Privacy policy
Last updated: October 11, 2026
CORY is a small independent scrubs brand. This policy explains what we collect when you visit or buy from corymade.com, why we collect it, who else sees it, and what you can ask us to do with it. It is written in plain language on purpose.
Our store runs on Shopify, which means Shopify processes information about your visit and your order in order to run the store for us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls for anything about your personal information.
What we collect
When you buy something. We collect your name, email address, shipping and billing addresses, and what you ordered. We use email for checkout contact. Our checkout does not ask for a phone number. If you choose Shop Pay, Shopify may ask for your phone number for your Shop Pay account.
Payment details. Card payments are handled by Shopify and its payment providers. We never see or store your full card number. We see the last four digits, the card type, and whether the payment succeeded.
If you create an account. Your email address and your order history. Accounts on our store are passwordless: you log in with a code sent to your email, so there is no password for us to hold.
When you just visit. Your device and browser type, your IP address and the approximate location it suggests, which pages you looked at, what you put in your cart, and how you moved around the site.
When you contact us. We collect your name, email address and the message you send through our contact form so we can reply.
When you leave a review. We collect your chosen display name, rating, review text and any photos you submit. Your displayed review is public.
The tools we use, and what each one sees
We would rather name these than hide them behind a general sentence about "analytics partners".
| Tool | What we use it for | Information it receives |
|---|---|---|
| Shopify | Our store, checkout, payments, accounts and email notifications. Network Intelligence is explained below. | Order, account, payment and visit information needed for these features. |
| Google Analytics 4 and the Google Merchant Center conversion tag | Understanding visits and measuring purchase conversions through our Google & YouTube connection. | Page and cart events, device information, IP address, identifiers and conversion information. |
| Microsoft Clarity | Session recordings and heatmaps to find confusing or broken parts of our site. It loads only when analytics, marketing and sale/sharing are accepted and GPC is off. | Mouse movements, scrolling, clicks and taps. Strict masking masks all text in recordings. Microsoft sets Clarity cookies and the Bing cross-site identifier MUID. |
| Judge.me | Collecting and displaying reviews, and visitor analytics on review widgets. | Submitted review information and visitor interaction, device and identifier information from its widgets. |
| BF Size Charts / Relentless | Displaying product size charts. Its script loads on every page, even where no chart appears. | Device and visit information associated with loading its script. |
| SC Back in Stock | Emailing a restock alert you request. | Your email address and the product variant you request, including size and color. |
| hCaptcha | Bot protection on our contact form. | Device and browser signals associated with using the form. |
| USPS | Delivering orders. | Your name and shipping address. |
We use Microsoft Clarity to review recordings of how visitors move around our pages. It loads only when analytics, marketing and sale/sharing are accepted and GPC is off. The preferences category is not required. We use Strict masking, which masks all text in recordings. When Clarity loads, Microsoft sets Clarity cookies and a Bing identifier called MUID. MUID can identify a browser across different sites.
Cookies and your choices
We use cookies and similar technologies to run our store and for analytics and marketing. Our cookie banner offers Accept, Decline and Manage preferences.
Accept allows optional cookie categories, subject to your sale/sharing opt-out and Global Privacy Control settings. Decline refuses optional cookies. Cookies needed to run the store and checkout remain in use. Manage preferences lets you choose which optional categories to allow.
To change your cookie choice, select Cookie preferences in our website footer at the bottom of every page to reopen the cookie banner. Then choose Decline or Manage preferences. To opt out of sale or sharing for targeted advertising, use Your privacy choices. Cookie choices and email marketing signup are separate.
Where the information comes from
Directly from you when you order, contact us, or create an account. Automatically from your device through cookies and similar technologies when you use the site. And from the service providers above when they process information on our behalf.
How we use it
To run the store. Take and fulfill your order, arrange shipping, handle returns and refunds, answer your messages and manage your account.
To improve the store. Understand which products and pages people actually use, and find what is broken or confusing.
Marketing. Send you email about products and offers if you have asked for it. You can stop the emails at any time using the unsubscribe link in any of them.
Security and fraud prevention. Check that a payment and an order are genuine.
Legal reasons. Comply with the law, respond to lawful requests, and enforce our terms.
Who we share it with
Service providers, listed in the table above, who handle payment, delivery, analytics, reviews, bot protection and restock alerts on our behalf.
Marketing and sharing. We do not run paid ads. We use Shopify Network Intelligence, described below. It can involve sharing for targeted advertising even when we do not buy ads. Microsoft also sets the Bing cross-site identifier MUID when Clarity loads with the permissions described above. Use Your privacy choices to opt out of sale or sharing for targeted advertising where this option is available. You can also write to coco@corymade.com about your privacy choices.
When you ask us to, such as sharing an address with a carrier to get your parcel to you.
If the law requires it, or in connection with a sale, merger or insolvency of the business.
We do not sell your personal information for money.
Our relationship with Shopify
We host our store on Shopify. We share information with Shopify, which processes it when you visit and buy from us. We keep Shopify Network Intelligence enabled. Shopify combines information about your interactions with our store, other merchants and Shopify to provide enhanced services. Your information is shared with Shopify and other third parties to provide these services. They may be in other countries.
Some enhanced services involve sharing for targeted advertising. You can opt out through Your privacy choices in the regions where we offer that control. Shopify's automated settings currently make it available in California, Colorado and 13 other US states. Shopify honors sale/sharing opt-outs, including GPC, for Network Intelligence advertising uses.
Read Shopify's Consumer Privacy Policy. You can also use Shopify's privacy portal to exercise choices directly with Shopify.
How long we keep it
Order records are kept as long as we need them for accounts, tax and legal purposes. Analytics data is kept on the retention schedule of each tool above. Messages are kept as long as they are useful for supporting you. If you ask us to delete your information we will, except where we are required to keep it.
Security
We rely on Shopify's infrastructure and payment processing, which is why we never handle your full card number. No system is perfectly secure and information sent over the internet is never completely private, so please do not send us sensitive information you would not want seen. We keep the number of places your information sits as small as we reasonably can.
Links to other sites
The site links to places we do not run, including social media. Their privacy practices are their own, and we are not responsible for them.
Children
The store is not intended for children and we do not knowingly collect information from a child under the age of majority where they live. If you believe a child has given us their information, contact us and we will delete it. We do not have actual knowledge that we sell or share the personal information of anyone under 16.
Your rights
Depending on where you live you may have some or all of these rights. They are not absolute and in some cases we may have to decline a request, in which case we will say why.
- Access. Ask what personal information we hold about you.
- Delete. Ask us to delete it.
- Correct. Ask us to fix information that is wrong.
- Portability. Ask for a copy, or ask us to send it to someone else.
- Opt out of sale or sharing for targeted advertising. Use Your privacy choices where this control is available, or contact us at coco@corymade.com about your request.
- Manage marketing email. Use the unsubscribe link in any marketing email. You will still get messages about your own orders.
Global Privacy Control. We honor a Global Privacy Control signal from your browser as an opt-out of sale or sharing for that browser and device through Shopify's privacy controls. Clarity does not load when GPC is on. Clarity loads only when analytics, marketing and sale/sharing are accepted and GPC is off; the preferences category is not required. GPC is separate from your analytics cookie choice. Learn more at Global Privacy Control. We do not act on other "Do Not Track" signals.
To use any of these rights, contact us through the contact page or by email. We will not treat you differently for asking. We may need to confirm who you are before we act, as the law allows. You can appoint someone to make a request for you, and we will ask for proof that you authorized them.
Complaints
If you are unhappy with how we handle your information, contact us first and we will try to put it right. Depending on where you live you may also have the right to appeal our decision, or to complain to your local data protection authority.
Information leaving your country
We may transfer, store and process your information outside the country you live in. Where we move information out of the European Economic Area or the United Kingdom, we rely on recognized transfer mechanisms such as the European Commission's Standard Contractual Clauses, unless the destination has been formally recognized as providing adequate protection.
Changes to this policy
If we change this policy we will update the date at the top and post the new version here. If a change is significant we will say so on the site rather than quietly swapping the text.
How to reach us
For questions or requests about your information, use our contact page or email coco@corymade.com.
Our business name and mailing address: CORY LLC, 785 Oak Grove Rd, Suite E2 #1241, Concord, CA 94518.