Privacy Policy


 

Sophie's Boutique operates this store and website, including all related information, content, features, tools, products, and services, to provide you with a carefully curated shopping experience (the “Services”). Sophie's Boutique is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, make a purchase or other transaction using the Services, or otherwise communicate with us. In the event of any conflict between our Terms of Service and this Privacy Policy, this Privacy Policy governs with respect to the collection, processing, and disclosure of your personal information. By using the Services, you acknowledge that you have read this Privacy Policy and understand how we collect, use, and share your information.

1. Applicable Law

We collect, hold, and use personal information in accordance with the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), and other applicable privacy laws (such as the EU General Data Protection Regulation (GDPR), if relevant).

For more information about privacy rights in California, you can also visit the California Privacy Protection Agency (CPPA) at https://cppa.ca.gov.

2. Personal Information We Collect or Process

“Personal information” means information that identifies or can reasonably be linked to you. Anonymized or pseudonymized data that cannot identify you is not included. Depending on how you interact with our Services and applicable laws, we may collect or process the following categories:

  • Contact details: name, billing address, shipping address, phone number, email.

  • Financial information: payment card and account numbers, transaction details, payment confirmations.

  • Account information: username, password, security questions, preferences, and settings.

  • Transaction information: items viewed, cart activity, wish list, purchases, returns, cancellations.

  • Communications: messages you send us (e.g., support inquiries).

  • Device & usage information: IP address, browser type, network connection, unique identifiers, and how you navigate and interact with the Services.

3. Sources of Personal Information

We may obtain your personal information from:

  • Directly from you: when you create an account, place an order, contact us, or otherwise provide information.

  • Automatically: via cookies and similar technologies when you visit or use our website and apps.

  • Third parties: our service providers (e.g., Shopify, payment processors, logistics partners, data analytics), marketing and advertising partners, and other external parties.

4. How We Use Your Personal Information

Depending on your interaction with us, we may use your personal information for:

  • Providing & improving the Services

    • Processing your orders, payments, shipping, and returns.

    • Creating and managing your account and preferences.

    • Sending order and delivery notifications.

    • Personalizing your shopping experience (e.g., product recommendations).

  • Marketing & promotion

    • Sending newsletters, offers, and advertising via email, SMS, or post.

    • Displaying targeted ads on our site and elsewhere, based on your past purchases and site activity.

  • Security & fraud prevention

    • Authenticating accounts, detecting and investigating suspicious activity.

    • Ensuring a secure shopping and payment environment.

  • Customer support

    • Responding to inquiries and providing assistance via email or other channels.

  • Legal compliance & enforcement

    • Complying with applicable laws, regulatory requests, and court orders.

    • Enforcing our terms, policies, and protecting our rights.

5. Data Retention

We retain your personal information no longer than necessary for the purposes set out in this policy, unless a longer retention period is required by law. Examples:

  • Order records & invoices: up to 7 years (for tax and compliance reasons).

  • Marketing preferences: until you withdraw your consent.

6. Data Breach Notification

In the event of a data breach that could cause significant risk, we will notify affected individuals as required by applicable laws, and take reasonable steps to reduce any harm.

7. International Transfers

Your data may be transferred to and processed in countries outside the United States. We take reasonable steps to ensure that such recipients maintain a level of protection consistent with applicable privacy laws (e.g., through contractual safeguards or other legal mechanisms).

8. Your Rights

Depending on where you reside, you may exercise the following rights at no cost unless otherwise permitted by law:

  • Access: request copies of the personal information we hold about you.

  • Correction: ask us to correct inaccurate or incomplete data.

  • Deletion: request deletion of your personal information.

  • Portability: request transfer of your data to another service.

  • Restriction or objection: to certain processing activities.

  • Withdraw consent: without affecting the lawfulness of prior processing.

  • Opt out: of the “sale” or “sharing” of your personal information for targeted advertising (as defined under CCPA/CPRA).

To exercise your rights, please contact us at:
📧 Email: info@sophies-boutique.com
We will respond within the timeframes required by applicable law (in California, typically within 45 days).

9. Complaints & Enforcement

If you believe we have breached your privacy rights, you may lodge a complaint with us at info@sophiescalifornia.com or, if you are a California resident, with the California Privacy Protection Agency (CPPA).

We will not discriminate against you for exercising your rights.

10. Children’s Data

We do not knowingly collect personal information from children under 16 without parental or guardian consent. If you believe we have collected data from a child in breach of this policy, please contact us at the email above.

11. Changes to This Policy

We may update this Privacy Policy for operational, legal, or technical reasons. Any changes will be reflected by updating the “Last updated” date above and, where required by law, notifying you.