Effective September 25, 2026
chic (“we”, “us”) is an independent footwear brand operated from Pueblo, Colorado, USA. This policy explains what we collect when you visit or buy from this store, why, who we share it with, and the choices you have. We collect only what an order needs, we never sell your information, and you can ask us to delete it at any time.
What we collect
- Account and order details – name, email, shipping and billing address, phone (optional), what you ordered, and order history. Needed to create your account, fulfill and ship your order, and send receipts and delivery updates.
- Payment – card details are entered directly with our payment processor and never touch our servers. We see only the last four digits, the card brand, and whether the payment succeeded.
- Technical data – IP address, browser type, device, pages visited, and referring site, collected automatically by our server logs and essential cookies to keep the store running, keep your cart, and prevent fraud.
- Messages – anything you send us by email or through the store.
Why we use it
- To process, print, ship, and support your order (performance of a contract).
- To run your account so you never lose your order history or receipts.
- To detect and prevent fraud, abuse, and security incidents (legitimate interest).
- To meet tax, accounting, and legal record-keeping obligations.
- To send marketing email only if you opt in. Every marketing email has an unsubscribe link.
Who we share it with
We share data only with the service providers that make the store work, and only what each one needs:
- Fulfillment partners (our footwear suppliers) – name, shipping address, and the items ordered, so your order can be packed and shipped.
- Payment processors (Stripe and/or PayPal) – payment and billing details, processed under their own privacy policies.
- Shipping carriers – name, address, and phone for delivery.
- Email delivery (Resend) – your email address and the content of transactional emails.
- Hosting – our store runs on servers we control, hosted by Hostinger.
We may also disclose data if required by law or to protect our rights, customers, or the public. We do not sell personal data and we do not share it with advertisers.
Cookies
We use essential cookies only: session and cart cookies, login cookies, and security tokens. We do not run third-party advertising or tracking cookies. You can block cookies in your browser, but the cart and checkout will not work without the essential ones.
How long we keep it
Order records are kept for as long as tax and accounting law requires (generally seven years). Account data is kept while your account is active. Server logs are kept for up to 30 days.
Your rights
Wherever you live, you can ask us to access, correct, export, or delete the personal data we hold about you, or to opt out of marketing. Colorado residents have these rights under the Colorado Privacy Act; California residents under the CCPA; EU and UK residents under the GDPR. To exercise any right, email us from the address on your account. We respond within 30 days. You may also use the data export and erasure tools in your account, and we will never treat you differently for exercising a right.
Children
This store is not directed at children. We do not knowingly collect personal data from anyone under 13, and purchases must be made by someone 18 or older or with a parent’s or guardian’s consent. If you believe a child has given us data, contact us and we will delete it.
Security
We protect your data with encrypted connections, hardened servers, restricted access, login protection, and nightly encrypted backups. No system is perfectly secure; if a breach ever affects your data we will notify you as the law requires.
Changes and contact
We will post any changes here with a new effective date. Questions or requests: see our Contact page.