Privacy Policy

1. Effective Date

This Privacy Policy is effective as of June 10, 2026, and applies to all users of the Poppy and Crow website, online store, and related shopping services (collectively, the "Services").

2. Information We Collect

We collect two types of user information to operate our clothing retail business, provide customer service, and optimize the shopping experience:

Personally Identifiable Information

This type of information can directly or indirectly identify an individual and includes, but is not limited to, your name, email address, phone number, shipping/billing address, payment-related information, account login credentials, and order purchase history.

Non-Personal Information

This type of information refers to anonymous technical and behavioral data, including device model, browser type, IP address, website browsing history, time spent on pages, product click data, shopping preference data, and other statistical data that does not identify a specific user.

3. Sources of Personal Information

We may collect personal information from the following sources:

Collected directly from you: Including when you create an account, browse products, place an order, subscribe to our newsletter, contact customer service, submit feedback, or otherwise voluntarily provide your personal information to us.

Collected automatically through the Services: Including data collected from your mobile phone, computer, or other access device when you visit our website, browse clothing products, or use shopping features, as well as data obtained through cookies and similar tracking technologies.

Collected from our service providers: Including professional third-party service providers that partner with us to support website operations, payment processing, logistics and delivery, data analysis, and customer service; they collect and process your personal information on our behalf.

Collected from our partners or other third parties: Including official marketing partners, social media platforms, and authorized promotional channels that lawfully provide information regarding user public behavior and preferences.

4. How We Use Your Personal Information

We use the personal information we collect solely for legitimate business and service purposes and will not use it for unauthorized purposes. Specific use cases include:

Completing order processing, product delivery, after-sales service, and order tracking to ensure the smooth execution of shopping transactions.

Verifying user identity, managing membership accounts, and ensuring the security of your account and transactions.

Responding to your inquiries, feedback, and after-sales requests to provide timely customer support.

Optimizing clothing product displays, website interfaces, and service functions; analyzing user shopping preferences; and enhancing the user shopping experience. Sending you official updates, notifications about new products, promotional offers, and marketing content (you may unsubscribe at any time).

Complying with applicable laws, regulations, platform rules, and legal obligations.

Preventing fraud, anomalous transactions, and security risks, and safeguarding the legitimate rights and interests of Poppy and Crow and all users.

5. How We Disclose Personal Information

We do not sell your personal information for monetary consideration. However, as described in our Data-Sharing Opt-Out page, certain data sharing with advertising partners for targeted advertising may be considered a "sale" or "sharing" under applicable U.S. state privacy laws. You may opt out of such sharing by visiting our Your Privacy Choices page or enabling the Global Privacy Control (GPC) signal in your browser.We disclose your information only under the following permitted conditions:

Service Providers: We may share your information with reputable third-party service providers who have signed confidentiality agreements with us—including Shopify platform service providers, payment processors, logistics and shipping vendors, IT maintenance teams, cloud storage providers, data analytics agencies, and customer support teams—to assist us in operating the website, fulfilling orders, and providing standard services.

Business and Marketing Partners: We may collaborate with professional marketing partners to conduct personalized advertising and targeted marketing. We use Shopify and third-party advertising tools to deliver targeted product recommendations based on your online browsing and shopping behavior. All partner agencies process your information in accordance with their respective privacy policies. You have the right to opt out of targeted advertising based on your cross-platform browsing behavior.

Disclosure Authorized by the User: When you proactively request, authorize, or consent to the disclosure of information to third parties—such as authorizing logistics delivery, using social media login features, or sharing order information.

Internal Corporate Disclosure: We may share your information among our affiliates and within the group for unified service management and operational optimization. - Legal and Business Transaction Requirements: We may disclose your personal information in the event of a merger, acquisition, asset transfer, bankruptcy liquidation, or other business transaction; to comply with legal requirements or respond to official judicial subpoenas, search warrants, and other lawful government requests; or to enforce our Terms of Service and protect the legitimate rights and interests of the platform, its users, and the public.

6. Data Security and Data Retention

Data Security

We employ industry-standard technical and administrative security measures to protect your personal information—including encrypted data storage, access control management, regular system security checks, and firewall protection—to prevent unauthorized access, disclosure, alteration, loss, or misuse of your data. However, no method of internet transmission or electronic storage is absolutely secure, and we cannot guarantee absolute data security.

Data Retention

We will retain your personal information only for as long as is necessary for business and legal purposes: transaction and order data will be retained for 7 years in accordance with commercial and tax laws; account information will be retained for the duration of your account's active status; and marketing and behavioral data will be retained for no more than 24 months. Upon the expiration of the retention period, we will automatically delete or anonymize your information in a secure manner.

7. Third-Party Links

Our website may contain hyperlinks to third-party websites, social media platforms, payment pages, and other external third-party service channels. These third-party platforms maintain their own independent privacy policies and terms of service. This Privacy Policy applies solely to services provided by Poppy and Crow. We are not responsible for the data collection, processing, or privacy practices of any third-party websites. When accessing external links, you are responsible for reviewing and complying with the privacy policies of those third-party platforms.

8. Your Rights

Under applicable data protection laws and regulations, you have the following legal rights regarding your personal information:

Right of Access: You have the right to request details regarding the personal information we have collected and stored about you.

Right to Rectification: You have the right to request the correction and updating of inaccurate or incomplete personal data.

Right to Erasure: You have the right to request that we delete your personal information (except for data that must be retained by law).

Right to Restrict Processing: In certain circumstances, you have the right to request that we suspend the processing of your personal information.

Right to Data Portability: You have the right to obtain your personal data in a readable and transferable format.

Right to Object: You have the right to object to our processing of your data for marketing purposes or based on legitimate interests.

Right to Withdraw Consent: You may withdraw your previously granted consent for data processing at any time; this will not affect the lawfulness of processing activities conducted prior to the withdrawal.

You may exercise the above rights by contacting our official customer service email; we will respond to your legitimate requests within 30 business days.

9. Additional Rights for California Residents (CCPA/CPRA)

If you are a California resident, you have the following additional rights under the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act of 2020 (CPRA):

Right to Know and Access: You have the right to request that we disclose the following information covering the 12 months preceding your request:

- The categories of personal information we have collected about you

- The specific pieces of personal information we have collected about you

- The categories of sources from which your personal information was collected

- The business or commercial purpose for collecting, selling, or sharing your personal information

- The categories of third parties with whom we disclose personal information

Right to Delete: You have the right to request that we delete any personal information collected from you, subject to certain exceptions permitted by applicable law (e.g., information needed to complete a transaction, detect security incidents, comply with legal obligations, or for specific internal uses consistent with your expectations).

Right to Correct: You have the right to request that we correct inaccurate personal information we hold about you.

Right to Opt-Out of Sale or Sharing: We do not sell your personal information (as defined by the CCPA) for monetary consideration. We do not share your personal information for the purpose of cross-context behavioral advertising. If our practices change, we will update this policy and provide a "Do Not Sell or Share My Personal Information" link on our homepage.

Right to Limit Use of Sensitive Personal Information: We do not use sensitive personal information (such as Social Security numbers, financial account data, precise geolocation, or health information) for purposes beyond those permitted by the CCPA. You have the right to limit our use of sensitive personal information to only what is necessary to perform the services reasonably expected.

Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. Specifically, we will not:

- Deny you goods or services

- Charge you different prices or rates (including through discounts or other incentives)

- Provide a different level or quality of goods or services

- Imply that you will receive a different price, rate, or quality level of goods or services

How to submit a request: To exercise any of the rights mentioned above, please contact us via:

- Email: info@poppyandcrowm.com

- Email subject line: "CCPA Privacy Request"

Identity verification: To protect your privacy, we will verify your identity before processing your request. We may ask you to provide information that matches the records we have on file. If we are unable to verify your identity, we will not be able to fulfill your request.

Authorized agents: You may designate an authorized agent to submit a request on your behalf. We may require written authorization and verify the identities of both you and the agent.

Response timeframe: We will acknowledge receipt of your request within 10 business days and provide a substantive response within 45 business days. If we require more time, we will notify you in writing of the reason and the extension period (up to a maximum of 90 business days in total).

Financial incentive programs: We do not offer financial incentive programs that require you to provide personal information.

Statistics: As required by the CCPA, we will provide statistics regarding the number of requests received and response times upon request.

10. Children's Privacy

Poppy and Crow’s services are intended for adult users, and we do not knowingly collect personal information from minors under the age of 16. If you are a minor, please do not use our website or services, and do not submit any personal information. If we inadvertently collect personal data from a minor, we will delete the relevant information immediately upon discovery. If you believe we have collected your personal information without authorization, please contact us promptly so that we may address the matter.

11. Cookies and Similar Technologies

Our website uses cookies, web beacons, and other similar tracking technologies to enhance your browsing and shopping experience. Cookies are small text files stored on your device when you visit our website.

Types and Purposes of Cookies:

Strictly Necessary Cookies: Essential for the basic operation of the website; used to maintain your login status, shopping cart data, and checkout functionality. These cannot be disabled.

Functional Cookies: Used to record your browsing preferences, language settings, and product browsing history to optimize your personalized experience.

Analytical Cookies: Used to track website traffic and analyze user browsing behavior, helping us optimize product displays and service features.

Marketing Cookies: Used for targeted product recommendations and advertising (you may choose to opt out).

You can manage or disable cookies through your browser settings. Disabling certain cookies may result in some website features becoming unavailable.

You can manage your cookie preferences at any time by clicking the "Cookie Settings" link in the footer of our website. When you first visit our site, a cookie consent banner will allow you to accept or decline non-essential cookies.

12. Changes to the Privacy Policy

We reserve the right to periodically update and revise this Privacy Policy due to business adjustments, service upgrades, or changes in laws and regulations. Following any updates, we will publish the latest version on our official website and indicate the new effective date. The revised Privacy Policy will take effect immediately upon publication. Your continued use of our website and services after such updates constitutes your acceptance of the terms of the latest Privacy Policy. Please check this page regularly for updates.