Privacy policy
Last updated: June 15, 2026
This Privacy Policy ("Policy") describes how Mello Retail Inc. and its affiliates (collectively, "MELLO", "we", "us", or "our") collect, use, and disclose personal information when you visit or shop at wearmello.com, contact our customer support, sign up for our emails or texts, or otherwise interact with us (collectively, the "Services").
This Policy applies to personal information we collect through the Services. It does not apply to purchases you make through third-party marketplaces or retailers that sell MELLO products. Those platforms collect and handle your information under their own privacy policies, which we encourage you to review.
If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, use, and disclosure of your personal information.
Please read this Policy carefully. By using the Services, you acknowledge the practices described here. If you do not agree, please do not use the Services.
1. Changes to This Policy
We may update this Policy from time to time to reflect changes in our practices or for legal, regulatory, or operational reasons. When we do, we will post the revised Policy on this page, update the "Last updated" date above, and take any additional steps required by applicable law. We encourage you to review this Policy periodically.
2. Personal Information We Collect
When we say "personal information," we mean information that identifies or can reasonably be linked to you. It does not include information that has been aggregated or de-identified so that it can no longer be reasonably linked to you.
The information we collect depends on how you interact with us. We collect it from three sources: directly from you, automatically as you use the Services, and from third parties.
Information you provide directly to us
- Contact details — your name, email address, phone number, and shipping and billing addresses.
- Order information — the products you buy, order and transaction history, billing and shipping details, and payment confirmation. (We do not receive or store your full payment card number — see Section 4.)
- Account information — if you create an account, your login credentials and saved preferences.
- Customer support information — anything you include when you contact us, leave a product review, enter a giveaway, or respond to a survey.
- Marketing preferences — your email and SMS subscription choices.
Information we collect automatically
When you use the Services, we and our service providers automatically collect certain usage and device information using cookies, pixels, and similar technologies (see Section 6), including:
- Device and connection data — IP address, device identifiers, browser type, operating system, and network information.
- Usage data — pages and products viewed, items added to cart, links clicked, referring website, and how long and how you interact with the Services.
- Approximate location — derived from your IP address.
Information we collect from third parties
We may receive information about you from:
- Our platform and service providers, such as Shopify, which powers our store.
- Payment processors, which provide order and payment confirmation.
- Advertising, analytics, and attribution partners, which provide data about how you found us and how our marketing performs.
- Social media and review platforms, if you interact with us there or submit user-generated content.
3. How We Use Your Personal Information
We use personal information to:
- Provide our products and Services — process and fulfill your orders, arrange shipping, manage returns and exchanges, create and maintain your account, and send order and account notifications.
- Provide customer support — respond to your questions, requests, and complaints, and improve our support.
- Market and advertise to you — send promotional emails and texts (where you've consented or as permitted by law), show you relevant ads on other websites and apps, and measure how our marketing performs. You can opt out at any time (see Sections 8 and 10).
- Improve the Services — understand how customers use our store, run analytics, and develop new products and features.
- Maintain security and prevent fraud — detect, investigate, and prevent fraudulent, unauthorized, or unlawful activity.
- Comply with law and enforce our terms — meet our legal and regulatory obligations, respond to lawful requests, and enforce our Terms of Service and other agreements.
4. Payment Processing
Payments on the Services are handled by third-party payment processors. When you pay, your card or payment account details are provided directly to those processors, not to us. MELLO does not store or collect your full payment card number. Our payment processors are contractually required to handle your payment information securely and in compliance with the Payment Card Industry Data Security Standard (PCI-DSS).
5. Marketplaces and Third-Party Sellers
When you buy MELLO products through a third-party marketplace or retailer rather than wearmello.com, that platform — not MELLO — collects your personal information at checkout and handles it under its own privacy policy. We may receive limited, aggregated, or order-related information from those platforms to fulfill orders and provide support, which we treat in accordance with this Policy.
6. Cookies and Tracking Technologies
Like most online stores, we use cookies, pixels, web beacons, and similar technologies ("Cookies") to operate and improve the Services. We use them to:
- keep the store working and remember your cart and preferences;
- measure traffic and understand how the Services are used (analytics); and
- deliver and measure advertising on our site and on third-party platforms.
This includes technologies from partners such as analytics and attribution providers (for example, Google Analytics and our marketing attribution tools) and advertising platforms (for example, Meta, Google, and TikTok). Some of these partners set their own cookies and may collect information about your activity over time and across other websites and apps to provide interest-based advertising. We do not control these third parties' technologies.
For details on the cookies set by our platform, see Shopify's cookie information at https://www.shopify.com/legal/cookies.
Managing Cookies. Most browsers let you refuse or delete cookies through your browser settings, and you can manage your preferences through the cookie banner and "Your Privacy Choices" controls on our site. Blocking some cookies may affect how the Services function. See Section 10 for opt-out rights specific to "sales," "sharing," and targeted advertising, and information about the Global Privacy Control (GPC) signal.
7. How We Disclose Personal Information
We disclose personal information in the following ways:
- To service providers that perform functions on our behalf — for example, IT and hosting, payment processing, order fulfillment and shipping (our 3PLs and carriers), customer support (our help-desk platform), email and SMS marketing platforms, analytics, and fraud prevention. They are permitted to use your information only to provide services to us.
- To advertising and marketing partners to deliver and measure advertising (see Sections 6 and 10).
- To our affiliates and within our corporate group, including Mello USA LLC, to run our business.
- In a business transaction such as a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, where personal information may be transferred as part of that transaction.
- For legal and safety reasons — to comply with applicable law, respond to lawful requests from public authorities, enforce our terms, or protect the rights, property, or safety of MELLO, our customers, or others.
- With your consent or at your direction — for example, when you choose to use a social login or share content publicly.
We may also disclose aggregated or de-identified information that cannot reasonably be used to identify you.
The categories of personal information we have collected and disclosed for a business purpose in the past 12 months include: identifiers (such as name, contact details, and online identifiers), commercial information (such as order and purchase history), internet/network activity (such as usage data), and approximate geolocation. We disclose these categories to service providers, advertising and marketing partners, and affiliates.
We do not sell your personal information for money. However, our use of advertising and analytics cookies may be considered a "sale" or "sharing" of personal information for targeted advertising under certain U.S. state privacy laws. You can opt out — see Section 10.
We do not use or disclose sensitive personal information for the purpose of inferring characteristics about you.
8. Relationship with Shopify
Our Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve them. Information you submit to the Services is transmitted to and shared with Shopify, as well as third parties that may be located in countries other than where you reside, in order to provide the Services to you.
In addition, to help protect, grow, and improve our business, we use certain Shopify enhanced features that draw on data and information generated from your interactions with our store, with other merchants that use Shopify, and with Shopify itself. To provide these features, Shopify may use personal information collected about your interactions with our store, other merchants, and Shopify. For these specific processing activities, Shopify acts as an independent data controller and is responsible for that processing, including for responding to requests to exercise your rights over that use of your personal information.
To learn more about how Shopify uses your personal information and any rights you may have, see the Shopify Consumer Privacy Policy at https://privacy.shopify.com/en. Depending on where you live, you may be able to exercise certain rights with respect to the personal information Shopify processes through the Shopify Privacy Portal.
9. Marketing Communications
With your consent (where required), we send marketing communications by email and text message.
- Email. You can unsubscribe at any time using the link at the bottom of any marketing email. You may still receive non-promotional messages, such as order confirmations and account notices.
- SMS/Text. If you opt in to texts, message and data rates may apply and message frequency varies. You can stop receiving texts at any time by replying STOP to any message, or reply HELP for help. We do not sell, share, or rent your SMS opt-in data or consent to third parties for their own marketing.
- Abandoned cart reminders. If you start a purchase but don't complete it, and you've consented to marketing, we may send you a reminder by email or SMS. You can opt out as described above.
10. Your Privacy Rights
Depending on where you live, you may have some or all of the following rights regarding your personal information. These rights are not absolute and may be subject to exceptions under applicable law.
- Access / Know — request access to the personal information we hold about you and details about how we use and share it.
- Correct — request that we correct inaccurate personal information.
- Delete — request that we delete personal information we hold about you.
- Portability — request a copy of certain information in a portable format.
- Opt out of targeted advertising, "sale," or "sharing" — see Section 11.
- Withdraw consent — where we rely on your consent, withdraw it at any time.
- Non-discrimination — we will not discriminate against you for exercising your rights.
- Appeal — where applicable, appeal a decision we make about your request (see Section 19).
To exercise any of these rights, contact us using the details in Section 20. We may need to verify your identity before responding, and you may use an authorized agent where the law allows. We will respond within the timeframe required by applicable law.
11. U.S. State Privacy Rights
Residents of certain U.S. states have additional rights under their state privacy laws.
California (CCPA/CPRA)
California residents have the rights described in Section 10, including the right to know the categories and specific pieces of personal information we have collected, the sources, our business purposes, and the categories of third parties to whom we disclose it; the right to delete and correct; and the right to opt out of the "sale" or "sharing" of personal information.
Categories of personal information we have collected in the past 12 months are listed in Section 2, and map to the following CCPA categories: identifiers; personal records under Cal. Civ. Code § 1798.80; commercial information; internet or other network activity; geolocation data; and inferences. We do not knowingly collect sensitive personal information for the purpose of inferring characteristics.
Do Not Sell or Share My Personal Information. We do not sell personal information for monetary value. We do use advertising cookies that may constitute "sharing" for cross-context behavioral advertising. To opt out, use the "Your Privacy Choices" link in our site footer and/or the cookie banner, or enable the Global Privacy Control (GPC) in your browser — we treat a valid GPC signal as a request to opt out of "sale"/"sharing" for that browser or device. Other than GPC, we do not currently respond to "Do Not Track" signals or similar mechanisms.
California's "Shine the Light" law (Civil Code § 1798.83) and content-removal rights for California minors also apply; contact us to exercise them.
Other U.S. states
Residents of states with comprehensive privacy laws (including, for example, Colorado, Connecticut, Virginia, Texas, Oregon, and others, as applicable) have rights to confirm whether we process their personal information; to access, correct, delete, and obtain a portable copy of it; to opt out of targeted advertising, sales, and certain profiling; and to appeal a decision on a request. To exercise these rights, contact us using the details in Section 20.
12. Canadian Privacy Rights
If you are located in Canada, we collect, use, and disclose your personal information in accordance with applicable Canadian privacy laws, including the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and provincial laws such as British Columbia's and Alberta's Personal Information Protection Acts and Quebec's Law 25.
We collect, use, and disclose your personal information with your consent or as otherwise permitted or required by law. By using the Services, you consent to the handling of your information as described in this Policy; you may withdraw your consent at any time, subject to legal and contractual restrictions, though doing so may limit our ability to provide certain products or services.
You have the right to access the personal information we hold about you, to request corrections, and to challenge our compliance with applicable privacy law. To do so, contact us using the details in Section 20. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada (1-800-282-1376 / priv.gc.ca) or your applicable provincial privacy regulator.
Your personal information may be stored and processed in Canada, the United States, and other countries where our service providers operate, and may be subject to the laws of those jurisdictions, including lawful access by courts and authorities. We use contractual and other measures to protect it (see Section 13).
13. EU/UK Privacy Rights (GDPR)
If you are located in the European Economic Area (EEA) or the United Kingdom, the EU and UK General Data Protection Regulation ("GDPR") give you additional rights.
Legal bases. We process your personal information where we have a legal basis to do so, including: performance of our contract with you (to fulfill your orders); your consent (for example, for marketing); our legitimate interests (for example, to operate, secure, and improve our business, where not overridden by your rights); and compliance with legal obligations.
Your rights. You have the right to access, rectify, erase, restrict, and object to processing of your personal information; the right to data portability; the right to withdraw consent; and the right to lodge a complaint with your local supervisory authority (see Section 19).
International transfers. Where we transfer personal information out of the EEA or UK, we rely on a recognized transfer mechanism, such as the European Commission's Standard Contractual Clauses (and the UK Addendum), unless the destination has been deemed to provide an adequate level of protection.
14. International Data Transfers
MELLO is based in Canada, and we and our service providers may store and process your personal information in Canada, the United States, and other countries. These countries may have data protection laws that differ from those where you live. Where required, we use appropriate safeguards (such as the contractual mechanisms described in Section 13) to protect your information when it is transferred internationally.
15. Data Retention
We retain personal information only for as long as necessary to fulfill the purposes described in this Policy — including to provide the Services, maintain your account, comply with our legal, tax, accounting, and reporting obligations, resolve disputes, and enforce our agreements. Retention periods depend on the nature and sensitivity of the information and the purposes for which it is processed.
16. Security
We maintain reasonable administrative, technical, and organizational safeguards designed to protect personal information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please use care when communicating sensitive information to us, and keep your account credentials confidential.
17. Children's Privacy
The Services are intended for a general audience and are not directed to children. We do not knowingly collect personal information from children under the age of 16 (or the applicable age in your jurisdiction). As of the effective date of this Policy, we do not have actual knowledge that we "sell" or "share" the personal information of individuals under 16. If you believe a child has provided us with personal information, please contact us so we can delete it.
18. Third-Party Websites and Links
The Services may contain links to websites and services operated by third parties. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party site you visit.
19. Complaints
If you have a complaint about how we handle your personal information, please contact us first using the details in Section 20 so we can try to resolve it. Depending on where you live, you may also have the right to appeal a decision we make about a privacy request, or to lodge a complaint with your local data protection or privacy authority — for example:
- Canada: the Office of the Privacy Commissioner of Canada (priv.gc.ca) or your provincial regulator.
- European Economic Area: your national supervisory authority (a list is available at https://edpb.europa.eu/about-edpb/about-edpb/members_en).
- United Kingdom: the Information Commissioner's Office (ico.org.uk).
20. Contact Us
If you have questions about this Policy or our privacy practices, or if you would like to exercise any of your rights, contact us at:
Mello Retail Inc. Email: help@wearmello.com
For the purposes of applicable data protection law, Mello Retail Inc. is the controller of the personal information processed under this Policy, except where Shopify acts as an independent controller as described in Section 8.