Privacy Policy

 

Introduction

Thank you for choosing to be part of our community at Delightful Brands, doing business as Huppy ("Huppy," "we," "us," or "our"). We are committed to protecting your personal information and your right to privacy. If you have any questions or concerns about this policy or our practices, please contact us at hello@behuppy.com.

This Privacy Policy applies to all information collected through our website (http://www.behuppy.com) and any related services, sales, marketing, or events (collectively, the "Services"). Please read this policy carefully. If you do not agree with its terms, please discontinue use of our Services.

1. Information We Collect

Information You Provide Directly

  • Identity Data: First name, last name, maiden name, and nickname
  • Contact Data: Current and former address, phone numbers, personal and business email addresses, and business phone number
  • Transaction Data: Purchase history, returns, and exchanges
  • Credentials: Passwords, password hints, and similar authentication information
  • Payment Data: Payment instrument numbers (e.g., credit card numbers) and associated security codes. All payment data is stored and processed by Shopify (https://www.shopify.com/legal/privacy) and Stripe (https://stripe.com/privacy). We do not store full payment card data on our own systems.
  • Communications: Any information you provide when contacting us for support or submitting feedback

Information Collected Automatically

When you visit or use our Services, we automatically collect:

  • Device & Technical Data: IP address, browser type and version, device identifiers, operating system, and language preferences
  • Usage Data: Pages visited, links clicked, time spent on pages, referring URLs, and similar interaction data
  • Location Data: General geographic location derived from IP address
  • Cookie & Tracking Data: Data collected through cookies, web beacons, pixels, and similar technologies (see Section 5)

Information from Third Parties

If you connect a third-party account (such as Google or Facebook) to our Services, we may receive information from that third party in accordance with their privacy policy and your authorization.

2. How We Use Your Information

We use the information we collect for the following purposes, relying on the legal bases indicated:

Purpose Legal Basis
Account creation and authentication Contract performance
Order fulfillment, payment processing, and returns Contract performance
Sending transactional and service-related communications Contract performance / Legal obligation
Sending marketing and promotional communications (with opt-out) Consent
Delivering targeted advertising Legitimate interests (see below)
Fraud prevention and security Legitimate interests / Legal obligation
Analytics, usage trends, and service improvement Legitimate interests (see below)
Compliance with legal obligations Legal obligation
Responding to legal process Legal obligation
Prize draws and competitions Consent
Posting testimonials (with prior consent) Consent

Legitimate Interests Disclosure: Where we rely on legitimate interests as our legal basis, we have conducted a balancing assessment and determined that our interests (improving and securing our Services, delivering relevant advertising) do not override your fundamental rights and freedoms. You may request a copy of our Legitimate Interests Assessment by contacting us at hello@behuppy.com.

3. Data Retention

We retain personal information only as long as necessary for the purposes described in this policy, and in no event longer than the periods set forth below:

Data Category Retention Period
Account and identity data Duration of account + 1 year post-termination
Transaction and order data 7 years (tax and accounting requirements)
Payment data Retained by Shopify/Stripe per their policies
Marketing preferences and consent records 3 years from last interaction
Communications and support records 3 years from last interaction
Automatically collected usage/device data 13 months from collection
Cookie and tracking data Per cookie-specific expiration (see Cookie Policy)

When retention periods expire, we will securely delete or anonymize your data. If immediate deletion is not technically feasible (e.g., data in backup archives), we will isolate that data from further processing until deletion is possible.

4. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties for their own promotional purposes. We may share your information in the following circumstances:

Service Providers: We share data with vetted third-party vendors who perform services on our behalf, including payment processing, data analytics, email delivery, hosting, and customer service. These vendors are contractually obligated to use your data only for the specified purpose and to maintain appropriate security standards. Key service providers include:

Business Transfers: In connection with a merger, acquisition, financing, or sale of all or a portion of our business, your information may be transferred. We will notify you via email and/or prominent notice on our website prior to such a transfer and before your data becomes subject to a different privacy policy.

Legal Requirements: We may disclose your information where required by law, court order, subpoena, or governmental authority, or where necessary to protect the rights, property, or safety of Huppy, our users, or others.

Affiliates: We may share information with our parent company, subsidiaries, and joint venture partners, all of whom are required to honor this privacy policy.

We do not share personal information with third-party advertisers for their independent use without your explicit consent.

5. Cookies and Tracking Technologies

We use cookies, web beacons, pixels, and similar technologies to operate and improve our Services. You may control cookie preferences through your browser settings or our cookie consent manager. Rejecting certain cookies may affect the functionality of our Services.

Global Privacy Control (GPC): We recognize and honor GPC signals as a valid opt-out of the sale or sharing of personal data for cross-context behavioral advertising, to the extent required by applicable law, including California law.

Do-Not-Track (DNT): No uniform technical standard for DNT signals has been adopted. We do not currently respond to legacy DNT browser signals. We will update this policy if a binding standard is adopted.

For a detailed breakdown of the cookies we use and how to manage them, please see our [Cookie Policy].

6. International Data Transfers

Our Services are operated in the United States. If you are accessing our Services from outside the United States, including from the European Economic Area (EEA), United Kingdom, or Switzerland, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction.

Where we transfer personal data from the EEA, UK, or Switzerland to the United States or other third countries, we do so using appropriate safeguards, including:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • UK International Data Transfer Agreements (IDTAs) where applicable
  • Other lawful transfer mechanisms as required

You may request a copy of the relevant transfer safeguards by contacting us at hello@behuppy.com.

7. Data Security and Breach Notification

We implement administrative, technical, and physical security measures designed to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include encryption of data in transit (TLS), access controls, and regular security assessments.

No method of transmission over the internet or electronic storage is 100% secure. In the event of a data breach that affects your personal information, we will notify you and applicable regulatory authorities as required by applicable federal and state law, including but not limited to applicable state breach notification statutes. Notification will be provided within the timeframes mandated by law, and in no event later than is reasonably practicable.

8. Children's Privacy

Our Services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13 in violation of the Children's Online Privacy Protection Act (COPPA). We do not knowingly solicit data from or market to individuals under the age of 18.

By using the Services, you represent that you are at least 18 years of age, or that you are the parent or legal guardian of a minor and have consented to that minor's use of the Services. We do not rely solely on user age representations as our sole compliance mechanism.

If we learn that we have collected personal information from a child under 13 without verifiable parental consent, we will promptly delete that information and deactivate any associated account. If you believe we may have collected information from a child under 13, please contact us immediately at hello@behuppy.com.

9. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request correction of inaccurate or incomplete data
  • Deletion: Request deletion of your personal information, subject to certain legal exceptions
  • Portability: Receive your data in a structured, machine-readable format
  • Objection: Object to processing based on legitimate interests or for direct marketing
  • Restriction: Request restriction of processing in certain circumstances
  • Withdraw Consent: Where processing is based on consent, withdraw it at any time without affecting prior processing

To exercise any of these rights, please submit a request to hello@behuppy.com or via our [Data Request Form]. We will respond within 30 days (or within the timeframe required by applicable law).

We will not discriminate against you for exercising your privacy rights.

10. California Residents — Additional Rights (CCPA/CPRA)

If you are a California resident, you have the following additional rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):

  • Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected, the sources, the business purposes, and the categories of third parties with whom we share it.
  • Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
  • Right to Correct: You may request correction of inaccurate personal information.
  • Right to Opt Out of Sale or Sharing: We do not sell your personal information. If we engage in cross-context behavioral advertising, you have the right to opt out. You may also submit an opt-out request at [Do Not Sell or Share My Personal Information link].
  • Right to Limit Use of Sensitive Personal Information: You may direct us to limit our use of sensitive personal information to purposes permitted by law.
  • Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA/CPRA rights.

Categories of Personal Information Collected (past 12 months): Identifiers; commercial information; internet or network activity; geolocation data; and inferences drawn from the above.

Categories of Personal Information Disclosed for Business Purposes: Identifiers and commercial information disclosed to service providers (Shopify, Stripe, email and analytics providers).

California residents may submit requests by emailing hello@behuppy.com. We will verify your identity prior to fulfilling any request. Authorized agents may submit requests on your behalf with written authorization.

"Shine the Light" (Civil Code § 1798.83): California residents may also request, once per year and free of charge, information about personal information disclosed to third parties for their direct marketing purposes. Submit such requests to hello@behuppy.com.

11. EEA and UK Residents — Additional Rights (GDPR/UK GDPR)

If you are located in the European Economic Area or the United Kingdom, our processing of your personal data is governed by the GDPR and UK GDPR respectively. The data controller is Delightful Brands d/b/a Huppy, contactable at hello@behuppy.com.

In addition to the rights described in Section 9, you have the right to lodge a complaint with your local supervisory authority. A list of EEA supervisory authorities is available at: http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm. The UK supervisory authority is the Information Commissioner's Office (ICO): https://ico.org.uk.

12. Dispute Resolution; Binding Arbitration; Class Action Waiver

Informal Resolution: Before initiating any formal dispute, you agree to contact us at hello@behuppy.com and provide a written description of the dispute and desired resolution. We will attempt to resolve the matter within 30 days.

Binding Arbitration: If informal resolution fails, any dispute, claim, or controversy arising out of or relating to this Privacy Policy or our data practices — including the existence, validity, interpretation, performance, breach, or termination thereof — shall be resolved exclusively by binding individual arbitration administered by the American Arbitration Association (AAA) under its Consumer Arbitration Rules, except as otherwise provided herein. The arbitration shall be conducted in English. The arbitrator's decision shall be final and binding and may be entered as a judgment in any court of competent jurisdiction.

Class Action Waiver: TO THE FULLEST EXTENT PERMITTED BY LAW, YOU WAIVE YOUR RIGHT TO PARTICIPATE IN A CLASS ACTION LAWSUIT OR CLASS-WIDE ARBITRATION. ALL DISPUTES MUST BE BROUGHT IN YOUR INDIVIDUAL CAPACITY AND NOT AS A PLAINTIFF OR CLASS MEMBER IN ANY PURPORTED CLASS OR REPRESENTATIVE PROCEEDING.

Exceptions: Nothing in this section limits either party's right to seek injunctive or other equitable relief in a court of competent jurisdiction for matters involving intellectual property or unauthorized access to data. Residents of jurisdictions where mandatory arbitration of consumer claims is prohibited by law are exempt from the arbitration provision to the extent so prohibited.

Limitation of Liability: TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, HUPPY SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES ARISING OUT OF OR RELATED TO ANY THIRD-PARTY DATA BREACH, THIRD-PARTY MISUSE OF YOUR PERSONAL INFORMATION, OR FAILURE OF THIRD-PARTY SERVICES, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. OUR AGGREGATE LIABILITY FOR ANY CLAIM ARISING UNDER THIS POLICY SHALL NOT EXCEED THE GREATER OF (A) THE AMOUNT YOU PAID TO US IN THE 12 MONTHS PRECEDING THE CLAIM OR (B) ONE HUNDRED DOLLARS ($100).

13. Testimonials and FTC Compliance

With your prior written consent, we may post testimonials on our Services that include your name and feedback. If you wish to update or delete a posted testimonial, contact us at hello@behuppy.com with your name, the testimonial location, and your contact information.

All testimonials reflect the genuine experience of individual customers. Results described in testimonials may not be typical. Where a material connection exists between Huppy and the person providing a testimonial (e.g., the person received a free product or other compensation), such connection will be clearly disclosed in accordance with the FTC's Guides Concerning the Use of Endorsements and Testimonials (16 C.F.R. Part 255).

14. Email and Text Marketing Opt-Out

Email: You may unsubscribe from marketing emails at any time by clicking the "unsubscribe" link in any marketing email or by contacting us at hello@behuppy.com. We will continue to send service-related and transactional emails necessary for account administration.

Text/SMS: With your consent, we may send text messages about products, promotions, and checkout reminders via webhook-triggered messaging. You may opt out at any time by replying STOP to any message or by contacting us at hello@behuppy.com. Message and data rates may apply.

15. Updates to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by posting a prominent notice on our website and/or by sending you a direct notification at least 30 days before the change takes effect. Your continued use of the Services after the effective date constitutes acceptance of the updated policy. We encourage you to review this policy periodically.

16. Contact Us

Delightful Brands d/b/a Huppy Email: hello@behuppy.com Website: http://www.behuppy.com

For data access, correction, or deletion requests: [Data Request Form Link] For California-specific requests: hello@behuppy.com For GDPR/UK GDPR inquiries: hello@behuppy.com

This Privacy Policy was last reviewed and updated on February 19, 2026.