Privacy policy

Last updated: June 10, 2026

Shop Bamboo, operated in connection with Bamboo Spa & Nails SF, provides this online store and website, including related information, content, features, tools, products, and services, to offer customers a curated shopping experience. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit our online store, make a purchase, create or use an account, communicate with us, sign up for marketing, interact with our content, or otherwise use our services.

Our online store is powered by Shopify. Shopify helps us operate the store, process transactions, support checkout, provide analytics and security tools, and deliver other services needed to operate the online shopping experience.

Please read this Privacy Policy carefully. By using or accessing our online store, you acknowledge that you have read and understand this Privacy Policy. If there is a conflict between this Privacy Policy and any other store policy concerning the collection, use, processing, or disclosure of personal information, this Privacy Policy controls.

1. Scope of This Privacy Policy

This Privacy Policy applies to personal information collected through our online store at store.bamboospasf.com and related online shopping services. It applies to online product browsing, online purchases, customer accounts, order communications, marketing communications, customer-service inquiries, returns and refunds, and related online store activity.

This Privacy Policy does not replace any separate privacy, booking, health, service-intake, appointment, payment, or waiver policies that may apply to in-person spa, nail, massage, facial, waxing, lash, brow, or other services offered by Bamboo Spa & Nails SF, Bamboo Massage, Bamboo Nails, or any related booking platform.

2. Personal Information We Collect

When we use the term “personal information,” we mean information that identifies, relates to, describes, can reasonably be associated with, or could reasonably be linked to a particular person or household. Personal information does not include information that has been deidentified, aggregated, or anonymized so that it cannot reasonably be linked to you.

Depending on how you interact with us, we may collect the following categories of personal information:

Identifiers and contact information, including your name, billing address, shipping address, email address, phone number, account username, and similar contact details.

Commercial information, including products you view, place in your cart, purchase, return, exchange, cancel, or ask about, as well as order history, transaction history, and preferences.

Payment-related information, including payment method, payment confirmation, billing details, transaction details, and limited payment information needed to process a transaction. Full payment card details are generally processed by Shopify or payment processors and are not stored directly by us in ordinary course.

Account information, including account login credentials, preferences, saved addresses, account settings, and customer-service history.

Communications information, including messages, emails, customer-support inquiries, product questions, return requests, reviews, survey responses, or other information you choose to send us.

Device and internet activity information, including IP address, browser type, device information, operating system, referring pages, pages viewed, search activity, cart activity, interaction with store features, and information collected through cookies, pixels, tags, and similar technologies.

Approximate location information, which may be inferred from IP address, shipping address, billing address, or account information.

Marketing and preference information, including whether you have opted in or out of marketing communications, your interaction with promotional emails or advertisements, and products or collections that may be relevant to your interests.

Inferences, such as shopping preferences, likely product interests, or recommendations based on browsing, purchase, cart, or interaction activity.

We do not intend to collect sensitive personal information unless it is necessary for a transaction or voluntarily provided by you. Please do not send us sensitive personal information through unsecured channels.

3. Sources of Personal Information

We may collect personal information from the following sources:

Directly from you, including when you visit the store, place an order, create an account, sign up for emails, contact us, submit a return request, or otherwise provide information to us.

Automatically through the online store, including through cookies, pixels, analytics tools, device identifiers, browser data, and similar technologies.

From Shopify and service providers, including payment processors, fulfillment providers, shipping carriers, analytics providers, customer-support tools, marketing tools, fraud-prevention tools, and other vendors that help operate the store.

From business partners, advertising partners, social media platforms, or other third parties, where permitted by law and consistent with your settings and choices.

4. How We Use Personal Information

We use personal information for the following purposes:

To provide and operate the online store, including processing orders, managing checkout, confirming payment, arranging shipping, communicating about orders, managing returns or exchanges, and providing customer support.

To personalize and improve the shopping experience, including remembering preferences, maintaining carts, recommending products, improving product pages, understanding how customers use the store, and improving store design and functionality.

To communicate with you, including responding to customer-service inquiries, sending order confirmations, providing shipping updates, responding to return or refund requests, and sending service-related notices.

To send marketing communications, where permitted by law, including promotional emails, product updates, gift ideas, new-arrival notices, seasonal care messages, and advertising related to Bamboo’s products and services. You may opt out of promotional emails by using the unsubscribe link in our emails.

To support advertising and analytics, including measuring the effectiveness of promotions, understanding customer interest, and showing relevant advertising through Shopify or advertising partners.

To maintain security and prevent fraud, including detecting suspicious activity, protecting payment and account security, troubleshooting errors, enforcing policies, and protecting the rights, property, and safety of Bamboo, customers, and others.

To comply with legal obligations, including tax, accounting, consumer-protection, privacy, dispute-resolution, litigation, subpoena, regulatory, or law-enforcement obligations.

To enforce our rights and policies, including our Terms of Service, Return and Refund Policy, and other store policies.

5. Cookies and Similar Technologies

Our store and service providers may use cookies, pixels, tags, scripts, and similar technologies to operate the store, remember preferences, support checkout, analyze store traffic, improve performance, prevent fraud, and support marketing or advertising.

You may be able to adjust cookie settings through your browser or device. Some cookies are necessary for the store to function properly. If you block or delete cookies, some parts of the store may not work as intended.

Depending on where you live, you may have the right to opt out of certain targeted advertising, sale, or sharing activities. Where required, we honor applicable opt-out preference signals, including Global Privacy Control, as described below.

6. How We Disclose Personal Information

We may disclose personal information to the following categories of recipients for legitimate business purposes:

Shopify, which hosts and supports our online store and helps provide checkout, payments, analytics, fraud prevention, and related services.

Payment processors, banks, and payment networks, to process payments, refunds, chargebacks, and transaction security.

Fulfillment providers, suppliers, dropship vendors, wholesalers, and shipping carriers, to process, package, fulfill, ship, deliver, and manage orders.

Technology and service providers, including hosting, IT, analytics, customer-service, email, SMS, cloud storage, fraud-prevention, and marketing providers.

Advertising and marketing partners, where permitted by law, to help us promote products, measure marketing performance, and show relevant advertising.

Professional advisors, including attorneys, accountants, insurers, auditors, consultants, and other advisors where necessary for business, legal, compliance, or risk-management purposes.

Government authorities, courts, law enforcement, regulators, or other parties when required by law, subpoena, court order, legal process, or to protect rights, safety, or security.

Business transaction parties, if we are involved in a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar business transaction.

We may also disclose information when you direct us to do so, consent to the disclosure, or interact with third-party features such as social media widgets, external links, or third-party checkout or payment tools.

7. Relationship with Shopify

Our online store is hosted by Shopify. Information you provide through the store may be transmitted to Shopify and processed by Shopify to provide, support, protect, improve, and operate the online store and related services.

Shopify may process personal information about your interactions with our store, with other merchants, and with Shopify’s services. In some circumstances, Shopify may be independently responsible for certain processing of your personal information, including responding to privacy requests related to Shopify’s own processing. To learn more about Shopify’s privacy practices, you may review Shopify’s Consumer Privacy Policy and Shopify’s privacy portal.

Because Shopify and some service providers may process information outside your state, province, or country, your information may be transferred to, stored in, or processed in jurisdictions other than where you live.

8. Third-Party Websites and Links

Our store may contain links to websites, apps, social media pages, payment services, booking tools, or other online platforms operated by third parties. We do not control those third-party services and are not responsible for their privacy practices, content, security, or policies.

When you leave our store or interact with a third-party service, you should review that third party’s privacy policy and terms.

9. Children’s Privacy

Our online store is not intended for children. We do not knowingly collect personal information from children under 13. We also do not knowingly sell or share personal information of individuals under 16 as those terms are defined under applicable California privacy law.

If you believe a child has provided personal information to us, please contact us using the information below so we can review and delete the information where required by law.

10. Security and Retention

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. However, no method of transmission or storage is completely secure, and we cannot guarantee perfect security.

We retain personal information for as long as reasonably necessary to provide the store and services, complete transactions, maintain records, comply with legal obligations, resolve disputes, prevent fraud, enforce agreements, and support legitimate business purposes. The retention period may vary depending on the type of information, the purpose for which it was collected, and applicable legal requirements.

11. Your Privacy Choices

You may have choices regarding your personal information, depending on where you live and how you interact with us. These may include the right to:

Access or know what personal information we collect, use, disclose, sell, or share.

Request a copy of personal information we maintain about you.

Request correction of inaccurate personal information.

Request deletion of personal information, subject to legal exceptions.

Opt out of certain marketing communications.

Opt out of the sale or sharing of personal information, where applicable.

Limit the use and disclosure of sensitive personal information, where applicable and where such information is collected or used for purposes beyond those permitted by law.

Receive non-discriminatory treatment for exercising privacy rights.

You may exercise available rights by contacting us using the contact information below or by using privacy controls made available through the store, Shopify, or applicable privacy links.

12. California Privacy Notice

This section applies to California residents and is intended to supplement the rest of this Privacy Policy.

California law may provide residents with rights to know, access, correct, delete, and obtain a copy of personal information, and to opt out of the sale or sharing of personal information for cross-context behavioral advertising, subject to legal limits and exceptions. California law also prohibits discrimination against consumers for exercising privacy rights.

Depending on how you interact with us, we may collect the following categories of personal information as defined by California law:

Identifiers, such as name, email address, phone number, billing address, shipping address, account username, IP address, and similar identifiers.

California customer records information, such as contact details, payment-related details, and transaction information.

Commercial information, such as products viewed, purchased, returned, exchanged, or placed in a cart.

Internet or other electronic network activity information, such as browsing activity, interactions with the store, cookies, device data, and usage information.

Geolocation information, such as approximate location inferred from IP address or shipping information.

Audio, electronic, or visual information, if you contact us through channels that create such records or submit images in connection with a customer-service request.

Inferences, such as preferences or likely product interests based on your shopping activity.

We collect these categories from you, from your device, from Shopify and service providers, and from partners or third parties as described above. We use these categories for the business and commercial purposes described in this Privacy Policy, including order fulfillment, customer service, security, fraud prevention, analytics, store improvement, marketing, advertising, legal compliance, and business operations.

We may disclose these categories of personal information to Shopify, service providers, payment processors, fulfillment providers, shipping carriers, analytics providers, marketing providers, advertising partners, professional advisors, legal authorities, and transaction parties as described above.

We do not sell personal information for money. However, some uses of cookies, pixels, analytics, advertising technologies, or Shopify-enhanced advertising features may be considered a “sale” or “sharing” of personal information under California law. Where required, you may opt out through the “Your Privacy Choices” link, applicable Shopify privacy tools, browser-based Global Privacy Control, or by contacting us.

If you visit our store with a Global Privacy Control opt-out preference signal enabled, we will treat that signal as an opt-out request for the browser or device used to visit the store, where required by applicable law. Other “Do Not Track” signals may not be recognized because there is no uniform industry standard for those signals.

We do not knowingly sell or share personal information of individuals under 16.

We do not use sensitive personal information to infer characteristics about you unless disclosed and permitted by law.

You may designate an authorized agent to submit a California privacy request on your behalf. We may require proof of authorization and may also require you to verify your identity directly with us, as permitted by law.

We will not deny goods or services, charge a different price, provide a different level or quality of service, or otherwise discriminate against you for exercising California privacy rights, except as permitted by law.

13. California “Shine the Light” Rights

California Civil Code section 1798.83 may permit California residents to request information about certain disclosures of personal information to third parties for their direct marketing purposes. To make such a request, please contact us using the contact information below and include “California Shine the Light Request” in your message.

14. Managing Marketing Communications

You may opt out of promotional emails by using the unsubscribe link included in those emails. Even if you opt out of marketing communications, we may still send non-promotional messages, including order confirmations, shipping updates, account notices, policy updates, customer-service responses, and legally required communications.

15. International Transfers

We and our service providers, including Shopify, may transfer, store, or process personal information outside the state, province, or country where you live. When required by applicable law, appropriate safeguards may be used for such transfers.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal obligations, store features, or business operations. When we update this Privacy Policy, we will revise the “Last updated” date and provide notice where required by law.

17. Contact Us

If you have questions about this Privacy Policy, our privacy practices, or your privacy rights, or if you would like to submit a privacy request, please contact us at:

Shop Bamboo / Bamboo Spa & Nails SF
2284 Union St.
San Francisco, CA 94123
United States
Email: fiona@bamboospasf.com

For customer-service inquiries related to orders, returns, or online purchases, you may also contact us through the contact options provided on our store.