Privacy Policy

Effective date: October 11, 2026

Introduction

Bebe Got Back LLC (“Bebe Got Back,” “we,” “us,” or “our”) operates www.bebegotback.com (the “Site”). This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit the Site, buy products, contact us, or interact with our services. Our store uses Shopify for e-commerce and Authorize.Net for payment processing. We currently use Google Ads; we may add Meta advertising and an optional Subscribe & Save program in the future. This policy describes planned activities conditionally, not as features already active. Where required by law, we provide additional notices and choices.

1. Personal information we collect

We may collect information you provide, including your name, email, telephone number, shipping and billing addresses, order and return details, customer support messages, account information if you create an account, and marketing preferences. We may collect information about your purchases, products viewed, shopping cart, and checkout activity. Payment credentials are processed by our authorized payment providers; we may receive payment status, transaction identifiers, and limited payment-method details needed for records, refunds, and fraud prevention. We do not claim to store complete payment card numbers.

When you visit the Site, Shopify and technologies enabled on the Site may collect IP address, device and browser details, approximate location, referral URLs, cookie identifiers, and usage information. We may receive information from service providers involved in payment, fulfillment, fraud prevention, or advertising. The precise data collected depends on which features are enabled.

2. How we use information

We use information to operate the Site; process payments and orders; ship products; manage returns, refunds, and customer service; maintain accounts; prevent fraud and secure our systems; communicate about orders and policies; maintain accounting and legal records; improve the Site; and measure advertising performance. Where permitted, we may send marketing communications and tailor advertising. If Subscribe & Save is introduced, information will also be used to manage subscriptions, recurring payments, and cancellations. We use consent or another applicable legal basis when required.

3. Shopify and Authorize.Net

Shopify provides our online storefront and commerce infrastructure. Authorize.Net is our payment gateway; payment processing may also involve banks, card networks, and other authorized payment partners. These providers process relevant information under their applicable terms and privacy notices. For more information, see https://www.shopify.com/legal/privacy and https://www.authorize.net/about-us/privacy.html. We do not represent that Stripe, PayPal, or other payment services are independently installed unless they are actually offered at checkout.

4. Advertising and analytics

We use Google Ads to advertise our products. Depending on the tags and advertising features enabled, Google may receive cookie identifiers, ad interactions, website events, and conversion-related information for measurement or advertising. Use of Google Ads alone does not establish that Google Analytics, Google Tag Manager, enhanced conversions, customer matching, or remarketing is active.

We plan to use Meta advertising in the future. If we activate Meta Pixel or other Meta tracking or audience tools, we will update our disclosures and implement legally required consent and opt-out mechanisms. Advertising disclosures can qualify as “sharing,” “selling,” or “targeted advertising” under certain state laws even if we do not sell contact lists for money.

5. Cookies and privacy choices

Shopify and enabled services may use essential cookies to operate the Site and optional technologies for analytics or advertising. You can adjust browser settings, but blocking essential cookies may impair checkout. Where legally required, we will provide cookie-consent controls and options to opt out of sale, sharing, or targeted advertising. We will honor applicable legally recognized opt-out preference signals, including Global Privacy Control, when required. The availability of a particular on-site control depends on our configured Shopify customer-privacy settings and applicable law. To request an advertising privacy choice, contact support@bebegotback.com.

6. How we disclose information

We may disclose information to Shopify; Authorize.Net and payment partners; order fulfillment warehouses, delivery carriers, and customer support vendors; Google in connection with enabled advertising tools; professional advisers; fraud-prevention and security providers; and authorities when legally required. If Meta advertising technology is enabled in the future, relevant disclosures may be made to Meta as described in an updated policy. We may transfer information in a merger, acquisition, or sale of business assets, subject to applicable law. We do not sell customer email lists to unrelated businesses for their independent direct marketing, but advertising data practices may still fall within statutory definitions of sale or sharing.

7. Marketing communications

If you opt in or where otherwise permitted by law, we may send promotional emails. You can unsubscribe using the link in marketing emails or by contacting support@bebegotback.com. We may still send non-promotional order, account, safety, and service messages. We will provide separate consent and opt-out information before introducing promotional SMS messaging, if offered.

8. Optional future Subscribe & Save

Our current straight-sale purchases are one-time orders. Buying a product does not automatically enroll you in recurring billing. If we introduce Subscribe & Save, customers who affirmatively select it may have their contact, shipping, order, and authorized payment information processed to manage recurring orders. Applicable checkout disclosures will explain the price, billing frequency, cancellation method, and other required terms. This section does not mean subscriptions are currently active.

9. Data retention

We retain information for as long as reasonably needed for the purposes described here, including order fulfillment, tax and accounting obligations, security, fraud prevention, disputes, and legal compliance. Different records have different retention periods. When no longer needed, information is deleted, de-identified, or otherwise handled in accordance with applicable law and practical backup limitations. We do not promise a universal two-year deletion deadline.

10. Data security

We use reasonable administrative, technical, and organizational measures designed to protect personal information. No internet service or storage method can be guaranteed completely secure. We assess suspected incidents and provide notices to individuals or regulators when required by applicable law; notification deadlines vary by jurisdiction and circumstances.

11. Your privacy rights

Depending on where you live and whether applicable privacy laws cover our business, you may have rights to access, correct, delete, or obtain a copy of certain information, to opt out of certain targeted advertising or sale/sharing, to withdraw consent, and to appeal certain decisions. Exceptions may apply. Send requests to support@bebegotback.com with “Privacy Request” in the subject line. We may need to verify your identity before fulfilling a request and will respond within applicable legal deadlines. We will not unlawfully discriminate against you for exercising privacy rights.

12. California and other state notices

California residents and residents of other states with applicable privacy laws may have additional rights. Depending on our data practices and statutory applicability, advertising disclosures may constitute sharing or targeted advertising. You can contact support@bebegotback.com to request an opt-out or exercise other rights. If required, we will provide a dedicated “Your Privacy Choices” mechanism and honor recognized opt-out signals. This general notice is not a substitute for any state-specific disclosures that become legally required based on our operations, revenue, data volume, or technologies.

13. Children

The Site is intended for adults aged 18 or older. We do not knowingly solicit personal information from children under 13 or knowingly target them with advertising. If you believe a child provided personal information improperly, contact us so we can investigate and take appropriate action. Applicable laws may afford additional protections to minors.

14. International processing

We currently market and ship within the United States. Shopify and other service providers may process information in the United States or other countries in which they operate. Where cross-border transfer rules apply, we will use legally required safeguards. Accessing our Site from another country does not by itself constitute consent to every possible transfer.

Our Site may link to independent websites and social platforms. Their collection and use of information are governed by their own policies. We encourage you to review those policies before providing information.

16. Changes to this policy

We may revise this Privacy Policy as our operations, technology, or legal requirements change. We will update the “Last Updated” date and provide additional notice or obtain consent when required by law.

17. Contact us

Bebe Got Back LLC 1201 N Market St, STE 111 Wilmington, DE 19801 United States

Email: support@bebegotback.com 

Website: https://www.bebegotback.com