Privacy policy

Fire House Bites Privacy Policy

Last updated: September 15, 2026

Fire House Bites operates this store and website, including all related information, content, features, tools, products and services (the “Services”). Fire House Bites is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use and disclose your personal information when you visit, use or make a purchase or other transaction using the Services, or otherwise communicate with us.

For the purposes of applicable data protection laws, Fire House Bites is the data controller of the personal information we process for our own purposes. Shopify’s responsibilities are explained in the Relationship with Shopify section below.

If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing and disclosure of your personal information. Please read this Privacy Policy carefully. Using the Services does not, by itself, constitute consent to processing that requires your consent.

Personal information we collect or process

When we use the term “personal information”, we mean information that identifies or can reasonably be linked to you or another person. Personal information does not include information that has been anonymised so that it cannot identify or reasonably be linked to you.

We may collect or process the following categories of personal information, including inferences drawn from this information, depending on how you interact with the Services, where you live and as permitted or required by applicable law:

• Contact details, including your name, address, billing address, shipping address, phone number and email address.
• Financial information, including credit card, debit card and financial account numbers, payment card information, financial account information, transaction details, payment method, payment confirmation and other payment details.
• Account information, including your username, password, security questions, preferences and settings.
• Transaction information, including the items you view, put in your cart, add to your wishlist, purchase, return, exchange or cancel, and your past transactions.
• Communications with us, including information you provide when making a customer support enquiry or otherwise communicating with us.
• Device information, including information about your device, browser or network connection, your IP address and other unique identifiers.
• Usage information, including how and when you interact with or navigate the Services.

Personal information sources

We may collect personal information from the following sources:

• Directly from you, including when you create an account, visit or use the Services, communicate with us or otherwise provide personal information.
• Automatically through the Services, including from your device when you use our products or services or visit our website, and through cookies and similar technologies.
• From service providers that enable certain technology or collect or process personal information on our behalf.
• From our partners or other third parties.

How we use your personal information

Depending on how you interact with us and which Services you use, we may use personal information for the following purposes:

• Provide, tailor and improve the Services. We use information to perform our contract with you, process payments, fulfil orders, remember your preferences and items of interest, send account notifications, process purchases, returns, exchanges and other transactions, manage your account, arrange shipping, enable reviews and provide a personalised shopping experience. This may include recommending products related to your purchases and using information to improve the Services.
• Marketing and advertising. We use information for marketing and promotional purposes, such as sending promotional communications by email, text message or post, and showing advertisements on the Services or other websites. Advertising may be based on items you have purchased or added to your cart and other activity on the Services. Where consent is required by law, we rely on your consent for these activities.
• Security and fraud prevention. We use information to authenticate accounts, provide a secure payment and shopping experience, detect, investigate or address fraudulent, illegal, unsafe or malicious activity, protect public safety and secure the Services. Please keep account credentials safe and do not share passwords or other access details.
• Communicating with you. We use information to provide customer support, respond to enquiries, provide effective services and maintain our relationship with you.
• Legal reasons. We use information to comply with applicable law and respond to valid legal processes, including requests from law enforcement or government agencies. We may also use it to investigate or participate in legal proceedings and to enforce or investigate potential violations of our terms or policies.

How we disclose personal information

In certain circumstances, we may disclose personal information to third parties for legitimate purposes, subject to this Privacy Policy and applicable law:

• With Shopify, vendors and other service providers performing services on our behalf, such as IT management, payment processing, data analytics, customer support, cloud storage, fulfilment and shipping.
• With business and marketing partners to provide marketing services and advertise to you. For example, we use Shopify to support personalised advertising with third-party services based on online activity across different merchants and websites. These partners use information in accordance with their own privacy notices. Depending on where you live, you may have a right to direct us not to share information for targeted advertising based on that activity.
• When you direct us, request or otherwise consent to a disclosure, such as to ship products or enable social media widgets or login integrations.
• With affiliates or other companies in our corporate group, where applicable.
• In connection with a business transaction, such as a merger or insolvency, to meet legal obligations or valid legal requests, enforce applicable terms or policies, or protect the Services and the rights of our business, users or others.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services to provide and improve them. Information you submit will be transmitted to and shared with Shopify and other service providers, including providers located in countries other than where you live.

To help protect, grow and improve our business, we use certain Shopify enhanced features that incorporate information obtained from your interactions with our store, other merchants and Shopify. To provide these features, Shopify may use personal information collected from those interactions.

For processing for which Shopify is independently responsible, Shopify is responsible for responding to requests to exercise your rights. This does not remove our responsibility for processing for which Fire House Bites is the controller.

You can learn more about Shopify’s use of personal information and your rights in the Shopify Consumer Privacy Policy. Depending on where you live, you may exercise certain rights through the Shopify Privacy Portal.

Third party websites and links

The Services may provide links to websites or other online platforms operated by third parties. If you follow a link to a site we do not control, review its privacy and security policies and other terms.

We do not control the privacy or security practices of independent third-party websites or the accuracy, completeness or reliability of their content. This does not limit our responsibility for processing or disclosures for which we are legally responsible.

Information you provide in public or semi-public spaces, including third-party social networking platforms, may be visible to other users and used by them in ways we do not control. Including a link does not, by itself, imply endorsement of the platform, its content or its operator.

Children’s data

The Services are not intended to be used by children, and we do not knowingly collect personal information about children under the age of majority in their jurisdiction. A parent or guardian may request deletion of personal information their child has provided to us.

As of the date of this Privacy Policy, we do not have actual knowledge that we “share” or “sell”, as those terms are defined in applicable law, personal information of individuals under 16 years of age.

Security and retention of your information

No security measures are completely impenetrable, and we cannot guarantee perfect security. Information sent to us may not be secure while in transit. Please avoid using unsecured channels to communicate sensitive or confidential information. These limitations do not remove our obligations under applicable data protection law.

How long we retain personal information depends on factors such as whether we need it to maintain your account, provide the Services, comply with legal obligations, resolve disputes or enforce applicable contracts and policies.

Your rights and choices

Depending on where you live, you may have some or all of the following rights. Some rights apply only in certain circumstances and are subject to exceptions permitted by law:

• Access. You may have the right to request access to personal information we hold about you.
• Deletion. You may have the right to request deletion of personal information we maintain about you.
• Correction. You may have the right to request correction of inaccurate personal information.
• Portability. In certain circumstances, you may have the right to receive a copy of your personal information and request its transfer to another organisation.
• Communication preferences. You can opt out of promotional emails by using the unsubscribe option in those emails. We may still send non-promotional communications, including messages about your account or orders.

If you live in the UK or European Economic Area, you may also exercise the following rights, subject to applicable legal conditions and exceptions:

• Objection and restriction. You may have the right to object to processing or ask us to restrict it for certain purposes.
• Withdrawal of consent. Where processing relies on consent, you can withdraw it. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

You have the right to object to the use of your personal information for direct marketing at any time.

Privacy-rights requests may be submitted to Fire House Bites. Where relevant privacy controls are available within the Services, you may also use those controls. Rights relating to processing for which Shopify is independently responsible may be exercised through the Shopify Privacy Portal.

We will not discriminate against you for exercising your rights. We may need to verify your identity before processing a request, as permitted or required by law. Where applicable law allows an authorised agent to act for you, we may require proof of that authority and may need you to verify your identity directly with us. We will respond within the period required by applicable law.

Complaints

You may raise concerns about our handling of personal information with Fire House Bites. Depending on where you live, you may also have the right to appeal a decision on a privacy request or lodge a complaint with your local data protection authority.

In the UK, you can complain to the Information Commissioner’s Office. For the European Economic Area, the European Data Protection Board directory lists the relevant supervisory authorities.

International transfers

We may transfer, store and process personal information outside the country where you live.

If we transfer personal information out of the European Economic Area or the United Kingdom, we rely on recognised transfer mechanisms where required. These may include the European Commission’s Standard Contractual Clauses or applicable UK-approved contractual safeguards, unless the transfer is covered by an applicable adequacy decision. You may request information about the safeguards relevant to your personal information.

Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or for operational, legal or regulatory reasons. We will post the revised policy on this website, update the “Last updated” date and provide any notice required by applicable law.