Privacy Policy

The information we collect depends on how you interact with the Services and may include:

• Contact information, such as your name, email address, phone number, billing address, and shipping address.
• Order and transaction information, including products ordered, purchase amount, payment confirmation, delivery details, returns, exchanges, and communications about an order. Payment processors handle full payment-card details; we generally receive confirmation and limited transaction details needed to complete the order.
• Shopping information, such as products viewed, searches, cart activity, wishlist activity, reviews, referrals, gift cards, and purchase history.
• Account and customer-service information, including login or account details and information you include in messages, support requests, or fraud-prevention documents.
• Marketing information, including newsletter subscriptions, communication preferences, and engagement with emails or advertisements.
• Device and usage information, such as IP address, browser, device, network connection, referring page, pages and products viewed, interactions, and approximate location inferred from an IP address.

You may choose not to provide information, but some information is necessary to complete purchases, deliver orders, respond to requests, or provide particular features.

• Directly from you when you place an order, subscribe, contact us, submit a review, or use a feature.
• Automatically through cookies, pixels, local storage, server logs, and similar technologies when you use the Services or interact with our messages and advertisements.
• From service providers and partners, including Shopify, payment processors, shipping providers, authentication and fraud-prevention services, analytics providers, advertising partners, and review or customer-service platforms.

• Process payments, fulfill and deliver orders, and administer returns, exchanges, and refunds.
• Provide customer service and communicate about purchases, accounts, policies, and the Services.
• Operate, personalize, troubleshoot, measure, secure, and improve the Services.
• Maintain wishlists, shopping preferences, subscriptions, reviews, and other requested features.
• Detect, investigate, and prevent fraud, misuse, security incidents, illegal activity, and violations of our terms or policies.
• Send marketing communications where permitted and measure or personalize advertising. You can unsubscribe from promotional emails using the link in each message.
• Comply with legal obligations, enforce agreements, and protect our rights and the rights of others.

We use essential technologies for the storefront, cart, checkout, security, and user preferences. We also use analytics and advertising technologies, including Google Analytics and the Meta Pixel, to understand site use and measure or personalize advertising. Shopify uses cookies and similar technologies to operate the storefront and checkout. You can read more in the Shopify Cookie Policy.

Browser controls may allow you to block or delete cookies, but doing so can affect cart, checkout, and other functionality. Where applicable, you can also use our Your Privacy Choices page to limit the use of information for targeted advertising on that browser and device.

We may disclose personal information in the following circumstances:

• To vendors that perform services for us, such as Shopify, payment processing, fraud prevention, data analytics, advertising, email delivery, reviews, customer support, authentication, fulfillment, and shipping.
• To advertising and marketing partners that help us measure campaigns or provide advertising, subject to applicable choices and law.
• When you direct us to disclose information or consent to the disclosure.
• In connection with a business transaction, such as a merger, financing, acquisition, reorganization, or bankruptcy.
• To comply with law, legal process, or valid government requests; enforce terms and policies; investigate fraud; or protect the Services, our rights, or the safety and rights of others.

Depending on applicable law, disclosing identifiers, commercial information, and internet activity to certain advertising partners may be considered a “sale,” “sharing,” or targeted advertising, even though we do not sell personal information for money. Use Your Privacy Choices to submit an applicable opt-out request.

Browser signals: We do not currently change site behavior in response to the older “Do Not Track” browser setting because there is no uniform industry standard for that signal. When a browser sends a Global Privacy Control signal, we treat it as an opt-out of sale, sharing, and targeted advertising for that browser as required by applicable law. You may also use Your Privacy Choices or contact us to exercise an applicable opt-out right.

Reviews and other content you choose to submit for public display may be visible to anyone. The Services may link to sites or platforms that we do not operate. Their privacy and security practices are governed by their own notices, and we encourage you to review them before providing information.

We use administrative, technical, and organizational safeguards designed to protect personal information. No system or transmission method is perfectly secure, so please do not send sensitive information through unsecured channels. We retain information for as long as reasonably necessary to provide the Services, maintain records, comply with legal obligations, resolve disputes, prevent fraud, and enforce agreements. The specific period depends on the type of information and why it was collected.

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. A parent or guardian who believes a child provided personal information may contact us to request deletion. We do not knowingly sell or share the personal information of individuals under 16.

Depending on where you live, you may have rights to access or know about personal information, correct it, delete it, receive a portable copy, opt out of sale, sharing, or targeted advertising, restrict certain processing, withdraw consent, or appeal a denied request. These rights are subject to applicable exceptions.

To make a request, email service@gabysbags.com with the subject “Privacy Request” or write to the address below. We may need to verify your identity and authority before acting. Authorized agents may submit requests where allowed by law. We will not unlawfully discriminate against you for exercising a privacy right.

Information may be processed in the United States and other countries where our providers operate. Where required, cross-border transfers are supported by recognized legal mechanisms such as adequacy decisions or standard contractual clauses.

We may update this policy to reflect changes in our practices, technology, Services, or legal obligations. We will post the revised policy and update the date at the top. Where required, we will provide additional notice.

Privacy questions and requests may be sent to service@gabysbags.com, (833) 422-9224, or Gaby's Bags, LLC, 18870 Serenoa Court, Alva, FL 33920, United States.