Privacy Policy
Last updated: 8 July 2025
1. Introduction
BebeAloha LLC (“BebeAloha,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information you share when shopping for our clothing, accessories, and home & garden décor. This Privacy Policy explains what we collect, why we collect it, how we use it, and the choices you have. It applies to bebealoha.com, our mobile experience, and any communication channels linking to this notice.
2. Who Controls Your Data
- Business Name: BebeAloha LLC
- Registered Office: Pauahi Tower – Bishop Square, 1003 Bishop Street, Suite 2700, Honolulu, HI 96813, USA
- Email: [email protected]
- Phone: +1 (808) 237-2400
3. Information We Collect
| Category | Examples | Purpose |
|---|---|---|
| Identification & Contact | Name, shipping & billing address, phone, email | Fulfil orders, customer support |
| Payment | Last 4 digits of card, transaction ID (handled by Stripe/PayPal; we never store full card data) | Fraud prevention, refunds |
| Account | Login credentials (hashed), order history, wish-lists | Account management, reorder convenience |
| Device & Usage | IP, browser type, referral URL, pages visited, time on site | Site analytics, performance optimisation |
| Marketing Preferences | Newsletter opt-ins, SMS consent | Send promotions you request |
| Support Records | Chat transcripts, email threads | Resolve inquiries, improve service |
We do not collect or process sensitive personal information (e.g., Social Security numbers, health data).
4. How & Why We Use Your Information
- Contractual necessity – processing orders, delivery, returns.
- Legitimate interests – preventing fraud, securing our platform, improving products.
- Consent – email/SMS marketing, cookies that are not strictly necessary.
- Legal compliance – tax, accounting, law-enforcement requests.
5. Cookies & Tracking Technologies
| Type | Function | Duration |
|---|---|---|
| Strictly Necessary | Cart & checkout, login security | Session |
| Performance (e.g., Google Analytics) | Understand site usage | 1–24 months |
| Marketing (e.g., Facebook Pixel) | Measure ad performance | 3–12 months |
You may disable non-essential cookies via our cookie banner or your browser settings without affecting core site functionality.
6. Sharing & Disclosure
We never sell personal information. We share only with:
- Payment processors (Stripe, PayPal)
- Fulfilment partners (Print facilities in CA, TX, NC)
- Shipping carriers (USPS, UPS)
- Email/SMS platforms (Klaviyo)
- Analytics & security providers (Google, Cloudflare)
All partners are contractually bound to use the data solely to perform the service we request and to maintain appropriate safeguards.
7. Data Retention
- Orders & invoices: 7 years (IRS requirement)
- Marketing consent records: Until you revoke consent + 2 years
- Inactive accounts: Deleted after 3 years of no activity
When retention ends, data is permanently erased or anonymised.
8. Your Rights
| Right | How to Exercise |
|---|---|
| Access / Copy | Email [email protected]; we respond within 30 days. |
| Correction | Update in “My Account” or request via support. |
| Deletion | “Erase My Data” request via email; some records may remain where required by law. |
| Opt-out of Marketing | Click “Unsubscribe” in any email or reply STOP to SMS. |
| California CCPA | CA residents may request disclosure of categories sold (we sell none) and opt-out of “sharing” for ads. |
We verify identity (e.g., order number + email) before fulfilling rights requests.
9. Children’s Privacy
Our site is not directed to children under 13. We do not knowingly collect personal information from children. If you believe we have inadvertently done so, contact us and we will delete the data promptly.
10. Data Security
- 256-bit TLS encryption for every page
- PCI-DSS Level 1 gateways for payments
- Role-based staff access; 2FA on admin accounts
- Quarterly vulnerability scans and annual penetration testing
11. Policy Updates
We may amend this Privacy Policy to reflect new regulations or operational changes. When we do, we post the new version and update the “Last updated” date. Material changes are communicated via email to account holders.
12. Contact Us
Questions, concerns, or complaints?
Email: [email protected]
Mail: Privacy Officer, BebeAloha LLC, 1003 Bishop St., Ste 2700, Honolulu, HI 96813
We aim to resolve issues internally, but you may also lodge a complaint with your state Attorney General or the FTC.
Mahalo for trusting BebeAloha™. Your data is safe with us—so you can focus on the Aloha style you love.