Privacy Policy

Introduction

This Privacy Policy (the “Policy”) explains how Paradise Lingerie Inc., doing business as Honeydew (“Honeydew,” “we,” “us,” or “our”) collects, uses, shares, and protects personal information when you visit or make a purchase from shophoneydew.com and related pages (the “Site”), or otherwise interact with us.

In this Policy, “personal information” (or “personal data”) means information that identifies, relates to, or could reasonably be linked with you or your household.

We aim to handle personal information consistently with applicable privacy laws, which may include the CCPA/CPRA, CalOPPA, the California Invasion of Privacy Act (CIPA), the Virginia, Colorado, Connecticut, and Utah consumer privacy acts, Canada’s PIPEDA and Quebec Law 25, the EU/UK GDPR, and Brazil’s LGPD, to the extent they apply to you.

Scope

This Policy applies to the Site and to our online sales, marketing, and customer-support activities. It does not apply to third-party websites, applications, or services that we do not control, even if we link to them. Those third parties have their own privacy practices.

A Note on Consent (please read)

When you first visit the Site, we present a cookie and tracking preferences banner. Strictly necessary technologies (needed to run the Site, remember your cart, and process orders) operate at all times. Other categories — preferences, analytics, and marketing/advertising — are controlled by your choices.

By selecting “Accept,” by adjusting your preferences, or by continuing to use the Site after being presented with our banner (where permitted by law), you consent to the placement of cookies and the use of the tracking and session-analytics technologies described below in the categories you have allowed. You can change or withdraw your choices at any time (see “Your Choices and How to Manage Consent”).

Where required by law, we will not load non-essential cookies or trackers until you have provided consent, and we honor recognized opt-out preference signals such as the Global Privacy Control (GPC).

Personal Information We Collect

Depending on how you interact with us, we may collect:

•     Account information — name, email address, phone number, password, and account preferences.

•     Order and payment information — billing and shipping address, items purchased, and payment method details (payment card data is processed by our payment processors; we do not store full card numbers).

•     Communications — messages you send us through chat, email, forms, social media, reviews, or surveys.

•     Marketing data — email/SMS subscription status and engagement, loyalty activity, and referral/affiliate attribution.

•     Device and usage data — IP address, device and browser type, operating system, language, referring/exit pages, pages and products viewed, search terms, time stamps, time zone, and interactions with the Site (clicks, scrolling, mouse movement, and similar activity — see “Cookies, Tracking, and Session Analytics”).

•     Inferences drawn from the above to personalize content and offers.

We do not intentionally collect sensitive personal information beyond what is necessary to provide our products and services. [Counsel to confirm whether any sensitive categories — e.g., precise geolocation or login credentials — are treated as “sensitive PI” under CPRA.]

How We Collect Personal Information

•     Directly from you — when you create an account, place an order, subscribe to marketing, contact support, leave a review, enter a survey or sweepstakes, or use a discount/verification program.

•     Automatically — through cookies, pixels, SDKs, server logs, and session-analytics tools as you browse.

•     From third parties — including our platform, analytics, advertising, payment, shipping, fraud-prevention, loyalty, and support providers, and social media platforms when you engage with us there.

Cookies, Tracking, and Session Analytics

We and our service providers use cookies and similar technologies (pixels, tags, web beacons, local storage, and SDKs) to operate the Site, remember your preferences, measure performance, understand how visitors use the Site, and deliver and measure advertising.

Categories we use

•     Strictly necessary — required for the Site to function (cart, checkout, security, accessibility).

•     Preferences — remember choices such as region, language, and display settings.

•     Analytics / performance — help us understand and improve how the Site is used, including session-analytics and session-replay technologies that record interactions such as pages viewed, clicks, taps, scrolling, mouse movement, and navigation patterns.

•     Marketing / advertising — deliver relevant ads, build audiences, and measure ad performance across other sites and platforms.

Service providers and technologies we currently use

The following third parties may collect or receive information through the Site. Each operates under its own privacy policy; we encourage you to review them.

Provider	Purpose	Category
Shopify	E-commerce platform, hosting, checkout, first-party analytics	Necessary / Analytics
Microsoft Clarity	Session analytics and session replay (records page interactions such as clicks, scrolling, mouse movement) and heatmaps	Analytics
Google (Analytics, Ads, Tag Manager, Merchant Center)	Site analytics, advertising, conversion measurement, product listings	Analytics / Marketing
Meta (Facebook/Instagram) Pixel	Advertising, audience building, conversion measurement	Marketing
Klaviyo	Email and SMS marketing and related behavioral analytics	Marketing / Analytics
Yotpo	Product reviews and loyalty/rewards program	Preferences / Marketing
Gorgias	Customer-support live chat and helpdesk	Necessary / Preferences
ShopMy	Creator/affiliate referral attribution	Marketing
GovX	Identity verification for eligibility-based discounts	Necessary
UserWay	Website accessibility tools	Necessary

[Counsel/operations to keep this list current and add or remove vendors as the Site changes.]

Session recording and chat

Some analytics tools listed above (for example, Microsoft Clarity) record your interactions with the Site so we can understand usage and improve the experience. These recordings are intended to capture navigation and interaction data and to exclude or mask information entered into sensitive fields. Our live-chat provider processes the messages you send through chat so we can respond to you. By using the Site and its chat feature after being presented with our consent banner, you consent to this recording and processing as described. You can opt out of non-essential analytics at any time. [Counsel to confirm input-masking configuration for session-replay tools and the chat consent presentation.]

How We Use Personal Information

We use personal information to:

•     provide, process, and deliver your orders and our products and services;

•     create and manage your account and loyalty membership;

•     respond to your inquiries and provide customer support;

•     send marketing communications you have requested, and personalize content and offers (consistent with your choices);

•     measure, analyze, and improve the Site, our products, and our advertising;

•     detect, prevent, and address fraud, security, and technical issues; and

•     comply with legal obligations and enforce our terms.

Where the law requires consent (for example, for non-essential cookies or certain marketing), we rely on your consent. Otherwise we rely on the performance of our contract with you, our legitimate interests in operating and improving our business, and compliance with legal obligations.

How We Share Personal Information

•     Service providers and processors that perform services for us (hosting, payments, shipping, analytics, advertising, marketing, support, fraud prevention), under contracts that limit their use of the information.

•     Advertising and analytics partners, as described in “Cookies, Tracking, and Session Analytics.”

•     Corporate transactions — in connection with a merger, acquisition, financing, or sale of assets, with notice where required.

•     Legal and safety — to comply with law, respond to lawful requests, and protect our rights, users, and the public.

We do not exchange your personal information for money. However, our use of advertising and analytics cookies and pixels (such as Meta and Google) may be considered a “sale” or “sharing” of personal information for cross-context behavioral advertising under California and other state laws. You can opt out as described below.

Your Choices and How to Manage Consent

•     Cookie/tracking preferences. Use the consent banner or the “Cookie Preferences”/“Your Privacy Choices” link in our website footer to accept, decline, or change non-essential cookies and trackers at any time.

•     Do Not Sell or Share / Targeted Advertising opt-out. California and certain other state residents can opt out of the “sale”/“sharing” of personal information and of targeted advertising through the “Your Privacy Choices” link in the footer. We also honor the Global Privacy Control (GPC) browser signal.

•     Marketing messages. Unsubscribe using the link in any marketing email, reply STOP to marketing texts, or contact us.

•     Browser controls. Most browsers let you block or delete cookies; some Site features may not work if you disable necessary cookies.

•     Analytics opt-outs. Opt out of Google Analytics via its Opt-out Browser Add-on, and learn about ad-industry opt-outs at optout.aboutads.info and optout.networkadvertising.org.

Your Privacy Rights

Depending on where you live, you may have the right to:

•     access and obtain a copy of your personal information;

•     correct inaccurate personal information;

•     delete your personal information;

•     opt out of the sale/sharing of personal information and of targeted advertising;

•     limit the use of sensitive personal information;

•     data portability;

•     withdraw consent (where processing is based on consent); and

•     not be discriminated or retaliated against for exercising your rights.

California residents (CCPA/CPRA): you have the rights to know, access, delete, correct, opt out of sale/sharing, and limit use of sensitive personal information, and the right to non-discrimination. [Counsel to confirm specific statutory categories collected/disclosed and the 12-month look-back disclosure.]

Virginia, Colorado, Connecticut, and Utah residents: you have analogous rights, including the right to appeal a decision on your request (where applicable).

EEA/UK, Canada, and Brazil residents: you have rights under GDPR/UK GDPR, PIPEDA/Law 25, and LGPD respectively, including access, rectification, erasure, restriction, objection, and portability, and the right to lodge a complaint with your supervisory authority.

How to exercise your rights

•     Submit a request: Make a Data Request

•     Email: hello@shophoneydew.com (subject: “Privacy Request”)

We will verify your request and respond within the time required by applicable law. You may use an authorized agent where the law permits; we may require verification.

International Data Transfers

We may process and store personal information in the United States and other countries whose data-protection laws may differ from yours. Where required, we use appropriate safeguards (such as the EU Standard Contractual Clauses) for cross-border transfers.

Data Retention

We keep personal information for as long as needed to fulfill the purposes described in this Policy, including to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. [Counsel to confirm specific retention periods or criteria.]

Security

We maintain administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. We use encrypted connections where personal information is involved and require our processors to maintain appropriate safeguards.

Children’s Privacy

The Site is intended for adults and is not directed to children. We do not knowingly collect personal information from children under [16/13 — confirm with counsel]. If you believe a child has provided us personal information, please contact us so we can delete it.

Changes to This Policy

We may update this Policy from time to time. We will post the updated version here with a new “Last updated” date and, where required, provide additional notice or obtain your consent.

Contact Us

Paradise Lingerie Inc. dba Honeydew

Attn: Data Privacy Officer

20830 Dearborn Street, Chatsworth, CA 91311

Email: hello@shophoneydew.com