Privacy policy

Last updated: October 15, 2026

In short: we only get your personal details when you place an order, and we use them to deliver your order and support you. Our store runs on Shopify, which uses cookies for the cart, checkout and basic store statistics. We don't use advertising trackers, and we never sell your data.

Who we are

This website and store are run by:

TapReview
Email: tap2reviewsupport@gmail.com

We are the data controller (the party responsible for your personal data). For privacy questions or requests, email tap2reviewsupport@gmail.com.

What we collect

When you browse this website

Our store is hosted by Shopify. When you visit, Shopify automatically receives technical data needed to show the store and keep it secure, such as your IP address, browser and device type, pages viewed and time of visit. Shopify also sets cookies for the cart and checkout and, where you allow it, for basic store statistics. See our cookie policy. We don't use advertising pixels or third-party trackers.

When you place an order

Checkout is provided by Shopify. When you order, we receive:

  • Your name, email address and, if you give it, phone number
  • Shipping and billing address
  • What you ordered, the price paid and the order date
  • Messages you send us

Payments are processed by Shopify and its payment providers. We never see or store your full card number.

Marketing emails

We only send marketing emails if you tick the opt-in box at checkout. Every email has an unsubscribe link, and you can also email us to stop them.

Why we use it

Purpose Data Legal basis (EU/UK)
Process, ship and track your order Order and contact details Performing our contract with you
Customer support, refunds and replacements Order details, messages Performing our contract with you
Tax, accounting and legal obligations Order and payment records Legal obligation
Preventing fraud and keeping the site secure Order details, visit data Legitimate interests
Marketing emails Email address Your consent, which you can withdraw at any time

We don't use your data for automated decisions that significantly affect you.

Who we share it with

  • Shopify, which runs our store and checkout (Shopify's privacy policy).
  • Payment providers that process your payment.
  • Our fulfillment partner, a manufacturer in China that ships your order. It receives your name, shipping address, phone number and what you ordered.
  • Shipping carriers, to deliver your package.
  • Authorities, accountants or lawyers, when the law requires it or to protect our legal rights.

We don't sell your personal information, and we don't share it for cross-context behavioral advertising.

International transfers

We are based in Israel. Your data is processed there, in the United States (Shopify) and in China (our fulfillment partner). Where the law requires it, we use appropriate safeguards for these transfers, such as standard contractual clauses.

How long we keep it

  • Order and payment records: as long as tax and accounting law requires, generally 7 years.
  • Support emails: up to 2 years after the conversation ends.
  • Marketing email address: until you unsubscribe.
  • Visit data and cookies: held by Shopify as described in its privacy and cookie policies.

Your rights

Depending on where you live, you can ask us to:

  • Tell you what personal data we hold about you and give you a copy
  • Correct inaccurate data
  • Delete your data, unless we must keep it by law
  • Restrict or object to how we use it
  • Send your data to you or another company in a portable format
  • Withdraw consent you gave, such as for marketing emails

California residents have the right to know, delete and correct their personal information, and to opt out of its sale or sharing. We don't sell or share it, and we won't treat you differently for using your rights.

To make a request, email tap2reviewsupport@gmail.com. We may need to verify your identity. We reply within 30 days. You can also complain to your local data protection authority. In Israel that is the Privacy Protection Authority. In the EU and UK it is your national data protection authority.

Security

The website is served over an encrypted connection, and payment is handled by PCI-compliant providers. No system is completely secure, so if we learn of a breach that affects you, we'll tell you as the law requires.

Children

Our products are for businesses, and this site isn't aimed at children under 16. We don't knowingly collect their data.

Changes to this policy

If we change how we use personal data, we'll update this page and the date at the top. For significant changes, we'll tell customers by email.