Privacy Policy

How we collect, use and protect your information.

Last updated: August 9, 2026

Heather’s Boutique respects the privacy of its customers and website visitors.

Heather’s Boutique is operated by Heather’s Boutique LLC.

This Privacy Policy describes how information may be collected, used, disclosed, and protected when customers interact with heathersboutique.com and Heather’s Boutique online services.

Business Hours & Support Hours

Retail Store Business Hours (in-store):
Monday – Saturday: 11:00 AM – 4:30 PM (Central Time)
Sunday: Closed

Online Store Hours: heathersboutique.com is open 24 hours a day, 7 days a week.

Online Support Hours: Phone support at +1 (888) 450-6525 is available 24 hours a day, 7 days a week. Email support at support@heathersboutique.com is monitored continuously; you will receive a response within 1 business day.

What Information We Collect

Depending on how the website is used, information may include:

name
billing address
shipping address
email address
telephone number
order information
transaction information
product selections
account information
customer-service communications
return information
marketing preferences
device information
browser information
IP address
website usage information
cookie and similar technology identifiers
browsing behavior on our website (pages viewed, products viewed, searches, time on page, referring pages)

How We Collect It

We collect information through the following specific methods:

Forms you submit: checkout forms, account registration, the contact form, alterations request forms, and email sign-up forms collect the information you type into them (such as name, address, email, and phone number).
Orders and transactions: when you place an order, we collect the order contents, shipping and billing details, and transaction confirmation from our payment processor.
Cookies: small files stored by your browser that keep you signed in, keep items in your cart, remember preferences, and measure site performance.
Pixels and similar tags: analytics and advertising pixels may record page views, product views, and purchase events to measure site performance and marketing effectiveness.
Server logs: our hosting infrastructure automatically records IP address, browser type, device information, and requested pages for security and troubleshooting.
Customer service communications: emails, phone calls, and form messages you send us are retained as part of your support history.

Payment Information

Payment transactions may be processed through third-party payment providers, including Stripe and applicable digital-wallet, bank-transfer, financing, buy-now-pay-later, and cryptocurrency providers.

Information collected and processed directly by these providers is also subject to their applicable privacy and security practices.

Why We Collect It (Purpose for Each Type of Data)

Name, shipping and billing address, email, phone: to process, fulfill, ship, and communicate about your orders, and to provide customer support.
Order and transaction information: to complete purchases, process refunds and returns, maintain accurate records, and comply with tax and accounting obligations.
Account information: to operate your account, show order history and tracking, and secure sign-in.
Customer-service communications and return information: to resolve your inquiries, process returns, and maintain a support history.
Email address and marketing preferences: to send promotional communications where permitted, and policy-update announcements.
IP address, device and browser information: to maintain security, detect and prevent fraud, and troubleshoot technical issues.
Cookies, pixels, and browsing behavior: to keep your cart and session working, remember preferences, understand website performance, personalize your experience where permitted, and support advertising or marketing where permitted.

Cookies, Analytics and Advertising

Heather’s Boutique may use cookies and similar technologies to operate the website, remember preferences, measure website performance, understand website activity, prevent fraud, and support advertising or marketing.

Third-party analytics and advertising providers may process information in accordance with their own privacy policies and applicable law.

Where legally required, customers may be provided controls relating to optional cookies or certain data uses.

Who We Share Information With

Heather’s Boutique does not sell your personal information for money. We may disclose information to the following categories of service providers, only as needed to operate our business:

Payment processing: Stripe, and applicable digital-wallet, bank-transfer, financing/buy-now-pay-later (Affirm, Zip, Afterpay, Klarna), and cryptocurrency payment providers
Order fulfillment and shipping: our fulfillment partners and shipping carriers (FedEx, UPS, USPS)
Website hosting and infrastructure: our hosting and content-delivery providers
Analytics tools: website analytics providers that measure site performance and usage
Advertising platforms: platforms such as Google that support our product listings and marketing where permitted
Customer communications: email and messaging service providers used to send order and support communications
Fraud prevention, professional services, and legal or regulatory compliance providers

Information may also be disclosed where required by law, legal process, or to protect the rights, security, property, or safety of Heather’s Boutique, customers, or others.

How We Keep Information Secure and How Long We Keep It

Security measures: Heather’s Boutique uses reasonable administrative, technical, and organizational safeguards intended to protect personal information, including HTTPS/TLS encryption for all website traffic, PCI-compliant third-party payment processing (Heather’s Boutique does not store full payment-card numbers on its own systems), access controls limiting who can view customer data, and secure hosted infrastructure.

No electronic transmission or storage method can be guaranteed to be completely secure.

Data retention period: Personal information is retained only for as long as reasonably necessary for the purpose for which it was collected:

Order and transaction records: retained for up to 7 years to satisfy tax, accounting, and legal obligations.
Account information: retained while your account remains active, and deleted upon a verified deletion request (subject to records we must keep by law).
Customer-service communications: retained for up to 3 years after the inquiry is resolved.
Marketing data: retained until you unsubscribe or request deletion.
Server logs and security data: retained for a limited period (generally no more than 12 months) for security and fraud-prevention purposes.

When information is no longer needed, it is deleted or de-identified.

Your Privacy Rights (Including GDPR and CCPA/CPRA)

Depending on location and applicable law, individuals may have rights regarding personal information, including rights to request:

access to the personal information we hold about you
correction of inaccurate personal information
deletion of your personal information
a portable copy of your personal information
information about how your personal information is used or disclosed

For residents of the European Economic Area and the United Kingdom (GDPR/UK GDPR): You have the rights of access, rectification, erasure (“right to be forgotten”), restriction of processing, data portability, and objection to processing, including objection to direct marketing. Where processing is based on consent, you may withdraw consent at any time without affecting prior processing. You also have the right to lodge a complaint with your local supervisory authority.

For California residents (CCPA/CPRA): You have the right to know what personal information we collect, use, and disclose; the right to request deletion; the right to request correction; the right to opt out of the “sale” or “sharing” of personal information (including sharing for cross-context behavioral advertising); the right to limit use of sensitive personal information; and the right not to receive discriminatory treatment for exercising your privacy rights. Heather’s Boutique does not sell personal information for money. To opt out of any sharing of personal information for targeted advertising, contact us using the methods below.

How to Opt Out or Delete Your Data — Clear Process

To request deletion of your data, opt out of data sharing, or exercise any privacy right, follow these steps:

Step 1 — Submit your request: Email support@heathersboutique.com with the subject line “Privacy Request,” or call +1 (888) 450-6525 (available 24/7). State which right you want to exercise (for example: “delete my data,” “opt out of sharing,” or “send me a copy of my data”).
Step 2 — Identity verification: We will verify your identity using the email address or phone number associated with your account or orders. We may ask for additional confirming details. This protects your data from fraudulent requests.
Step 3 — Confirmation and completion: We will acknowledge your request within 1 business day and complete verified requests within the timeframe required by applicable law (generally within 30 days for GDPR requests and 45 days for CCPA/CPRA requests). You will receive written confirmation when the request is complete.

Some information may be retained where required by law (for example, tax and transaction records); we will tell you if that applies to your request.

Marketing Communications — Opting Out

Customers may unsubscribe from promotional email communications at any time by clicking the unsubscribe link included in every marketing message, or by contacting Heather’s Boutique at support@heathersboutique.com or +1 (888) 450-6525.

You can also control cookies through your browser settings, including blocking or deleting cookies.

Transactional communications regarding orders, payments, refunds, returns, security, or customer service may still be sent when necessary.

Children’s Privacy

Heather’s Boutique is a general-audience retail website and is not directed to children under 13.

Heather’s Boutique does not knowingly seek to collect personal information online from children under 13 without the involvement or consent of a parent or legal guardian where required by law.

If Heather’s Boutique learns that personal information from a child under 13 was collected in circumstances requiring parental consent and the required consent was not obtained, reasonable steps will be taken to delete the information.

Customers who have not reached the age of majority where they live should use the website and complete purchases with the involvement and permission of a parent or legal guardian.

Third-Party Links

The website may link to third-party websites or services.

Heather’s Boutique is not responsible for the privacy practices of independent third parties.

Policy Updates

This Privacy Policy may be updated periodically.

The current version and last-updated date will be displayed on this page.

Contact

Heather’s Boutique
Heather’s Boutique LLC

W359N5002 Brown St Ste 211
Oconomowoc, WI 53066
United States

Customer Support:
support@heathersboutique.com
+1 (888) 450-6525

General Information:
info@heathersboutique.com

Boutique Direct:
+1 (262) 458-9832