Privacy policy
Last updated: September 16, 2026
Brainrot Up is a trade name operated by Mediawoo. This Privacy Policy describes how we collect, use, disclose, and otherwise process personal information when you visit or use our website, make a purchase, communicate with us, or otherwise interact with our services (collectively, the "Services").
Our online store is hosted by Shopify, which provides the ecommerce platform that enables us to offer the Services to you.
If there is a conflict between our Terms of Service and this Privacy Policy regarding the collection, use, or disclosure of personal information, this Privacy Policy will apply to that processing.
By using the Services, you acknowledge that you have received this Privacy Policy and understand how personal information is handled as described below.
PERSONAL INFORMATION WE COLLECT OR PROCESS
When we use the term "personal information," we mean information that identifies you or can reasonably be linked to you. It does not include information that has been anonymized or de-identified so that it can no longer reasonably identify you.
Depending on how you interact with the Services, we may collect or process the following categories of personal information:
- Contact information, including your name, email address, phone number, billing address, and shipping address.
- Order and transaction information, including products viewed or purchased, items placed in your cart or wishlist where available, order history, returns, cancellations, transaction amounts, and related order information.
- Payment information, including billing information, payment method, transaction identifiers, and payment confirmation. Payment card information may be processed directly by Shopify or other payment service providers.
- Account information, including account identifiers, login information, preferences, and account settings.
- Communications, including information you provide when contacting us about an order, customer support request, complaint, or other inquiry.
- Device and technical information, including your IP address, browser type, device information, network information, cookie identifiers, and similar technical information.
- Usage information, including information about how you access, browse, and interact with the Services.
- Marketing and advertising information, including your marketing preferences and information relating to your interaction with advertisements or marketing communications, where applicable.
PERSONAL INFORMATION SOURCES
We may collect personal information:
- directly from you when you place an order, create an account, contact us, subscribe to marketing, or otherwise provide information to us;
- automatically when you access or use the Services, including through cookies and similar technologies;
- from Shopify and service providers that assist us with operating the Services;
- from payment, fulfillment, shipping, analytics, security, marketing, and other service providers where applicable; and
- from business partners or other third parties where permitted by applicable law.
HOW WE USE YOUR PERSONAL INFORMATION
Depending on how you interact with us, we may use personal information for the following purposes:
Providing the Services. We use personal information to process orders and payments, arrange production and fulfillment, ship products, manage accounts, provide order notifications, process customer service requests, and otherwise perform our obligations relating to your purchase.
Improving the Services. We may use information to understand how customers interact with our store, maintain and improve website functionality, analyze performance, and improve products and customer experience.
Marketing and Advertising. Where permitted by applicable law, we may use personal information to send promotional emails and display or facilitate advertising relating to our products and Services. Where applicable law requires consent, we will rely on consent before carrying out such processing.
Security and Fraud Prevention. We may use information to authenticate users, protect accounts and transactions, prevent fraud, investigate suspicious activity, maintain the security of the Services, and protect our customers and business.
Communicating with You. We use personal information to respond to inquiries, provide customer support, communicate about orders, and maintain our relationship with customers.
Legal and Compliance Purposes. We may use personal information to comply with legal, tax, accounting, regulatory, or reporting obligations; respond to valid legal requests; establish, exercise, or defend legal claims; and enforce our Terms and policies.
LEGAL BASES FOR PROCESSING
Where applicable data protection law requires us to identify a legal basis for processing personal information, we rely on one or more of the following:
- Performance of a contract: where processing is necessary to process your order, payment, delivery, account, customer service request, refund, or otherwise provide Services requested by you.
- Legitimate interests: where processing is necessary for our legitimate business interests, such as operating and improving the Services, preventing fraud, maintaining security, providing customer support, analyzing our business, and protecting our legal rights, provided those interests are not overridden by your rights and interests.
- Consent: where you have provided consent, including for certain marketing, advertising, cookies, or similar technologies where consent is required by applicable law.
- Legal obligations: where processing is necessary to comply with tax, accounting, regulatory, law enforcement, court, or other legal obligations.
Where processing is based on consent, you may withdraw your consent at any time, subject to applicable law. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
HOW WE DISCLOSE PERSONAL INFORMATION
We may disclose personal information where reasonably necessary for the purposes described in this Privacy Policy, including:
- to Shopify, which provides our ecommerce platform;
- to payment processors and financial service providers;
- to production, printing, fulfillment, shipping, and logistics providers in order to produce and deliver orders;
- to IT, hosting, security, analytics, customer support, and other service providers that assist us in operating our business;
- to marketing and advertising service providers where applicable and permitted by law;
- when you direct or consent to disclosure;
- to our affiliates, if applicable;
- in connection with a merger, acquisition, restructuring, financing, sale of assets, insolvency, or similar business transaction; and
- where necessary to comply with applicable law, legal process, regulatory requirements, enforce our rights, prevent fraud, or protect the rights and safety of us, our customers, or others.
Service providers may process personal information only to the extent necessary for the services they provide, subject to their respective roles and applicable law.
RELATIONSHIP WITH SHOPIFY
The Services are hosted by Shopify.
Shopify collects and processes certain information about your access to and use of the Services in order to provide and improve its services and our ecommerce functionality.
Information submitted through our store may be transmitted to Shopify and other service providers located in countries other than the country where you reside.
Depending on the Shopify features and settings enabled for our store, Shopify may also process certain information for analytics, security, personalization, advertising, or other purposes in accordance with Shopify's own privacy practices.
You can learn more by reviewing the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.
COOKIES AND SIMILAR TECHNOLOGIES
We and our service providers may use cookies and similar technologies to operate the Services, remember preferences, maintain security, understand website usage, improve performance, and, where permitted, support analytics and advertising.
Where required by applicable law, non-essential cookies or similar technologies will be used only after obtaining the required consent.
You may be able to manage certain privacy and cookie preferences through the privacy controls provided on our website or through your browser settings.
Blocking certain cookies may affect the functionality of parts of the Services.
TARGETED ADVERTISING AND DATA SHARING CHOICES
Depending on where you reside and the features enabled on our store, applicable law may give you the right to opt out of certain uses of personal information for targeted advertising or activities legally defined as the "sale" or "sharing" of personal information.
Where available, you can exercise these choices through our Data Sharing Opt-Out page.
If your browser sends a recognized Global Privacy Control signal, we will process that signal where required by applicable law and where supported by our ecommerce platform and privacy settings.
THIRD-PARTY WEBSITES AND SERVICES
The Services may contain links to websites, applications, social media platforms, or other services operated by third parties.
We do not control the privacy or security practices of independent third parties. If you leave our Services or interact with a third-party platform, the applicable third party's privacy policy and terms will govern its handling of your information.
The inclusion of a third-party link does not by itself constitute an endorsement of that third party.
CHILDREN'S DATA
The Services are not directed to children for the purpose of collecting personal information from them.
We do not knowingly collect personal information from children in violation of applicable law.
If you are a parent or legal guardian and believe that a child has provided personal information to us in circumstances prohibited by applicable law, please contact us at info@brainrotup.com.
Where required by applicable law, we will take reasonable steps to delete such information.
We do not knowingly sell or share personal information of children where prohibited by applicable law.
SECURITY
We use reasonable administrative, technical, and organizational measures intended to protect personal information.
However, no method of transmission over the internet, electronic storage, or security system is completely secure. We therefore cannot guarantee absolute security.
Please do not send sensitive information to us through insecure communication channels.
DATA RETENTION
We retain personal information for as long as reasonably necessary for the purposes for which it was collected, including providing the Services, maintaining business and transaction records, complying with legal, tax and accounting obligations, resolving disputes, preventing fraud, and enforcing our agreements.
The applicable retention period may vary depending on the type of information, the nature of our relationship with you, legal requirements, and legitimate business needs.
When personal information is no longer required, we may delete, anonymize, or otherwise dispose of it in accordance with applicable law.
YOUR RIGHTS AND CHOICES
Depending on where you reside and which privacy laws apply, you may have some or all of the following rights:
- Right to Access or Know: the right to request information about personal information we process about you.
- Right to Correction: the right to request correction of inaccurate personal information.
- Right to Deletion: the right to request deletion of certain personal information, subject to applicable exceptions.
- Right to Data Portability: the right, in certain circumstances, to receive personal information in a portable format.
- Right to Object: the right, where applicable, to object to certain processing.
- Right to Restrict Processing: the right, where applicable, to request restriction of certain processing.
- Right to Withdraw Consent: where processing is based on your consent, the right to withdraw that consent.
- Right to Opt Out of Targeted Advertising, Sale, or Sharing: where provided by applicable law.
These rights are not absolute and may be subject to legal exceptions or limitations.
To exercise a privacy right, contact us at info@brainrotup.com or use the privacy controls available through the Services where applicable.
We may need to verify your identity before completing a request where permitted or required by law.
Where applicable law permits the use of an authorized agent, we may require reasonable proof that the agent is authorized to act on your behalf.
We will not unlawfully discriminate against you for exercising a privacy right.
MARKETING COMMUNICATIONS
If you receive promotional emails from us, you may unsubscribe at any time by using the unsubscribe link provided in the email.
After unsubscribing from promotional communications, we may still send transactional or service-related communications, including order confirmations, shipping notices, security messages, and responses to customer support requests.
INTERNATIONAL DATA TRANSFERS
Because we use service providers that may operate in multiple countries, personal information may be transferred to, stored in, or processed in countries other than the country in which you reside.
Where applicable law requires safeguards for international transfers of personal information, we use legally recognized transfer mechanisms where applicable, such as adequacy decisions, contractual safeguards including Standard Contractual Clauses, or other mechanisms permitted by applicable law.
COMPLAINTS
If you have a concern about how we handle personal information, please contact us first at info@brainrotup.com so that we can review your concern.
Depending on where you live and the law that applies, you may also have the right to lodge a complaint with an applicable privacy or data protection authority.
Where the GDPR applies, you may have the right to lodge a complaint with a competent supervisory authority, including the supervisory authority in the country where you live, work, or where an alleged infringement occurred.
CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes to our practices, Services, technology, legal requirements, or other operational reasons.
When we update this Privacy Policy, we will update the "Last updated" date above and provide any additional notice required by applicable law.
CONTACT
If you have questions about this Privacy Policy, our privacy practices, or would like to exercise a privacy right available to you, please contact us:
Data Controller: Mediawoo, trading as Brainrot Up
Email: info@brainrotup.com
Address: Uriekstes 1, Riga, LV-1005, Latvia
For purposes of applicable data protection laws, Mediawoo, trading as Brainrot Up, is the controller of personal information processed by us, except where another party is identified as an independent controller under applicable law.