This placeholder policy must be reviewed by your legal counsel before launch. It should describe what personal data you collect (order, payment, delivery and support data), why you collect it, how long you keep it, who you share it with (payment providers, logistics partners, email service) and how customers can exercise their GDPR and CCPA rights.