Your Information & Choices

Privacy Policy

Last updated: [MONTH DAY, YEAR]

Your privacy matters to us. This Privacy Policy explains what personal information [STORE LEGAL NAME], doing business as [STORE DISPLAY NAME], collects, why we use it, when we disclose it, how long we keep it, and the choices and rights available to you.

1. Scope and who we are

This Privacy Policy applies when you visit our website, shop through our online store, create an account, contact us, subscribe to communications, post a product review, or otherwise interact with us online.

[STORE LEGAL NAME], doing business as [STORE DISPLAY NAME] (“we,” “us,” or “our”), is responsible for the personal information described in this Policy. Our address is [BUSINESS ADDRESS].

Our website uses WordPress and WooCommerce to provide ecommerce functions. WooCommerce is store software; it is not the seller of our products. Other companies may process information for us as described below.

2. Personal information we collect

The information we collect depends on how you interact with the Store and which features you use. It may include:

  • Identity and contact information: name, billing and delivery address, email address, telephone number, and account username.
  • Order and transaction information: products viewed or purchased, cart contents, order number, discounts, taxes, shipping method, delivery status, returns, refunds, and purchase history.
  • Payment-related information: payment method, payment status, transaction identifiers, and limited payment details supplied by the payment processor. We generally do not receive or store full payment-card numbers.
  • Account information: login details in protected form, saved addresses, preferences, wishlist or saved items if enabled, and account activity.
  • Device and usage information: IP address, browser and device type, operating system, referring pages, pages viewed, clicks, session activity, approximate location derived from IP address, and diagnostic or security logs.
  • Communications: messages, customer-support requests, call or chat details, survey responses, and other information you choose to provide.
  • Marketing information: subscription status, communication preferences, engagement with emails or messages, and advertising interactions where used.
  • User content: product reviews, ratings, photographs, or other content you submit. Reviews may be publicly visible together with the display name you choose.
  • Fraud-prevention information: signals used to verify transactions, protect accounts, prevent abuse, and maintain website security.

Please do not send sensitive personal information that we have not specifically requested. If you provide another person’s information—for example, a recipient’s delivery address—you confirm that you are authorized to provide it for that purpose.

3. How we collect personal information

We collect personal information:

  • Directly from you when you place an order, create an account, submit a form or review, request support, enter a promotion, or subscribe to communications.
  • Automatically through cookies, pixels, server logs, and similar technologies when you use the website.
  • From service providers such as payment processors, fraud-prevention providers, shipping carriers, analytics providers, and marketing platforms.
  • From publicly available or permitted sources where allowed by law, such as public social-media interactions or information you direct another service to share with us.

4. How and why we use personal information

Purpose Examples Legal basis where required
Provide products and services Process payments and orders, arrange delivery or pickup, manage accounts, returns, and refunds Perform our contract with you
Communicate with you Send order updates, answer questions, and provide customer support Contract performance and legitimate interests
Operate and improve the Store Troubleshoot, analyze performance, improve navigation, and understand product demand Legitimate interests or consent where required
Protect customers and the Store Prevent fraud, secure accounts, enforce policies, and investigate misuse Legitimate interests and legal obligations
Marketing and personalization Send opted-in promotions, measure campaigns, and personalize content or advertising Consent or legitimate interests, depending on applicable law
Meet legal obligations Maintain tax and accounting records, respond to legal requests, and protect legal rights Legal obligation and legitimate interests

Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect processing already completed before consent was withdrawn. Where we rely on legitimate interests, we consider whether our interests are proportionate and consistent with your rights and reasonable expectations.

5. How we disclose personal information

We may disclose personal information only as reasonably necessary for the purposes described in this Policy, including to:

  • Website and infrastructure providers, including [WEB HOST], WordPress/WooCommerce service providers, database, backup, security, and technical-support providers.
  • Payment and fraud-prevention providers, including [PAYMENT PROCESSOR(S)], to authorize payments, process transactions, issue refunds, and prevent fraud.
  • Order fulfillment and delivery providers, including [SHIPPING CARRIER(S)], to pack, ship, track, and deliver orders.
  • Analytics providers, including [ANALYTICS PROVIDER(S) OR NONE], to understand website use and improve performance, subject to consent where required.
  • Communication and marketing providers, including [EMAIL/SMS PROVIDER(S) OR NONE], to deliver transactional messages and opted-in marketing.
  • Advertising platforms, including [ADVERTISING PLATFORM(S) OR NONE], when advertising or measurement technologies are enabled and permitted.
  • Professional advisers and authorities, such as accountants, lawyers, insurers, regulators, courts, law enforcement, or tax authorities where reasonably necessary or legally required.
  • Parties to a business transaction, such as a purchaser, investor, lender, or adviser involved in an actual or proposed merger, financing, sale, reorganization, or transfer of all or part of our business.

We require providers handling information for us to use it only for authorized purposes and to apply appropriate protections, subject to their role and applicable law.

Sale or sharing of personal information

We do not sell personal information in exchange for money. Some privacy laws may define certain disclosures through targeted advertising or cross-context behavioral advertising as “selling” or “sharing,” even when no money is exchanged. If we use those practices, you may exercise applicable opt-out rights through Your Privacy Choices or by contacting us. Please remove this paragraph and link if it does not accurately describe your website’s practices and legal obligations.

6. Payment processing

Payments are processed by [PAYMENT PROCESSOR(S)]. Payment providers receive the information required to authorize and process your transaction and may use it for fraud prevention, regulatory compliance, and other purposes described in their privacy notices.

Our Store generally receives confirmation, transaction identifiers, payment status, and limited payment-method details rather than your complete card number or bank credentials. Please review the privacy notice of the payment provider shown during checkout.

7. Cookies and similar technologies

Cookies are small files or identifiers stored on or accessed through your device. We and our providers may use:

  • Strictly necessary technologies for shopping-cart contents, checkout, customer sessions, login, security, fraud prevention, load balancing, and your privacy choices.
  • Preference technologies to remember settings and improve convenience.
  • Analytics technologies to measure traffic, website performance, and how visitors use the Store.
  • Advertising technologies to measure campaigns or deliver more relevant advertising, if we use these features.

Where required, optional technologies are used only after you provide consent. You can change available choices through [COOKIE CONSENT TOOL OR NONE], your browser settings, or the methods described in our Cookie Policy. Blocking necessary cookies may prevent the cart, account, or checkout from working correctly.

Cookie names, providers, purposes, and durations can change as website services are updated. Our Cookie Policy or consent tool provides more specific and current details where available.

8. Marketing communications and choices

If you opt in or if otherwise permitted by law, we may send news, product updates, promotions, or reminders by email or SMS. You can unsubscribe from marketing email using the link in the message and from marketing SMS by following the instructions in the message. You may also contact us.

Opting out of marketing does not stop necessary service communications, such as order confirmations, security notices, delivery updates, or responses to your requests.

9. How long we retain personal information

We retain personal information only as long as reasonably necessary for the purposes described in this Policy, including to complete transactions, maintain appropriate business and tax records, resolve disputes, enforce agreements, prevent fraud, and meet legal obligations.

Record category Planned retention period
Completed orders and required transaction records [ORDER RETENTION PERIOD]
Failed, canceled, pending, or abandoned orders [FAILED/PENDING ORDER RETENTION PERIOD]
Inactive customer accounts [INACTIVE ACCOUNT RETENTION PERIOD]
Customer-support communications [SUPPORT RETENTION PERIOD]
Analytics data [ANALYTICS RETENTION PERIOD]
Marketing subscription records Until you unsubscribe, plus a limited suppression record so we can honor your choice

We may retain information longer when required by law, reasonably necessary for an active dispute or investigation, or stored temporarily in secure backups. When information is no longer required, we take reasonable steps to delete, anonymize, or securely isolate it.

10. Your privacy rights

Depending on where you live and subject to legal exceptions, you may have the right to:

  • request access to or a copy of personal information we hold about you;
  • request correction of inaccurate or incomplete information;
  • request deletion of personal information;
  • request restriction of or object to certain processing;
  • receive certain information in a portable format;
  • withdraw consent where processing is based on consent;
  • opt out of targeted advertising, the sale or sharing of personal information, or certain profiling where applicable;
  • appeal our response where an appeal right is provided by law; and
  • complain to an applicable privacy or data-protection authority.

To submit a request, email [PRIVACY EMAIL]. Please describe your request and identify the email address associated with your account or orders. We may need to verify your identity before acting. An authorized agent may submit a request where permitted, but we may request proof of authorization and identity verification.

Some requests are subject to exceptions. For example, we may need to retain transaction records for tax, accounting, fraud-prevention, warranty, dispute, or other legal purposes. We will not discriminate against you for exercising an applicable privacy right.

WordPress/WooCommerce administration: verified export and erasure requests can be managed through Tools → Export Personal Data and Tools → Erase Personal Data. Those tools may not include information held separately by payment, analytics, email, shipping, or other external providers, so each request should be reviewed across all relevant systems.

11. Information security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. These measures may include access controls, encryption in transit, software updates, backups, monitoring, and service-provider review as appropriate.

No website, transmission, or storage system can be guaranteed completely secure. You are responsible for using a strong, unique password and keeping your account credentials confidential. Contact us promptly if you believe your account or information has been compromised.

12. International data transfers

Our service providers may process personal information in countries other than the country where you live. Those countries may have different privacy laws. Where required, we use recognized safeguards for international transfers, such as contractual protections, adequacy decisions, or another legally approved mechanism.

13. Children’s privacy

The Store is intended for a general audience and is not directed to children under 13, or a higher minimum age where required by applicable law. We do not knowingly collect personal information from children below the applicable minimum age. If you believe a child has provided personal information to us without appropriate authorization, contact us so we can investigate and take appropriate action.

15. Changes to this Privacy Policy

We may update this Policy to reflect changes to our website, services, providers, or legal obligations. We will post the updated version here and revise the “Last updated” date. If required by law, we will provide additional notice or request consent before a material change takes effect.

16. Contact us

For privacy questions or to exercise an applicable privacy right, contact:

That Look of East Lyme, LLC, 39 Hickory Ln, Waterford, Connecticut, 06385,

telephone: 8607393459

email address: paula@thatlooksalon.com