Privacy Policy

Last Updated: August 19, 2026

DharmaCraft operates the online store located at https://dharmacraft.us and provides its website, products, customer support, and related services, collectively referred to as the “Services.”

DharmaCraft is powered by Shopify, which provides the ecommerce platform used to operate the Services.

This Privacy Policy explains how DharmaCraft collects, uses, stores, discloses, and otherwise processes personal information when you:

Visit or use our website
Create or use a customer account
Place or manage an order
Request a return or refund
Contact customer support
Subscribe to marketing
Submit a review or other content
Otherwise interact with DharmaCraft

This Privacy Policy should be read together with our Terms of Service, Your Privacy Choices page, Shipping & Delivery Policy, Return & Refund Policy, and other applicable notices.

If our Terms of Service conflict with this Privacy Policy regarding the collection, use, or disclosure of personal information, this Privacy Policy will control for that issue.

1. Who Controls Your Personal Information

For personal information processed for DharmaCraft’s own business purposes, the operator of DharmaCraft is generally the business responsible for determining why and how that information is processed.

Shopify and other service providers may separately control certain information for their own purposes, as explained in their respective privacy notices.

Store Name: DharmaCraft
Website: https://dharmacraft.us
Privacy Email: mursexbinger@gmail.com
Phone: +1 (936) 260-5549

Business and Correspondence Address:
Unit 809, 8/F, Brill Plaza
84 To Kwa Wan Road
To Kwa Wan, Hong Kong

2. Meaning of Personal Information

“Personal information” or “personal data” means information that identifies, relates to, describes, or can reasonably be linked to an identifiable individual.

Personal information does not generally include information that has been lawfully anonymized or de-identified so that it can no longer reasonably identify or be linked to an individual.

The exact definition may differ under applicable law.

3. Personal Information We Collect

The information we collect depends on how you interact with DharmaCraft, the features you use, your location, and the services enabled on our website.

Contact Information

We may collect:

Full name
Email address
Telephone number
Billing address
Shipping address
Country or region
Other delivery or contact details

Order and Transaction Information

We may collect:

Order number
Products viewed or purchased
Shopping cart and wishlist activity
Purchase date and amount
Discounts or promotional codes
Returns, refunds, exchanges, and cancellations
Shipping and tracking information
Order history
Communications concerning an order

Because DharmaCraft sells Buddhist supplies, transaction information may reveal an interest in Buddhist, meditation, cultural, or devotional products. We do not intentionally use purchase information to determine or infer a customer’s religious beliefs or target advertising based on sensitive religious characteristics.

Payment Information

Payments are generally processed by Shopify and independent payment providers.

Depending on the payment method, we may receive limited payment-related information, such as:

Payment status
Transaction identifier
Payment method type
Billing address
Card brand
Limited card details, such as the last four digits
Fraud or verification results

DharmaCraft does not generally receive or store complete payment card numbers or card security codes when those details are processed directly by an authorized payment provider.

Account Information

If customer accounts are available, we may collect:

Username or account identifier
Password-related credentials in protected form
Account preferences
Saved addresses
Wishlist information
Communication settings
Order history

Customer Support and Communications

We may collect information you provide when contacting us, including:

Email and message content
Photographs or videos
Product issue details
Return or refund information
Delivery complaints
Records of customer-service communications
Information submitted through forms

Please do not send unnecessary government identification, complete payment-card details, passwords, medical information, or other highly sensitive information through ordinary email.

Device and Technical Information

We and our service providers may collect:

IP address
Browser type
Device type
Operating system
Device or browser identifiers
Network information
Language settings
Approximate location derived from an IP address
Website access date and time
Referring website
Error logs and security records

Website Usage Information

We may collect information about how you interact with the Services, including:

Pages viewed
Products viewed
Searches
Links selected
Shopping cart activity
Session duration
Website navigation
Advertising interactions
Cookie and privacy preferences
General engagement with the Services

Reviews and User Content

If you submit a review, photograph, comment, question, or other content, we may collect:

Display name
Review text
Rating
Photographs or videos
Product information
Submission date
Related account or order information

Content submitted for public display may be visible to other website users.

4. Sources of Personal Information

We may collect personal information:

Directly From You

For example, when you:

Place an order
Create an account
Contact customer support
Request a return
Subscribe to emails
Submit a privacy request
Post a review
Complete a website form

Automatically

We may collect information automatically through:

Cookies
Pixels
Tags
Analytics tools
Advertising technologies
Server logs
Browser storage
Similar technologies

From Shopify and Service Providers

We may receive information from providers that assist with:

Ecommerce hosting
Payment processing
Fraud prevention
Order fulfillment
Shipping
Analytics
Customer support
Website security
Marketing

From Business Partners and Third Parties

We may receive information from:

Advertising partners
Social media platforms
Referral sources
Publicly available sources
Authorized payment or delivery providers
Other partners where permitted by law

5. Whether Providing Information Is Required

Providing personal information is generally voluntary. However, certain information is necessary to:

Process payment
Accept and fulfill an order
Deliver products
Provide tracking
Complete a return or refund
Verify an account or transaction
Respond to a request
Comply with legal obligations

If you do not provide required information, we may be unable to complete the requested transaction or provide the relevant Service.

You are not required to provide personal information for optional marketing communications.

6. How We Use Personal Information

We may use personal information for the following purposes.

Providing and Managing the Services

We may use information to:

Process orders and payments
Confirm transactions
Arrange fulfillment and shipping
Provide tracking information
Manage accounts
Process returns, refunds, cancellations, and exchanges
Remember preferences
Provide customer support
Display customer reviews
Provide requested website features

Personalizing and Improving the Services

We may use information to:

Remember shopping preferences
Recommend related products
Analyze website performance
Understand how customers use the Services
Diagnose technical issues
Improve website navigation and product selection
Develop and evaluate store features

We will not intentionally personalize products or advertisements based on an inferred sensitive religious belief.

Marketing and Advertising

Where permitted by law, we may use information to:

Send promotional emails
Show advertisements
Measure campaign performance
Understand advertising engagement
Remind customers about products or shopping carts
Create audiences for advertising platforms
Limit repetitive advertising

Where consent is required, we will seek consent before using non-essential cookies or sending electronic marketing.

You may unsubscribe from promotional emails using the link provided in those communications. Opting out of marketing does not prevent transactional messages concerning orders, accounts, security, delivery, returns, or policy updates.

Security and Fraud Prevention

We may use information to:

Authenticate accounts
Verify transactions
Detect fraud or payment abuse
Investigate unauthorized activity
Protect customers and the Services
Prevent malicious activity
Enforce our Terms and policies
Maintain technical and network security

Legal and Compliance Purposes

We may use information to:

Comply with applicable laws
Maintain tax, accounting, and transaction records
Respond to lawful legal process
Handle legal claims and disputes
Protect legal rights
Investigate policy violations
Cooperate with regulators or law-enforcement authorities where legally required

7. Legal Bases for Processing

Where applicable law requires a legal basis, we may process personal information based on:

Contractual Necessity

Processing may be necessary to:

Accept and fulfill an order
Process payment
Deliver products
Provide customer support
Manage returns and refunds
Perform obligations under our Terms

Legitimate Interests

We may process information for legitimate interests such as:

Operating and improving the store
Preventing fraud
Securing the Services
Understanding website performance
Providing relevant customer support
Establishing or defending legal claims

We consider the impact on individuals before relying on legitimate interests.

Consent

We may rely on consent for:

Non-essential cookies where required
Certain marketing communications
Particular uses of sensitive information
Other processing requiring consent

You may withdraw consent at any time, subject to applicable law. Withdrawal does not affect processing lawfully completed before withdrawal.

Legal Obligations

We may process information to satisfy:

Tax requirements
Accounting duties
Consumer-protection obligations
Legal requests
Regulatory requirements
Fraud-prevention duties
Other legal obligations

8. Cookies and Similar Technologies

DharmaCraft, Shopify, and third parties may use cookies and similar technologies to:

Operate essential website functions
Maintain shopping carts
Remember account sessions
Store language and privacy preferences
Prevent fraud
Measure traffic and performance
Understand website use
Personalize content
Support advertising

Cookies may be:

Strictly necessary: required for website operation, security, checkout, and account functions
Functional: used to remember preferences and provide enhanced features
Analytics: used to understand performance and website activity
Advertising: used to measure campaigns or provide personalized advertising

Where required, non-essential technologies will be used only after appropriate consent.

You may manage cookies through:

Any cookie controls displayed on our website
Browser settings
Device settings
Global Privacy Control
Our Your Privacy Choices page

Blocking cookies may affect shopping carts, sign-in, saved preferences, or other website functions.

9. Do Not Track and Global Privacy Control

Traditional “Do Not Track” browser signals are not interpreted consistently across the internet, and we may not respond to them unless required by applicable law.

Where required, we recognize a legally valid Global Privacy Control or other qualifying universal opt-out signal as a request to opt out of applicable sales, sharing, or targeted advertising for the browser or device transmitting the signal.

For additional information, review our Your Privacy Choices page.

10. How We Disclose Personal Information

We may disclose personal information to the following categories of recipients for legitimate business purposes.

Shopify

Shopify hosts the Services and processes information needed to provide and improve its ecommerce platform.

Payment Providers

Payment providers process payments, refunds, fraud checks, and transaction verification.

Fulfillment Providers and Suppliers

We may disclose order information to suppliers, warehouses, and fulfillment partners to prepare and ship products.

Because orders may be fulfilled from different locations, the information disclosed may include the recipient’s name, address, telephone number, email address, product details, and delivery instructions.

Shipping Carriers

We may provide necessary delivery information to postal services, couriers, freight providers, and tracking services.

Technology and Security Providers

We may disclose information to providers supporting:

Hosting
Cloud storage
Website operation
Account authentication
Cybersecurity
Fraud prevention
Error monitoring
Technical support

Analytics and Advertising Partners

Depending on the tools enabled on our website, we may disclose identifiers, device information, browsing activity, or advertising interactions to analytics and advertising providers.

Under some U.S. state laws, certain advertising disclosures may be considered a “sale,” “sharing,” or processing for “targeted advertising,” even when no money is exchanged.

You may exercise applicable opt-out rights through our Your Privacy Choices page.

Professional Advisers

We may disclose information where reasonably necessary to:

Lawyers
Accountants
Auditors
Insurers
Compliance advisers
Other professional consultants

Corporate Affiliates

Where applicable, we may disclose information within our corporate group for administration, support, security, and lawful business operations.

Business Transactions

Information may be disclosed in connection with:

A merger
Acquisition
Financing
Reorganization
Bankruptcy
Sale or transfer of all or part of a business

Any recipient will remain subject to applicable privacy obligations.

Legal and Safety Reasons

We may disclose information when reasonably necessary to:

Comply with law
Respond to valid legal process
Protect rights or safety
Investigate fraud
Enforce policies
Defend legal claims

11. Shopify’s Role

The Services are hosted by Shopify.

Information submitted through the Services may be transmitted to and processed by Shopify and other providers in countries outside your place of residence.

Shopify may process certain information as:

A service provider or processor acting on our behalf
An independent controller for purposes described in Shopify’s privacy policies
A provider of enhanced platform, analytics, security, or advertising services

If Shopify Network Intelligence or other enhanced services are enabled, Shopify may use information from interactions with DharmaCraft, Shopify, and other merchants to provide enhanced services. Shopify may be independently responsible for certain processing related to those features.

For information about Shopify’s practices and privacy controls, visit:

Shopify Privacy Controls:
https://privacy.shopify.com/en

Shopify Consumer Privacy Policy:
https://www.shopify.com/legal/privacy/consumers

Requests concerning processing controlled independently by Shopify may need to be submitted directly through Shopify’s privacy portal.

12. Sale, Sharing, and Targeted Advertising Disclosures

DharmaCraft does not sell personal information for money in the traditional sense.

However, depending on the advertising, analytics, and platform services enabled, disclosures of the following categories may be considered a sale, sharing, or targeted advertising under certain U.S. state laws:

Identifiers
Internet or electronic network activity
Device information
Approximate location derived from IP address
Commercial or shopping activity
Advertising interaction information
Inferences concerning shopping preferences

Potential recipients may include:

Advertising networks
Analytics providers
Social media platforms
Ecommerce technology providers

We do not knowingly sell or share the personal information of individuals we know to be under 16 without the authorization required by applicable law.

We do not intentionally sell or share sensitive personal information concerning religious beliefs for targeted advertising.

Eligible residents may opt out as described on our Your Privacy Choices page.

13. Sensitive Personal Information

Depending on applicable law, sensitive personal information may include:

Account credentials
Payment-related information
Precise geolocation
Government identifiers
Information revealing religious or philosophical beliefs
Other legally designated sensitive information

Purchasing Buddhist supplies may indicate an interest in Buddhist products but does not necessarily establish a person’s religion or beliefs.

We do not intentionally use purchase information to infer religious belief or make significant decisions about a customer.

We use sensitive information only as reasonably necessary for purposes such as:

Processing transactions
Providing requested products
Securing accounts
Preventing fraud
Complying with law
Other purposes permitted or consented to under applicable law

14. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including:

Providing the Services
Maintaining accounts
Completing transactions
Processing returns or disputes
Preventing fraud
Maintaining tax and accounting records
Complying with legal obligations
Establishing or defending legal claims
Enforcing agreements

Retention periods depend on:

The type and sensitivity of information
The purpose of processing
The length of the customer relationship
Legal or contractual obligations
Security and fraud-prevention needs
Applicable limitation periods

When information is no longer reasonably required, we may delete, anonymize, or securely isolate it, subject to legal and technical limitations.

Backup copies may remain temporarily until deleted through routine backup cycles.

15. Security

We use reasonable administrative, technical, and organizational safeguards intended to protect personal information.

These measures may include:

Access restrictions
Authentication controls
Encryption in transit where supported
Secure ecommerce and payment providers
Fraud-monitoring tools
Service-provider controls
System monitoring
Data minimization practices

No website, transmission, or storage system can be guaranteed to be completely secure.

You are responsible for:

Keeping account credentials confidential
Using a strong and unique password
Protecting access to your email and devices
Notifying us of suspected unauthorized activity
Avoiding the transmission of sensitive information through insecure channels

16. International Data Transfers

DharmaCraft operates from Hong Kong and uses service providers that may process information in other countries.

Your personal information may be transferred to, stored in, or processed in:

Hong Kong
The United States
Canada
Countries where Shopify or other providers operate
Countries where fulfillment, payment, support, or technology providers are located

Privacy laws in those countries may differ from those in your place of residence.

Where required, international transfers will rely on an available lawful mechanism, which may include:

Adequacy decisions
Standard contractual clauses
Approved contractual safeguards
Consent where legally appropriate
Other legally recognized transfer mechanisms

For transfers subject to European Economic Area or United Kingdom requirements, we will use legally recognized safeguards where required.

17. Third-Party Websites and Social Features

The Services may contain links to third-party websites, payment services, social platforms, or other online services.

Third parties control their own privacy and security practices. This Privacy Policy does not govern information collected independently by those third parties.

We are not responsible for third-party privacy practices, security, accuracy, or content.

Information posted in public reviews, social media pages, or other public areas may be visible and reused by others. Do not post information you wish to keep private.

18. Children’s Privacy

The Services are not directed to children, and we do not knowingly collect personal information from children below the applicable minimum age without legally required authorization.

If you believe a child has provided personal information to DharmaCraft without appropriate permission, contact us at mursexbinger@gmail.com.

We may take reasonable steps to verify the requester’s relationship to the child before deleting information.

As of the effective date of this Privacy Policy, we do not have actual knowledge that we sell or share personal information belonging to individuals under 16 as those terms are defined by applicable law.

19. Your Privacy Rights

Depending on your location and applicable law, you may have the right to:

Know whether we process your personal information
Access personal information
Correct inaccurate information
Delete certain information
Receive a portable copy of certain information
Restrict processing
Object to processing
Withdraw consent
Opt out of sale, sharing, or targeted advertising
Limit certain uses of sensitive personal information
Obtain information about categories of recipients
Appeal a decision concerning a privacy request
Lodge a complaint with a privacy regulator

These rights are not absolute. A request may be limited or denied where an exception applies, such as when information must be retained for legal compliance, fraud prevention, transaction completion, security, or legal claims.

20. Exercising Your Rights

To submit a privacy request, contact:

Email: mursexbinger@gmail.com
Subject: Privacy Rights Request
Phone: +1 (936) 260-5549

Please provide:

Your full name
Your location
The email address connected with your account or order
The right you wish to exercise
Sufficient details to understand the request

Do not send unnecessary government identification or complete payment-card information.

You may also use the methods described on our Your Privacy Choices page for sale, sharing, targeted advertising, and browser-level opt-outs.

21. Verification and Authorized Agents

We may take reasonable steps to verify an access, correction, deletion, or portability request before disclosing or modifying personal information.

Verification will depend on:

The type of request
The sensitivity of information
The risk of unauthorized access or deletion
Information already maintained
Applicable law

Where permitted, you may designate an authorized agent. We may request proof of authorization and may contact you directly to verify your identity or confirm the agent’s authority.

We will not require unnecessary identity verification merely to process a browser-level opt-out where such verification is prohibited or unnecessary.

22. Response Timing and Appeals

We will respond within the period required by applicable law.

Where legally permitted, we may extend the response period because of request complexity or volume. We will provide notice of an applicable extension.

If we deny a request and you have a legal right to appeal, email:

Email: mursexbinger@gmail.com
Subject: Privacy Request Appeal

Include the original request, our response, and the reason you believe the decision should be reconsidered.

23. Non-Discrimination

We will not unlawfully discriminate against you for exercising an applicable privacy right.

We will not unlawfully:

Deny products or services
Charge different prices
Provide a different level or quality of service
Retaliate against you

Some website features may not function properly if information or cookies necessary for those features are disabled.

24. Marketing Preferences

You may opt out of promotional emails by using the unsubscribe link included in those messages or contacting mursexbinger@gmail.com.

After opting out, we may continue sending non-promotional communications concerning:

Orders
Payments
Shipping
Returns and refunds
Customer support
Account security
Legal or policy notices

Processing an unsubscribe request may take a reasonable period permitted by law.

25. Complaints

If you have concerns about our handling of personal information, contact us first at:

Email: mursexbinger@gmail.com
Subject: Privacy Complaint

We will make reasonable efforts to review and respond.

Depending on your location, you may also have the right to lodge a complaint with a competent data protection or privacy authority.

Individuals in Hong Kong may contact the Office of the Privacy Commissioner for Personal Data. Individuals elsewhere may contact the regulator responsible for privacy matters in their jurisdiction.

26. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in:

Our practices
Website features
Shopify services
Installed applications
Advertising or analytics tools
Legal requirements
Business operations

The revised policy will be posted with an updated “Last Updated” date. We will provide additional notice or obtain consent when required by law.

Changes apply prospectively unless applicable law permits or requires otherwise.

27. Contact Information

For privacy questions, requests, complaints, or concerns, contact:

DharmaCraft
Website: https://dharmacraft.us
Email: mursexbinger@gmail.com
Phone: +1 (936) 260-5549

Business and Correspondence Address:
Unit 809, 8/F, Brill Plaza
84 To Kwa Wan Road
To Kwa Wan, Hong Kong

When contacting us, use Privacy Rights Request, Privacy Choices Request, or Privacy Complaint as the subject line, as applicable.