Privacy policy
Privacy Policy
Last updated: August 10, 2026
This Privacy Policy describes how Stephiecathy LLC, operating under the brand STEPHIECATHY ("STEPHIECATHY," "we," "us," or "our"), collects, uses, discloses, stores, and otherwise processes personal information when you visit, use, make a purchase from, or otherwise interact with stephiebags.com (the "Site"), including when you contact us regarding an order, return, refund, or other customer service matter.
Our online store is powered by Shopify. As a result, Shopify and certain other service providers may process personal information on our behalf or for their own purposes as described below.
By using the Site, you acknowledge the practices described in this Privacy Policy. Where consent is required by applicable law, we will request your consent before conducting the relevant processing.
1. Personal Information We Collect
The personal information we collect depends on how you interact with our Site and services.
Information You Provide Directly to Us
We may collect information that you voluntarily provide when you place an order, create or use a customer account, contact customer service, request a return or refund, subscribe to marketing communications, or otherwise communicate with us.
This information may include:
Your name
Billing address
Shipping address
Email address
Telephone number
Order and transaction information
Products purchased or viewed
Return, refund, and exchange information
Customer account information
Marketing preferences
Customer service communications
Reviews, feedback, or other information you choose to submit
When you make a purchase, payment information is processed through Shopify and applicable payment processors. Depending on the payment method you use, this may include payment card or financial account information. We generally do not receive or store your complete payment card number.
Information Collected Automatically
When you visit or interact with our Site, we, Shopify, and our service providers may automatically collect certain information about your device and use of the Site.
This information may include:
IP address
Browser type and version
Device type
Operating system
Device identifiers
Cookie identifiers
General or approximate location derived from your IP address
Pages viewed
Products viewed or added to your cart
Search activity
Referring websites or advertisements
Date and time of visits
Interaction with pages, features, advertisements, or emails
Shopping and checkout activity
Information concerning how you navigate and use the Site
Some of this information is collected through cookies, pixels, tags, software development kits, local storage, and similar technologies.
Information We Receive From Other Sources
We may also receive personal information from third parties that help us operate our business and provide our services, including:
Shopify
Payment processors
Shipping and logistics providers
Fraud prevention and security providers
Analytics providers
Advertising and marketing partners
Customer service providers
Apps and services integrated with our Shopify store
For example, shipping providers may provide us with tracking and delivery information, and payment or fraud-prevention providers may provide information regarding transaction authorization or potential fraud.
2. How We Use Personal Information
We may use personal information for the following purposes:
Providing Products and Services
We use personal information to:
Process and fulfill orders
Process payments
Arrange shipping and delivery
Provide order confirmations and tracking information
Process returns, exchanges, refunds, and cancellations
Maintain customer accounts
Provide customer service
Respond to questions, requests, complaints, and claims
Operating and Improving Our Store
We may use information to:
Operate and maintain the Site
Understand how customers use our Site
Improve products, services, navigation, and customer experience
Analyze store and product performance
Troubleshoot technical problems
Develop and improve Site features
Customize or personalize your shopping experience
Marketing and Advertising
Subject to applicable law and your privacy choices, we may use personal information to:
Send promotional emails and other marketing communications
Measure the effectiveness of advertising
Understand customer interests and preferences
Personalize advertisements
Create or measure advertising audiences
Display advertisements that may be more relevant to your interests
Where applicable law requires consent for marketing, advertising cookies, or similar technologies, we will process information for those purposes only after obtaining the required consent.
You may unsubscribe from promotional emails at any time by using the unsubscribe link included in the communication.
Security and Fraud Prevention
We may use personal information to:
Detect and prevent fraud
Protect customer accounts
Detect suspicious transactions
Protect our Site, systems, customers, and business
Investigate violations of our policies
Prevent misuse, abuse, or illegal activity
Legal and Regulatory Compliance
We may process personal information when necessary to:
Comply with tax, accounting, and financial obligations
Respond to lawful requests from government or law enforcement authorities
Comply with court orders and legal proceedings
Enforce our agreements and policies
Establish, exercise, or defend legal claims
Protect our legal rights and the rights of others
3. Legal Bases for Processing
For individuals located in jurisdictions where applicable law requires us to identify a legal basis for processing personal information, including the European Economic Area ("EEA") and the United Kingdom, we generally rely on one or more of the following legal bases:
Performance of a Contract
We process personal information when necessary to enter into or perform our contract with you, including:
Processing your order
Processing payment
Shipping products
Providing customer service
Processing returns and refunds
Legitimate Interests
We may process personal information where necessary for our legitimate business interests, provided those interests are not overridden by your fundamental rights and freedoms.
Our legitimate interests may include:
Operating and improving our business
Preventing fraud and abuse
Protecting our systems
Understanding how customers use our Site
Providing effective customer support
Maintaining business records
Measuring business performance
Consent
Where required, we rely on your consent for activities such as certain:
Marketing communications
Advertising activities
Analytics
Non-essential cookies
Tracking technologies
Personalized advertising
Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing conducted before withdrawal.
Legal Obligations
We process personal information where necessary to comply with applicable legal, regulatory, accounting, tax, or other obligations.
These legal bases and the related transparency requirements are consistent with the GDPR requirements for businesses collecting personal data.
4. Cookies and Similar Technologies
We and our service providers, including Shopify, may use cookies and similar technologies to operate our Site.
Cookies and related technologies may be used for purposes including:
Keeping the Site functioning
Remembering shopping cart contents
Remembering customer preferences
Authentication and security
Fraud prevention
Analytics
Measuring Site performance
Personalizing content
Measuring advertising
Providing personalized advertising where permitted
Some cookies are strictly necessary for the Site to function and cannot reasonably be disabled through our consent tools.
Other cookies, including certain analytics and advertising cookies, may be optional.
Where applicable law requires consent before using non-essential cookies or tracking technologies, including in certain EEA and UK circumstances, we will request consent through the cookie or privacy controls available on our Site.
You can manage applicable cookie preferences through the privacy or cookie controls provided on our Site. You may also configure your browser to block or delete cookies, although doing so may prevent certain Site features from functioning correctly.
Shopify's customer privacy tools are designed to restrict non-essential collection in configured consent regions until appropriate consent is obtained.
5. Shopify
Our Site is hosted and powered by Shopify.
Shopify processes personal information when you visit our Site, browse products, create or use an account, place an order, complete checkout, use Shopify-supported payment functionality, or otherwise interact with our store.
Shopify may process information including:
Contact information
Order and transaction information
Device information
IP address
Browsing activity
Shopping activity
Payment-related information
Information concerning interactions with Shopify and Shopify-powered merchants
Depending on the Shopify services and features used by our store, Shopify may also process information concerning your interactions with our store, Shopify, and other Shopify merchants to provide functionality such as personalization, performance improvement, fraud prevention, analytics, and advertising services.
Information may be shared with Shopify and other service providers located in countries other than the country in which you live as necessary to provide these services.
For additional information regarding Shopify's processing of consumer personal information, please review the Shopify Consumer Privacy Policy:
https://www.shopify.com/legal/privacy/consumers
You can also learn about or exercise certain rights directly with Shopify through the Shopify Privacy Portal:
https://privacy.shopify.com/
Shopify specifically requires these disclosures when applicable Enhanced Services and Shopify Network Intelligence are used.
6. Shopify Network Intelligence and Enhanced Services
Depending on the Shopify services enabled for our store, Shopify may use information from customer interactions with our store together with information from interactions with Shopify and other Shopify merchants to provide Enhanced Services.
These services may help us and Shopify:
Provide a more customized shopping experience
Understand how customers interact with our store
Improve store performance
Prevent fraud
Measure advertisements
Provide more relevant advertising
Improve Shopify-powered commerce services
No other Shopify merchant is given direct access to our customer data solely because Shopify Network Intelligence is enabled.
Where required by law, we provide customers with mechanisms to withdraw consent or opt out of processing for targeted advertising, sale, or sharing of personal information.
Shopify states that its integrated privacy controls can respect applicable cookie-consent choices, data-sharing opt-outs, Global Privacy Control signals, and deletion requests in connection with Shopify Network Intelligence.
7. How We Disclose Personal Information
We may disclose personal information to third parties where reasonably necessary for the purposes described in this Privacy Policy.
Shopify
We disclose information to Shopify because Shopify provides the ecommerce infrastructure used to operate our store.
Payment Processors
Payment information and transaction information may be provided to banks, card networks, payment gateways, Shopify, and other payment processors in order to complete your purchase, prevent fraud, and process refunds.
Shipping and Logistics Providers
We may disclose your name, shipping address, phone number, email address, order information, and other information necessary to deliver your purchase to shipping and logistics providers.
Depending on your destination and the shipping service selected, these providers may include DHL, FedEx, USPS, and other carriers or logistics partners.
Service Providers
We may disclose information to companies that provide services on our behalf, including:
Website hosting
Ecommerce services
Customer support
Analytics
Information technology
Security
Fraud prevention
Email services
Marketing services
Advertising
Accounting
Business administration
These providers are permitted to process information as necessary to provide their services and as otherwise permitted by applicable law.
Advertising and Analytics Partners
Where permitted by applicable law and subject to your privacy choices, information regarding your use of our Site may be disclosed to advertising or analytics providers to measure advertisements, understand customer behavior, personalize advertising, or improve marketing effectiveness.
Professional Advisers
We may disclose information to attorneys, accountants, insurers, auditors, financial advisers, and other professional advisers when reasonably necessary.
Legal Authorities
We may disclose personal information when we reasonably believe disclosure is required to comply with applicable law, legal process, court orders, government requests, or to protect our rights or the rights and safety of others.
Business Transactions
If Stephiecathy LLC is involved in a merger, acquisition, financing, restructuring, bankruptcy, sale of assets, or similar transaction, personal information may be transferred as part of that transaction, subject to applicable law.
8. Sale, Sharing, and Targeted Advertising
We do not sell personal information in exchange for money.
However, certain privacy laws use definitions of "sale" or "sharing" that may include disclosures of personal information to advertising, analytics, or technology partners even where no money is exchanged.
Accordingly, certain activities involving advertising technologies, analytics providers, or Shopify Enhanced Services may be considered:
Sale of personal information
Sharing of personal information
Targeted advertising
Cross-context behavioral advertising
under certain U.S. state privacy laws.
Where such laws apply, you may have the right to opt out.
You may exercise applicable opt-out rights through the Your Privacy Choices, Do Not Sell or Share My Personal Information, data-sharing opt-out, or similar privacy control available on our Site where provided.
You may also contact us at:
support@stephiebags.com
and use the subject line Privacy Request.
Where required by applicable law, we also recognize qualifying browser-based universal opt-out preference signals, including Global Privacy Control (GPC).
Colorado expressly recognizes GPC for covered businesses, and California also requires covered businesses to honor qualifying opt-out preference signals for applicable sale or sharing activities.
9. Your Privacy Rights
Depending on where you live and the privacy laws applicable to you, you may have some or all of the following rights regarding your personal information:
Right to know whether we process your personal information
Right to access personal information
Right to obtain a copy of personal information
Right to correct inaccurate information
Right to request deletion
Right to restrict certain processing
Right to object to certain processing
Right to data portability
Right to opt out of sale or sharing of personal information
Right to opt out of targeted advertising
Right to withdraw consent
Right to limit certain uses of sensitive personal information where applicable
Right to appeal certain decisions regarding privacy requests where applicable
Right not to receive unlawful discriminatory treatment for exercising privacy rights
Not every right applies in every jurisdiction or circumstance. We may also be permitted or required to retain certain information despite a deletion request, including information necessary to complete transactions, comply with legal obligations, prevent fraud, or establish or defend legal claims.
GDPR provides rights including access, rectification, erasure, restriction, portability, objection, and withdrawal of consent where applicable.
10. How to Exercise Your Privacy Rights
To exercise an applicable privacy right regarding information controlled by Stephiecathy LLC, contact us at:
Email: support@stephiebags.com
Subject: Privacy Request
You may also contact us by telephone at:
+1 970-453-8080
Please describe the privacy right you wish to exercise and provide sufficient information for us to identify the relevant records.
To protect your information, we may take reasonable steps to verify your identity before processing certain requests.
Depending on applicable law, you may be permitted to use an authorized agent to submit a request on your behalf. We may request reasonable evidence of the agent's authority to act for you.
We will respond within the period required by applicable law.
If we deny a request and applicable law gives you a right to appeal our decision, you may submit an appeal by emailing support@stephiebags.com with the subject line:
Privacy Appeal
We will not unlawfully discriminate against you because you exercised an applicable privacy right.
11. U.S. State Privacy Notice
This section provides additional information for residents of U.S. states with comprehensive consumer privacy laws, to the extent those laws apply to Stephiecathy LLC.
These laws may include privacy laws applicable in California, Colorado, and other U.S. states.
Categories of Personal Information
During the preceding 12 months, we may have collected the following categories of personal information:
Identifiers, including name, postal address, email address, telephone number, IP address, online identifiers, and customer or order identifiers.
Customer and account information, including contact information, account information, shipping information, billing information, and transaction-related information.
Commercial information, including products purchased, products viewed, order history, cart activity, returns, exchanges, refunds, and shopping preferences.
Internet or electronic network activity, including browsing activity, interaction with our Site, advertising interactions, referring URLs, device information, and cookie information.
Approximate geolocation information, such as general location inferred from an IP address.
Inferences, such as information regarding shopping interests or preferences derived from interactions with our Site where applicable.
Sensitive personal information, only to the extent necessary to provide requested products or services, process payments, protect customer accounts, prevent fraud, or as otherwise permitted by applicable law.
Sources of Personal Information
We obtain these categories of information from:
You
Your browser or device
Shopify
Payment processors
Shipping providers
Security and fraud-prevention services
Analytics providers
Advertising and marketing partners
Other services integrated with our store
Business and Commercial Purposes
We use these categories for purposes including:
Processing transactions
Fulfilling orders
Providing customer support
Processing returns and refunds
Preventing fraud
Securing the Site
Operating our business
Analytics
Improving products and services
Advertising and marketing where permitted
Complying with legal obligations
Categories of Recipients
We may disclose these categories of personal information to:
Shopify
Payment processors
Shipping and logistics providers
Technology providers
Fraud-prevention and security providers
Customer support providers
Analytics providers
Advertising and marketing partners
Professional advisers
Government or legal authorities where required
We do not knowingly sell personal information for monetary consideration.
As explained above, certain advertising, analytics, or Shopify-related disclosures may nevertheless constitute "sale" or "sharing" under the broad definitions used by some U.S. privacy laws.
California's CCPA, as amended, provides eligible California residents rights including rights to know, delete, correct, opt out of sale or sharing, limit certain uses of sensitive personal information, and receive equal treatment. Colorado's law similarly provides eligible consumers with access, correction, deletion and portability rights and rights to opt out of sale and targeted advertising.
12. California Residents
If the California Consumer Privacy Act ("CCPA"), as amended, applies to our processing of your personal information, you may exercise the applicable rights described in this Privacy Policy.
You may request that we:
Disclose certain information regarding our collection and use of your personal information
Provide access to eligible personal information
Delete eligible personal information
Correct inaccurate personal information
Stop selling or sharing eligible personal information
Limit certain uses or disclosures of sensitive personal information where applicable
We will not unlawfully discriminate against you for exercising your CCPA rights.
We do not knowingly use or disclose sensitive personal information for purposes requiring a right to limit beyond purposes permitted by applicable law, such as processing transactions, maintaining security, or providing products and services requested by customers.
Where the CCPA applies, qualifying opt-out preference signals such as Global Privacy Control will be treated as requests to opt out of applicable sale or sharing as required by law.
13. Colorado Residents
Because Stephiecathy LLC is located in Colorado, Colorado residents may have rights under the Colorado Privacy Act where the Act applies to our processing activities.
Applicable rights may include:
Accessing personal data
Correcting inaccurate personal data
Deleting personal data
Obtaining a portable copy of personal data
Opting out of the sale of personal data
Opting out of targeted advertising
Opting out of certain profiling where applicable
Where required under the Colorado Privacy Act, we recognize valid Universal Opt-Out Mechanisms, including Global Privacy Control.
If applicable law gives you the right to appeal our response to a privacy request, you may submit an appeal using support@stephiebags.com with the subject line Privacy Appeal.
The Colorado Attorney General identifies access, correction, deletion and opt-out rights under the CPA and currently recognizes GPC as a qualifying universal opt-out mechanism.
14. EEA and European Union Residents
If you are located in the European Economic Area and the General Data Protection Regulation ("GDPR") applies to our processing of your personal data, you may have rights including:
Access to your personal data
Correction of inaccurate or incomplete personal data
Erasure of personal data in applicable circumstances
Restriction of processing
Data portability
Objection to certain processing
Objection to direct marketing
Withdrawal of consent where processing relies on consent
The right to lodge a complaint with a competent data protection authority
You may exercise applicable rights by contacting support@stephiebags.com.
You have the right to object at any time to processing of your personal data for direct marketing purposes.
If processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.
You also have the right to lodge a complaint with the data protection supervisory authority responsible for your country or region.
These rights reflect the rights identified by the European Commission under the GDPR.
15. United Kingdom Residents
If you are located in the United Kingdom and applicable UK data protection law applies to our processing of your personal information, you may have rights including:
Access
Rectification
Erasure
Restriction of processing
Data portability
Objection
Withdrawal of consent where applicable
You may exercise applicable rights by contacting support@stephiebags.com.
You may also have the right to raise a concern or complaint with the UK Information Commissioner's Office (ICO).
Current ICO guidance requires privacy notices to identify the organization, purposes and lawful bases for processing, recipients, international transfers where relevant, retention, individual rights and complaint rights.
16. International Transfers of Personal Information
Stephiecathy LLC is located in the United States, and our Site is operated using Shopify and other service providers that may operate in multiple countries.
As a result, personal information may be transferred to, stored in, or processed in countries outside the country where you live, including the United States, Canada, and other locations where Shopify or our service providers operate.
Data protection laws in those countries may differ from those in your country.
Where applicable law requires safeguards for international transfers, we and our service providers rely on legally recognized transfer mechanisms or safeguards, such as applicable adequacy decisions, contractual safeguards, or other lawful transfer mechanisms.
You may contact us at support@stephiebags.com if you would like additional information about international transfers applicable to your personal information.
Shopify confirms that international transfers remain subject to applicable data-protection requirements and contractual safeguards through its privacy and data-processing framework.
17. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and as required or permitted by applicable law.
The length of time we retain information depends on factors including:
Whether we need the information to provide products or services
Whether you maintain a customer account
The length of our relationship with you
Tax and accounting requirements
Legal and regulatory obligations
Fraud-prevention and security needs
Warranty, return, refund, or chargeback periods
Applicable limitation periods
The need to establish, exercise, or defend legal claims
When information is no longer reasonably necessary, we may delete, anonymize, or otherwise dispose of it in accordance with applicable law.
Certain information may be retained after a deletion request when retention is permitted or required by law.
18. Security
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information from unauthorized access, loss, misuse, alteration, or disclosure.
Our store is hosted by Shopify, which provides security measures for the Shopify platform and payment environment.
However, no method of transmitting information over the Internet or electronically storing information can be guaranteed to be completely secure. We therefore cannot guarantee absolute security.
You are responsible for maintaining the confidentiality of any login credentials associated with your customer account.
If you believe your account or personal information has been compromised, please contact us promptly at support@stephiebags.com.
19. Automated Processing and Fraud Prevention
We and our service providers may use automated systems to help detect fraud, suspicious transactions, security threats, or misuse of our Site.
For example, a transaction may be reviewed or flagged based on information relating to the payment, device, order, location, or previous transaction activity.
Where applicable law provides specific rights concerning solely automated decisions that produce legal or similarly significant effects, those rights will apply.
You may contact us at support@stephiebags.com if you have questions about an applicable automated decision.
20. Marketing Communications
If you choose to receive marketing communications from us, we may use your email address or other information you provide to send information about products, promotions, or offers.
You may unsubscribe at any time by using the unsubscribe mechanism contained in our marketing emails.
You may also contact:
support@stephiebags.com
to request removal from our marketing list.
Unsubscribing from marketing communications does not prevent us from sending transactional or service-related communications, such as order confirmations, shipping updates, security messages, or communications regarding returns and refunds.
21. Children's Privacy
Our Site and products are intended for a general consumer audience and are not directed specifically to children.
We do not knowingly collect personal information from children in violation of applicable law.
If you are a parent or legal guardian and believe that a child has provided personal information to us in circumstances prohibited by applicable law, please contact us at support@stephiebags.com so that we can review the matter and take appropriate action.
22. Third-Party Websites and Services
Our Site may contain links to websites, applications, payment services, social networks, or other services operated by third parties.
We do not control the privacy or security practices of third parties.
When you leave our Site or interact directly with a third-party service, that third party's privacy policy and terms may apply.
We encourage you to review the privacy practices of third parties before providing them with personal information.
23. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect:
Changes to our business
Changes to our services
Changes to Shopify or other technology providers
Changes to our privacy practices
Legal or regulatory requirements
When we update this Privacy Policy, we will post the revised version on this page and update the Last updated date.
Where applicable law requires additional notice or consent for a material change, we will provide that notice or obtain consent as required.
24. Contact Us
If you have questions about this Privacy Policy, our privacy practices, or wish to exercise an applicable privacy right, please contact us:
STEPHIECATHY
Operated by Stephiecathy LLC
Address:
129 E 16th St
Leadville, Colorado 80461
United States
Email: support@stephiebags.com
Phone: +1 970-453-8080
Website: stephiebags.com
For privacy-related requests, you may email support@stephiebags.com with the subject line Privacy Request.