1. Introduction

CutieItaBags operates this store and website, including related information, content, features, tools, products, and services, to provide customers with a curated shopping experience (the “Services”).

CutieItaBags is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose personal information when you visit, use, or make a purchase or other transaction using the Services, or otherwise communicate with us.

If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of personal information.

2. Personal Information We Collect or Process

“Personal information” means information that identifies or can reasonably be linked to you or another person. Personal information does not include information collected anonymously or de-identified so that it cannot reasonably identify a person.

Depending on how you interact with the Services, where you live, and as permitted or required by applicable law, we may collect or process the following categories of information:

3. Personal Information Sources

We may collect personal information from the following sources:

• Directly from you: when you create an account, visit or use the Services, communicate with us, or otherwise provide information.
• Automatically through the Services: from your device when you use the Services or visit our websites, including through cookies and similar technologies.
• From service providers: when we engage providers to enable technology or when they collect or process information on our behalf.
• From partners or other third parties: where permitted by applicable law and relevant notices.

4. How We Use Your Personal Information

Depending on how you interact with us, we may use personal information to:

• Provide, tailor, and improve the Services: process payments, fulfill orders, remember preferences, manage accounts, arrange shipping, facilitate returns and exchanges, enable reviews, recommend products, and improve the shopping experience.
• Market and advertise: send marketing, advertising, and promotional communications where permitted, and show advertisements based on activity such as previous purchases or cart activity.
• Improve security and prevent fraud: authenticate accounts, secure payments, detect or investigate possible fraudulent, illegal, unsafe, or malicious activity, and protect our Services and users.
• Communicate with you: provide customer support, respond to requests, and maintain our business relationship with you.
• Address legal reasons: comply with applicable law, respond to valid legal process, investigate disputes or potential violations, and protect our rights and Services.

5. How We Disclose Personal Information

In certain circumstances, we may disclose personal information to third parties for legitimate purposes, subject to this Privacy Policy and applicable law.

• With Shopify, vendors, and service providers that perform services on our behalf, including IT management, payment processing, analytics, customer support, cloud storage, fulfillment, and shipping.
• With business and marketing partners that provide marketing services or advertising. Our partners may use information according to their own privacy notices.
• When you direct, request, or consent to disclosure, such as when information is needed to ship products or when you use social-media widgets or login integrations.
• With affiliates or other entities within our corporate group.
• In connection with a business transaction, legal obligation, subpoena, search warrant, enforcement of terms, or protection of the Services, our rights, users, or others.

Depending on where you reside, you may have the right to opt out of certain sharing or targeted advertising uses. You can exercise available opt-out rights through our data-sharing opt-out page.

6. Relationship with Shopify

The Services are hosted by Shopify. Shopify collects and processes personal information about your access to and use of the Services in order to provide and improve the Services.

Information submitted through the Services may be transmitted to and shared with Shopify and third parties located in countries other than the country where you reside. Shopify may also use information obtained from your interactions with our store, other merchants, and Shopify to provide enhanced features.

In circumstances where Shopify is responsible for processing your information, Shopify may handle requests concerning rights over those processing activities. For more information, review the Shopify Consumer Privacy Policy and visit the Shopify Privacy Portal.

7. Third-Party Websites and Links

The Services may provide links to websites or online platforms operated by third parties. If you follow a link to a site that we do not control, you should review that site’s privacy, security, and other policies.

We do not guarantee and are not responsible for the privacy or security of third-party sites, including the accuracy, completeness, or reliability of information on those sites.

Information shared in public or semi-public venues, including third-party social-networking platforms, may be viewable by other users. Linking to a third-party platform does not by itself imply endorsement.

8. Children’s Data

The Services are not intended for children, and we do not knowingly collect personal information from children under the age of majority in the applicable jurisdiction.

If you are a parent or guardian of a child who has provided personal information, you may contact us using the details below to request deletion, subject to applicable law.

As of the effective date of this Privacy Policy, we do not have actual knowledge that we “sell” or “share,” as those terms are defined by applicable law, personal information of individuals under 16 years of age.

9. Security and Retention of Your Information

No security measures are perfect or impenetrable, and we cannot guarantee perfect security. Information sent to us may not be secure while in transit.

We recommend that you do not use insecure channels to communicate sensitive or confidential information. Do not send passwords, full payment-card numbers, or security codes by ordinary email or chat.

How long we retain personal information depends on factors such as whether we need it to maintain an account, provide Services, comply with legal obligations, resolve disputes, or enforce agreements and policies.

10. Your Rights and Choices

Depending on where you live, you may have some or all of the rights below. These rights are not absolute and may be limited by applicable law.

• Right to access or know: request access to personal information we hold about you.
• Right to delete: request deletion of personal information we maintain about you.
• Right to correct: request correction of inaccurate personal information.
• Right to portability: request a copy of personal information and, in certain circumstances, request transfer to a third party.
• Right to opt out of sale or sharing for targeted advertising: depending on where you reside, request that we stop certain uses defined by applicable privacy laws. Use our data-sharing opt-out page where available.
• Managing communication preferences: opt out of promotional emails using the unsubscribe option. We may still send non-promotional messages about accounts or orders.

If you visit our website with the Global Privacy Control signal enabled, we may treat it as an opt-out request for the device and browser used, and may apply it to an associated Shopify account when possible. Learn more at globalprivacycontrol.org.

If you reside in the UK or European Economic Area, subject to local exceptions and limitations, you may also have rights to object to or restrict processing and to withdraw consent where processing relies on consent.

You may exercise rights through the Services where indicated or by contacting us using the details below. We may need to verify your identity before processing a request. You may designate an authorized agent where permitted by law, but we may require proof of authority and direct identity verification.

We will not discriminate against you for exercising applicable rights and will respond within the period required by applicable law.

11. Complaints

If you have a complaint about how we process personal information, please contact us using the details below. Depending on where you live, you may have the right to appeal our decision or lodge a complaint with your local data-protection authority.

For the EEA, a list of data-protection supervisory authorities is available through the European Data Protection Board.

12. International Transfers

Your personal information may be transferred, stored, and processed outside the country where you live.

If we transfer personal information out of the European Economic Area or the United Kingdom, we will rely on recognized transfer mechanisms such as the European Commission’s Standard Contractual Clauses or equivalent contracts issued by the relevant UK authority, unless the destination has been determined to provide an adequate level of protection.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for operational, legal, or regulatory reasons.

We will post the revised Privacy Policy on this website, update the “Last updated” date, and provide any notice required by applicable law.

14. Contact

If you have questions about our privacy practices or this Privacy Policy, or if you would like to exercise an applicable right, please contact us by email. Email is our preferred contact method.

Business: STARTUP LAB LLC, operating online as CutieItaBags

Email: hello@cuteitabags.com

Phone: +1 (346) 564-4855

Address: 169 Madison Ave STE 11534, Unit 146, New York, NY 10016, United States

For the purposes of applicable data-protection laws, we are the data controller of your personal information.