PRIVACY POLICY

Effective date: January 1, 2026

This Privacy Policy explains how Rachel Ashwell® Shabby Chic® (“Shabby Chic,” “we,” “us,” or “our”) collects, uses, and shares information when you visit shabbychic.com (the “Site”) or interact with our email newsletter. The Site is non-transactional; we do not sell products directly on this Site. We may link to third-party retailers that sell Shabby Chic products.

By using the Site, you agree to this Privacy Policy.

1) Who we are

2) What we collect

a) Information you provide

• Email address and optional profile info (e.g., name, region, preferences) when you subscribe to the newsletter or contact us.

• User submissions you choose to send (e.g., stories, images, comments).

b) Information collected automatically

• Device/usage data: IP address, approximate location (from IP), browser, OS, pages viewed, referring/exit pages, timestamps, and link clicks (including outbound partner links).

• Cookies & similar tech: Used for Site functionality, analytics, performance, and outbound link attribution (e.g., UTM/affiliate tags). See “Cookies & Tracking.”

We do not accept or process payments on this Site.

3) Hosted by Shopify

Our Site is hosted on Shopify. Shopify may process limited technical data and set platform cookies required for site delivery and security. For details, see Shopify’s Privacy and Cookie policies. We use Shopify as our CMS/hosting, not for checkout.

4) How we use information

We use information to:

• Operate and improve the Site and its content;

• Send newsletters/updates you opt into and manage your preferences;

• Measure performance (e.g., popular pages, outbound link clicks);

• Attribute traffic to campaigns/partners (e.g., UTM/affiliate tags);

• Maintain security, prevent fraud/abuse, and debug;

• Comply with the law and enforce our Terms of Use.

5) Legal bases (EEA/UK)

Where GDPR/UK GDPR applies, we rely on consent (e.g., for non-essential cookies and marketing emails), legitimate interests (e.g., to run, secure, and measure the Site), and legal obligations.

6) When we share information

We share personal information with:

• Service providers/Processors (strictly for our purposes), such as:

• Shopify (hosting/CMS),

• Email service provider (e.g., Mailchimp),

• Analytics (e.g., Google Analytics).

• Authorities/parties as required by law to protect rights, users, or the public.

We do not sell personal information. If any data flows could be considered “sharing” for cross-context behavioral advertising under California law, you may opt out via our cookie settings.

7) Cookies & Tracking

We use:

• Strictly necessary cookies (security, load balancing, core features),

• Performance/analytics cookies (e.g., GA4),

• Attribution parameters (e.g., UTM/affiliate tags) to understand outbound link performance.

Your choices:

• Use your browser to block/delete cookies.

• In regions requiring consent, we display a cookie banner and a cookie settings panel to manage non-essential cookies.

• Some features may not function without certain cookies.

Do Not Track / Global Privacy Control: Where required by law, we honor the Global Privacy Control (GPC) signal as an opt-out for applicable tracking/“sharing.”

8) Email & marketing

If you subscribe, we send newsletters and updates. You can unsubscribe at any time via the link in our emails. We may record engagement metrics (e.g., opens/clicks) to improve communications.

9) Your rights & choices

Depending on location, you may have rights to access, correct, delete, or restrict processing; object to certain processing; and withdraw consent.

• EEA/UK: You may have data portability rights and can lodge a complaint with your data protection authority.

• California (CCPA/CPRA): Residents can request access, deletion, and correction of personal information, and opt out of “sharing” for cross-context behavioral advertising. We respond to verifiable requests within statutory timeframes. Use the cookie settings or contact us.

To exercise rights, email customerservice@shabbychic.com. We may request information to verify identity (and agent authorization, if applicable).

10) Data retention

We retain personal information as needed for the purposes described (e.g., while you remain subscribed) and as required by law. We may retain de-identified/aggregated data for analytics.

11) International transfers

We are based in the U.S. and may process information in the U.S. and other countries. Where required, we use appropriate safeguards (e.g., Standard Contractual Clauses with processors).

12) Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is 100% secure.

13) Children’s privacy

The Site is not directed to children under 16 (or the applicable age of digital consent). We do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us to request deletion.

14) Third-party links

When you follow a link to a third-party site (including retailers), that site’s terms and privacy policy apply. We are not responsible for third-party practices.

15) Changes to this Policy

We may update this Policy from time to time. The “Effective date” reflects the latest revision. Material changes will be noted here and, where required, we will seek consent.

16) Contact us

Questions or privacy requests: 

17) Region-specific disclosures 

• EEA/UK: Consent for non-essential cookies and marketing emails; legitimate interests for site operation and security. Contact your data protection authority to lodge a complaint.

• California: We do not sell personal information. To the extent any tracking could be “sharing” for cross-context behavioral advertising, opt out via cookie settings or by contacting us. We honor GPC signals where required.