent industry understanding of how to respond to “Do Not Track” signals, we do not alter our data collection and usage practices when we detect such a signal.
Changes
We may update this Privacy Policy from time to time to reflect changes to our practices or for operational, legal, or regulatory reasons.
Complaints
If you would like to make a complaint, contact us using the details in “Contact.” If you are not satisfied with our response, you may lodge a complaint with the relevant data protection authority. In Canada, see the Office of the Privacy Commissioner of Canada: https://www.priv.gc.ca/en/report-a-concern/.