Privacy policy

Last updated: October 4, 2026

Privacy Policy

Sunrise Cookies, Inc., doing business as Sunrise Cookies (“we,” “us,” or “our”), operates https://sunrisecookies.com, our Shopify-powered store, and Blazy, our application for connecting and managing authorized business and advertising assets (collectively, the “Services”).

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit our website, make a purchase, communicate with us, or use our application and connected integrations.

If this Privacy Policy conflicts with our Terms of Service, this Privacy Policy controls regarding the collection, processing, and disclosure of personal information. Using the Services does not replace any consent required by applicable law.

1. Personal Information We Collect

“Personal information” means information that identifies or can reasonably be linked to a person. It does not include information that has been properly anonymized or de-identified under applicable law.

Depending on how you interact with the Services, we collect or process the following information:

  • Contact information: Name, email address, telephone number, business name, billing address, and shipping address.
  • Account information: Account identifiers, login or authentication information, preferences, and settings.
  • Transaction information: Products you view, add to your cart or wishlist, purchase, return, exchange, or cancel; order history; payment confirmations; and related billing information.
  • Payment information: Payment methods and transaction details. Shopify and payment providers process payment-card and financial account information; we receive the information needed to administer purchases.
  • Communications and uploaded content: Customer support messages, reviews, corporate-order inquiries, logos, artwork, files, and other information you submit.
  • Device and usage information: IP address, browser and device type, operating system, network information, referral URLs, pages and features used, interactions, timestamps, cookie identifiers, approximate location inferred from IP address, and diagnostic logs.
  • Inferences: Preferences or interests inferred from your interactions, where permitted by applicable law.

Information from Meta and Connected Platforms

When you authorize Blazy to connect to Meta, we receive information within the permissions you grant and the business assets you authorize. This may include:

  • Meta account identifiers and permitted profile or contact information.
  • Business portfolio, ad account, product catalog, commerce account, Facebook Page, and connected Instagram account identifiers, names, and access information.
  • Campaigns, ad sets, ads, creative assets, targeting settings, budgets, delivery status, and performance metrics, including impressions, clicks, spend, and conversions.
  • Access tokens, granted permissions, and connection details needed to maintain the integration.

If you connect other supported platforms, we receive the information needed for the functions you authorize, subject to the permissions you grant and those platforms’ terms.

2. Sources of Personal Information

We collect information:

  • Directly from you, when you place an order, create an account, subscribe, contact us, upload content, or use the Services.
  • Automatically, through cookies, similar technologies, and technical logs.
  • From service providers, including Shopify, payment processors, hosting providers, fulfillment providers, and security services.
  • From authorized integrations and other partners, including Meta and other platforms you choose to connect.

3. How We Use Personal Information

We use personal information to:

  • Provide, administer, personalize, and improve the Services.
  • Process payments and orders, arrange shipping or pickup, and administer returns, exchanges, and customer support.
  • Maintain accounts, authenticate users, remember preferences, and provide account and order notifications.
  • Handle corporate orders, including logo artwork and order specifications.
  • Connect authorized business assets and perform requested advertising functions, including managing campaigns and displaying performance reports where available.
  • Maintain integration access, diagnose errors, and improve reliability.
  • Send receipts, service notices, and account updates.
  • Send promotional communications and display relevant advertising where permitted, subject to your preferences and any required consent.
  • Detect and prevent fraud, abuse, security threats, and unauthorized access.
  • Comply with legal obligations, maintain necessary records, resolve disputes, and enforce agreements.

We use information received through platform APIs only for disclosed, authorized purposes and as permitted by the applicable platform terms. We do not sell Meta Platform Data or disclose it for an unrelated third party’s independent marketing purposes.

Where European or UK data protection law applies, our legal bases include performance of a contract, legitimate interests in proportionate service administration and security, compliance with legal obligations, and consent where required. You may withdraw consent without affecting the lawfulness of earlier processing.

4. Advertiser Customer Data

When an advertiser uses Blazy to process personal information on its behalf, the advertiser determines the purposes of that processing and is responsible for its privacy notices and required permissions.

We process that information according to the advertiser’s instructions, our agreement, applicable law, and platform requirements.

If an advertiser supplied your information, contact that advertiser to exercise your rights. You may also contact us, and we will help route or address your request as appropriate.

5. How We Disclose Personal Information

We disclose information where needed to:

  • Shopify and service providers supporting payments, hosting, storage, fulfillment, shipping, customer support, communications, analytics, and security.
  • Advertising and marketing partners to measure campaigns and provide relevant advertising, subject to applicable consent and opt-out requirements.
  • Meta and other authorized integrations to perform the functions you request.
  • Authorized business workspace members or administrators, consistent with their access permissions.
  • Affiliates, where applicable and necessary for the purposes described in this policy.
  • Authorities, advisers, or other parties when reasonably necessary to comply with law or valid legal process, investigate fraud, or protect rights and safety.
  • Parties involved in a business transaction, such as a merger, acquisition, financing, restructuring, bankruptcy, or sale of assets, subject to appropriate safeguards and restrictions applicable to platform data.

We also disclose information at your direction or with your consent, including through social media features or connected services.

6. Our Relationship with Shopify

Shopify hosts our storefront and processes information to operate and improve commerce services.

Depending on the features we enable and your interactions with Shopify, Shopify may also process personal information for its own purposes, including personalization and advertising across merchants and Shopify services. Shopify is responsible for responding to requests concerning processing for which it acts independently.

For details, visit the Shopify Consumer Privacy Policy. You can manage applicable rights and choices concerning Shopify’s processing through the Shopify Privacy Portal.

7. Cookies, Analytics, and Advertising

We use cookies and similar technologies to maintain sessions, remember preferences, support shopping functionality, secure the Services, and understand their use.

You can manage cookies through your browser and through privacy controls available on the Services. Blocking essential cookies may affect functionality. Where required, we obtain consent before using nonessential cookies or similar technologies.

We use Meta Pixel and Conversions API to measure advertising, attribute purchases and other actions to advertisements, and support relevant advertising. Where enabled, we also use comparable technologies from Google, TikTok, or other advertising platforms.

Depending on the technology and configuration, information disclosed may include device and cookie identifiers, IP addresses, browsing activity, purchase events, and contact information in hashed form. Hashing does not necessarily make information anonymous.

These disclosures may constitute “sale,” “sharing,” or “targeted advertising” under applicable privacy laws. To exercise applicable opt-out rights, use the privacy controls available on the Services or contact sunrisecookies@sunrisecookies.com.

We honor legally required opt-out preference signals, including Global Privacy Control, where applicable. Where supported and required, an identifiable signal may also be applied to an associated account. Learn more at Global Privacy Control. We do not otherwise respond to browser “Do Not Track” signals.

8. Third-Party Websites and Public Content

The Services may link to websites or platforms operated by third parties. Their privacy and security practices are governed by their own policies.

Information you post publicly, including reviews or social media content, may be visible to others. Avoid posting sensitive information in public areas. Linking to a third-party service does not by itself constitute endorsement.

9. Security and Retention

We use reasonable technical and organizational measures to protect personal information. No transmission or storage method is completely secure. Do not send passwords, access tokens, or full payment-card details through ordinary email or other unsecured channels.

We retain information only as long as necessary for the purposes described here, considering account and integration duration, order administration, legal recordkeeping obligations, security needs, dispute resolution, and contractual requirements.

Platform data is subject to any additional retention and deletion restrictions imposed by the relevant platform.

When information is no longer needed, we delete or de-identify it where permitted. Limited records may remain where retention is required or permitted by law or platform terms. Residual backup copies remain protected and are removed according to our backup retention cycle.

10. Requesting Data Deletion

To request deletion of your account or personal information, including information obtained through Blazy, email sunrisecookies@sunrisecookies.com with the subject “Data Deletion Request.”

Include:

  • The email address associated with your account.
  • The application or store you used.
  • Enough information to identify the relevant account or business.

Do not include passwords, access tokens, or full payment-card details. We may request limited additional information to verify your identity or authority.

We will review your request, delete information covered by the request unless a permitted exception applies, and respond within applicable legal and platform deadlines. If we retain limited information, we will explain the reason where permitted and restrict its use accordingly.

You may also revoke Blazy’s access through your Meta account’s app or business integration settings. Revoking access stops further authorized access through that connection but does not necessarily delete previously stored information.

Deleting information from our systems does not automatically delete information independently held by Shopify, Meta, another platform, or an advertiser.

11. Your Privacy Rights and Choices

Depending on your location and applicable law, you may have rights to:

  • Access or obtain information about your personal information.
  • Correct inaccurate information.
  • Request deletion.
  • Receive a portable copy or request transfer in applicable circumstances.
  • Restrict or object to processing.
  • Withdraw consent.
  • Opt out of sale, sharing, targeted advertising, or certain profiling.
  • Appeal a denied request or complain to a privacy regulator.

These rights are subject to applicable conditions and exceptions.

Contact sunrisecookies@sunrisecookies.com to submit a request, complaint, or appeal. We may verify your identity or authority before responding. An authorized agent may act on your behalf, subject to appropriate authorization and verification.

We will respond within the period required by applicable law and will not unlawfully discriminate against you for exercising your rights.

You may unsubscribe from promotional emails using their unsubscribe link. Essential service messages, including receipts and order updates, may still be sent.

12. International Processing

We and our providers may transfer, store, and process personal information in the United States and other countries whose privacy laws may differ from those in your location.

Where required, we use recognized transfer safeguards, including applicable European Commission Standard Contractual Clauses or UK-approved transfer mechanisms, unless another permitted basis applies. Contact us for information about applicable safeguards.

13. Children’s Information

The Services are not directed to children under 18, and we do not knowingly collect their personal information.

If you believe a child has provided personal information, contact us so we can investigate and take appropriate action, including deletion where required.

As of the date of this policy, we do not have actual knowledge that we sell or share personal information of individuals under 16 as those terms are defined by applicable privacy laws.

14. Changes to This Policy

We may update this policy to reflect changes in our Services, practices, or legal requirements. We will post the revised policy, update the date above, and provide additional notice or obtain consent where required.

15. Contact Us

Business: Sunrise Cookies, Inc., doing business as Sunrise Cookies
Application: Blazy
Website: https://sunrisecookies.com
Privacy, support, and deletion requests: sunrisecookies@sunrisecookies.com
Mailing address and pickup location: 600 D Street, South Charleston, WV 25303, United States