Sarah Express (“Sarah Express”, “we”, “us”, or “our”) operates this website and store, including all related content, products, services, features, and tools made available through our online store (the “Services”). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our website, place an order, contact us, or otherwise interact with our Services.

By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy.

1. Personal Information We Collect

Depending on how you interact with our Services, we may collect the following categories of personal information:

• Contact Information: name, email address, phone number, billing address, and shipping address.
• Order Information: products purchased, cart contents, order history, returns, exchanges, and cancellations.
• Payment Information: payment method details, transaction confirmations, and billing-related information. Payment card details are processed securely by our payment service providers.
• Account Information: username, password, saved preferences, and account settings if you create an account.
• Customer Support Information: messages, emails, photos, and other details you send when requesting assistance.
• Device and Technical Information: IP address, browser type, device type, operating system, time zone, referral source, and browsing behavior on our website.
• Marketing and Usage Information: pages viewed, products clicked, time spent on site, and interactions with emails or advertisements.

2. How We Collect Information

We collect personal information in the following ways:

• Directly from you: when you place an order, contact us, subscribe to marketing, create an account, or submit a form.
• Automatically: through cookies, pixels, analytics tools, and similar technologies when you browse or interact with our website.
• From service providers and partners: including payment processors, analytics providers, advertising platforms, fulfillment partners, and shipping carriers.

3. How We Use Your Personal Information

We use your personal information for legitimate business purposes, including to:

• Process and fulfill orders, including payment processing, shipping, tracking, returns, and refunds.
• Provide customer support and respond to inquiries.
• Operate, maintain, improve, and personalize our website and services.
• Detect, prevent, and investigate fraud, abuse, chargebacks, security incidents, or unlawful activity.
• Send transactional communications such as order confirmations, shipping updates, and service messages.
• Send marketing communications where permitted by law or where you have consented.
• Analyze website traffic, shopping behavior, and advertising performance.
• Comply with legal obligations and enforce our policies, terms, and rights.

4. How We Disclose Personal Information

We may disclose personal information to the following categories of third parties when necessary to operate our business:

• E-commerce platform providers: such as Shopify, which hosts and supports our online store.
• Payment processors: to securely process payments and help prevent fraud.
• Shipping, logistics, and fulfillment partners: to prepare, dispatch, transport, and deliver your orders, and where applicable, assist with returns and order support.
• Analytics and advertising partners: such as Google, Meta, Pinterest, TikTok, or similar platforms, to measure traffic and improve marketing performance.
• Technology and support vendors: such as cloud storage, email delivery, fraud prevention, and customer support tools.
• Legal or regulatory authorities: when required to comply with law, legal process, or to protect our rights, customers, and business.
• Business transfers: in connection with a merger, acquisition, restructuring, or sale of assets.

We do not sell your personal information in the traditional sense. However, some advertising or analytics activities may be considered “sharing” under certain privacy laws.

5. Fulfillment and Shipping Partners

To fulfill and deliver your orders, we may share relevant information such as your name, shipping address, phone number, email address, and order details with our fulfillment providers, logistics partners, and shipping carriers. These partners may be located in countries other than your own and process information only as needed to provide order fulfillment, shipping, delivery, tracking, and returns support.

6. Cookies and Tracking Technologies

We use cookies, pixels, tags, and similar technologies to operate our website, remember your preferences, understand website usage, and improve our services and advertising.

These technologies may include:

• Essential cookies: required for site functionality, checkout, cart operation, and security.
• Analytics cookies: used to understand how visitors use our website and improve performance.
• Advertising cookies: used to measure ad performance and show relevant ads on third-party platforms.

You can manage your cookie preferences through our cookie banner or your browser settings, subject to certain functional limitations.

7. Legal Bases for Processing

Where applicable under law, we process personal information on one or more of the following legal bases:

• Your consent
• The performance of a contract with you
• Compliance with legal obligations
• Our legitimate business interests, provided those interests do not override your rights and freedoms

8. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide services, maintain business records, comply with legal obligations, resolve disputes, and enforce agreements.

• Order and transaction records: typically retained for up to 7 years for tax, accounting, and legal compliance.
• Customer support communications: retained as needed to resolve issues and maintain service records.
• Marketing data: retained until you unsubscribe or request deletion, unless a longer period is required by law.
• Account information: retained while your account remains active and for a reasonable period afterward unless deletion is requested or required by law.

9. Your Privacy Rights

Depending on where you live, you may have certain rights regarding your personal information, subject to legal exceptions and verification requirements.

• Right to know or access the personal information we hold about you
• Right to request correction of inaccurate personal information
• Right to request deletion of your personal information
• Right to receive a portable copy of certain personal information
• Right to opt out of targeted advertising or certain forms of data sharing
• Right to withdraw consent where processing is based on consent
• Right to object to or restrict certain processing, where applicable
• Right not to be discriminated against for exercising your privacy rights

To exercise your privacy rights, please contact us using the details in the “Contact Us” section below. We may need to verify your identity before processing your request.

10. California Privacy Rights

If you are a California resident, you may have rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know, delete, correct, and opt out of certain sharing of personal information.

You may submit a request by emailing us at support@sarahexpress.com.

11. EEA and UK Privacy Rights

If you are located in the European Economic Area or the United Kingdom, you may have additional rights under applicable data protection laws, including the right to object to processing, request restriction of processing, and lodge a complaint with your local supervisory authority.

12. International Data Transfers

Your personal information may be processed in countries other than the one in which you live, including by our service providers, platform providers, fulfillment providers, and logistics partners. Where required by law, we take appropriate steps to protect personal information transferred internationally, including through recognized contractual safeguards or other lawful transfer mechanisms.

13. Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

14. Children’s Privacy

Our Services are not directed to children, and we do not knowingly collect personal information from children under the age of 16. If you believe a child has provided personal information to us, please contact us so we can review and delete it if appropriate.

15. Third-Party Links

Our website may contain links to third-party websites, applications, or platforms. We are not responsible for the privacy, security, or content of third-party services, and we encourage you to review their policies before providing information to them.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. When we do, we will post the updated version on this page and revise the “Last updated” date above.

17. Contact Us

If you have questions about this Privacy Policy or want to exercise your privacy rights, please contact us:

• Email: support@sarahexpress.com
• Phone: +1 234-345-0067
• Mailing Address: Sarah Express, 1200 E Market Street, Suite 1243, Akron, OH 44305, United States

For the purposes of applicable data protection laws, Sarah Express is the controller of your personal information, except where another party acts as controller under applicable law.