1. Information We Collect

1.1 Information You Provide

When you create an account or place an order, we may collect personal information that you provide to us, including:

• Name
• Email address
• Billing and shipping address
• Payment information (processed securely via Shopify Payments, we do not store full card details)
• Phone number (if provided)
• Order history and preferences
• Communications you send to us

1.2 Information Collected Automatically

When you browse the Site, we or our third-party partners may automatically collect:

• IP address and approximate geolocation
• Browser type and device information
• Pages viewed, time on site, and clickstream data
• Cookies and similar tracking technologies.

1.3 Information from Third Parties

We may receive information about you from our service providers, including when you interact with our social media or advertising platforms.

1.5 Categories of Personal Information (California)

We may collect the following categories of personal information:

• Identifiers
• Commercial information
• Internet or other electronic network activity information
• Geolocation data (approximate)
• Inferences

1.6 Legal Bases for Processing (EEA/UK Users)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data under the following legal bases:

• Consent (e.g., marketing communications, cookies where required)
• Performance of a contract (e.g., processing orders)
• Legal obligations (e.g., tax and accounting requirements)
• Legitimate interests (e.g., improving our services, fraud prevention)

2. How We Use Your Information

We use your personal information to:

• Process and fulfill your orders, including shipping and returns
• Send order confirmations, shipping updates, and customer service communications
• Send marketing emails and promotional offers (via Mailchimp — you may opt out at any time)Improve our Site, product offerings, and customer experience
• Detect and prevent fraud or unauthorized transactions
• Comply with legal obligations

3. How We Share Your Information

We do not sell your personal information. However, we may share personal information for cross-context behavioral advertising (“sharing” under CPRA). 

We may share your data with:

Shopify: Our ecommerce platform. Shopify processes and stores order data on our behalf. See Shopify's Privacy Policy at https://www.shopify.com/legal/privacy.

Mailchimp: Our email marketing provider. If you subscribe to our mailing list or place an order, your email may be shared with Mailchimp to send transactional or marketing communications. See Mailchimp's Privacy Policy at https://mailchimp.com/legal/privacy/.

Meta (Facebook/Instagram) Pixel: We use Meta Pixel to track conversions and serve targeted advertising. This may involve sharing browsing and purchase data with Meta. You can opt out via your Meta ad preferences or use an ad blocker. See Meta's Privacy Policy at https://www.facebook.com/privacy/policy/.

Google Analytics: We use Google Analytics to understand Site traffic and usage. See Google's Privacy Policy at https://policies.google.com/privacy.

Loop Returns: Our returns and exchanges platform. Order data may be shared with Loop to process returns and exchanges.

Fulfillment / 3PL Partner: We share your name and shipping address with our third-party logistics partner to fulfill and ship your order.

Legal Requirements: We may disclose information when required by law, court order, or to protect our legal rights.

4. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience, remember your cart, and analyze Site usage. You can control cookies through your browser settings, though disabling them may affect Site functionality.

To opt out of analytics tracking, you may use browser-level tools.

5. Your Privacy Rights

Depending on where you live, you may have certain rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we correct inaccurate data.
• Deletion: Request that we delete your data, subject to our legal obligations.
• Opt-Out: Unsubscribe from marketing emails at any time by clicking 'Unsubscribe' in any email.
• GDPR Rights: If you are located in the EEA/UK, you also have the right to data portability, restrict processing, object to processing, not be subject to automated decision-making.
  

California Privacy Rights (CCPA): California residents have the right to know what personal information is collected, to request deletion, and to opt out of the 'sale' of your information. We do not sell personal information. To submit a request, contact us at shop@rebelgirls.com. We may verify your identity before processing requests and respond in accordance with applicable law.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, including maintaining order records and complying with legal obligations. You may request deletion at any time.

7. International Data Transfers

If you are located outside the United States, your information may be transferred to and processed in the United States or other jurisdictions. Where required by applicable law, we implement appropriate safeguards. 

8. Children's Privacy

The Site is intended for users 13 years of age and older. We do not knowingly collect personal information from children under 13 without verifiable parental consent. If you believe we have inadvertently collected such information, please contact us immediately.

9. Security

We implement industry-standard security measures to protect your information. All payment transactions are encrypted and processed via Shopify's PCI-compliant infrastructure. However, no method of transmission over the internet or method of storage is 100% secure, and we cannot guarantee absolute security.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised effective date. We encourage you to review this policy periodically.

11. Contact Us

If you have questions or requests related to this Privacy Policy, please contact us:

Email: shop@rebelgirls.com

Website: https://rebelgirls.com; https://shop.rebelgirls.com

Mailing Address: 421 Elm Ave., Larkspur, CA 94939-2042