Privacy policy

Last Updated: August 13, 2026
Thank you for choosing Haylenbox. We take the protection of your privacy very seriously and have implemented a comprehensive set of measures to secure your personal information. This Privacy Policy describes how we collect, use, share and protect your personal data, and outlines your statutory privacy rights as a consumer. Please read this policy carefully before accessing our website or using our services.
This policy applies to all visitors of haylenbox.store. It complies with Google Merchant Center (GMC) requirements, U.S. FTC consumer protection regulations, and the California Consumer Privacy Act (CCPA / CPRA) for customers located within the United States.

1. Collection and Use of Information

1.1 Order and Account Personal Information

When you create an account or place an order on our website, we collect personally identifiable information necessary to complete transactions, including but not limited to your full name, billing and shipping address, email address, phone number, and payment verification details. We use this information solely to process orders, arrange delivery, provide after-sales support, verify transaction security, and respond to customer inquiries.

1.2 Website Access and Technical Information

When you browse our website, we automatically collect non-identifiable technical data, such as your IP address, device type, browser version, operating system, access timestamps, browsing duration, page clicks, and website interaction activity. This data helps us optimize site performance, resolve technical issues, improve user experience, and analyze operational metrics.

1.3 Cookies and Tracking Technologies (Required for GMC Compliance)

Our website uses cookies, web beacons, and pixel tracking technologies to recognize returning visitors, store browsing preferences, save shopping cart data, support website analytics, and measure marketing attribution.
Third-party tracking tools we utilize:
  • Google Analytics & Google Ads: Collect website traffic and user behavior data to optimize marketing campaigns and evaluate store performance for Google Merchant Center.
  • Facebook Pixel: Track conversion events for social media advertising and audience retargeting.
  • Shopify Cookies: Essential functional cookies used to maintain shopping cart data, enable checkout, and verify account logins.
You may disable cookies through your browser settings at any time. Disabling cookies will not prevent basic website access, but it may cause shopping cart loss, interrupt checkout, or limit personalized browsing features.

1.4 Methods of Information Collection

We gather user data only through lawful channels: information actively submitted by you during registration and checkout; and technical data automatically collected via cookies and server logs while you use our site.
We share only essential shipping information (recipient name, address, contact number) with logistics partners for order fulfillment in compliance with applicable data protection laws.

2. Third-Party Data Processors and Information Disclosure

2.1 Authorized Third-Party Service Providers

To maintain website functionality, secure payments, and complete order fulfillment, we engage trusted third-party service providers to process your data. All partners are bound by data confidentiality agreements and must adhere to international privacy laws. Our primary data processors include:
  • Shopify (E-commerce Platform Data Processor): Hosts our online store, processes order data, stores transaction records, and operates the checkout system acting as our designated data processor.
  • Approved Payment Gateways: Process credit card and online payments under PCI DSS encryption standards. We do not store plaintext payment information on our website.
  • Logistics and Shipping Carriers: Receive limited shipping information to deliver products and handle after-sales logistics.
  • Google and Meta (Facebook): Process anonymized browsing and conversion data for site analytics and advertising optimization.
We do NOT sell, rent, or trade your personally identifiable information for commercial purposes.

2.2 Legally Required Disclosure

We may disclose your personal information when required by applicable law, court orders, government regulatory requests, or to protect the lawful rights and safety of our website, users, and the public. We will disclose only the minimum information necessary to satisfy legal requirements and will take reasonable steps to safeguard your privacy.

3. Information Security

We follow industry-standard security practices to protect your personal information against unauthorized access, disclosure, alteration, loss, or misuse. All browsing and checkout traffic on our website uses SSL end-to-end encryption. User data is stored on secure encrypted servers maintained by Shopify. We conduct regular security audits and system updates. Except for the authorized service providers listed above, we will not share your personal data with unauthorized third parties.

4. Defined Data Retention Periods (CCPA & GMC Compliant)

We retain your personal information only for the minimum time required to fulfill contractual and legal obligations. Specific retention rules are outlined below:
  • Order and transaction records: Retained for 7 years to satisfy cross-border recordkeeping, dispute resolution, and tax compliance requirements.
  • Account personal information: Stored while your account remains active. Information will be permanently deleted within 30 days after you submit an account deletion request.
  • Browsing and cookie technical data: Automatically purged 12 months following your last website visit.
When the retention period expires, we securely delete or anonymize your personal information to remove all identifiable user attributes.

5. Your Consumer Privacy Rights (CCPA / CPRA for U.S. Residents)

If you are a resident of the United States, especially a California resident, you hold the following statutory privacy rights under the California Consumer Privacy Act (CCPA / CPRA) and U.S. state consumer protection laws:
  • Right to Access: You may request disclosure of the categories, purposes, and sharing scope of personal information we collect about you.
  • Right to Delete: You may request deletion of your personal information held by us, subject to legally permitted exceptions.
  • Right to Correct: You may update inaccurate or incomplete personal information linked to your account and orders.
  • Right to Opt Out: You may opt out of non-essential data tracking and targeted advertising.
  • Right to Non-Discrimination: We will not discriminate against you or offer different pricing or services because you exercise your privacy rights.
To exercise your privacy rights, submit your request via our official email: support@haylenbox.store. We will verify your identity and respond to all valid requests within 45 calendar days.
Do Not Sell My Personal Information Notice: We never sell any user personal information, and no data sales activities occur on this website.

6. Your Privacy Choices

You may choose whether to provide personal information when using our website. Please note that if you decline to supply necessary shipping and order information, we will be unable to process your orders or provide after-sales services. You can adjust your browser cookie settings at any time to manage data tracking permissions.

7. Policy Updates

We reserve the right to revise this Privacy Policy periodically to reflect business adjustments and updated legal requirements. All revised terms will be posted on this page with an updated effective date. If we implement material changes affecting your core privacy rights, we will place prominent notices on our website. Your continued use of the website after updates are published constitutes acceptance of the revised policy.

8. Contact Information

If you have questions, concerns, or formal rights requests related to this Privacy Policy or the protection of your personal data, please contact our customer support team:

Email: support@haylenbox.store
We aim to respond and resolve inquiries within 1–3 business days.