Privacy Policy

Effective Date: 2026-06-01

We respect your privacy. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and your rights regarding your data. By using our website and services, you agree to this Privacy Policy.

If you have any questions about this policy, please contact us at info@byhellonancy.com.

1. Information We Collect

a) Information you provide directly:

Full name, billing address, shipping address, telephone number, email address
Payment information (processed securely by Shopify Payments — we do not store your card details)
Order history, product preferences, customer support communications
Information you provide when subscribing to our newsletter or contacting customer service

b) Information collected automatically:

IP address, browser type, device type, operating system, referring URL
Pages visited, time spent on pages, products viewed and added to cart
Cookies and similar tracking technologies (see Cookies section below)

2. How We Use Your Information

We use your personal information to:

Process and fulfill orders, including arranging payment, shipping, and delivery
Communicate with you about your orders, customer service inquiries, and account updates
Send marketing emails about new products, promotions, and educational content (only with your consent)
Improve our website, products, and customer experience
Detect and prevent fraud, security breaches, and policy violations
Comply with applicable legal obligations and regulatory requirements

3. Sharing Your Information

We share your personal information only with trusted service providers necessary to operate our business:

Shopify — our ecommerce platform that hosts our store and processes payments via Shopify Payments
Shipping carriers — to deliver your order (USPS, UPS, FedEx, DHL, and others)
Email service providers — to send transactional and marketing emails (only with your consent)
Analytics providers — to understand how customers use our site (in anonymized or aggregated form)
Legal authorities — when required by law, court order, or to protect rights and safety

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4. Cookies and Tracking

We use cookies and similar technologies to make our website work, remember your preferences, analyze traffic, and personalize your experience. You can control cookies through your browser settings. Disabling cookies may limit certain site features.

Types of cookies we use:

Essential cookies — required for the site to function (shopping cart, checkout)
Performance cookies — to analyze how the site is used and improve it
Marketing cookies — to show relevant ads on other platforms (only with consent)

5. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

Right to access — request a copy of the data we hold about you
Right to rectification — correct inaccurate or incomplete data
Right to erasure — request deletion of your personal data ("right to be forgotten")
Right to restrict processing — limit how we use your data
Right to data portability — receive your data in a portable format
Right to object — opt out of marketing communications at any time
Right to withdraw consent — where processing is based on your consent

To exercise these rights, email us at info@byhellonancy.com. We will respond within 30 days.

6. Data Security

We implement industry-standard security measures including SSL/TLS encryption, secure payment processing via Shopify Payments (PCI-DSS Level 1 compliant), and restricted access to personal data. While we work hard to protect your information, no method of transmission over the internet is 100% secure.

7. Data Retention

We retain personal information only as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce agreements. Order records are typically kept for 7 years for tax and legal purposes.

8. International Transfers

Your information may be transferred to and stored on servers located outside your country of residence. We ensure that such transfers comply with applicable data protection laws and that adequate safeguards are in place.

9. Children's Privacy

Our products are intended for adults aged 18 or older. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected such information, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Effective Date" at the top will reflect when the policy was last updated. We encourage you to review this policy periodically.