Privacy policy

Notice at collection

We collect the categories of personal information described below to operate the store, complete orders, provide support, prevent fraud, comply with law, protect customers and Shiny Curls, and, only when you allow advertising measurement, measure and improve our Meta advertising. We do not use or disclose sensitive personal information for purposes other than providing requested goods and services, security, and legal compliance.

• Identifiers and contact information: name, email, phone number when provided, billing details, and shipping address.
• Commercial information: products viewed or ordered, checkout activity, amount paid, order status, returns, and support history.
• Internet or device information: request, browser, device, security, Meta browser and click identifiers, and advertising-interaction information.
• Communications: messages, return requests, and other information you choose to send us.

Sources and purposes

We obtain information directly from you, from your browser and device, from Stripe when it processes your checkout, from Meta when you arrive through a Meta advertisement, and from service providers involved in hosting, security, delivery, and support. We use it to create and fulfill orders, process returns and refunds, communicate about transactions, provide support, secure and maintain the website, keep business and tax records, resolve disputes, comply with legal obligations, and, with your permission, attribute purchases and other site activity to our Meta advertisements.

Payments, service providers, and disclosure

Stripe independently processes payment-card information; Shiny Curls does not receive or store your full card number. We disclose information as reasonably necessary to Stripe, Amazon Web Services, Meta when advertising measurement is allowed, carriers and fulfillment providers, professional advisers, fraud-prevention providers, and authorities when legally required. These providers may process information under their own policies and contractual obligations.

Advertising measurement and sharing

If you choose “Allow Meta tracking,” the Meta Pixel may send Meta the pages and product you view, checkout activity, Meta browser and click identifiers, and browser information. After a successful payment, our server may send Meta the purchase time and value, the same browser and click identifiers, and a normalized, SHA-256-hashed version of the checkout email address. We do not send Meta your name, phone number, shipping address, payment-card number, date of birth, gender, or client IP address through this integration.

Meta uses this information to measure our ads, attribute purchases, and help deliver or optimize advertising. Depending on applicable law, this may be considered sharing for cross-context behavioral advertising, targeted advertising, or a sale. You can opt out by choosing “Decline Meta tracking” or changing “Privacy choices” in the footer. Checkout works either way.

Cookies and browser signals

Meta advertising remains off unless you allow it. If allowed, Meta may set the _fbp browser identifier and, when you arrive through a Meta advertisement, the _fbc click identifier. We remember your advertising choice in browser storage for up to 180 days. Stripe and our infrastructure providers may use cookies or similar technologies necessary for checkout, security, fraud prevention, and service delivery.

We treat an enabled Global Privacy Control signal as a request to keep Meta advertising measurement off. “Do Not Track” is not a standardized opt-out signal. You may also change your selection at any time through “Privacy choices” in the footer.

Retention and security

We retain information only for as long as reasonably necessary for the purpose collected, including fulfillment, returns, accounting and tax obligations, fraud prevention, dispute resolution, and legal compliance. The period depends on the record and applicable requirements; order records may be retained for up to seven years. We use administrative and technical safeguards designed to protect information, but no system can guarantee absolute security.

Your privacy rights

Depending on where you live and applicable law, you may have rights to know or access personal information, obtain a portable copy, correct inaccuracies, request deletion, limit certain uses of sensitive information, opt out of certain sale, sharing, targeted advertising, or profiling, and appeal a denied request. You also have the right not to receive discriminatory treatment for exercising an applicable privacy right.

Email sale@shinycurls.store with “Privacy request” in the subject line and describe the right you want to exercise. We will verify requests using information associated with your order and may request only the additional information reasonably necessary for verification. An authorized agent may submit a request with proof of authority. We will respond within the time required by applicable law.

Children

This general-audience store is not directed to children under 13, and we do not knowingly collect personal information from them. Purchases must be made by an adult. If you believe a child provided information, contact us so we can investigate and delete it when required.

Changes and contact

We will post material policy changes here and update the effective date. Questions, privacy requests, and complaints may be sent to Shiny Curls LLC at sale@shinycurls.store.