Privacy Policy
Privacy Policy
This website (the "Site") is operated by Chicshades, LLC. Throughout the Site, "we," "us," and "our" refer to Chicshades. This Privacy Policy is designed to better serve those who are concerned about how their Personally Identifiable Information (PII) is used online. Under U.S. privacy and information security laws, PII is information that can be used alone or in combination with other information to identify, contact, or locate a single person, or to identify an individual in context. Please read our Privacy Policy carefully to understand how we collect, use, store, protect, process, disclose, and otherwise handle your Personally Identifiable Information when you visit or shop on the Site, in accordance with the Site and the GDPR.
Subject:
What Data Do We Collect and How Do We Collect Your Data?
How Do We Use Your Personal Information?
How Do We Share Your Personal Information?
How Do We Store Your Data?
Do Not Track
What are your data protection rights?
What if you are a California resident?
What is our Cookie Policy? Fair Information Practices
COPPA (Children's Online Privacy Protection Act)
Privacy Policies of Other Websites
Embedded Content from Other Websites
Changes to this Privacy Policy
How to Contact Us?
What Data Do We Collect and How Do We Collect Your Data?
When you visit this website, we collect certain information about your device, your interactions with the website, and to process your purchases. We also collect additional information if you contact us for customer support, complete an order, create an account, sign up for text/email marketing, or provide us with feedback. In this Privacy Policy, we refer to any information that can uniquely identify an individual (including the information listed below) as "Personal Information" or "Personally Identifiable Information." Please see the list below for more information about what Personal Information we collect, how we collect it, and why we collect it.
Device Information
Examples of Personal Information collected: web browser version, browser type, internet service provider, operating system, IP address, time zone, cookie information, websites or products you viewed, search terms, the website or search terms that referred you to this website, referring/exit pages, date/time stamp, and how you interacted with this website. Purpose of Collection: To accurately load the website for you, screen orders for potential risk or fraud, analyze website usage to improve and optimize our website, and evaluate the success of our marketing and advertising campaigns.
Source of Collection: This information is automatically collected when you visit our website using cookies, log files, web beacons, tags, or pixels. These items are defined below:
"Cookies" are data files stored on your device or computer that often include an anonymous unique identifier. For more information about cookies and how to disable them, please visit http://www.allaboutcookies.org.
"Log files" track actions taken on the website and collect data including your IP address, browser type, internet service provider, referring/exit pages, and date/time stamps.
"Web beacons," "tags," and "pixels" are electronic files used to record information about how you navigate the website.
Disclosure for Business Purposes: With our processors Shopify, Facebook, Google Analytics, Google Ads, Growave, Intelligems, PageFly, Rebuy, Shoutout, Zoho, Klaviyo, Searchanise, UserLoop, and LinkedIn. Order Information
Examples of Personal Information Collected: Name, billing address, shipping address, company, payment information (including credit card number, Shop Pay, Apple Pay, Google Pay, Bancontact, iDeal, Facebook Pay, PayPal, Amazon Pay, Affirm), email address, and phone number.
Purpose of Collection: To provide you with products or services to fulfill our contract, process your payment information, arrange shipping, and provide you with invoices and/or order confirmations, communicate with you, screen our orders for potential risk or fraud, and provide you with information or advertising related to our products or services, if consistent with the preferences you have shared with us.
Source of Collection: From you. Disclosure for a Business Purpose: Shared with our processors Shopify, Affirm, Avada, Bespoke Shipping, eBay (for eBay orders), CedCommerce (for eBay orders), Facebook (for Facebook orders), Growave (for loyalty points), ShipStation (for fulfillment purposes), Zoho, Zonos, Quickbooks (if applicable), Klaviyo, UserLoop, and Rebuy.
Customer Support Information
Examples of Personal Information Collected: Name, email address, phone number, order information, and other information voluntarily provided.
Purpose of Collection: Provide customer support.
Source of Collection: Collected from you.
Disclosure for a Business Purpose: Shared with our processors Shopify, Gmail, Growave, Klaviyo, and Zoho.
Email/SMS Marketing Information
Examples of Personal Information Collected: Name, email address, phone number, shopping history, previously purchased products.
Purpose of Collection: Provide you with information or advertising related to our products or services via email and text messages, and recommend other products we think you may find interesting.
Source of Collection: Collected from you. Disclosure for a Business Purpose: Shared with our processors Zoho, Shopify, and Klaviyo
Account Information
Examples of Personal Information Collected: Name, email address, website login credentials, phone number, date of birth (optional), photo (optional), and other information voluntarily provided
Purpose of Collection: To provide you with a centralized location for orders, easy login access, and a customizable profile that you can view when you ask questions or leave comments on the website
Source of Collection: Collected from you.
Disclosure for a Business Purpose: Shared with our processors Shopify, Growave, Klaviyo, and Zoho
Feedback Information
Examples of Personal Information Collected: Name, email address, and other information voluntarily provided
Purpose of Collection: To provide us with feedback so we can improve our products, website, and services, and to provide feedback and reviews to other customers searching for similar products
Source of Collection: Collected from you.
Disclosure for a Business Purpose: Shared with our processors Shopify, Growave, Klaviyo, UserLoop, and Zoho
How Do We Use Your Personal Information? We use your personal information to provide you with services, including selling products, processing payments, shipping and fulfilling orders, providing customer support, and keeping you informed of new products, services, and offers. We also use your personal information for statistical analysis, to optimize our products, website, and services, and to provide feedback and reviews to other customers.
Lawful Basis
Under the General Data Protection Regulation (“GDPR”), if you are a resident of the European Economic Area (“EEA”), the European Union (“EU”), or the United Kingdom (“UK”), we process your personal information based on the following lawful bases:
Your consent;
The performance of the contract between you and the Website;
Our legitimate interests, which do not override your fundamental rights and freedoms.
Automated Decision-Making
If you are a resident of the EEA, EU, or UK, you have the right to object to processing based solely on automated decision-making (including profiling) where that processing has legal effects concerning you or significantly affects you.
We do not use customer data to make fully automated decisions that have legal or other significant effects on you.
Our processor, Shopify, uses limited automated decision-making to prevent fraud that does not have legal or other significant effects on you.
Services that include automated decision-making elements include:
A temporary blacklist of IP addresses associated with repeated failed transactions. This blacklist will last for a few hours.
A temporary blacklist of credit cards associated with blacklisted IP addresses. This blacklist will last for a few days.
Email/SMS Marketing
We would like to send you information about our products and services we think may be of interest to you via email/SMS. These products and services include:
Email Marketing (if applicable): With your permission, we may send you emails about our store, new products, and other updates (checkout reminders, transaction updates, shipping updates, post-purchase updates, out-of-stock updates).
SMS Marketing (if applicable): With your permission, we may send you SMS messages about our store, new products, and other updates (checkout reminders, transaction updates, shipping updates, post-purchase updates, out-of-stock updates). We use webhooks to trigger our checkout reminder messaging system.
If you have consented to receiving marketing communications, you can opt out at any time. You have the right to prevent us from contacting you for marketing purposes at any time.
How do we share your personal information?
As described above, we share your personal information with service providers to help us provide our services and fulfill our contract with you. For example:
We use Shopify to power our online store. You can learn more about how Shopify uses your personal information here: https://www.shopify.com/legal/privacy
We may use credit reference agencies to prevent fraudulent purchases.
We may share your personal information to comply with applicable laws and regulations, respond to subpoenas, search warrants, or other lawful requests for information we receive, or otherwise protect our rights.
We use Quickbooks to issue invoices, quotes, and estimates to our customers, and for accounting purposes. You can learn more about how Quickbooks uses your personal information at intuit.com/privacy/.
We use Avada to invoice our customers. You can learn more about how Avada uses your personal information here: https://avada.io/privacy.html
We use Bespoke Shipping to set up custom shipping rates for our customers. You can learn more about how Bespoke Shipping uses your personal information here: https://parcelintelligence.com.au/cs/documentation/#/privacy
We use CedCommerce to integrate eBay orders with our website. You can learn more about how CedCommerce uses your personal information here: https://cedcommerce.com/privacy-policy
We use Growave for our membership program, review program, and wishlist program. You can learn more about how Growave uses your personal information here: https://growave.io/privacy-policy
We use Locksmith to restrict access to certain areas of our website. You can learn more about how Locksmith uses your personal information here: https://docs.uselocksmith.com/article/184-privacy-policy
We use Intelligems to analyze website usage to improve and optimize our website. You can learn more about how Intelligems uses your personal information here: https://www.intelligems.io/privacy-policy
We use Mechanic to print customized packing slips and send order-related emails to customers. You can learn more about how Mechanic uses your personal information here: https://learn.mechanic.dev/platform/policies/privacy
We use Klaviyo to send product and service information to interested customers via email and text messages. You can learn more about how Klaviyo uses your personal information by visiting the following link: https://www.klaviyo.com/legal/privacy
We use Rebuy to display customized upsell offers to customers after they make a purchase. You can learn more about how Rebuy uses your personal information here: https://www.rebuyengine.com/legal/privacy-notice
We use Searchanise to provide advanced collection pages and search functionality on our website. You can learn more about how Searchanise uses your personal information here: https://searchanise.io/privacy-policy/
We use ShipStation to ship and fulfill orders. You can learn more about how ShipStation uses your personal information here: https://www.shipstation.com/privacy-policy/
We use ShoutOut to run our affiliate program. You can learn more about how ShoutOut uses your personal information here: https://www.shoutout.global/privacy-policy.html
We use UserLoop to conduct feedback surveys on our website. You can learn more about how UserLoop uses your personal information here: https://userloop.io/privacy
We use TaxJar to file taxes for orders. You can learn more about how TaxJar uses your personal information by visiting the following link: https://www.taxjar.com/privacy
We use Zoho to email interested customers about our products and services, provide customer support, collect information through forms on our website, use it as our CRM system, and integrate with various applications. You can learn more about how Zoho uses your personal information here: https://www.zoho.com/privacy.html
We use Zonos to ship and process international orders. You can learn more about how Zonos uses your personal information here: https://docs.zonos.com/legal
We use GDPR/CCPA + Cookie Management to manage GDPR compliance for our website. You can learn more about how GDPR/CCPA + Cookie Management uses your personal information here: https://gdprcdn.b-cdn.net/pages/privacy_policy
Behavioral Advertising
We use your personal information to provide you with targeted advertising or marketing that we believe may be of interest to you. For example:
We use Google Analytics to understand how customers use the Site. You can learn more about how Google uses your personal information by visiting https://policies.google.com/privacy?hl=en. You can also opt out of Google Analytics by visiting https://tools.google.com/dlpage/gaoptout or by managing your cookie preferences.
We use Shopify Analytics to help us understand how customers use the Site. You can learn more about how Shopify uses your personal information by visiting https://www.shopify.com/legal/privacy. You can also opt out of Shopify Analytics by managing your cookie preferences.
We share information about your use of the Site, purchases, and interactions with our ads on other sites with our advertising partners, including Facebook, Google, and LinkedIn. We collect some of this information directly and share it with our advertising partners, and in some cases, through the use of cookies or other similar technologies (which, depending on your location, may require your consent). For more information about how targeted advertising works, you can visit the Network Advertising Initiative ("NAI") educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.
You can opt out of targeted advertising using the following links:
Facebook - https://www.facebook.com/settings/?tab=ads
Google - https://www.google.com/settings/ads/anonymous
LinkedIn - https://www.linkedin.com/help/linkedin/answer/a1342443/manage-your-advertising-preferences?lang=en
In addition, you can opt out of some of these services by visiting the Digital Advertising Alliance's opt-out portal (http://optout.aboutads.info/).
How do we store your data?
Your personal information will be initially processed in Ireland and then transferred outside of Europe for storage and further processing, including in Canada and the United States. For more information on how data transfers comply with GDPR, please refer to Shopify's GDPR whitepaper: https://help.shopify.com/en/manual/your-account/privacy/GDPR. HTTPS, encryption, multi-factor authentication, and salting/hashing passwords using bcrypt are just some of the security precautions we take to ensure the secure storage of personal information.
When you place an order through this website, we will retain your personal information unless you request that we delete it. For more information on your right to deletion, please refer to the "What are your data protection rights?" section below.
Do Not Track
Please note that because there is no consistent industry understanding on how to respond to "Do Not Track" signals, we do not alter our data collection and use practices when we detect such a signal from your browser.
What are your data protection rights?
We want to ensure that you are fully aware of all of your data protection rights. Each individual using this website has the following rights:
Right of Access – You have the right to request a copy of your personal data from us.
Right of Correction – You have the right to request that we correct or update any information you believe is inaccurate. You also have the right to request that we complete any information you believe is incomplete.
Right to Erasure – You have the right to request that we erase your personal data.
Right to Restrict Processing – You have the right to request that we restrict the processing of your personal data.
Right to Object to Processing – You have the right to object to our processing of your personal data.
Right to Data Portability – You have the right to request that we transfer the data we have collected to another organization, or directly to you.
If you make a request, we will respond to you within one month. If you would like to exercise any of these rights, please contact us using the contact information at the bottom of this Privacy Policy.
What if you are a California resident? Pursuant to the California Consumer Privacy Act of 2018 (“CCPA”), we collect the following categories of PII:
Identifiers, such as name and government-issued identifiers (e.g., Social Security number);
Personal information as defined by California privacy laws, such as contact and financial information;
Protected characteristics under California or federal law, such as age, gender, medical condition, and marital status;
Commercial information, such as transaction information and purchase history;
Internet or network activity information, such as browsing history and interactions with our websites;
Geolocation data, such as device location;
Audio, electronic, visual, and similar information, such as call and video recordings;
Professional or employment-related information, such as work history and previous employers;
Education information subject to the federal Family Educational Rights and Privacy Act, such as student records and directory information;
Draw inferences from any of the PII listed above to create a profile or summary about, for example, an individual’s preferences and characteristics.
We collect this PII directly from California residents themselves, as well as from joint marketing partners, public databases, demographic data providers, publications, professional organizations, social media platforms, people you connect with on social media platforms, caregivers, companies that help us screen and hire people for recruitment, and other third parties. For more information about our social media practices, see here.
We may use this PII to operate, manage, and maintain our business, provide our products and services, for our employment purposes, and otherwise achieve our business purposes and objectives. Our business purposes and objectives include, for example, developing, improving, repairing, and maintaining our products and services; personalizing, advertising, and marketing our products and services; conducting research, analytics, and data analysis; maintaining our facilities and infrastructure; implementing quality and safety assurance measures; performing risk and security controls and monitoring; detecting and preventing fraud; performing identity verification; performing accounting, auditing, and other internal functions, such as internal investigations; complying with laws, legal process, and internal policies; maintaining records; and exercising and defending legal claims.
We disclose the following PII to our affiliates and third parties (such as our service providers) for operational business purposes:
Identifiers, such as name and government-issued identifiers (e.g., Social Security number);
Personal information as defined by California safeguards laws, such as contact information and financial information;
Protected classifications under California or federal law, such as age, gender, medical condition, and marital status;
Commercial information, such as transaction information and purchase history;
Internet or network activity information, such as browsing history and interactions with our websites;
Geolocation data, such as device location;
Audio, electronic, visual, and similar information, such as call and video recordings;
Professional or employment-related information, such as work history and previous employers;
Education information subject to the federal Family Educational Rights and Privacy Act, such as student records and directory information;
Inferences drawn from any of the personal information listed above to create a profile or summary about, for example, an individual's preferences and characteristics;
We do not "sell" personal information for purposes of the CCPA. For purposes of this CCPA Notice, "sell" or "sale" means disclosing PII for money or other valuable consideration, but does not include, for example, the transfer of PII as an asset in connection with a merger, bankruptcy, or other disposition of all or a portion of our business.
If you are a California resident, you may request that we:
Disclose to you the following information for the 12 months preceding your request:
The categories of PII we collected about you and the categories of sources from which we collected such PII
The specific information we collected about you
The business or commercial purpose for collecting your PII
The categories of your PII we otherwise shared or disclosed and the categories of third parties with whom we shared or disclosed such PII
Delete PII we collected from you
To make a request for disclosure or deletion as described above, please contact us at Support@chicshades.shop. We may deny your request under certain exceptions, such as if disclosing the PII would adversely affect the rights and freedoms of other California residents.
You have the right to be free from unlawful discrimination for exercising your rights under the CCPA.
What is our Cookie Policy?
A cookie is a small amount of information downloaded to your computer or device when you visit our website. They collect standard internet log information, visitor behavior information, and help us remember you. We use several different types of cookies, including strictly necessary cookies, analytical and statistical cookies, marketing and retargeting cookies, functional cookies, and third-party cookies.
Strictly necessary cookies are necessary for the website to function and cannot be turned off. These cookies are only set in response to your actions (e.g., language, currency, login session, privacy preferences). You can set your browser to block these cookies, but this may affect the functioning of our website.
Analytical and statistical cookies allow us to measure visitor traffic and understand traffic sources by collecting information in datasets. They also help us understand which products and actions are more popular than others.
Marketing and retargeting cookies are typically set by our marketing and advertising partners. They may use them to build a profile of your interests and subsequently show you relevant ads. If you do not allow these cookies, you will not see ads targeted to your interests.
Functional cookies enable our website to provide additional functionality and personalization. These cookies may be set by us or by third-party service providers that we place on our pages. If you do not allow these cookies, the Services, or some of them, may not function properly.
The privacy policy for the applications related to third-party cookies can be found in the "How do we share your personal information?" section.
Cookies allow websites to improve your browsing experience by remembering your actions and preferences (such as login and region selection). This means you don't have to re-enter this information each time you return to the website or browse different pages. Cookies can also provide information about how users use the website, for example, whether they are first-time visitors or returning visitors.
We use this information to improve and customize your browsing experience, improve our website and marketing efforts, provide additional features and personal settings, and perform analytics and metrics about our visitors on this website and other media.
How long a cookie remains on your computer or mobile device depends on whether it is a "persistent" cookie or a "session" cookie. Session cookies last until you stop browsing, while persistent cookies last until they expire or are deleted. Most cookies we use are persistent and expire between 30 minutes and two years from the time they are downloaded to your device.
You can control, manage, and opt out of cookies in a variety of ways. Please note that deleting or blocking cookies may negatively impact your user experience and may render parts of our website inaccessible.
Most browsers automatically accept cookies, but you can choose whether to accept cookies through your browser controls (typically located in your browser's "Tools" or "Preferences" menu). For more information on how to modify your browser settings or how to block, manage, or filter cookies, please visit your browser's help files or a website such as www.allaboutcookies.org.
Also, please note that blocking cookies may not completely prevent us from sharing information with third parties, such as our advertising partners. To exercise your rights or opt out of having your information used by these third parties, please follow the instructions in the "Behavioral Advertising" section above.
Fair Information Practices
The Fair Information Practices Principles form the backbone of U.S. privacy law.The concepts contained in the Fair Information Practices Principles have played a significant role in the development of data protection laws around the world. Understanding the Fair Information Practices Principles and how they are implemented is crucial for complying with the various privacy laws that protect personal information.
To comply with the Fair Information Practices Principles, in the event of a data breach, we will take the following responsive actions:
We will notify you by email within 7 business days. We also agree to the Individual Remedies Principle, which provides that individuals have legally enforceable rights against data collectors and processors that fail to comply with the law. This principle not only provides individuals with enforceable rights against data users but also requires them to seek the right to seek legal action or prosecute violations by data processors in court or with government agencies.
COPPA (Children's Online Privacy Protection Act)
The Children's Online Privacy Protection Act (COPPA) gives parents control when it comes to the collection of personal information from children under the age of 13. The Federal Trade Commission, the U.S. consumer protection agency, enforces the COPPA Rule, which details the steps operators of websites and online services must take to protect children's privacy and safety online. We do not specifically target marketing to children under the age of 13 and do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at the address below to request deletion. If you are located in the EEA, EU, or UK and are a parent or guardian of a child under the age of majority in your state or province, and believe your child has provided us with personal information, please contact us at the address below to request deletion.
Privacy Policies of Other Websites
This website contains links to other websites. Our Privacy Policy applies only to this website. Therefore, if you click on a link to another website, you should read its privacy policy.
Embedded Content from Other Websites
This website contains embedded content (graphics, videos, etc.) from other websites that behaves just as if you were visiting that other website. If you have an account with those websites and are logged in to that website, those websites may collect your data, monitor your interactions, use third-party tracking, use cookies, and track your interaction with the embedded content. As stated above, our Privacy Policy applies only to this website. Therefore, if you view or click on embedded content from other websites, you should read their privacy policies.
Changes to Privacy Policy
We review our Privacy Policy regularly and post any updates on this page. These updates may reflect changes in our practices or for other operational, legal, or regulatory reasons. The date of the last update can be found at the bottom of this page.
How can I contact us?
If you have any questions or complaints about our Privacy Policy, our privacy practices, the data we hold about you, or if you would like to exercise any of your data protection rights, please feel free to contact us:
Email us at: Support@chicshades.shop
Call us: +1 415-586-8262