Privacy Policy

1. Introduction

City Fashions operates this store and website, including all related information, content, features, tools, products, and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). City Fashions is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described herein.

---

2. Personal Information We Collect or Process

When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or that has been de-identified so that it cannot identify or be reasonably linked to you.

We may collect or process the following categories of personal information, including inferences drawn from this personal information, depending on how you interact with the Services, where you live, and as permitted or required by applicable law:

Contact Details:

• Name
• Email address
• Phone number
• Shipping address
• Billing address

Financial Information:

• Credit card or debit card numbers
• Payment card information
• Financial account information
• Transaction details, form of payment, and payment confirmation

Account Information:

• Username
• Password
• Security questions
• Preferences and settings

Transaction Information:

• Items you view, add to your cart, or add to your wishlist
• Purchase history
• Returns, exchanges, or cancellations

Device and Usage Information:

• Browser type and version
• Operating system
• IP address
• Device identifiers
• Cookies and similar technologies
• Navigation and usage patterns on our website

Communications:

• Information you provide when contacting customer support
• Reviews or feedback you submit

---

3. How We Collect Your Information

We may collect personal information from the following sources:

Directly from you:

• When you create an account
• When you make a purchase or other transaction
• When you communicate with us via email, phone, or chat
• When you subscribe to our newsletter
• When you submit reviews or feedback

Automatically through the Services:

• Through cookies and similar tracking technologies when you visit our website
• Through device information collected when you access our Services
• Through your interaction with and navigation of the Services

From third parties:

• Service providers (e.g., payment processors, shipping providers)
• Analytics partners
• Marketing partners
• Social media platforms (if you choose to log in via social media)

---

4. How We Use Your Personal Information

Depending on how you interact with us or which of the Services you use, we may use personal information for the following purposes:

4.1 Provide, Tailor, and Improve the Services

We use your personal information to provide you with the Services, including to:

• Process and fulfill orders
• Process payments
• Arrange shipping and delivery
• Manage returns, exchanges, and cancellations
• Send order confirmations and updates
• Create, maintain, and manage your account
• Remember your preferences and items you are interested in
• Provide customer support
• Enable you to post reviews
• Create a customized shopping experience for you, such as recommending products related to your purchases

4.2 Marketing and Advertising

We use your personal information for marketing and promotional purposes, such as to:

• Send marketing, advertising, and promotional communications by email, text message, or postal mail
• Show you online advertisements for products or services on the Services or other websites, including based on items you previously purchased or added to your cart and other activity on the Services

4.3 Security and Fraud Prevention

We use your personal information to:

• Authenticate your account
• Provide a secure payment and shopping experience
• Detect, investigate, or take action regarding possible fraudulent, illegal, unsafe, or malicious activity
• Protect public safety
• Secure our Services

If you choose to use the Services and register an account, you are responsible for keeping your account credentials safe. We highly recommend that you do not share your username, password, or other access details with anyone else.

4.4 Communicating with You

We use your personal information to:

• Provide you with customer support
• Be responsive to you
• Provide effective services to you
• Maintain our business relationship with you

4.5 Legal Reasons

We use your personal information to:

• Comply with applicable law or respond to valid legal process, including requests from law enforcement or government agencies
• Investigate or participate in civil discovery, potential or actual litigation, or other adversarial legal proceedings
• Enforce or investigate potential violations of our terms or policies

---

5. How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy. Such circumstances may include:

Service Providers:

We share information with Shopify, vendors, and other third parties who perform services on our behalf, including but not limited to IT management, payment processing, data analytics, customer support, cloud storage, fulfillment, and shipping.

Business and Marketing Partners:

We share information with business and marketing partners to provide marketing services and advertise to you. For example, we use Shopify to support personalized advertising with third-party services based on your online activity with different merchants and websites. Our business and marketing partners will use your information in accordance with their own privacy notices.

Depending on where you reside, you may have a right to direct us not to share information about you to show you targeted advertisements and marketing based on your online activity with different merchants and websites.

With Your Consent:

When you direct, request us, or otherwise consent to our disclosure of certain information to third parties, such as to ship you products or through your use of social media widgets or login integrations.

Affiliates:

With our affiliates or otherwise within our corporate group.

Business Transfers:

In connection with a business transaction such as a merger or bankruptcy, to comply with any applicable legal obligations (including to respond to subpoenas, search warrants, and similar requests), to enforce any applicable terms of service or policies, and to protect or defend the Services, our rights, and the rights of our users or others.

We do not sell your personal information to third parties.

---

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and store information about your interactions with our website.

6.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help websites remember your preferences and improve your browsing experience.

6.2 Types of Cookies We Use

6.3 Third-Party Cookies

We may allow third-party service providers (such as Google Analytics, Shopify, and advertising partners) to place cookies on your device to collect information about your online activities across different websites.

6.4 Managing Your Cookie Preferences

You can manage your cookie preferences by:

• Adjusting your browser settings to block or delete cookies
• Using our cookie consent banner when you first visit our website
• Visiting your browser's help section for instructions

Please note that disabling certain cookies may affect the functionality of our website.

---

7. Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services for you. Information you submit to the Services will be transmitted to and shared with Shopify as well as third parties that may be located in countries other than where you reside, in order to provide and improve the Services for you.

In addition, to help protect, grow, and improve our business, we use certain Shopify enhanced features that incorporate data and information obtained from your interactions with our Store, along with other merchants and with Shopify. To provide these enhanced features, Shopify may make use of personal information collected about your interactions with our store, along with other merchants, and with Shopify. In these circumstances, Shopify is responsible for the processing of your personal information, including for responding to your requests to exercise your rights over use of your personal information for these purposes.

To learn more about how Shopify uses your personal information and any rights you may have, you can visit the Shopify Consumer Privacy Policy. Depending on where you live, you may exercise certain rights with respect to your personal information here.

---

8. Third-Party Websites and Links

The Services may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on these sites.

Information you provide on public or semi-public venues, including information you share on third-party social networking platforms, may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use by us or by a third party.

Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators, except as disclosed on the Services.

---

9. Security and Retention of Your Information

9.1 Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of sensitive data during transmission
• Secure storage of personal information
• Regular security assessments and audits
• Access controls and authentication measures

Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee "perfect security." In addition, any information you send to us may not be secure while in transit. We recommend that you do not use unsecure channels to communicate sensitive or confidential information to us.

Your Responsibilities:

• Keep your account password confidential
• Avoid sharing your login credentials with others
• Report any suspicious activity to us immediately

9.2 Retention

How long we retain your personal information depends on different factors, such as whether we need the information to maintain your account, to provide you with Services, comply with legal obligations, resolve disputes, or enforce other applicable contracts and policies.

When your information is no longer needed, we will securely delete or anonymize it.

---

10. Children's Data

The Services are not intended to be used by children, and we do not knowingly collect any personal information about children under the age of majority in your jurisdiction. If you are the parent or guardian of a child who has provided us with their personal information, you may contact us using the contact details set out below to request that it be deleted.

As of the Effective Date of this Privacy Policy, we do not have actual knowledge that we "share" or "sell" (as those terms are defined in applicable law) personal information of individuals under 16 years of age.

---

11. Your Rights and Choices

Depending on where you live, you may have some or all of the rights listed below in relation to your personal information. However, these rights are not absolute, may apply only in certain circumstances, and, in certain cases, we may decline your request as permitted by law.

11.1 Right to Access / Know

You may have a right to request access to personal information that we hold about you.

11.2 Right to Delete

You may have a right to request that we delete personal information we maintain about you.

11.3 Right to Correct

You may have a right to request that we correct inaccurate personal information we maintain about you.

11.4 Right of Portability

You may have a right to receive a copy of the personal information we hold about you and to request that we transfer it to a third party, in certain circumstances and with certain exceptions.

11.5 Right to Opt Out of Sale or Sharing for Targeted Advertising

Depending on where you reside, you may have a right to opt out of the "sale" or "share" of your personal information or to opt out of the processing of your personal information for purposes considered to be "targeted advertising," as defined in applicable privacy laws.

If you visit our website with the Global Privacy Control (GPC) opt-out preference signal enabled, depending on where you are, we will automatically treat this as a request to opt out for the device and browser that you use to visit the website. If we are able to associate the device sending the signal to a Shopify account, we will apply the opt out request to the account as well.

To learn more about Global Privacy Control, you can visit https://globalprivacycontrol.org/.

11.6 Managing Communication Preferences

We may send you promotional emails, and you may opt out of receiving these at any time by using the unsubscribe option displayed in our emails to you. If you opt out, we may still send you non-promotional emails, such as those about your account or orders that you have made.

11.7 Exercising Your Rights

You may exercise any of these rights where indicated on the Services or by contacting us using the contact details provided below.

We will not discriminate against you for exercising any of these rights. We may need to verify your identity before we can process your requests, as permitted or required under applicable law.

In accordance with applicable laws, you may designate an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require that the agent provide proof you have authorized them to act on your behalf, and we may need you to verify your identity directly with us.

We will respond to your request in a timely manner as required under applicable law.

---

12. Additional California Privacy Rights (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act of 2018 ("CCPA"), as amended by the California Privacy Rights Act of 2020 ("CPRA"), provides you with specific rights regarding your personal information. This section describes those rights and explains how to exercise them.

12.1 Categories of Personal Information Collected

In the preceding 12 months, we have collected the following categories of personal information as defined by the CCPA/CPRA:

12.2 Sources of Personal Information

In the preceding 12 months, we have collected personal information from the following sources:

• Directly from you — when you create an account, make a purchase, contact us, subscribe to our newsletter, or submit reviews
• Automatically through the Services — through cookies, device information, and usage data when you visit or interact with our website
• From third-party service providers — including payment processors, shipping carriers, analytics providers, marketing partners, and Shopify

12.3 Business Purposes for Collection

We collect and use personal information for the following business and commercial purposes as defined by the CCPA/CPRA:

• Fulfilling orders and providing customer service
• Processing payments
• Arranging shipping and delivery
• Managing returns, exchanges, and cancellations
• Creating and managing your account
• Personalizing your shopping experience
• Marketing and advertising
• Fraud detection and prevention
• Security and IT operations
• Conducting analytics to improve our Services
• Complying with legal obligations

12.4 Disclosure of Personal Information

In the preceding 12 months, we have disclosed the following categories of personal information to third parties for business purposes:

We have not sold personal information (as defined under CCPA/CPRA) of California residents in the preceding 12 months.

12.5 Right to Know / Access

You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months. Once we receive and verify your request, we will provide you with:

• The categories of personal information we collected about you
• The specific pieces of personal information we collected about you
• The categories of sources from which we collected your personal information
• The business or commercial purpose for collecting your personal information
• The categories of third parties with whom we share your personal information

12.6 Right to Delete

You have the right to request that we delete any of your personal information that we have collected from you and retained, subject to certain exceptions. Once we receive and verify your request, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.

We may deny your deletion request if retaining the information is necessary for us or our service providers to:

• Complete the transaction for which we collected the personal information
• Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity
• Debug products to identify and repair errors
• Exercise free speech rights or ensure the right of another consumer to exercise free speech
• Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et seq.)
• Engage in public or peer-reviewed scientific, historical, or statistical research
• Enable solely internal uses that are reasonably aligned with your expectations
• Comply with a legal obligation
• Make other internal and lawful uses of the information that are compatible with the context in which it was collected

12.7 Right to Correct

You have the right to request that we correct inaccurate personal information that we maintain about you. Once we receive and verify your request, we will use commercially reasonable efforts to correct the inaccurate personal information as directed.

12.8 Right to Opt Out of Sale and Sharing

You have the right to opt out of the "sale" or "sharing" of your personal information as those terms are defined under the CCPA/CPRA. As stated above, we do not sell your personal information to third parties. We may share your personal information with third parties for targeted advertising purposes as described in this Privacy Policy.

You may opt out of the sharing of your personal information for targeted advertising by:

• Clicking the "Do Not Sell or Share My Personal Information" link on our website
• Enabling the Global Privacy Control (GPC) signal in your browser
• Contacting us directly at the information provided below

We will honor your opt-out request and will not share your personal information for targeted advertising purposes once we receive your request.

12.9 Right to Limit Use of Sensitive Personal Information

You have the right to request that we limit the use and disclosure of your sensitive personal information to purposes necessary to perform the Services or provide the goods reasonably expected by an average consumer. We use sensitive personal information only as necessary to provide the Services to you, including to process payments and manage your account.

12.10 Non-Discrimination

We will not discriminate against you for exercising any of your CCPA/CPRA rights. Specifically, we will not:

• Deny you goods or services
• Charge you different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties
• Provide you a different level or quality of goods or services
• Suggest that you will receive a different price or rate for goods or services or a different level or quality of goods or services

However, we may offer you certain financial incentives permitted by the CCPA/CPRA that can result in different prices, rates, or quality levels. Any CCPA/CPRA-permitted financial incentive that we offer will be reasonably related to your personal information's value and contain written terms that describe the program's material aspects.

12.11 Financial Incentive Programs

We may offer loyalty programs, discounts, promotions, or other financial incentives that require you to provide personal information. Participation in any financial incentive program is voluntary, and you may withdraw at any time. If you choose to participate, we will provide you with specific terms and conditions at the time of enrollment.

We do not use financial incentives that are discriminatory. Any financial incentive program will be designed to provide you with reasonably equivalent value in exchange for your personal information and will be supported by a reasonable method for determining the value of the personal information, in compliance with the CCPA/CPRA.

12.12 Verification Process

To protect your privacy, we will verify your identity before responding to your CCPA/CPRA requests. Depending on the nature of your request, we may ask you to:

• Provide your name, email address, and/or order number
• Verify information you have previously provided to us
• Respond to a verification email sent to your account

If you have an account with us, we may verify your request through your account login. If you do not have an account, we will use the information you provide to match it against the information we have on record.

If we cannot verify your identity, we may not be able to fulfill your request. We will respond to verifiable consumer requests within 45 days of receipt. If we need additional time (up to an additional 45 days), we will notify you of the extension and the reason.

12.13 Authorized Agents

You may designate an authorized agent to make a request on your behalf under the CCPA/CPRA. Before accepting a request from an authorized agent, we will:

• Require the agent to provide written authorization signed by you
• Verify your identity directly with us
• Ask you to confirm directly with us that you have authorized the agent to submit the request on your behalf

12.14 Shine the Light Law (California Civil Code § 1798.83)

Under California Civil Code § 1798.83 (the "Shine the Light" law), California residents may request information regarding the disclosure of their personal information to third parties for the third parties' direct marketing purposes. As described in this Privacy Policy, we do not share personal information with third parties for their direct marketing purposes without your consent. California residents may request further information about compliance with this law by contacting us at the information provided below.

---

13. Additional Nevada Privacy Rights (SB 220)

If you are a Nevada resident, you may have the right to opt out of the "sale" of certain "personal information" (as those terms are defined under Nevada law) to third parties. As described in this Privacy Policy, we do not sell your personal information to third parties. If you have any questions or wish to exercise your rights, please contact us at the information provided below.

---

14. Additional Virginia, Colorado, Connecticut, Utah, and Other State Privacy Rights

If you reside in Virginia, Colorado, Connecticut, Utah, or other U.S. states that have enacted comprehensive privacy laws, you may have additional rights regarding your personal information, including:

• The right to confirm whether we process your personal information and to access such information
• The right to delete personal information you have provided to us
• The right to correct inaccuracies in your personal information
• The right to opt out of the processing of personal information for targeted advertising, the sale of personal information, or profiling in furtherance of decisions that produce legal or similarly significant effects

To exercise any of these rights, please contact us using the information provided below. We will respond to your request within the timeframe required by applicable law.

---

15. Complaints

If you have complaints about how we process your personal information, please contact us using the contact details provided below. Depending on where you live, you may have the right to appeal our decision by contacting us using the contact details set out below, or lodge your complaint with your local data protection authority.

---

16. International Data Transfers

Please note that we may transfer, store, and process your personal information outside the country you live in.

If we transfer your personal information out of the European Economic Area or the United Kingdom, we will rely on recognized transfer mechanisms like the European Commission's Standard Contractual Clauses, or any equivalent contracts issued by the relevant competent authority of the UK, as relevant, unless the data transfer is to a country that has been determined to provide an adequate level of protection.

---

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. When we make significant changes, we will:

• Post the revised Privacy Policy on this website
• Update the "Last Updated" date
• Provide notice as required by applicable law

We encourage you to review this Privacy Policy periodically.

---

18. Contact Us

Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please contact us using the details below:

For California Residents — CCPA/CPRA Requests: You may submit a verifiable consumer request by emailing us at info@cityfashions.net with the subject line "CCPA Request" or by calling us at 312-489-0919.

By using our website and services, you acknowledge that you have read and understood this Privacy Policy.