Privacy Policy

Overview

This Privacy Policy explains how [LEGAL BUSINESS NAME] ("JJH Fashions", "we", "us") collects, uses, discloses and protects personal information when you visit our website, place an order, sign in to your account or contact us. It applies to residents of the United States.

We do not sell your personal information, and we do not share it for targeted (cross-context behavioral) advertising.

Information we collect

In the past 12 months we have collected the following categories of personal information:

We do not collect sensitive personal information such as Social Security numbers, precise geolocation, or biometric or health data. Your shopping cart is stored only in your own browser until you check out.

How we use your information

• To process payments, calculate sales tax, and pack, ship and deliver your order
• To send transactional emails - order confirmations, cancellation notices and sign-in codes
• To let you sign in, view your orders and cancel orders that haven't shipped
• To answer your questions and handle exchanges
• To detect and prevent fraud, abuse and security incidents
• To comply with tax, accounting and other legal obligations

We don't send marketing emails or texts, and we don't use your information for profiling or automated decisions with legal effects.

How we disclose your information

We disclose personal information only to service providers that process it on our behalf and under contract:

• Stripe - payment processing, fraud prevention and sales-tax calculation (Stripe Privacy Policy)
• Our website hosting and database provider, and our email delivery provider
• Shipping carriers - your name, delivery address and phone number

We may also disclose information when required by law, subpoena or court order; to protect our rights, customers or others; or as part of a merger, acquisition or sale of the business, in which case this policy continues to apply.

Cookies and similar technologies

• Shopping cart - saved in your browser's local storage so your cart is still there when you return.
• Account sign-in - a secure, HttpOnly cookie that keeps you signed in for up to 14 days or until you sign out.
• Payment form - Stripe may set cookies to prevent fraud when you pay.

We do not use advertising, analytics or social-media tracking cookies or pixels.

Do Not Track and Global Privacy Control

Because we don't track you across websites or sell or share personal information, there is nothing to opt out of. We nonetheless treat a Global Privacy Control (GPC) signal from your browser as a valid request to opt out of sale and sharing. We do not respond differently to "Do Not Track" browser signals, as there is no common industry standard for them.

How long we keep information

• Order records: as long as needed to fulfil orders and handle exchanges, and to meet tax and accounting record-keeping requirements (generally up to 7 years).
• One-time sign-in codes: deleted shortly after they expire (10 minutes after being sent).
• Security logs: kept for a limited period, then deleted.

Your privacy rights

Depending on where you live - including California, Colorado, Connecticut, Virginia, Texas, Oregon and other states with consumer privacy laws - you may have the right to:

• Know and access the personal information we hold about you, and get a portable copy of it
• Correct inaccurate personal information
• Delete your personal information, subject to legal exceptions (for example, records we must keep for tax purposes)
• Opt out of the sale or sharing of personal information, targeted advertising and profiling (we don't do any of these)
• Not be discriminated against for exercising your rights

How to make a request

Email [SUPPORT EMAIL] or call (203) 220-1813. To protect your information, we'll verify your request by matching details such as your email address and an order number, or by sending a code to the email address on your orders. You may use an authorized agent; we'll ask for proof of their authorization and may ask you to confirm your identity directly. We respond within 45 days, and may extend this once by 45 days when reasonably necessary, letting you know why.

Appeals

If we decline your request, you can appeal by replying to our decision or emailing [SUPPORT EMAIL] with "Privacy appeal" in the subject. We'll respond within 45 days. If you're not satisfied, you may contact your state Attorney General.

California residents

The categories, sources, purposes and recipients above are our disclosures under the California Consumer Privacy Act (CCPA). We do not use or disclose sensitive personal information. Under California's "Shine the Light" law, you may ask whether we disclosed personal information to third parties for their own direct marketing - we do not.

Security

We protect your information with encrypted (HTTPS) connections, never handle full card numbers, sign customers in with one-time codes instead of passwords, and limit access to order information to people who need it. No method of transmission or storage is completely secure. If a data breach affects your personal information, we'll notify you as required by law.

Children's privacy

Our website is not directed to children under 13, and we do not knowingly collect personal information from them, consistent with the Children's Online Privacy Protection Act (COPPA). We do not sell or share the personal information of anyone under 16. If you believe a child has given us personal information, contact us and we'll delete it.

Links to other websites

Our site links to social media pages (such as Facebook, Instagram and WhatsApp) and to Stripe. Those services have their own privacy policies, which apply when you use them.

Changes to this policy

We may update this policy. We'll post the new version on this page and update the effective date above. If we make material changes, we'll provide additional notice where required by law.

Contact

Questions about this policy or your information: [SUPPORT EMAIL], (203) 220-1813, or [LEGAL BUSINESS NAME], [BUSINESS STREET ADDRESS, CITY, STATE ZIP]. See also Contact Us.