Privacy Policy
# WICKED CLOTHES PRIVACY POLICY
**Last updated:** April 30, 2026
This Privacy Policy explains how Wicked Clothes ("we," "us," "our") collects, uses, shares, and protects your personal information when you visit www.wickedclothes.com (the "Site") or make a purchase from us.
**Plain-English summary:** We collect what's needed to run the store (your order info, browsing data), share it with the vendors that help us operate (Shopify, payment processors, analytics, marketing tools), and we don't sell your data to data brokers. You can ask us to delete or correct your info anytime by emailing orders@wickedclothes.com.
---
## 1. INFORMATION WE COLLECT
### Information you give us directly
- **When you place an order:** name, billing address, shipping address, email address, phone number, and payment information (processed by Shopify Payments, Shop Pay, PayPal, Apple Pay, Google Pay, or Afterpay — we don't store your full card number).
- **When you sign up for SMS marketing (Postscript):** phone number, opt-in record, consent timestamp, and consent metadata.
- **When you sign up for email marketing:** email address.
- **When you contact us via the contact form:** name, email, optional order number, and the contents of your message.
- **When you leave a review (Judge.me):** name, email, photos you upload, review content.
- **When you initiate a return or exchange (ShipHero):** name, email, order number, address, and reason for return.
### Information collected automatically
- **Device & browsing data:** IP address, browser type, operating system, device identifiers, time zone, language preference, referring/exit URLs, search terms, pages viewed, products viewed, time spent on pages, scroll depth, clicks, mouse movement, and other interaction data.
- **Cookies and similar technologies:** session cookies, persistent cookies, web beacons, pixels, and local storage. You can manage these through the cookie consent banner that appears on your first visit (powered by Consentmo) or by clicking "Cookie Preferences" in the footer at any time.
- **Session recordings & heatmaps:** we use Microsoft Clarity to record anonymized session replays and aggregate heatmaps so we can see where users get stuck (broken buttons, confusing layouts) and improve the Site. Clarity is configured to mask sensitive form fields including passwords and payment data. Read more at https://privacy.microsoft.com/privacystatement.
We refer to all of the above collectively as your "Personal Information."
---
## 2. HOW WE USE YOUR PERSONAL INFORMATION
We use your information to:
- **Fulfill orders** — process payments, ship products, send order confirmations and shipping updates, handle returns and exchanges
- **Communicate with you** — answer your questions, send transactional emails, and (only if you opted in) send marketing emails or texts
- **Improve the Site** — understand how visitors use the Site, debug problems, optimize performance, A/B test layouts and copy
- **Marketing and advertising** — show you relevant ads on Meta (Facebook/Instagram), Google, and other platforms; measure ad performance; build lookalike audiences
- **Fraud prevention** — screen orders for chargeback or fraud risk, investigate suspicious activity
- **Legal compliance** — comply with tax, accounting, and regulatory requirements; respond to lawful requests
**Legal basis for EU/UK residents:** we process your data to perform our contract with you (orders), based on your consent (marketing, non-essential cookies), to comply with our legal obligations (tax, accounting), or for our legitimate interests (fraud prevention, site improvement, direct marketing of similar products you've purchased).
---
## 3. SHARING YOUR PERSONAL INFORMATION
We share your information with the following categories of third parties — only as needed to operate the business. **We do not sell your personal information to data brokers.** Some sharing for cross-context behavioral advertising (such as Meta Pixel and Google Ads) may legally qualify as "selling" or "sharing" under California and similar state laws — see Section 6 for opt-out rights.
| Vendor | Purpose | Privacy Policy |
|---|---|---|
| Shopify | E-commerce platform, hosting, payment processing | https://www.shopify.com/legal/privacy |
| Shop Pay | Accelerated checkout | https://shop.app/legal |
| Meta (Facebook / Instagram) | Advertising, conversion tracking via Pixel and Conversions API | https://www.facebook.com/privacy/policy |
| Google | Analytics, Ads | https://policies.google.com/privacy |
| Microsoft Clarity | Session recording, heatmaps, behavioral analytics | https://privacy.microsoft.com/privacystatement |
| Postscript | SMS marketing platform, opt-in records | https://postscript.io/privacy |
| Judge.me | Product reviews collection and display | https://judge.me/privacy |
| ShipHero | Returns and exchanges processing | https://shiphero.com/privacy-policy |
| Afterpay | Buy-now-pay-later split payments | https://www.afterpay.com/en-US/privacy-policy |
| EG Auto Add to Cart | Cart automation (free sticker pack add-on) | (contact app developer) |
| Consentmo | Cookie consent management and preferences | https://consentmo.com/privacy-policy/ |
| Shipping carriers (USPS, UPS, FedEx, etc.) | Order delivery | (varies by carrier) |
We may also share information:
- **With your consent**, in any other situation
- **To comply with legal obligations**, including subpoenas, court orders, government requests, or to protect our legal rights
- **In a business transfer** — if Wicked Clothes is sold, merged, or acquires assets, your information may transfer to the successor entity (subject to confidentiality obligations)
---
## 4. ADVERTISING & ANALYTICS
We use Meta Pixel and Conversions API, Google Analytics and Ads, and Microsoft Clarity to understand site behavior and run advertising campaigns. Some of this activity may legally count as "selling" or "sharing" your personal information for cross-context behavioral advertising under California's CCPA/CPRA and similar laws in other states.
You can opt out of cross-site tracking and "sale/sharing" through:
- The cookie consent banner on the Site (Consentmo) or the "Cookie Preferences" link in the footer
- The "Do Not Sell or Share My Personal Information" link in the footer
- Meta: https://www.facebook.com/settings/?tab=ads
- Google: https://www.google.com/settings/ads/anonymous
- Network Advertising Initiative: http://optout.networkadvertising.org/
- Digital Advertising Alliance: http://optout.aboutads.info/
---
## 5. COOKIES, DO-NOT-TRACK & GLOBAL PRIVACY CONTROL
When you first visit the Site, our cookie consent banner (Consentmo) lets you accept all cookies, reject non-essential cookies, or customize cookie categories. You can update these preferences anytime by clicking "Cookie Preferences" in the footer.
**Global Privacy Control (GPC):** we recognize and honor the GPC browser signal as a valid opt-out request for "sale" or "sharing" of personal information for cross-context behavioral advertising under CCPA/CPRA and similar state laws.
**Do Not Track (DNT):** because there's no industry consensus on how to interpret DNT, we do not respond to DNT signals. We do honor GPC, which is the more modern and legally recognized signal.
---
## 6. YOUR PRIVACY RIGHTS
### California residents (CCPA / CPRA)
You have the right to:
- **Know** what personal information we collect, use, disclose, and "sell" or "share"
- **Delete** personal information we hold about you (subject to legal exceptions, such as records we must keep for tax purposes)
- **Correct** inaccurate personal information
- **Opt out** of the "sale" or "sharing" of your personal information for cross-context behavioral advertising
- **Limit** the use of sensitive personal information (we do not currently process sensitive personal information for purposes beyond what's necessary to provide the service)
- **Non-discrimination** — we will not deny service, charge a different price, or provide a different level of quality because you exercised your privacy rights
To exercise these rights, email **orders@wickedclothes.com** with the subject line "Privacy Request," or click **"Do Not Sell or Share My Personal Information"** in our footer. We'll verify your identity by matching information you provide against your order history. Authorized agents may submit requests on your behalf with your written authorization.
### EU and UK residents (GDPR / UK GDPR)
You have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your data ("right to be forgotten")
- Restrict our processing of your data
- Data portability (receive your data in a machine-readable format)
- Object to our processing (especially for direct marketing)
- Withdraw consent at any time
- Lodge a complaint with your local data protection authority
To exercise these rights, email **orders@wickedclothes.com**.
### Residents of other US states with privacy laws
Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, New Hampshire, New Jersey, and other states with comprehensive privacy laws have rights similar to the CCPA — including the right to access, delete, correct, and opt out of targeted advertising or sale of personal data. To exercise these rights, email **orders@wickedclothes.com**. If we deny your request, you may appeal by replying to our response.
---
## 7. DATA RETENTION
- **Order Information:** retained as long as needed to fulfill the order, handle returns or warranty issues, and comply with tax and accounting obligations (typically 7 years from the transaction).
- **Marketing data (email, SMS):** retained until you unsubscribe or opt out.
- **Session recordings (Microsoft Clarity):** retained for up to 30 days, then deleted.
- **Cookie consent records (Consentmo):** retained as required to demonstrate compliance.
You can request earlier deletion via the methods in Section 6, subject to legal retention requirements.
---
## 8. DATA SECURITY
We protect your information through reasonable security measures including HTTPS/TLS encryption in transit, PCI-DSS-compliant payment processing through Shopify, restricted internal access to personal data, and standard hosting security. No system is 100% secure. If you suspect unauthorized access to your account or order, contact us immediately at orders@wickedclothes.com.
---
## 9. INTERNATIONAL DATA TRANSFERS
If you're outside the United States, your information will be transferred to and processed in the United States and other countries where our service providers operate. Where required by law, we use appropriate safeguards (such as standard contractual clauses) for cross-border transfers. By using the Site, you consent to this transfer.
---
## 10. CHILDREN'S PRIVACY
The Site is not directed to children under 16. We do not knowingly collect personal information from anyone under 13 (the Children's Online Privacy Protection Act / COPPA age threshold). If we learn we have collected personal information from a child under 13, we will delete it promptly. Parents who believe their child has submitted personal information to us should contact us at orders@wickedclothes.com.
---
## 11. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time to reflect changes to our practices, technology, legal requirements, or other operational factors. The "Last Updated" date at the top reflects the most recent version. Material changes will be communicated via email (to subscribers) or a prominent notice on the Site.
---
## 12. CONTACT US
For privacy questions, complaints, or to exercise your rights:
**Email:** orders@wickedclothes.com (subject line: "Privacy Request")
**Mail:**
Wicked Clothes
Attn: Privacy Compliance Officer
4501 McKee Road
Charlotte, NC 28270
USA
Our shipping operations are located at 7550 Brokerage Drive, Orlando, FL 32809, but please direct legal and privacy correspondence to the North Carolina mailing address above.