Privacy Policy

Last Updated: 9/1/2026

This Privacy Policy explains how MollyGrace Boutique ("MollyGrace Boutique," "we," "us," or "our") collects, uses, discloses, and protects personal information when you visit our website, place an order, or otherwise interact with us.

We operate exclusively online. You can reach us at any time at info@mollygraceboutique.com.

This Policy is written to comply with United States federal and state privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (collectively, the "CCPA"), the Virginia Consumer Data Protection Act, the Colorado Privacy Act, the Connecticut Data Privacy Act, the Utah Consumer Privacy Act, and comparable laws in other states as they take effect.

---

1. Personal Information We Collect

We collect the following categories of personal information. Not all categories apply to every customer.

Payment information. We do not store full payment card numbers on our systems. Card details are collected and processed directly by our third-party payment processors.

Sensitive personal information. We do not intentionally collect sensitive personal information as that term is defined under the CCPA, and we do not use or disclose it for purposes requiring a right to limit.

Information from children. Our website is intended for adults. We do not knowingly collect personal information from anyone under 16. See Section 11.

---

2. How We Use Your Information

We use personal information for the following business and commercial purposes:

• Processing, fulfilling, and delivering your orders
• Handling returns, exchanges, and refunds
• Providing customer service and responding to your inquiries
• Sending order confirmations, shipping notifications, and other transactional messages
• Sending marketing communications, where you have not opted out
• Displaying and measuring advertising, including targeted advertising on third-party platforms
• Detecting, investigating, and preventing fraud and unauthorized activity
• Analyzing and improving our website, products, and services
• Complying with legal obligations and enforcing our terms

We do not use your personal information for automated decision-making that produces legal or similarly significant effects.

---

3. How We Share Your Information

We disclose personal information to service providers and other parties in the following categories:

• Payment processors, to authorize and complete transactions
• Shipping and fulfillment partners, to deliver your order
• E-commerce platform, hosting, and IT providers, to operate our website
• Email and customer service platforms, to communicate with you
• Analytics providers, to understand how our website is used
• Advertising and social media platforms, for the purposes described in Section 4
• Legal and regulatory recipients, where disclosure is required by law, subpoena, or court order, or is necessary to protect our rights, safety, or property

We may also transfer personal information in connection with a merger, acquisition, financing, or sale of all or part of our business.

---

4. Targeted Advertising, "Sale," and "Sharing"

Please read this section carefully.

We use advertising and analytics technologies on our website, including the Meta (Facebook and Instagram) pixel and similar tools. These technologies allow our advertising partners to receive information about your activity on our site — such as pages viewed, items added to cart, and purchases — and to use it to show you and others relevant advertising.

Under California law, this activity is considered "sharing" for cross-context behavioral advertising. Under the laws of Virginia, Colorado, Connecticut, Utah, and other states, it may be considered targeted advertising or a "sale" of personal information, even though we do not receive money in exchange for it.

We disclose the following categories of personal information for these purposes: identifiers, commercial information, internet or network activity, approximate geolocation, and inferences.

You have the right to opt out. You may do so by:

• Emailing us at info@mollygraceboutique.com with the subject line "Opt Out of Sale/Sharing"
• Using the cookie or privacy preferences control available on our website
• Enabling a Global Privacy Control (GPC) signal in your browser or extension, which we honor as a valid opt-out request for the browser and device on which it is enabled

We do not knowingly sell or share the personal information of consumers under 16 years of age.

---

5. Cookies and Tracking Technologies

We use cookies, pixels, tags, and similar technologies to:

• Operate essential website functions, including your cart and checkout
• Remember your preferences
• Measure website performance and analyze usage
• Deliver and measure advertising

Most browsers allow you to refuse or delete cookies through their settings. Disabling essential cookies may prevent parts of our website from working correctly. Disabling cookies is separate from the opt-out described in Section 4.

Do Not Track. Our website does not currently respond to browser "Do Not Track" signals. We do honor Global Privacy Control signals as described above.

---

6. Your Privacy Rights

Depending on your state of residence, you may have the following rights:

• Right to know and access. Request confirmation that we process your personal information, and obtain a copy of it, including the categories collected, the sources, the purposes, and the categories of third parties to whom it was disclosed.
• Right to delete. Request deletion of personal information we have collected from you, subject to legal exceptions.
• Right to correct. Request correction of inaccurate personal information.
• Right to data portability. Receive your personal information in a portable and, where technically feasible, readily usable format.
• Right to opt out of sale, sharing, and targeted advertising. As described in Section 4.
• Right to limit use of sensitive personal information. We do not use sensitive personal information in ways that trigger this right.
• Right to non-discrimination. We will not deny you goods or services, charge you a different price, or provide you a different level of quality because you exercised a privacy right.

---

7. How to Exercise Your Rights

Submit any request to info@mollygraceboutique.com. Please tell us which right you wish to exercise and include enough information for us to locate your records — typically the email address used for your order and, where applicable, an order number.

Verification. To protect your information, we will take reasonable steps to verify your identity before acting on a request to know, delete, or correct. We may ask you to confirm details already in our records. We will not ask for more information than is necessary.

Authorized agents. You may use an authorized agent to submit a request on your behalf. We may require written proof of the agent's authority and may ask you to verify your identity directly.

Response times. We will confirm receipt of your request within 10 business days and respond substantively within 45 calendar days. Where reasonably necessary, we may extend this by an additional 45 days and will notify you of the extension and the reason for it.

Cost. Requests are free of charge. We may charge a reasonable fee or decline a request that is manifestly unfounded, excessive, or repetitive, and will explain our reasoning if we do.

---

8. Appeals

If we decline your request, you may appeal that decision by emailing info@mollygraceboutique.com with the subject line "Privacy Request Appeal" within 60 days of our response.

We will review the appeal and inform you in writing of our decision, together with our reasoning, within 45 days. If we deny the appeal, we will provide you with information about how to submit a complaint to your state Attorney General.

---

9. Data Retention

We retain personal information only as long as necessary for the purposes described in this Policy. In practice this means:

• Order and transaction records are retained for as long as required to satisfy tax, accounting, and consumer protection obligations.
• Customer service correspondence is retained for as long as needed to resolve your matter and handle any related follow-up.
• Marketing contact details are retained until you unsubscribe or ask us to delete them.
• Website analytics and advertising data are retained according to the retention settings of the relevant platform.

When personal information is no longer needed, we delete or de-identify it.

---

10. Data Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information against loss, misuse, and unauthorized access or disclosure. Our website uses encryption in transit, and payment data is handled by PCI-compliant processors.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

---

11. Children's Privacy

Our website and products are directed to adults. We do not knowingly collect personal information from children under 13, consistent with the Children's Online Privacy Protection Act, and we do not knowingly sell or share the personal information of consumers under 16.

If you believe a child has provided us with personal information, please contact us at info@mollygraceboutique.com and we will delete it promptly.

---

12. Third-Party Links

Our website may contain links to third-party sites and services. This Policy does not apply to them, and we are not responsible for their privacy practices. We encourage you to review the privacy policy of any site you visit.

---

13. Changes to This Privacy Policy

We may update this Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. If we make material changes, we will provide a more prominent notice, which may include emailing you. Your continued use of our website after an update takes effect constitutes acceptance of the revised Policy.

---

14. Contact Us

If you have questions, comments, or complaints about this Privacy Policy or our handling of your personal information, contact us at:

MollyGrace Boutique Email: info@mollygraceboutique.com