Privacy Policy

1. INTRODUCTION AND SCOPE

This Privacy Policy describes how Pin Up Girl Wellness (referred to as “The Company,” “we,” “us,” or “our”) collects, uses, protects, and handles your Personally Identifiable Information (PII). PII is information that can be used on its own or with other information to identify, contact, or locate a single person.

2. INFORMATION WE COLLECT AND HOW IT IS USED

2.1 Information We Collect. We may collect PII, which includes, but is not limited to, your name, email address, mailing address, phone number, and payment information when you provide it to us. We also automatically collect “Device Information” such as your IP address, browser type, and cookie data as you interact with our site.

2.2 How We Collect Information. We collect information when you register, place an order, subscribe to a newsletter, fill out a form, use Live Chat, or otherwise enter information on our site. Device Information is collected automatically as you browse.

2.3 How We Use Your Information. We use your information to:

• Process your transactions and fulfill orders;
• Personalize your site experience;
• Improve our website and services;
• Service your customer service requests;
• Follow up on correspondence (live chat, email, social media, or phone);
• Request ratings and reviews;
• Send you marketing communications (you may opt-out at any time).

3. PROTECTION AND SECURITY OF INFORMATION

We implement a variety of security measures to maintain the safety of your personal information:

• Our website is scanned regularly for security holes and known vulnerabilities.
• Your personal information is contained behind secured networks and is only accessible by a limited number of persons with special access rights who are required to keep the information confidential.
• All sensitive information is encrypted via Secure Socket Layer (SSL) technology.
• All transactions are processed through a gateway provider and are not stored or processed on our servers.

4. COOKIES AND TRACKING TECHNOLOGIES

Our site uses “cookies” and similar tracking technologies (such as pixels and web beacons). Cookies are small files transferred to your device’s storage that enable our systems to recognize your browser and remember certain information. We use these technologies for:

• Essential Functionality: Remember and process items in your shopping cart and maintain your secure account session. These are required for the site to function correctly.
• Personalization: Understand and save your preferences for future visits based on your site activity.
• Analytics: Compile aggregate data about site traffic and interactions through tools like Google Analytics to improve our site experience.
• Advertising and Remarketing: Allow third-party partners (such as Google, Meta, and TikTok) to track your visit so we can show you relevant advertisements on other websites and measure the effectiveness of our marketing campaigns.

You can choose to turn off cookies through your browser settings or via the cookie consent preferences on our Site. However, if you disable essential cookies, core site features (such as the shopping cart and checkout) will not function properly.

5. THIRD-PARTY SHARING AND DISCLOSURE

We share your Personal Information with third-party service providers to help us operate our business and provide services to you. For example:

• E-Commerce Platform: We use WooCommerce to power our online store.
• Payment Processing: We use secure payment processors (such as Stripe or PayPal) to handle transactions. We do not store your full credit card information on our servers.
• Order Fulfillment: We share your name and shipping address with providers (such as ShipStation, USPS, or FedEx) to deliver your orders.
• Analytics: We use Google Analytics to help us understand how our customers use the Site.
• Marketing and Communications: We use platforms (such as Klaviyo) to manage our email and text messaging communications. This includes using tracking technologies to provide features like abandoned cart reminders and personalized marketing offers based on your interactions with our Site.

5.1 Advertising and Remarketing: We also share information with third-party advertising partners (such as Google and Meta) to provide you with targeted advertisements or marketing communications (remarketing). Under some privacy laws, including the California Consumer Privacy Act (CCPA), this use of data for advertising may be considered a “sale” or “sharing” of personal information. You have the right to opt-out of this activity as described in Section 7.

5.2 Third-Party Links: Occasionally, we may include or offer third-party products or services on our website. These third-party sites have separate and independent privacy policies. We have no responsibility or liability for the content and activities of these linked sites.

5.3 Social Commerce and Communications

We may offer products for sale through third-party platforms such as TikTok Shop, Ebay, or Instagram Shopping (Meta).

• Order Information: When you make a purchase through these platforms, we receive the personal information necessary to fulfill your order (such as your name, shipping address, and order details) as provided by the platform.
• Direct Communications: Any information provided to us via Direct Message (DM) or comments on social media is used specifically to address your inquiries or provide customer support.
• Platform Policies: These third-party platforms collect and process their own data according to their respective privacy policies. We are only responsible for the data we retrieve and store within our own systems (such as the WooCommerce database or our customer support portal).

6. DATA RETENTION

We retain your Personal Information only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

• Order and Transaction Information: We retain transaction records for at least 7 years to comply with tax, audit, and legal obligations.
• Marketing Data: We retain your email and interaction data for as long as you remain an active subscriber. If you have not interacted with our communications for 24 months, we will anonymize or delete your data from our active marketing lists.
• Customer Accounts: Information associated with your account is kept as long as the account is active. If you request account deletion, we will remove your data within 30 days, subject to our legal record-keeping requirements.

7. YOUR CALIFORNIA PRIVACY RIGHTS (CCPA)

If you are a California resident, you have the following specific rights regarding your personal information:

• The Right to Know: The right to request that we disclose what personal information we collect, use, disclose, and sell.
• The Right to Delete: The right to request the deletion of your personal information that we have collected.
• The Right to Opt-Out of Sale/Sharing: The right to opt-out of the “sale” or “sharing” of your personal information, which (as defined by California law) includes our use of data for cross-context behavioral advertising.
• The Right to Non-Discrimination: The right not to be discriminated against for exercising any of your CCPA rights.

How to Exercise Your Rights: To exercise your Right to Know, Right to Opt-Out of Sale/Sharing, or Right to Delete, please contact us at cs@pinupgirlwellness.com.

How We Handle Do Not Track Signals: Please note that we do not alter our Site’s data collection and use practices when we see a Do Not Track signal from your browser.

8. YOUR EUROPEAN UNION (EU) PRIVACY RIGHTS (GDPR)

If you are a resident of the European Economic Area (EEA), you have certain data protection rights. We process your personal information under the following legal bases:

• Consent: You have given us clear consent to process your personal data for a specific purpose.
• Contract: The processing is necessary for a contract we have with you (such as to fulfill an order you placed).
• Legitimate Interests: The processing is necessary for our legitimate interests (such as for internal analytics or fraud prevention), so long as those interests are not overridden by your rights.

You have the following rights under the GDPR:

• The right to access, update, or delete the information we have on you.
• The right of rectification.
• The right to object to our processing.
• The right of restriction.
• The right to data portability.
• The right to withdraw consent at any time.

The Data Controller for your information is: Pin Up Girl Wellness, 396 Tesconi Ct., Santa Rosa, CA 95401, USA. To exercise these rights, please contact us at privacy@pinupgirlwellness.com.

9. CHILDREN’S PRIVACY

We do not specifically market to children under the age of 13 or the applicable age of digital consent in your jurisdiction.

10. DATA BREACH NOTIFICATION (FAIR INFORMATION PRACTICES)

Should a data breach occur, we will notify affected users via email within a reasonable timeframe, as required by law, in accordance with Fair Information Practices.

11. EMAIL MARKETING COMPLIANCE (CAN-SPAM ACT)

We collect your email address to send information, respond to inquiries, process orders, and send marketing communications. To be in compliance with CAN-SPAM, we:

• Do not use false or misleading subjects or email addresses;
• Identify the message as an advertisement in a reasonable way;
• Include the valid physical address of our business headquarters;
• Honor opt-out/unsubscribe requests quickly;
• Allow users to unsubscribe via the link at the bottom of each email.

12. CONTACTING US

For questions regarding this privacy policy, please contact us using the information below:

Mailing address: Pin Up Girl Wellness 396 Tesconi Ct., Santa Rosa, CA 95401

Email: privacy@pinupgirlwellness.com

Last updated: April 14, 2026