1. Information We Collect

Personal Information

When you create an account, place an order, or interact with our services, we may collect:

• Name and contact information (email address, phone number, shipping address)
• Payment information (processed securely through Stripe)
• Account credentials (username, password)
• Order history and preferences
• Communication history with Bebe (our AI customer service)

Automatically Collected Information

When you visit our website, we automatically collect:

• IP address and device information
• Browser type and version
• Pages visited and time spent
• Referring website
• Cookies and similar tracking technologies

2. How We Use Your Information

We use your information to:

• Process and fulfill your orders
• Communicate with you about your orders and account
• Provide customer support through Bebe
• Send marketing communications (with your consent)
• Improve our products and services
• Detect and prevent fraud
• Comply with legal obligations
• Personalize your experience

3. Information Sharing

We do not sell your personal information. We may share your information with:

Service Providers

• Stripe: Payment processing
• Shipping carriers: Order fulfillment
• Email service providers: Communications
• Analytics providers: Website performance
• OpenAI: Bebe AI customer service (conversations are not used for training)

Legal Requirements

We may disclose your information if required by law, court order, or to protect our rights, property, or safety.

4. Cookies & Tracking

We use cookies and similar technologies to:

• Remember your preferences and settings
• Keep you logged in
• Analyze website traffic and usage
• Provide personalized content
• Track marketing campaign effectiveness

You can control cookies through your browser settings, but disabling cookies may affect website functionality.

5. Data Security

We implement industry-standard security measures to protect your information:

• SSL/TLS encryption for data transmission
• Secure payment processing through Stripe (PCI-DSS compliant)
• Regular security audits and updates
• Access controls and authentication
• Encrypted database storage

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

6. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal information
• Correction: Update inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Opt-out: Unsubscribe from marketing communications
• Data portability: Receive your data in a portable format
• Object: Object to processing of your information

To exercise these rights, contact us through Bebe or email [email protected]

7. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

8. International Transfers

Your information may be transferred to and processed in the United States or other countries where our service providers operate. By using our services, you consent to such transfers.

9. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information (we do not sell)
• Right to deletion
• Right to non-discrimination for exercising CCPA rights

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Your continued use of our services after changes constitutes acceptance of the updated policy.

11. Contact Us

For questions about this Privacy Policy or to exercise your rights: