PRIVACY POLICY
Last updated: September 13, 2026
Cotton & Blues Boutique operates this store and website, including all related information, content, features, tools, products, and services, to provide you, the customer, with a curated shopping experience (the “Services”). Cotton & Blues Boutique is powered by Shopify, which enables us to provide the Services to you.
This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, make a purchase or other transaction using the Services, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.
Please read this Privacy Policy carefully. By using or accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.
PERSONAL INFORMATION WE COLLECT OR PROCESS
When we use the term “personal information,” we mean information that identifies or can reasonably be linked to you or another person. Personal information does not include information collected anonymously or de-identified so that it cannot identify or reasonably be linked to you.
Depending on how you interact with the Services, where you live, and as permitted or required by applicable law, we may collect or process the following categories of personal information, including inferences drawn from this information:
• Contact details, including your name, address, billing address, shipping address, phone number, and email address.
• Financial information, including credit card, debit card, financial account numbers, payment-card information, transaction details, form of payment, payment confirmation, and other payment details.
• Account information, including your username, password, security questions, preferences, and settings.
• Transaction information, including the items you view, place in your cart, add to your wishlist, purchase, return, exchange, or cancel, as well as your past transactions.
• Communications with us, including information you provide when sending a customer-support inquiry.
• Device information, including information about your device, browser, network connection, IP address, and other unique identifiers.
• Usage information, including information about how and when you interact with or navigate the Services.
PERSONAL INFORMATION SOURCES
We may collect personal information from the following sources:
• Directly from you, including when you create an account, visit or use the Services, communicate with us, or otherwise provide us with your personal information.
• Automatically through the Services, including from your device when you use our products or services, visit our website, or interact with cookies and similar technologies.
• From service providers, including when we engage them to provide technology or when they collect or process personal information on our behalf.
• From our partners or other third parties.
HOW WE USE YOUR PERSONAL INFORMATION
Depending on how you interact with us or which Services you use, we may use personal information for the following purposes:
Provide, Tailor, and Improve the Services
We use your personal information to provide the Services, including performing our contract with you, processing payments, fulfilling orders, remembering your preferences and items in which you are interested, sending notifications related to your account, processing purchases, returns, exchanges, or other transactions, creating and managing your account, arranging shipping, facilitating returns and exchanges, enabling you to post reviews, and creating a customized shopping experience, such as recommending products related to your purchases.
We may also use your personal information to tailor and improve the Services.
Marketing and Advertising
We use your personal information for marketing and promotional purposes, such as sending marketing, advertising, and promotional communications by email, text message, or postal mail and showing online advertisements for products or services on the Services or other websites. These advertisements may be based on items you previously purchased, placed in your cart, or viewed, as well as other activity on the Services.
Security and Fraud Prevention
We use your personal information to authenticate your account, provide a secure payment and shopping experience, detect and investigate possible fraudulent, illegal, unsafe, or malicious activity, protect public safety, and secure the Services.
If you register an account, you are responsible for keeping your account credentials secure. We strongly recommend that you do not share your username, password, or other access information with anyone.
Communicating With You
We use your personal information to provide customer support, respond to your requests, provide effective services, and maintain our business relationship with you.
Legal Reasons
We use your personal information to comply with applicable law, respond to valid legal processes or requests from law-enforcement or government agencies, participate in civil discovery or litigation, and enforce or investigate potential violations of our terms or policies.
HOW WE DISCLOSE PERSONAL INFORMATION
In certain circumstances, we may disclose personal information to third parties for legitimate purposes subject to this Privacy Policy. These circumstances may include:
• With Shopify, vendors, and other third parties that perform services on our behalf, such as IT management, payment processing, data analytics, customer support, cloud storage, fulfillment, and shipping.
• With business and marketing partners to provide marketing services and advertising. For example, we use Shopify to support personalized advertising with third-party services based on your online activity across different merchants and websites. Our business and marketing partners use your information in accordance with their own privacy notices.
Depending on where you reside, you may have the right to direct us not to share information for targeted advertising based on your activity across different merchants and websites. You can exercise these rights through our Your Privacy Choices page:
https://cottonnbluesboutique.com/pages/data-sharing-opt-out
• When you direct, request, or otherwise consent to our disclosure of certain information to third parties, such as when we share information to ship products or when you use social-media widgets or login integrations.
• With our affiliates or within our corporate group.
• In connection with a business transaction, such as a merger or bankruptcy; to comply with legal obligations, subpoenas, search warrants, and similar requests; to enforce applicable terms or policies; and to protect or defend the Services, our rights, and the rights of our users or others.
RELATIONSHIP WITH SHOPIFY
The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services to provide and improve the Services. Information you submit through the Services is transmitted to and shared with Shopify and other third parties that may be located in countries other than where you reside.
To help protect, grow, and improve our business, we may use Shopify features that incorporate information obtained from your interactions with our store, other merchants, and Shopify. Shopify may use personal information collected from these interactions to provide these features.
In these circumstances, Shopify is responsible for processing your personal information, including responding to requests to exercise your rights concerning Shopify’s use of your information.
Learn more through the Shopify Consumer Privacy Policy:
https://www.shopify.com/legal/privacy/consumers
You can also exercise certain rights through the Shopify Privacy Portal:
https://privacy.shopify.com/en
THIRD-PARTY WEBSITES AND LINKS
The Services may provide links to websites or online platforms operated by third parties. If you follow links to websites not affiliated with or controlled by us, you should review their privacy and security policies and other terms and conditions.
We do not guarantee and are not responsible for the privacy, security, accuracy, completeness, or reliability of third-party websites.
Information you provide in public or semi-public venues, including information shared through third-party social-networking platforms, may be visible to other users of the Services or those third-party platforms. Including a third-party link does not, by itself, imply our endorsement of that platform, its content, or its owners or operators.
CHILDREN’S DATA
The Services are not intended for children, and we do not knowingly collect personal information from children under the age of majority in their jurisdiction.
If you are the parent or guardian of a child who provided us with personal information, you may contact us using the information below to request its deletion.
As of the effective date of this Privacy Policy, we do not have actual knowledge that we “share” or “sell,” as those terms are defined under applicable law, personal information belonging to individuals under 16 years of age.
SECURITY AND RETENTION OF YOUR INFORMATION
No security measures are perfect or impenetrable, and we cannot guarantee perfect security. Information sent to us may not be secure while in transit. We recommend that you do not use unsecured channels to communicate sensitive or confidential information.
How long we retain personal information depends on factors such as whether we need it to maintain your account, provide the Services, comply with legal obligations, resolve disputes, or enforce contracts and policies.
YOUR RIGHTS AND CHOICES
Depending on where you live, you may have some or all of the following rights concerning your personal information. These rights are not absolute, may apply only in certain circumstances, and may be declined as permitted by law.
• Right to Access or Know: You may have the right to request access to personal information we maintain about you.
• Right to Delete: You may have the right to request that we delete personal information we maintain about you.
• Right to Correct: You may have the right to request that we correct inaccurate personal information we maintain about you.
• Right of Portability: You may have the right to receive a copy of personal information we maintain about you or request that we transfer it to a third party, subject to certain circumstances and exceptions.
• Right to Opt Out of Sale, Sharing, or Targeted Advertising: Depending on where you reside, you may have the right to opt out of the sale or sharing of your personal information or its processing for targeted advertising.
You can exercise applicable opt-out rights through our Your Privacy Choices page:
https://cottonnbluesboutique.com/pages/data-sharing-opt-out
If you visit our website with the Global Privacy Control opt-out preference signal enabled, we may automatically treat that signal as an opt-out request for the device and browser you use, depending on where you reside. If we can associate the device sending the signal with a Shopify account, we may apply the opt-out request to that account.
Learn more about Global Privacy Control:
https://globalprivacycontrol.org/
Other than Global Privacy Control, we do not recognize other “Do Not Track” signals sent by web browsers or devices.
Managing Communication Preferences
We may send promotional emails. You may opt out at any time by using the unsubscribe option included in those emails. If you opt out, we may still send non-promotional emails concerning your account or orders.
Additional Rights for UK and European Economic Area Residents
If you reside in the United Kingdom or European Economic Area, you may have the following additional rights, subject to applicable exceptions and limitations:
• Objection to Processing and Restriction of Processing: You may have the right to ask us to stop or restrict our processing of personal information for certain purposes.
• Withdrawal of Consent: When we rely on consent to process personal information, you may have the right to withdraw that consent. Withdrawing consent does not affect the lawfulness of processing performed before the withdrawal.
You may exercise your rights where indicated through the Services or by contacting us using the information below.
To learn more about Shopify’s use of personal information and your rights concerning information processed by Shopify, visit:
https://privacy.shopify.com/en
We will not discriminate against you for exercising your privacy rights. We may need to verify your identity before processing a request, as permitted or required by law.
You may designate an authorized agent to submit a request on your behalf. Before accepting a request from an authorized agent, we may require proof that you authorized that person to act for you, and we may require you to verify your identity directly with us.
We will respond to requests within the time required by applicable law.
COMPLAINTS
If you have a complaint about how we process personal information, please contact us using the information below.
Depending on where you reside, you may have the right to appeal our decision or lodge a complaint with your local data-protection authority.
Residents of the European Economic Area can find a list of data-protection supervisory authorities at:
https://www.edpb.europa.eu/about-edpb/about-edpb/members_en
INTERNATIONAL TRANSFERS
We may transfer, store, and process your personal information outside the country where you live.
If we transfer personal information outside the European Economic Area or United Kingdom, we rely on recognized transfer mechanisms, such as the European Commission’s Standard Contractual Clauses or equivalent contracts issued by the appropriate UK authority, unless the receiving country has been determined to provide an adequate level of protection.
CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy periodically to reflect changes to our practices or for operational, legal, or regulatory reasons.
When we make changes, we will post the revised Privacy Policy on this website, update the “Last updated” date, and provide any notice required by applicable law.
CONTACT
If you have questions about our privacy practices or this Privacy Policy, or if you want to exercise an available privacy right, contact us at:
Cotton & Blues Boutique
Email: cottonnbluesboutique@gmail.com
Mailing address: 1448 Dogwood Rd, Brewton, AL 36426, United States
For purposes of applicable data-protection laws, Cotton & Blues Boutique is the data controller of your personal information.
