Privacy policy

Haute Fashista Privacy Policy

Last updated: October 26, 2026

This Privacy Policy describes the privacy practices of Lynx Pak LLC, doing business as Haute Fashista, and its affiliates (collectively, "Haute Fashista," "we," "us" or "our") in connection with the hautefashista.com website (hosted on Shopify) and any other online services we control that post or link to this Privacy Policy (the "Services"), and the choices available to you about your personal information.

Haute Fashista is a curated online boutique for bags, fragrance and finishing touches. We sell directly to customers through the Services. Our products are fulfilled by trusted third-party supplier partners, who may ship your order directly to you.

If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing and disclosure of your personal information. By using the Services, you acknowledge that you have read this Privacy Policy and understand how your information is collected, used and disclosed as described here.

For purposes of this Privacy Policy, "personal information" means information that identifies, relates to, or can reasonably be linked to an identified or identifiable individual. It does not include aggregated or de-identified information that cannot reasonably be linked to you. This Privacy Policy does not apply to the processing of personal information by third parties.

Some regions provide additional rights by law. For region-specific terms, see:
- California Residents: Notice to California Residents
- Residents of other U.S. States with Privacy Laws: Notice to Residents of Other U.S. States
- Nevada Residents: Notice to Nevada Residents
- Individuals in Europe or the UK: Notice to European Users

For our contact details, see the Contact Us section below.

Table of Contents
1. Personal Information We Collect
2. How We Use Your Personal Information
3. How We Disclose Your Personal Information
4. Relationship with Shopify
5. Your Privacy Choices
6. SMS / Text Messaging
7. Third-Party Links
8. Security
9. Retention
10. International Data Transfers
11. Children
12. Changes to this Privacy Policy
13. Contact Us
14. Notice to California Residents
15. Notice to Residents of Other U.S. States
16. Notice to Nevada Residents
17. Notice to European Users
18. Cookie Policy

1. Personal Information We Collect

Information You Provide to Us
When you use the Services, for example when you create an account, place an order, join our email list, enter a promotion, buy or send a gift card, or contact us, we may collect:
- Contact identifiers, such as your name, email address, billing and shipping address, and phone number.
- Commercial or transaction data, such as products you view, add to your bag or favorites, purchase, return, exchange or cancel, and your order history.
- Account credentials, such as your password and other information used to access your account.
- Payment information, such as your payment card details, as necessary to process your payment. Payments are processed by our payment processors (such as Shopify Payments and other providers at checkout). We do not see or store your full card number.
- Profile and preference data, such as your interests, scent preferences from our Scent Finder, and communication preferences.
- Communications, such as the content of your messages, support requests, survey responses and feedback.
- User-generated content, such as product reviews and photos you post.
- Information about other people, such as the name and email address of a gift card recipient, or the shipping details of someone you buy a gift for.

Please do not provide personal information we don't request.

Information Collected Automatically
When you use the Services, we and the third parties we work with may automatically collect information from your browser or device using cookies, pixels and similar technologies, including:
- Device identifiers, such as your IP address and other unique identifiers.
- Device data, such as your browser and operating system type, device model, screen resolution, and language settings.
- Internet activity data, such as pages viewed, time spent on pages, navigation paths, items added to or removed from your bag, and access times.
- Non-precise location data, such as your general location (city or ZIP code level) derived from your IP address.

This is facilitated by cookies, pixels and similar technologies on the Services, including, where active on our site, the Meta (Facebook/Instagram) Pixel, Google (Analytics/Ads) tags, TikTok Pixel and Pinterest Tag. See our Cookie Policy below.

Information from Other Sources
We may also receive personal information from:
- Service providers and platforms that support the Services, such as Shopify and our analytics, email, SMS, payment, fulfillment and shipping providers.
- Social media platforms, when you interact with our pages, comments or direct messages, or publicly tag us or use our hashtags.
- Advertising and data partners, such as ad networks.
- Public sources, such as public social media posts.

Information We Infer
We may infer information about your likely preferences or interests from other information we collect.

Sensitive Personal Information
To the extent any information we collect is "sensitive" under applicable law (for example, account login credentials), we process it only for purposes permitted by law. We do not sell sensitive personal information or use it for targeted advertising or to infer characteristics about you.

2. How We Use Your Personal Information
We use personal information for the following purposes:
- Service Delivery: To operate the Services and sell you our products; create and manage your account; process payments; fulfill, ship and track orders; handle returns, exchanges and refunds; deliver e-gift cards; provide customer support; send order, account and security messages; and remember your preferences.
- Personalization and Improvement: To recommend products, tailor your shopping experience, and analyze and improve our products, Services and business, including through surveys and analytics.
- Direct Marketing: To send you Haute Fashista marketing by email and, where you have opted in, by text message, as permitted by law. You can opt out at any time (see Your Privacy Choices).
- Promotions: To run promotions, giveaways or contests you enter, under their official rules.
- Advertising: To show you ads on our Services and on other sites, apps and platforms, and to measure ad performance, working with advertising partners such as Meta, Google, TikTok and Pinterest. This uses cookies and similar technologies to collect device identifiers, device data, internet activity and non-precise location over time and across services, which is commonly called "targeted advertising." We may also use audience-matching tools (such as Meta Custom Audiences) by sharing a hashed identifier, such as a hashed email address, so a platform can match you to, or to people similar to, our customers.
- Security, Fraud Prevention and Compliance: To protect our, your and others' rights, safety and property; detect, investigate and prevent fraudulent, unauthorized or illegal activity (including payment and chargeback fraud); enforce our terms; and comply with laws, lawful requests and legal processes.
- At Your Direction or With Your Consent: For other purposes you direct or agree to.

If you create an account, you are responsible for keeping your login details safe. Please don't share them with anyone.

We may aggregate or de-identify information so it is no longer personal information, and use it for any lawful purpose.

3. How We Disclose Your Personal Information
We disclose personal information to the following categories of recipients:
- Shopify and Other Service Providers: Companies that process personal information on our behalf, including our e-commerce platform (Shopify), payment processors, customer support tools, hosting, analytics, email and SMS providers, returns processing and fraud prevention. Where required by law, we contractually limit them to using it only to provide services to us.
- Supplier and Fulfillment Partners: Our supplier partners and shipping carriers receive the information needed to prepare and deliver your order, such as your name, shipping address, phone number and order contents.
- Advertising Partners: Meta, Google, TikTok, Pinterest and other ad networks and technology providers, for advertising purposes including targeted advertising. In some cases these partners independently decide how they process your information under their own privacy policies. For example, we use Shopify to support personalized advertising with third-party services based on your online activity with different merchants and websites. You can opt out at hautefashista.com/pages/data-sharing-opt-out.
- Affiliates: Our affiliates, for purposes consistent with this Privacy Policy.
- The Public: Other users and the public, when you choose to post publicly (for example, a product review shown with your name). Public content may be copied or stored by others before you can edit or remove it.
- Professional Advisors: Lawyers, accountants, auditors, bankers and insurers, as needed for the services they provide to us.
- Authorities and Others: Law enforcement, government authorities and private parties, where we believe in good faith it is necessary for the security, fraud prevention and compliance purposes above, including responding to subpoenas, search warrants and similar requests.
- Business Transferees: In connection with a merger, financing, acquisition, reorganization, bankruptcy, or sale or transfer of all or part of our business or assets.
- At Your Direction or With Your Consent: For example, when you ask us to send a gift card to someone, or use social media widgets or login integrations.

4. Relationship With Shopify
The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services for you. Information you submit to the Services will be transmitted to and shared with Shopify as well as third parties that may be located in countries other than where you reside, in order to provide and improve the Services for you. In addition, to help protect, grow and improve our business, we use certain Shopify enhanced features that incorporate data and information obtained from your interactions with our store, along with other merchants and with Shopify. To provide these enhanced features, Shopify may make use of personal information collected about your interactions with our store, along with other merchants, and with Shopify. In these circumstances, Shopify is responsible for the processing of your personal information, including for responding to your requests to exercise your rights over use of your personal information for these purposes. To learn more about how Shopify uses your personal information and any rights you may have, visit the Shopify Consumer Privacy Policy at https://www.shopify.com/legal/privacy/customers. Depending on where you live, you may exercise certain rights with respect to your personal information at https://privacy.shopify.com/en.

5. Your Privacy Choices

Privacy Rights Requests
Depending on where you live, you may have the right to access, correct, delete or obtain a portable copy of your personal information, and other rights described in the region-specific notices below. To make a request, email hello@hautefashista.com. We will not discriminate against you for exercising your rights.

OPT Out of Sales, Sharing and Targeted Advertising
To opt out of the "sale" or "sharing" of your personal information, or its processing for targeted advertising, use the "Do Not Sell or Share My Personal Information", or turn on a recognized opt-out preference signal such as Global Privacy Control (GPC) in your browser. If you visit with GPC enabled, depending on where you are, we will treat it as an opt-out request for that browser and device, and, if we can link the device to a Shopify account, for that account as well. An opt-out set through your browser applies only to that browser and device; if you clear cookies or use another browser or device, please set it again. To apply an opt-out to information in our systems, you can also email us. Other than GPC, we do not respond to other "Do Not Track" signals. Learn more about GPC at https://globalprivacycontrol.org/.

Email
Unsubscribe from marketing emails at any time using the link at the bottom of any marketing email. We may still send service-related emails about your orders and account.

Text Messages
See the SMS / Text Messaging section below.

Account
If you have an account, you can review and update certain information in your account, or ask us to delete your account by contacting us.

Cookies and Advertising
- Cookie Preferences: Use the "Cookie preferences" option on our website to change your choices.
- Browser Controls: Most browsers let you block or delete cookies, including those used for targeted advertising. Settings apply per browser.
- Privacy Browsers and Plugins: You can use privacy-focused browsers or plugins that block third-party cookies and trackers.
- Platform OPT-Outs:
  Google: https://adssettings.google.com and https://tools.google.com/dlpage/gaoptout
  Meta: https://www.facebook.com/about/ads and your Meta ad preferences
  TikTok and Pinterest: Manage ad personalization in your account settings
- Industry OPT-Out Tools:
  Digital Advertising Alliance: https://optout.aboutads.info
  Network Advertising Initiative: https://optout.networkadvertising.org
  European Users: https://www.youronlinechoices.eu

These tools stop targeted ads from participating companies on the browser or device you used, but do not stop all data processing, and not every company participates. We are not responsible for the effectiveness of third-party opt-out tools.

6. SMS / Text Messaging
If we offer text messages and you opt in, we may send recurring marketing and/or transactional text messages (SMS/MMS) to the number you provide, such as order updates, promotions and service messages. By opting in, you agree that:
- Consent is not a condition of purchase.
- Message frequency varies, and message and data rates may apply.
- You can opt out at any time by replying STOP. Reply HELP for help. Carriers are not liable for delayed or undelivered messages.
- We obtain consent in accordance with applicable law, including the Telephone Consumer Protection Act where applicable, and we do not share mobile opt-in data or consent with third parties for their own marketing purposes.

7. Third-Party Links
The Services may link to websites and services operated by third parties, and our content may appear on third-party sites. These links are not endorsements, and we are not responsible for the privacy or security practices of those third parties. Information you share in public or semi-public places, such as social media, may be visible to others. Please read the privacy policies of any other websites and services you use.

8. Security
We use organizational, technical and physical safeguards designed to protect personal information, and rely on the security infrastructure of established platforms such as Shopify and our payment processors. Checkout is encrypted, and payments are handled by providers that comply with the Payment Card Industry Data Security Standard (PCI-DSS). However, no method of transmission or storage is completely secure, and we cannot guarantee "perfect security." Please don't use unsecure channels to send us sensitive or confidential information.

9. Retention
We retain personal information for as long as reasonably necessary for the purposes for which it was collected, such as maintaining your account and providing the Services, and as needed to comply with legal, tax and accounting obligations, resolve disputes, prevent fraud and enforce our agreements.

10. International Data Transfers
Lynx Pak LLC is based in the United States and may use service providers and supplier partners in other countries. Your personal information may be transferred to, stored and processed in the United States or other countries where privacy laws may differ from those where you live. If we transfer personal information out of the European Economic Area, Switzerland or the United Kingdom, we rely on recognized transfer mechanisms such as the European Commission's Standard Contractual Clauses or UK equivalents, unless the transfer is to a country found to provide an adequate level of protection.

11. Children
The Services are not intended for children. We do not knowingly collect personal information from children under 13 (as defined by the U.S. Children's Online Privacy Protection Act, "COPPA"), or from anyone under the age of majority in their jurisdiction without appropriate consent. If you believe a child has given us personal information, please contact us and we will delete it. We do not have actual knowledge that we sell or share the personal information of consumers under 16 years of age.

12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time, including to reflect changes to our practices or for operational, legal or regulatory reasons. If we make material changes, we will update the "Last updated" date, post the updated policy on the Services and, where required by law, provide additional notice (such as by email). Changes are effective when posted unless stated otherwise.

13. Contact Us
If you have questions about this Privacy Policy, want to exercise your rights, or have trouble accessing this policy, contact us:

By Email: hello@hautefashista.com

By Mail:
Lynx Pak LLC (Haute Fashista)
Attn: Privacy
8330 S 84th Ct,
Hickory Hills
IL, 60457
United States

You can find our other contact details in our Contact Information policy.

14. Notice To California Residents
The California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA"), requires us to explain how we collect, use and disclose California residents' personal information and the rights we offer. In this section, "personal information" has the meaning given in the CCPA.
- Categories of Personal Information Collected in the Past 12 Months, and Their Sources: see Personal Information We Collect.
- Business and Commercial Purposes: See How We Use Your Personal Information.
- Categories of Third Parties to Whom We Disclose: See How We Disclose Your Personal Information.
- Retention Criteria: See Retention.

We do not sell personal information for money. However, some disclosures, such as our use of advertising pixels and audience-matching tools with Meta, Google, TikTok and Pinterest, may be considered a "sale" or "share" under the CCPA, which includes cross-context behavioral advertising. The categories we may "sell" or "share" for these purposes are: contact identifiers, commercial/transaction data, profile data, device identifiers, device data, internet activity data, non-precise location data and inferences. The third parties involved are advertising and analytics partners. We do not knowingly sell or share the personal information of consumers under 16.

Some information we collect may be "sensitive personal information" under the CCPA (for example, account login credentials). We use and disclose it only for purposes permitted by the CCPA and do not sell or share it.

Your Rights: Subject to exceptions, you have the right to know what personal information we collect and disclose about you, to correct inaccurate information, to delete information we collected from you, and to opt out of the sale or sharing of your personal information. We will not discriminate against you for exercising these rights.

To exercise these rights, email hello@hautefashista.com. We will confirm receipt within 10 business days and respond within 45 days (which may be extended as permitted by law). We will verify your identity, for example by asking for your email address and order details, and may decline requests as permitted by law.

To opt out of sales or sharing, use the "Do Not Sell or Share My Personal Information", enable GPC in your browser, or contact us.

Authorized Agent: You may use an authorized agent. Except for opt-outs through a preference signal, we require written, signed proof of authorization and may ask you to verify your identity directly with us.

Shine the Light: California Civil Code § 1798.83 lets California residents request information about disclosures of certain personal information to third parties for their direct marketing purposes. To make a request, email us with "Shine the Light" in the subject line and include your name and California mailing address. We respond to such requests once per calendar year.

15. Notice To Residents Of Other U.S. States
This section applies to residents of U.S. states with comprehensive consumer privacy laws, including Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia, as those laws apply. Our practices are described in the main Privacy Policy above. Depending on your state, you may have the right to:
- confirm whether we process your personal data and, in some states, the categories processed;
- Access Your Personal Sata;
- correct Inaccuracies;
- Delete Your Personal Data;
- Obtain a Portable Copy of Personal Data You Provided to Us;
- OPT Out of Targeted Advertising, The Sale of Personal Data, and Certain Profiling.

Oregon and Minnesota residents may also request a list of specific third parties to which we have disclosed personal data, and Delaware residents may request a list of the categories of such third parties.

To exercise these rights, email hello@hautefashista.com. We respond within 45 days (which may be extended as permitted by law) and may need information to verify your identity. We do not process personal data for profiling that produces legal or similarly significant effects. To opt out of targeted advertising and sales, use the "Do Not Sell or Share My Personal Information", enable GPC, or contact us. You may use an authorized agent (with written, signed proof, except for preference-signal opt-outs), and you may withdraw consent you previously gave by contacting us.

Appeals: If we decline your request, you may appeal by emailing hello@hautefashista.com with "Appeal" in the subject line. We will respond within the time required by your state's law (generally 45 to 60 days). If your appeal is denied, you may contact your state attorney general.

16. Notice to Nevada Residents
We do not sell, and will not sell, your "covered information" as defined by Nevada privacy law. To submit a verified opt-out request, email hello@hautefashista.com.

17. Notice to European Users
This section applies only to individuals in the European Economic Area, Switzerland or the United Kingdom ("Europe").

Personal Data: References to "personal information" in this Privacy Policy mean "personal data" under European data protection law.

Controller: The controller of your personal data is Lynx Pak LLC (Haute Fashista), 8330 S 84th Ct, Hickory Hills IL 60457, United States.

Legal Bases for Processing:
- Service Delivery (Orders, Accounts, Support): Performance of a contract with you, or steps at your request before entering a contract, or our legitimate interest in providing the products and services you request.
- Marketing and Interest-Nased Advertising: Your consent where required by law; otherwise our legitimate interest in promoting our business.
- Research and Development, Compliance, Fraud Prevention and Safety: Our legitimate interests.
- Complying with Legal Obligations: Necessary to comply with our legal obligations.
- With Your Consent: Your consent, which you may withdraw at any time.

We rely on legitimate interests only where they are not overridden by your interests and rights.

Sensitive Data: Unless we specifically ask for it, please don't provide special-category data (such as health, biometric or genetic data, racial or ethnic origin, political opinions, religion or trade union membership).

Retention: We keep personal data only as long as necessary for the purposes described, then delete or anonymize it (or isolate it from further use where deletion isn't immediately possible, such as in backups).

Your Rights: You may request to access, correct, delete, transfer (port) or restrict processing of your personal data, and to object to processing based on our legitimate interests. To exercise these rights, email hello@hautefashista.com. We may ask for information to verify your identity, and the law may allow us to decline certain requests (we'll explain why where required). You may also lodge a complaint with your local data protection authority.

Cross-Border Transfers: Where we transfer your personal data out of Europe and additional safeguards are required, we provide them, for example through standard contractual clauses.

18. Cookie Policy
This Cookie Policy explains how Haute Fashista uses cookies and similar technologies on the Services. Your use of cookies is subject to the choices described in this Privacy Policy and in any cookie banner we show you.

What are Cookies?
Cookies are small data files placed on your browser when you visit a website, open an email or interact with an ad. They help the site work, remember your bag and preferences, keep the site secure and prevent fraud, measure how the site is used, and provide advertising. We use session cookies (which expire when you close your browser) and persistent cookies (which last until they expire or you delete them), as well as first-party cookies (set by us) and third-party cookies (set by providers and partners such as Shopify, Meta, Google, TikTok and Pinterest).

What are pixels?
Pixels (also called web beacons or tags) are small pieces of code in a website, email or ad. When you access content containing a pixel, it may allow us or a third party to set or read cookies and collect information about your browser or device. Where active, we use the Meta Pixel, Google tags, TikTok Pixel and Pinterest Tag for analytics and advertising.

Categories of Cookies and Pixels We Use:
- Strictly Necessary: Required for the website and checkout to work, such as keeping items in your bag, logging in and completing a purchase. These can't be switched off.
- Performance and Analytics: Count visits and traffic sources so we can measure and improve the site and see which pages are popular.
- Functional: Enable enhanced features and personalization, such as remembering your preferences.
- Advertising: Set by us or our advertising partners to understand your interests, show you relevant ads on our site and others, and send reminders such as for items left in your bag.
- Social Media: Set by social media services we use; they can track your browser across sites and affect the content you see elsewhere.

Managing Cookies: See Your Privacy Choices for how to control cookies and targeted advertising, including the "Cookie preferences" option on our website. For general information about cookies, visit www.allaboutcookies.org.