Privacy Policy

1. Effective Date

This Privacy Policy is effective as of June 10, 2026, and applies to all users of the Poppy and Crow website, online store, and related shopping services (collectively, the "Services").

2. Information We Collect

We collect two types of user information to operate our clothing retail business, provide customer service, and optimize the shopping experience:

Personally Identifiable Information

This type of information can directly or indirectly identify an individual and includes, but is not limited to, your name, email address, phone number, shipping/billing address, payment-related information, account login credentials, and order purchase history.

Non-Personal Information

This type of information refers to anonymous technical and behavioral data, including device model, browser type, IP address, website browsing history, time spent on pages, product click data, shopping preference data, and other statistical data that does not identify a specific user.

3. Sources of Personal Information

We may collect personal information from the following sources:

Collected directly from you: Including when you create an account, browse products, place an order, subscribe to our newsletter, contact customer service, submit feedback, or otherwise voluntarily provide your personal information to us.

Collected automatically through the Services: Including data collected from your mobile phone, computer, or other access device when you visit our website, browse clothing products, or use shopping features, as well as data obtained through cookies and similar tracking technologies.

Collected from our service providers: Including professional third-party service providers that partner with us to support website operations, payment processing, logistics and delivery, data analysis, and customer service; they collect and process your personal information on our behalf.

Collected from our partners or other third parties: Including official marketing partners, social media platforms, and authorized promotional channels that lawfully provide information regarding user public behavior and preferences.

4. How We Use Your Personal Information

We use the personal information we collect solely for legitimate business and service purposes and will not use it for unauthorized purposes. Specific use cases include:

Completing order processing, product delivery, after-sales service, and order tracking to ensure the smooth execution of shopping transactions.

Verifying user identity, managing membership accounts, and ensuring the security of your account and transactions.

Responding to your inquiries, feedback, and after-sales requests to provide timely customer support.

Optimizing clothing product displays, website interfaces, and service functions; analyzing user shopping preferences; and enhancing the user shopping experience. Sending you official updates, notifications about new products, promotional offers, and marketing content (you may unsubscribe at any time).

Complying with applicable laws, regulations, platform rules, and legal obligations.

Preventing fraud, anomalous transactions, and security risks, and safeguarding the legitimate rights and interests of Poppy and Crow and all users.

5. How We Disclose Personal Information

Except in the following legitimate circumstances, we will never trade, sell, or otherwise provide your personal information to third parties. We disclose your information only under the following permitted conditions:

Service Providers: We may share your information with reputable third-party service providers who have signed confidentiality agreements with us—including Shopify platform service providers, payment processors, logistics and shipping vendors, IT maintenance teams, cloud storage providers, data analytics agencies, and customer support teams—to assist us in operating the website, fulfilling orders, and providing standard services.

Business and Marketing Partners: We may collaborate with professional marketing partners to conduct personalized advertising and targeted marketing. We use Shopify and third-party advertising tools to deliver targeted product recommendations based on your online browsing and shopping behavior. All partner agencies process your information in accordance with their respective privacy policies. You have the right to opt out of targeted advertising based on your cross-platform browsing behavior.

Disclosure Authorized by the User: When you proactively request, authorize, or consent to the disclosure of information to third parties—such as authorizing logistics delivery, using social media login features, or sharing order information.

Internal Corporate Disclosure: We may share your information among our affiliates and within the group for unified service management and operational optimization. - Legal and Business Transaction Requirements: We may disclose your personal information in the event of a merger, acquisition, asset transfer, bankruptcy liquidation, or other business transaction; to comply with legal requirements or respond to official judicial subpoenas, search warrants, and other lawful government requests; or to enforce our Terms of Service and protect the legitimate rights and interests of the platform, its users, and the public.

6. Data Security and Data Retention

Data Security

We employ industry-standard technical and administrative security measures to protect your personal information—including encrypted data storage, access control management, regular system security checks, and firewall protection—to prevent unauthorized access, disclosure, alteration, loss, or misuse of your data. However, no method of internet transmission or electronic storage is absolutely secure, and we cannot guarantee absolute data security.

Data Retention

We will retain your personal information only for as long as is necessary for business and legal purposes: transaction and order data will be retained for 7 years in accordance with commercial and tax laws; account information will be retained for the duration of your account's active status; and marketing and behavioral data will be retained for no more than 24 months. Upon the expiration of the retention period, we will automatically delete or anonymize your information in a secure manner.

7. Third-Party Links

Our website may contain hyperlinks to third-party websites, social media platforms, payment pages, and other external third-party service channels. These third-party platforms maintain their own independent privacy policies and terms of service. This Privacy Policy applies solely to services provided by Poppy and Crow. We are not responsible for the data collection, processing, or privacy practices of any third-party websites. When accessing external links, you are responsible for reviewing and complying with the privacy policies of those third-party platforms.

8. Your Rights

Under applicable data protection laws and regulations, you have the following legal rights regarding your personal information:

Right of Access: You have the right to request details regarding the personal information we have collected and stored about you.

Right to Rectification: You have the right to request the correction and updating of inaccurate or incomplete personal data.

Right to Erasure: You have the right to request that we delete your personal information (except for data that must be retained by law).

Right to Restrict Processing: In certain circumstances, you have the right to request that we suspend the processing of your personal information.

Right to Data Portability: You have the right to obtain your personal data in a readable and transferable format.

Right to Object: You have the right to object to our processing of your data for marketing purposes or based on legitimate interests.

Right to Withdraw Consent: You may withdraw your previously granted consent for data processing at any time; this will not affect the lawfulness of processing activities conducted prior to the withdrawal.

You may exercise the above rights by contacting our official customer service email; we will respond to your legitimate requests within 30 business days.

9. Children's Privacy

Poppy and Crow’s services are intended for adult users, and we do not knowingly collect personal information from minors under the age of 16. If you are a minor, please do not use our website or services, and do not submit any personal information. If we inadvertently collect personal data from a minor, we will delete the relevant information immediately upon discovery. If you believe we have collected your personal information without authorization, please contact us promptly so that we may address the matter.

10. Cookies and Similar Technologies

Our website uses cookies, web beacons, and other similar tracking technologies to enhance your browsing and shopping experience. Cookies are small text files stored on your device when you visit our website.

Types and Purposes of Cookies:

Strictly Necessary Cookies: Essential for the basic operation of the website; used to maintain your login status, shopping cart data, and checkout functionality. These cannot be disabled.

Functional Cookies: Used to record your browsing preferences, language settings, and product browsing history to optimize your personalized experience.

Analytical Cookies: Used to track website traffic and analyze user browsing behavior, helping us optimize product displays and service features.

Marketing Cookies: Used for targeted product recommendations and advertising (you may choose to opt out).

You can manage or disable cookies through your browser settings. Disabling certain cookies may result in some website features becoming unavailable.

11. Changes to the Privacy Policy

We reserve the right to periodically update and revise this Privacy Policy due to business adjustments, service upgrades, or changes in laws and regulations. Following any updates, we will publish the latest version on our official website and indicate the new effective date. The revised Privacy Policy will take effect immediately upon publication. Your continued use of our website and services after such updates constitutes your acceptance of the terms of the latest Privacy Policy. Please check this page regularly for updates.