Privacy policy

PRIVACY POLICY

Effective Date: August 2, 2026

Last Updated: August 2, 2026

At a glance. Cecilia's House uses personal information to operate our store, process and deliver orders, provide customer service, protect customers and our business, improve the shopping experience, and communicate with you. We may also use cookies and similar technologies for analytics, personalization, and advertising as described below.

You can contact us about privacy at customercare@ceciliashouse.com.

This Privacy Policy explains how Cecilia's House LLC ("Cecilia's House," "we," "us," or "our") collects, uses, discloses, and protects personal information when you visit ceciliashouse.com, use our account or order-tracking pages, communicate with us, submit content, or purchase or use a product or service that links to this Policy (collectively, the "Services").

This Policy is a notice of our privacy practices. It does not apply to a third party's independent practices, including a website, app, payment provider, carrier, financing provider, social platform, or other service that has its own privacy policy.

1. PERSONAL INFORMATION WE COLLECT

"Personal information" means information that identifies, relates to, describes, or could reasonably be linked with an individual or household. It does not include information that applicable law excludes, such as certain publicly available, deidentified, or aggregated information.

Identifiers and contact information

Examples: Name, email address, telephone number, billing and shipping address, account identifier, and similar contact details.

Account and authentication information

Examples: Account profile information, login or one-time-code activity, preferences, and information used to verify or secure an account.

Commercial and transaction information

Examples: Products viewed or purchased, cart activity, order history, discounts, gift messages, waitlist or restock requests, returns, refunds, shipping, and package-protection information.

Payment information

Examples: Billing details, payment method type, transaction status, payment confirmation, and fraud-prevention information. Payment providers generally process full payment-card details on our behalf.

Communications and submitted content

Examples: Customer-service messages, survey responses, reviews, ratings, photographs, videos, testimonials, feedback, social-media interactions, and other content you submit.

Marketing and preference information

Examples: Email or text-message subscription status, marketing preferences, promotion participation, and your interactions with our communications.

Device, network, and online activity

Examples: IP address, browser and device type, operating system, cookie or pixel identifiers, pages viewed, searches, clicks, referring pages, session activity, and diagnostic or security logs.

Approximate location

Examples: General location inferred from an IP address or shipping information. We do not need precise geolocation to provide the ordinary Services.

Inferences

Examples: Preferences, likely interests, shopping patterns, or fraud and security indicators derived from the information described above.

Sensitive personal information

Examples: Account access credentials and payment or financial-account information, when handled for checkout, fraud prevention, or account security. We use this information only for permitted operational, security, legal, or other disclosed purposes.

Information you provide

We collect information you provide when you create or access an account, place or manage an order, join a waitlist, subscribe to marketing, submit a form or review, participate in a promotion, request support, or otherwise communicate with us.

Information collected automatically

We and our service providers may automatically collect device and online-activity information through cookies, pixels, tags, software development kits, local storage, server logs, and similar technologies when you use the Services.

Information from other sources

We may receive information from Shopify; payment and financing providers; shipping carriers and fulfillment providers; package-protection providers; account, review, waitlist, marketing, analytics, advertising, and fraud-prevention services; social platforms; referral partners; and other parties involved in a transaction or interaction you request.

2. HOW WE USE PERSONAL INFORMATION

We may use personal information to:

  • provide, operate, maintain, and improve the Services;
  • create and secure accounts and authenticate account access;
  • process payments, accept and fulfill orders, arrange shipping, provide order updates, and handle returns, refunds, package-protection matters, and customer-service requests;
  • communicate about accounts, orders, products, security, policy changes, and support;
  • send marketing email or text messages when permitted and manage subscription choices;
  • operate promotions, waitlists, restock alerts, reviews, surveys, and loyalty or engagement features;
  • personalize content, recommendations, and offers;
  • measure traffic, understand how the Services are used, and improve performance;
  • advertise and measure advertising, subject to applicable consent and opt-out rights;
  • detect, investigate, and prevent fraud, payment abuse, chargebacks, security incidents, policy violations, and other unlawful or harmful conduct;
  • protect our rights, customers, personnel, property, and Services;
  • comply with law, legal process, tax and accounting obligations, and valid government requests; and
  • establish, exercise, or defend legal claims and enforce our agreements.

We may combine information collected through different parts of the Services or from different sources for these purposes, where permitted by law.

3. COOKIES AND SIMILAR TECHNOLOGIES

We and our partners, including Shopify, use cookies and similar technologies to operate the Services, remember preferences, perform analytics, personalize experiences, prevent fraud, and show or measure advertising. These technologies may fall into the following categories:

  • Essential: necessary for checkout, account access, security, fraud prevention, load balancing, and core site functions;
  • Functional: remember selections and improve convenience or personalization;
  • Analytics: help us understand traffic, engagement, and performance; and
  • Advertising: help deliver, personalize, and measure advertising, including across services where permitted.

Where consent is required, we will not use nonessential cookies or similar technologies for the relevant purposes unless you consent. You can use the cookie banner or the Cookie preferences link in the site footer, when available, to review or change your choices. Browser settings may also allow you to block or delete cookies, but doing so may affect site functionality.

There is no uniform industry standard for all browser "Do Not Track" signals. Where required by applicable law, we treat a qualifying Global Privacy Control ("GPC") signal as a request to opt out of sale, sharing, or targeted advertising for the browser or device that sends the signal.

For information about how Shopify handles personal information and additional controls available directly from Shopify, visit the Shopify Privacy Portal.

4. HOW WE DISCLOSE PERSONAL INFORMATION

We may disclose personal information to the following categories of recipients for the purposes described in this Policy:

  • Commerce platform: Shopify provides our online storefront, checkout, account, analytics, security, and related commerce services.
  • Payment and financing providers: payment processors, digital-wallet providers, fraud-prevention services, and buy-now-pay-later or financing providers involved in your selected transaction.
  • Fulfillment and delivery providers: warehouses, fulfillment providers, carriers, customs providers, package-protection providers, and address-verification services.
  • Business-service providers: providers supporting hosting, accounts, customer service, communications, email and text marketing, waitlists, reviews, surveys, analytics, advertising, personalization, security, fraud prevention, and professional services.
  • Advertising and analytics partners: partners that help us understand use of the Services or deliver and measure advertising, subject to applicable consent and opt-out rights.
  • Professional advisers: attorneys, accountants, auditors, insurers, and other advisers where reasonably necessary.
  • Government authorities and legal recipients: law enforcement, courts, regulators, and other parties when disclosure is required or permitted by law or reasonably necessary to protect rights, safety, security, or property.
  • Transaction parties: actual or prospective parties and advisers involved in a financing, investment, merger, acquisition, reorganization, bankruptcy, sale of assets, or similar business transaction.
  • Recipients you direct: parties you ask us to contact or disclose information to, and the public when you choose to publish a review or other public submission.

Service providers and contractors are permitted to process personal information for the services they provide to us and as otherwise allowed by their contracts and applicable law. Some third parties, such as payment, financing, social-media, and advertising companies, may act independently and process information under their own privacy policies.

5. SALE, SHARING, AND TARGETED ADVERTISING

We do not sell personal information for money. However, some privacy laws define "sale," "sharing," or "targeted advertising" broadly. Certain disclosures of identifiers, device or internet activity, commercial information, or inferences to advertising, analytics, social-media, or commerce-platform partners may fall within those definitions.

Where applicable law gives you the right to opt out, you may use our Data Sharing Opt-Out Page, a qualifying GPC signal, or the contact method in Section 18. Your opt-out may apply only to the browser and device you use unless you are logged in or otherwise identify yourself as permitted by law.

Your Privacy Choices

Use the “Your Privacy Choices” link in the website footer or email customercare@ceciliashouse.com to opt out where applicable.

We do not knowingly sell or share the personal information of children under 16 for targeted advertising.

6. PAYMENTS

Payments are processed by Shopify and other payment, digital-wallet, or financing providers selected at checkout. We generally receive transaction confirmation, payment method type, billing information, and limited payment details rather than full payment-card numbers. Those providers process payment information under their own terms and privacy policies.

7. RETENTION

We retain personal information for as long as reasonably necessary for the purpose for which it was collected, including to provide the Services, maintain transaction and customer-service records, honor your choices, detect fraud, comply with tax, accounting, legal, and regulatory duties, resolve disputes, enforce agreements, and establish or defend legal claims.

Retention varies by category and context. For example, order and transaction records may be kept for applicable tax, accounting, warranty, fraud-prevention, and dispute periods; account information may be kept while an account remains active and for an appropriate period afterward; marketing information may be kept until you unsubscribe, with limited suppression records retained to honor that choice; and security logs may be retained for a shorter period unless needed for an investigation. When information is no longer reasonably needed, we may delete, deidentify, or aggregate it, subject to technical limitations and lawful exceptions.

8. SECURITY

We use reasonable administrative, technical, and physical safeguards designed to protect personal information. We also rely on service providers to maintain safeguards appropriate to the services they provide. No security measure or method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. YOUR CHOICES

  • Account information: update available information through your account or contact us.
  • Email marketing: use the unsubscribe link in a marketing email. You may still receive transactional or service-related messages.
  • Text marketing: reply STOP to opt out of marketing texts. Message and data rates may apply.
  • Cookies: use available cookie-preference tools or browser controls. Some choices are browser- and device-specific.
  • Reviews and public content: contact us to request removal from our controlled Services, subject to legal and operational limitations. Copies may remain where others have shared or independently stored the content.

10. PRIVACY RIGHTS AND REQUESTS

Depending on where you live and which law applies, you may have the right to request that we:

  • confirm whether we process your personal information and provide access to it;
  • correct inaccurate personal information;
  • delete personal information, subject to exceptions;
  • provide a portable copy of certain personal information;
  • disclose categories of information, sources, purposes, and recipients;
  • opt you out of sale, sharing, targeted advertising, or certain profiling;
  • limit certain uses or disclosures of sensitive personal information; or
  • allow you to appeal a denied request, where applicable.

You may exercise applicable rights by emailing customercare@ceciliashouse.com with the subject line Privacy Request. You may also use the Data Sharing Opt-Out Page for applicable opt-out requests.

We may need to verify your identity and request details reasonably necessary to process the request. Verification requirements depend on the request and the information involved. An authorized agent may submit a request where permitted by law, but we may require proof of authorization and direct identity verification. We will not unlawfully discriminate against you for exercising a privacy right. If we deny a request, you may reply to our decision to ask for an appeal where applicable law provides that right.

11. CALIFORNIA PRIVACY NOTICE

This section supplements the rest of this Policy for California residents. It applies to the extent the California Consumer Privacy Act, as amended ("CCPA"), applies to our processing.

During the preceding 12 months, we may have collected the categories of personal information described in Section 1 from the sources described there; used them for the purposes in Section 2; and disclosed them to the categories of recipients described in Section 4. We may have sold or shared, as those terms are broadly defined by the CCPA, identifiers, commercial information, device or internet activity, and inferences with advertising, analytics, social-media, or commerce-platform partners for advertising and measurement. We do not sell personal information for money.

Subject to applicable exceptions and verification, California residents may have rights to know, access, correct, delete, opt out of sale or sharing, limit certain uses or disclosures of sensitive personal information, and receive equal service and pricing. A qualifying GPC signal will be treated as an opt-out request for the browser or device sending it where required.

California residents may also request information under California Civil Code Section 1798.83 concerning certain disclosures, if any, of personal information to third parties for their own direct-marketing purposes. Submit requests using the contact information in Section 18.

12. EEA, UNITED KINGDOM, AND SWITZERLAND

If European data-protection law applies, Cecilia's House LLC is the controller of the personal information covered by this Policy, except where another party is identified as an independent controller.

Orders, accounts, delivery, returns, and requested support

Typical legal basis: Performance of a contract or steps requested before entering a contract.

Security, fraud prevention, service improvement, analytics, and business administration

Typical legal basis: Our or another party's legitimate interests, balanced against your rights and interests.

Marketing and nonessential cookies where consent is required

Typical legal basis: Your consent, which you may withdraw without affecting earlier lawful processing.

Tax, accounting, regulatory, legal-process, and compliance activities

Typical legal basis: Compliance with legal obligations or establishment, exercise, or defense of legal claims.

You may have rights to access, rectify, erase, restrict, or object to processing; receive data portability; withdraw consent; and complain to your local data-protection authority. Where we rely on legitimate interests, you may request information about the balancing considerations relevant to that processing.

We may use automated tools to identify potential fraud, payment risk, or security threats. We do not intend to make decisions based solely on automated processing that produce legal or similarly significant effects unless permitted by law with appropriate safeguards.

13. INTERNATIONAL DATA TRANSFERS

We and our service providers may process personal information in the United States and other countries that may have different data-protection laws than your country. Where required, we use recognized safeguards for restricted international transfers, such as adequacy decisions, contractual protections, or other lawful transfer mechanisms.

14. CHILDREN'S PRIVACY

The Services are intended for a general audience and are not directed to children under 13. We do not knowingly collect personal information from a child under 13 without legally required parental consent. If you believe a child under 13 provided personal information to us, contact us so we can investigate and take appropriate action. A person under 18 should use the Services only through a parent or legal guardian as described in our Terms and Conditions.

15. PUBLIC CONTENT AND SOCIAL FEATURES

Reviews, photographs, videos, testimonials, comments, and other content you choose to submit for public display may be visible to other users and may be copied or shared outside our control. Social-media features and links may allow the relevant platform to collect information under its own privacy policy.

16. THIRD-PARTY SERVICES AND LINKS

The Services may link to or integrate with third-party services. We do not control those parties' independent privacy practices. Review their privacy policies before providing information or using their services.

17. CHANGES TO THIS POLICY

We may update this Policy to reflect changes in our Services, practices, technology, or legal obligations. We will post the revised Policy with a new "Last Updated" date. If required by law, we will provide additional notice or obtain consent before a material change takes effect. Unless otherwise stated, the revised Policy applies when posted.

18. CONTACT US

For privacy questions or requests, contact:

Cecilia's House LLC
Brooklyn, New York, United States
Email: customercare@ceciliashouse.com
Website: https://ceciliashouse.com

Please include enough information for us to understand and respond to your request. Do not send passwords, full payment-card numbers, government identification numbers, or other highly sensitive information by ordinary email.