Privacy policy

Privacy Policy

Last updated: October 9, 2026

1. Data Controller

The controller responsible for processing personal information in connection with this online store is:

Sick Story LLC
7901 4th St N #15164
St. Petersburg, FL 33702
United States

This Privacy Policy explains how we collect, use, store and share personal information when you visit our website, use our services, place an order or communicate with us.

2. Personal Information We Process

Depending on how you use our store, we may process the following personal information in particular:

Contact information such as name, email address, billing and shipping addresses and, where applicable, telephone number
Order and transaction information
Payment information; full payment details are generally processed by our payment providers
Customer account and login information
Communications with our customer service
Device and browser information
IP address and technical connection data
Information about use of our website
Cookie, analytics and marketing data, where permitted by law
Information about purchases, cart contents, returns, refunds and deliveries

3. Purposes and Legal Bases for Processing

We process personal information for the following purposes in particular:

Performance of a contract:
To process your order, payment, delivery, customer support, refunds and other contractual services.

Where the GDPR applies, this processing is based in particular on Article 6(1)(b) GDPR.

Legal obligations:
Certain information may be processed and stored to comply with tax, commercial, regulatory or other legal obligations.

The legal basis, where applicable, is Article 6(1)(c) GDPR.

Legitimate interests:
We may process personal information where necessary for legitimate business interests, such as fraud prevention, IT security, troubleshooting, improving our store and enforcing our rights.

Where the GDPR applies, this is based on Article 6(1)(f) GDPR, provided your interests or fundamental rights do not override those interests.

Consent:
Where consent is required, particularly for certain non-essential cookies, tracking technologies or marketing activities, processing is based on your consent.

Where the GDPR applies, the relevant basis is in particular Article 6(1)(a) GDPR.

You may withdraw consent at any time with effect for the future.

4. Orders and Payment Processing

When you place an order, we process the personal information needed to accept your order, process payment, produce or provide products and organize delivery.

Payment information may be processed directly by Shopify Payments or other payment providers we use.

We do not necessarily have access to full credit card or bank details.

5. Shopify

Our online store is powered by Shopify .

Shopify processes certain personal information needed to provide our store, checkout, payment features, customer accounts and other Shopify services.

For many processing activities, Shopify acts on our behalf. For certain Shopify services and enhanced features, however, Shopify may process personal information for its own purposes and act as an independent controller for that processing.

For more information about Shopify's processing, see Shopify's current privacy information.

6. Fulfillment and Shipping

We may share personal information needed to fulfill your order with our fulfillment, production and shipping partners.

These include providers such as:

Printful for certain print-on-demand and clothing products, and
Supliful for certain dietary supplements.

In particular, this includes sharing your name, delivery address, ordered products and other information necessary to fulfill the order.

Carriers also receive the information needed to deliver your order.

7. Marketing and Communications

If you sign up for our newsletter or other marketing communications, we may use your contact information to send you information about products, offers and news.

Where required by law, we do this only with your prior consent.

You can unsubscribe from marketing emails at any time using the unsubscribe link in each message or by contacting us.

We may still send you transactional messages, such as order, shipping or security information, even if you have unsubscribed from marketing communications.

8. Cookies and Similar Technologies

Our website uses cookies and similar technologies.

Some of these technologies are technically necessary for our store to function, such as cart, security or checkout features.

Other technologies may be used for analytics, personalization or marketing.

Where required by law, we use non-essential cookies and comparable tracking technologies only after you consent .

You can change your choices or withdraw previously given consent through the privacy or cookie settings available on our website.

Individual third-party apps may use additional technologies. We strive to ensure these are included in our consent settings.

9. Sharing Personal Information

We may share personal information with service providers where necessary to provide our store and services.

These may include:

Shopify and technical hosting or store service providers
Payment providers
Printful and Supliful
Shipping carriers
Email and marketing service providers
Analytics and IT service providers
Customer support and communication providers
Tax, legal or other professional advisers

Information may also be shared where we are legally required to do so, where necessary to enforce our rights, or in connection with a lawful business transfer, merger or restructuring.

10. Cookies, Personalized Advertising and Opt-Out

Depending on where you live, you may have statutory rights to object to the use or sharing of personal information for certain forms of targeted or personalized advertising.

Where these rights apply, we provide appropriate privacy or opt-out options through our store.

Where technically supported and required by law, we also honor recognized Global Privacy Control (GPC)signals.

11. International Data Transfers

Because we use Shopify and other international service providers, personal information may be processed outside the country where you are located.

This may include processing in the United States, Canada or other countries.

Where the GDPR or comparable data protection laws apply and personal information is transferred to a country without a recognized adequate level of data protection, we use appropriate safeguards provided by law where required.

These may include adequacy decisions or recognized standard contractual clauses.

12. Retention of Personal Information

We retain personal information only for as long as necessary for the relevant purposes.

The specific retention period depends in particular on whether the information is needed to fulfill an order, manage a customer account, handle support inquiries, meet statutory retention requirements, defend against claims or enforce our rights.

Once the relevant purpose no longer applies, information is deleted or anonymized unless legal or legitimate reasons require further retention.

13. Data Security

We take appropriate technical and organizational measures to protect personal information against loss, misuse, unauthorized access, alteration or disclosure.

However, no electronic system or transmission method can guarantee complete security.

14. Privacy Rights

Depending on where you live and the applicable data protection law, you may have the right to:

request access to your personal information,
have inaccurate information corrected,
request deletion of your information,
request restriction of certain processing,
object to processing,
request a copy of your information or data portability,
object to certain uses for targeted advertising or processing legally classified as a "sale" or "sharing", and
withdraw consent at any time with effect for the future.

These rights are not unlimited and may be subject to legal conditions and exceptions.

To exercise your rights, contact us at support@sick-story.com .

Where necessary, we may require appropriate measures to verify your identity.

Exercising statutory privacy rights does not result in unlawful discrimination.

15. Complaints

If you have questions or complaints about the processing of your personal information, please first contact us at:

support@sick-story.com

Where the GDPR applies, you also have the right to complain to a competent data protection supervisory authority.

16. Information About Children and Young People

Our services are not specifically directed at children.

We do not knowingly collect personal information from children in violation of applicable legal requirements.

Dietary supplements from Sick Story LLC may only be purchased by people aged 18 or over.

If you believe a child has improperly provided us with personal information, contact us at support@sick-story.com.

17. Third-Party Websites and Services

Our website may contain links, integrations or features from other providers.

The privacy practices of external providers are generally governed by their own privacy policies.

Please review the relevant third party's privacy policy before providing personal information to them.

18. Changes to This Privacy Policy

We may change this Privacy Policy if our business practices, services or legal requirements change.

The current version will be published on our website with an updated date.

19. Contact

For questions about processing your personal information or exercising your privacy rights, contact us at: