Plaza

Privacy Policy

Effective July 16, 2026

1. Scope

This Privacy Policy explains how Cristian Silva, doing business as Plaza (“Plaza, ” “we,” “us”) collects, uses, and shares information when you use the Plazawebsite and services (the “Service”). The Service is intended for users in the United States.

2. Information we collect

  • Information you provide:your name, email address, password, shipping addresses, phone number (optional), and any reviews or messages you submit. Your password is stored only as a secure cryptographic hash—we never see or store your plaintext password.
  • Order information: the items you purchase and your order history. Payment card details are collected and processed by our payment provider, Shopify; Plaza does not receive or store your full card number.
  • Automatically collected: a sign-in session cookie and a shopping-cart cookie, plus device, log, and usage data (including pages viewed and actions taken) gathered through our product-analytics provider, PostHog. This may include your IP address, browser and device type, and approximate location derived from your IP.

3. How we use information

  • Create and manage your account.
  • Process, fulfill, and ship your orders.
  • Validate and autocomplete shipping addresses at checkout.
  • Provide customer support and respond to requests.
  • Understand and improve the Service through product analytics.
  • Send marketing emails (which you consent to when you create an account and can unsubscribe from at any time) and required transactional messages about your orders.
  • Detect, prevent, and address fraud and security issues.
  • Comply with legal obligations.

4. How we share information

  • Brands and suppliers: we share the details needed to fulfill and ship your order, such as your name, shipping address, and items purchased.
  • Shopify: powers our checkout, payment processing, and order management.
  • Google:address text you enter is sent to Google’s address validation and autocomplete services to verify and format it.
  • PostHog: receives usage and event data as our analytics service provider.
  • Other service providers: including our hosting and database provider (Supabase) and similar vendors that process data on our behalf under confidentiality obligations.
  • Legal and safety: when required by law or to protect rights, property, or safety.
  • Business transfers: in connection with a merger, acquisition, financing, or sale of assets.

We do not sell your personal information for money, and we do not use it for third-party advertising.

5. Cookies and analytics

We use strictly necessary cookies to keep you signed in and remember your cart, and analytics cookies set by PostHog to understand how the Service is used. At checkout, Shopify (and Shop Pay, if you use it) may set its own cookies under Shopify’s privacy policy. You can limit cookies through your browser settings, though some features may not work as intended.

6. Data retention

We keep personal information for as long as needed to provide the Service, maintain order records, and meet legal, tax, and accounting requirements, after which we delete or anonymize it.

7. Security

We use administrative and technical safeguards, including password hashing and access controls, to protect your information. No method of transmission or storage is completely secure.

8. Your choices and rights

You can view and update your account information and saved addresses in your account settings, and unsubscribe from marketing emails at any time. Depending on where you live (for example, California residents under the CCPA/CPRA), you may have rights to know about, access, delete, and correct your personal information, and to opt out of its “sale” or “sharing.” We honor applicable requests and will not discriminate against you for exercising these rights. To make a request or to delete your account and data, email shopatplaza@gmail.com.

9. Children’s privacy

The Service is intended for adults 18 and older and is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

10. Third-party links

The Service links to third-party sites, including Brand pages and Shopify checkout, whose privacy practices we do not control.

11. Changes to this policy

We may update this Privacy Policy from time to time. The “Effective” date reflects the latest version, and material changes will be posted on this page.

12. Contact

Questions about your privacy? Email shopatplaza@gmail.com or write to Cristian Silva, doing business as Plaza, 385 W 1700 S, Salt Lake City, UT 84115.