Trust & Privacy
This page is maintained by Daily Finds to answer common security and privacy questions about our store. It describes the controls and practices we have in place today.
Secure checkout
All payments are processed through Shopify's PCI-compliant platform. Your card details are encrypted via SSL and never stored on our servers.
Shipping & fulfillment
Most orders ship within 1–2 business days. You receive a tracking link the moment your order leaves the warehouse. Standard delivery is 3–7 business days within the US.
Returns & refunds
Not satisfied? Return any item within 30 days of delivery for a full refund. Items should be unused and in original packaging. Refunds are processed within 5–7 business days after we receive the return.
Cookies & analytics
We use minimal cookies to keep your cart working and to understand how visitors use the site. We do not sell your browsing data to third parties. You can clear cookies at any time through your browser settings.
Newsletter & marketing
When you subscribe to our newsletter, we store your email address to send you deals and restock alerts. You can unsubscribe at any time via the link in every email. We do not share your email with partners for marketing.
Platform & hosting
Daily Finds is built on Lovable and backed by Shopify for commerce. Product data, reviews, and subscriber emails are stored securely. We apply industry-standard access controls and keep dependencies up to date.
Subprocessors
We use the following third-party services to operate the store. Each handles a defined slice of the experience under their own security and privacy commitments.
- Shopify — product catalog, checkout, and payment processing.
- Lovable Cloud — application hosting, database, and authentication.
- Cloudflare — content delivery and edge security for our domain.
This list reflects current subprocessors. If it changes materially, we will update this page.
Compliance posture
Card payments are handled entirely by Shopify, which is certified PCI-DSS Level 1 — we never see or store full card numbers. We aim to handle personal data in line with GDPR and CCPA principles (lawful basis, minimization, access, and deletion on request). Daily Finds itself does not hold an independent SOC 2 or ISO 27001 certification.
Data Processing Agreement (DPA)
Business customers who need a signed DPA can request one by emailing privacy@shopdailyfinds.co. We typically respond within two business days.
Questions or concerns?
For privacy, data, or security questions, email privacy@shopdailyfinds.co. To report a suspected vulnerability, use the same address with subject line "Security report" — we acknowledge within one business day.
This page describes Daily Finds' own practices and the platform capabilities we rely on. It is not an independent security certification, audit report, or legal agreement. Security and privacy are a shared responsibility: we maintain the store, the platform provides infrastructure, and you control your device and browser settings.