Privacy Policy

What we collect, why, who we share it with, and the choices you have.

Who we are

Audrey usa operates audreyrossie.com and is the business responsible for the personal information described here. Our address is [STREET ADDRESS], [CITY, STATE ZIP]. Contact us about privacy at support@example.com.

Information we collect

• Identifiers — name, email, postal address, phone, account ID, IP address. From you, when you order or register.
• Commercial information — products viewed, bag contents, order and return history, reviews.
• Payment information — card brand, last four digits, billing address, authorisation result. From our payment processor. We never see or store your full card number.
• Internet activity — pages viewed, referring URL, search terms, device and browser. From cookies and similar technologies.
• Approximate location — city and region inferred from IP, used to estimate tax and shipping.
• Inferences — size and fit preferences, style affinity, derived from the above.

How we use it

• Take, fulfil and deliver your orders, and handle returns and refunds
• Run your account and remember your addresses and preferences
• Send order, dispatch and delivery notifications
• Send marketing email and, if you opted in, marketing texts
• Detect and prevent fraud, abuse and payment risk
• Measure how the site performs and improve it
• Advertise our products on other platforms [including Google and Meta]
• Meet our legal, tax and accounting obligations

Who we share it with

We share personal information only with providers who need it to do a job for us, under contract, and never for their own independent marketing: [payment processing], [shipping and logistics], [hosting], [email and SMS providers], [analytics], [advertising platforms], [reviews], professional advisers, and authorities where legally required.

Selling & sharing for advertising

We do not sell personal information for money. However, our use of advertising and analytics cookies may be treated as a “sale” or as “sharing” for cross-context behavioural advertising under California, Colorado, Connecticut, Texas, Virginia and other state privacy laws, and as targeted advertising. You can switch this off — see Do Not Sell or Share below. We do not sell or share the personal information of consumers we know to be under 16.

Cookies & tracking

• Strictly necessary — keeps you signed in, remembers your bag, protects against fraud. Cannot be switched off.
• Functional — remembers your size, country and display preferences.
• Analytics — tells us which pages work and where people get stuck.
• Advertising — measures ad performance and shows you our ads elsewhere.

Manage your choices at any time through [Cookie preferences] in the footer of every page.

Global Privacy Control

When your browser or extension sends a Global Privacy Control (GPC) signal, we treat it as a valid request to opt out of the sale and sharing of personal information and of targeted advertising, for that browser and device, without you having to do anything else.

Your privacy rights

• Know and access — what we collect, where it came from, why, and who we disclosed it to
• Delete — ask us to erase personal information we hold about you
• Correct — fix information that is inaccurate
• Portability — receive a copy in a portable, machine-readable format
• Opt out — of sale, sharing and targeted advertising
• Non-discrimination — we will never charge you a different price or give you a worse service for exercising any of these rights

How to exercise your rights

Use the privacy request form at audreyrossie.com/privacy-request, email support@example.com, or call [+1 (XXX) XXX-XXXX]. We acknowledge requests within 10 business days and respond substantively within 45 calendar days, extendable once by a further 45 days where a request is complex — we will tell you why before we do.

We verify who you are before acting on an access, deletion, correction or portability request. An authorised agent may act for you with written permission we can verify.

Appeals

If we decline a request, our response explains why and how to appeal. Email support@example.com with the subject “Privacy appeal”. We respond within 45 days with a written explanation. If the appeal is denied you may contact your state attorney general.

Do Not Sell or Share My Personal Information

Use the “Do Not Sell or Share My Personal Information” link in the footer, switch off Advertising in Cookie preferences, turn on Global Privacy Control in your browser, or email support@example.com. You do not need an account and we will not ask you to create one. Opting out does not log you out, does not stop you shopping and does not change any price.

Sensitive information

We do not ask for sensitive personal information: no government ID numbers, no health or biometric data, no precise geolocation, and nothing revealing racial or ethnic origin, religion, union membership, sexual orientation or sex life.

[If you sell lingerie, underwear or swimwear, say plainly how you treat those purchases. Suggested wording: purchases in those categories are ordinary commercial information to us. We do not infer, record or act on any characteristic about you from them, and we do not use them to build advertising audiences.]

How long we keep data

• Order and transaction records — [7 years], to meet tax and accounting requirements
• Account profile and addresses — until you delete the account, then [30 days] in backups
• Marketing contact details — until you unsubscribe, then [24 months] in a suppression list so we do not contact you again
• Support correspondence — [3 years] from the last message
• Analytics and advertising identifiers — [up to 14 months]

Security

All traffic to this store is encrypted with TLS. Payment pages are served by our payment processor. Access to customer data inside our business is limited to staff who need it. No system is perfectly secure — if a breach affects your personal information we will notify you and the relevant authorities as required by law, without undue delay.

Children

This store is not directed at children and we do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, email support@example.com and we will delete it.

Changes

We review this policy at least once a year. The date at the top shows when it last changed. Where a change materially affects your rights, we will tell you before it takes effect.