OOTDY Technology LLC (“OOTDY,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit www.ootdy.com, sign up for our SMS or email programs, interact with our social media pages, or otherwise interact with us (collectively, the “Services”).
This Privacy Policy describes how OOTDY collects, uses, and discloses personal information in connection with the Services. Your use of the Services is subject to our Terms and Conditions. If you are a California, Colorado, Connecticut, Virginia, Utah, Texas, or other U.S. state resident with specific statutory privacy rights, please also review Section 11 (“U.S. State Privacy Rights”). If you provided us your phone number for text messaging, please also review Section 7 (“SMS / Text Messaging”), which describes that program specifically.

1. INFORMATION WE COLLECT

1.1 Information You Provide

When you create an account, place an order, sign up for email or SMS updates, or contact customer service, we collect information such as your name, email address, phone number, shipping and billing address, and any other information you choose to provide. If you send a gift to someone else, we also collect the recipient’s information you provide. Payment card details (such as your card number and security code) are entered directly into and processed by our payment processor(s) — currently Shopify Payments, PayPal, and Afterpay (see Section 4); OOTDY does not receive or store your full card number or card security code, and instead receives limited information necessary to confirm and process your order, such as the order total, payment status, and the last four digits and type of the payment method used.

1.2 Device and Usage Information

  • Device identifiers (device type, operating system, unique device IDs).
  • Log data (IP address, browser type, referring page, pages viewed, date/time of access).
  • Approximate location derived from your IP address.

1.3 Cookies, Pixels, and Similar Technologies

We and our vendors use cookies, pixels, and similar technologies to operate the Services and for analytics and advertising. See Section 6 for details, including the specific vendors we use and how to opt out.

1.4 SMS / Phone Program Data

If you opt in to receive text messages, we collect your phone number, your wireless carrier, consent timestamp and method, message content, and delivery/engagement data. See Section 7 for details specific to this program.

2. HOW WE USE YOUR INFORMATION

We use the personal information described above to:
  • Provide, operate, and maintain the Services, including processing and fulfilling orders and providing customer support.
  • Send transactional and service communications, such as order confirmations and shipping/delivery updates, by email, SMS, or other channels.
  • With your consent, send marketing communications, including promotional emails and marketing text messages (see Section 7).
  • Personalize your shopping experience and show you products or offers we think may interest you, including through interest-based advertising (see Section 6).
  • Detect, investigate, and prevent fraud, abuse, and security incidents.
  • Comply with applicable law, legal process, or enforceable governmental request.
  • Fulfill any other purpose disclosed to you at the time of collection, or as otherwise permitted by law.

3. HOW LONG WE KEEP YOUR INFORMATION

We retain personal information for as long as reasonably necessary for the purposes described in this Policy, including to provide the Services, comply with our legal and tax obligations, resolve disputes, and enforce our agreements. Retention periods vary depending on the type of information and the purpose for which it was collected. We may retain de-identified or aggregated data that can no longer be associated with you for longer periods.

4. HOW WE SHARE YOUR INFORMATION

We do not sell your personal information for money. We may share personal information as described below, which, depending on the purpose, may be considered a “sale” or “sharing” under some U.S. state privacy laws (see Section 11 for your rights regarding this, including the specific categories of information involved).
  • With service providers who help us operate the Services, including our shipping carrier, payment processor, Shopify (our e-commerce and checkout platform), Klaviyo (our email and SMS/text messaging platform), and customer support tools. These providers are contractually prohibited from using your information for their own marketing purposes or from selling it.
  • With our marketing and advertising partners in connection with our advertising efforts. This may include device identifiers and online activity data collected through cookies and pixels (see Section 6), which may constitute personal information under applicable law, rather than your name, email, or phone number.
  • As required by law, legal process, or a governmental request; to protect the rights, property, or safety of OOTDY, our customers, or others; or in connection with a merger, acquisition, financing, or sale of business assets.
If you opt out of the sale/sharing of your personal information (see Section 11), your activity will no longer be used by our advertising partners for these purposes.

5. DO NOT TRACK

Some browsers offer a “Do Not Track” (DNT) signal. There is no accepted industry standard for how companies should respond to DNT signals, and our Services currently do not respond to them. We do, however, honor Global Privacy Control signals as described in Section 6 and Section 11.

6. COOKIES, PIXELS, AND ADVERTISING TECHNOLOGY

We and our partners use the following categories of cookies and similar technologies:
  • Essential cookies — required for core site functionality (cart, checkout, account login).
  • Analytics cookies — Google Analytics, used to understand how visitors use the Site.
  • Advertising/retargeting pixels — the Meta (Facebook/Instagram) Pixel, the TikTok Pixel, and Google Ads tags, used to measure ad performance and show interest-based ads on and off the Site.
You can control cookies through your browser settings, and you can opt out of interest-based advertising through:
  • The Digital Advertising Alliance opt-out tool: https://www.aboutads.info/choices/
  • The Network Advertising Initiative opt-out tool: https://www.networkadvertising.org/choices/
  • Your mobile device’s ad tracking settings (iOS: Settings > Privacy > Tracking; Android: Settings > Ads).

Global Privacy Control (GPC)

We recognize and honor the Global Privacy Control (GPC) signal sent by supported browsers and browser extensions as a valid request to opt out of the sale/sharing of personal information and targeted advertising for California, Colorado, and other residents of states that recognize opt-out preference signals. We will not charge a fee or degrade your experience because you use a GPC signal.

7. SMS / TEXT MESSAGING PROGRAM

This section describes how we collect and use information specifically in connection with our text messaging program, and supplements the rest of this Privacy Policy and Section 6 (“TEXT MESSAGING”) of our Terms and Conditions.

7.1 What We Collect

  • The mobile phone number you provide when you opt in.
  • Your consent status, the date, time, and method of opt-in (for example, via our website pop-up), and any opt-out or HELP requests.
  • Message content, delivery status, and engagement data (for example, whether a message was delivered or a link was clicked).
  • Your wireless carrier, as needed to deliver messages.

7.2 How We Use It

  • To send you the informational and/or marketing text messages you agreed to receive, as described in our Terms and Conditions.
  • To honor opt-out (STOP) and support (HELP) requests.
  • To maintain records demonstrating your consent, as required by the Telephone Consumer Protection Act (TCPA) and similar laws.

7.3 Who We Share It With

We use Klaviyo to send text messages on our behalf. That provider acts as our service provider/processor and may access your phone number and message data solely to deliver the Services to you. Except as required or permitted by law, or with your consent, we do not sell, rent, or trade your SMS opt-in data or consent status to third parties for their own marketing purposes.

7.4 Your Choices

You may opt out at any time by replying STOP to any text message, or by contacting us using the information in Section 15. Reply HELP for assistance. Message and data rates may apply. See Section 6 of our Terms and Conditions for the full program terms.

8. CHILDREN'S PRIVACY

As a matter of business policy, we ask that only individuals age 18 or older create an account, place an order, or sign up for our email or SMS programs; our eligibility requirements are set out in our Terms and Conditions.
Separately, and as a matter of legal compliance, the Services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13 within the meaning of the Children’s Online Privacy Protection Act (COPPA). If we obtain actual knowledge that we have collected personal information from a child under 13 without verifiable parental consent, we will delete that information as soon as reasonably practicable. If you believe a child has provided us with personal information, please contact us using the information in Section 15.

9. GDPR (EEA / UK RESIDENTS)

This section applies if you are located in the European Economic Area (EEA) or the United Kingdom (UK) and supplements the rest of this Policy for purposes of the EU General Data Protection Regulation and the UK GDPR.

9.1 Data Controller

The data controller responsible for your personal information is OOTDY Technology LLC. You can contact us using the information in Section 15.

9.2 Legal Basis for Processing

  • Contract — to process and fulfill your orders and provide the Services you request.
  • Consent — to send marketing emails or text messages, and for non-essential cookies/pixels; you may withdraw consent at any time as described in Sections 6 and 7.
  • Legitimate interests — for fraud prevention, security, analytics, and improving the Services, balanced against your rights and interests.
  • Legal obligation — to comply with tax, accounting, and other applicable legal requirements.

9.3 International Data Transfers

Because we are based in the United States, personal information from the EEA/UK is transferred to and processed in the United States. Where required, we rely on appropriate safeguards for these transfers, such as the European Commission’s Standard Contractual Clauses (SCCs) (and the UK International Data Transfer Addendum, where applicable) with our service providers. You may contact us for more information about the safeguards used for a specific transfer.

9.4 Retention

We retain EEA/UK personal information in line with the retention principles described in Section 3, and no longer than necessary for the purposes for which it was collected, taking into account legal, accounting, and reporting requirements.

9.5 Your Rights

You have the right to request access to, correction of, deletion of, or restriction on the processing of your personal information, to object to processing based on legitimate interests or for direct marketing, to request portability of your data, and to withdraw consent at any time where we rely on consent. To exercise these rights, contact us using the information in Section 15. You also have the right to lodge a complaint with your local data protection authority.

10. HOW WE PROTECT YOUR INFORMATION

We use administrative, technical, and physical safeguards designed to protect your personal information, including SSL/TLS encryption for data in transit for sensitive information such as payment details. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

11. U.S. STATE PRIVACY RIGHTS

This section applies to residents of California, Colorado, Connecticut, Virginia, Utah, Texas, and other U.S. states with comprehensive consumer privacy laws, to the extent those laws apply to our processing of your personal information. Where a term below is capitalized and not otherwise defined, it has the meaning given under the applicable state law.

11.0 Sources, Purposes, Retention, and Sensitive Information at a Glance

  • Sources of collection — directly from you (account, checkout, SMS/email opt-in, customer service), automatically from your device (Section 1.2–1.3), and from the service providers and advertising partners listed in Section 4.
  • Purposes of processing — as described in Section 2 (operating the Services, transactional and marketing communications, personalization/advertising, fraud prevention, legal compliance).
  • Retention period — as described in Section 3; we do not currently apply different retention periods by state, but will update this section if that changes.
  • Sensitive personal information — We do not knowingly collect sensitive personal information as defined under CCPA/CPRA.
  • Categories sold/shared in the preceding 12 months — identifiers (name, email, phone, address) and commercial information (order/purchase history) are shared with our e-commerce platform provider but are not sold or shared with our advertising partners; internet/device activity (browsing, cookies, device IDs) is shared with our e-commerce platform provider and our advertising partners, as described in Section 4.

11.1 Your Rights

  • Right to Know / Access — request the categories and specific pieces of personal information we have collected about you, and the categories of sources, purposes, and third parties involved.
  • Right to Delete — request deletion of personal information we have collected from you, subject to certain exceptions (for example, to complete a transaction or comply with a legal obligation).
  • Right to Correct — request that we correct inaccurate personal information.
  • Right to Opt Out of Sale/Sharing and Targeted Advertising — opt out of the “sale” or “sharing” of your personal information and its use for cross-context behavioral/targeted advertising. See Section 11.3.
  • Right to Non-Discrimination — we will not deny goods or services, charge different prices, or provide a different level of service because you exercised a privacy right.
  • Right to Limit Use of Sensitive Personal Information — where applicable, limit our use of sensitive personal information to purposes necessary to provide the Services.

11.2 How to Exercise Your Rights

You may submit a request by emailing contact@ootdyjewelry.com. We will verify your identity before responding, generally using information you have already provided us (such as order history or account details). We will respond within 45 days, with a possible one-time 45-day extension where reasonably necessary; we will notify you if an extension is needed. An authorized agent may submit a request on your behalf with your written permission, subject to identity verification.

11.3 Do Not Sell or Share My Personal Information

You can opt out of the sale/sharing of your personal information and targeted advertising at any time by:
  • Clicking “Do Not Sell or Share My Personal Information,” available at https://ootdy.com/pages/data-sharing-opt-out and linked in our site footer, or
  • Enabling a Global Privacy Control (GPC) signal in a supported browser (see Section 6), which we will honor automatically, or
  • Emailing contact@ootdyjewelry.com with your request.

11.4 Appeals

If we decline to act on your request, and you are a resident of a state that provides an appeal right (currently including Colorado, Connecticut, Montana, Oregon, and Virginia), you may appeal our decision by emailing contact@ootdyjewelry.com within 30 days of our decision, including your name, the date of our denial, and the basis for your appeal. We will respond to appeals within the time period required by applicable law.

11.5 Nevada Residents

Nevada law permits Nevada residents to opt out of certain sales of personal information, even if we are not currently engaging in such sales. You may submit such a request to contact@ootdyjewelry.com.

11.6 Financial Incentive Notice

From time to time, we offer a financial incentive — such as a percentage discount, free shipping, or a similar benefit — in exchange for signing up to receive marketing emails and/or text messages. This is a financial incentive program under California law.
  • Material terms — the specific incentive currently being offered, and any conditions or restrictions on it, are disclosed to you at the point of collection (for example, in a website pop-up, spin-to-win widget, or at checkout) before you opt in. Because the specific offer changes from time to time, we do not restate it here; the version shown to you at signup is the version that applies to you.
  • How to participate — you opt in using the mechanism through which the offer is presented (for example, submitting your phone number or email address and agreeing to the applicable consent language).
  • Value of your information — the value of the personal information you provide is reasonably related to the value of the incentive offered. We estimate this relationship based on the anticipated revenue generated from marketing communications sent to program participants, less the administrative, technical, and marketing costs of operating the program (including message delivery costs and the cost of the discount, gift, or other benefit itself).
  • Your right to withdraw — you may withdraw from a marketing program at any time by unsubscribing (for email) or replying STOP (for text messages) as described in Sections 6, 7, and 11.3. Withdrawing ends your participation in the associated incentive program going forward, but does not affect the validity of any discount code or benefit you already received.

12. THIRD-PARTY LINKS AND INTEGRATIONS

The Services may contain links to third-party websites or integrate with third-party platforms (for example, social media plug-ins). We are not responsible for the privacy practices of those third parties, and we encourage you to review their privacy policies.

13. INTERNATIONAL DATA TRANSFERS

We are based in the United States, and personal information we collect may be transferred to, stored, and processed in the United States or other countries that may have data protection laws different from those in your country of residence.

14. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. We will post the revised Policy with an updated “Last Updated” date, and where required by law, we will provide additional notice of material changes. Your continued use of the Services after the effective date constitutes acceptance of the revised Policy.

15. CONTACT US

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at:
  • Email: contact@ootdyjewelry.com