• Fulfill orders, process payments, arrange
  shipping, and provide order confirmations and transaction-related
  communications.
• Provide customer service, respond to questions, manage returns and exchanges, and review product or shipping issues.
•  Operate, maintain, secure, and improve our website, Shopify store, and related systems.
• Detect, prevent, and investigate fraud, misuse, payment issues, and security incidents.
• Send promotional emails or other marketing communications when you opt in or when otherwise permitted by law.
• Comply with legal obligations, enforce ourterms, preserve records, and protect our rights, customers, and business.

Our store is hosted on Shopify. Shopify and our other service providers may process personal information on our behalf to help us run our ecommerce operations. These providers may include payment processors, shipping and fulfillment partners, fraud-prevention vendors, customer service platforms, email or SMS marketing platforms if we use them, website hosting and IT support vendors, analytics providers, and professional advisors such as lawyers or accountants.

We may also disclose personal information to government authorities, regulators, law enforcement, or other third parties when required by law, in response to a valid legal request, to protect our rights or the rights and safety of others, or in connection with an actual or proposed sale, merger, financing, reorganization, or transfer of all or part of our business.

We and our service providers may use cookies, pixels, tags, SDKs, and similar technologies to keep the website functioning, remember preferences, keep items in your cart, measure performance, understand how visitors use the site, help detect fraud, and support analytics and advertising activities.

You can usually control cookies through your browser settings. If we make a cookie banner, privacy center, or similar settings tool available on our site, you may also use those tools to manage certain preferences.

Where required by applicable law and supported by the tools in use on our site, we will treat an eligible browser-based opt-out preference signal, such as Global Privacy Control, as a request to opt out of sale, sharing, or targeted advertising for that browser and device.

We do not sell personal information for monetary consideration.

However, some privacy laws define "sale," "sharing," and "targeted advertising" broadly. If and to the extent we use third-party cookies, pixels, or similar technologies for analytics or advertising, those activities may be treated as sharing or targeted advertising under certain U.S. state privacy laws.

If you are entitled to opt out under applicable law, you may do so by using any privacy settings tools we make available, by sending a recognized opt-out preference signal where supported, or by contacting us at info@bonbonruekids.com.

We keep personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to complete transactions, maintain business and tax records, resolve disputes, enforce agreements, detect fraud, and comply with applicable law. Retention may vary by data category. For example:
· Order, payment, accounting, and tax records are generally retained for up to 7 years, or longer if required by law or needed for disputes or audits.

·  Customer service correspondence, return records, and claim-related materials may be retained for up to 3 years after the last relevant interaction, or longer if needed to resolve an issue.

· Marketing subscription records and suppression lists may be retained for as long as needed to honor your preferences and comply with marketing laws.

· Cookie- and analytics-related data may be retained for shorter periods in accordance with browser settings, Shopify settings, and the retention practices of the providers involved.

We use reasonable administrative, technical, and physical safeguards designed to protect personal information. Nevertheless, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

Depending on where you live and the laws that apply to our business, you may have some or all of the following rights with respect to your personal information:

· The right to know, access, or confirm the personal information we process about you.

· The right to request correction of inaccurate personal information.

· The right to request deletion of personal
information, subject to legal exceptions.

· The right to request a portable copy of certain personal information.

· The right to opt out of sale, sharing, or
targeted advertising, where those rights apply.

· The right to limit certain uses of sensitive personal information, where applicable.

· The right not to be discriminated against for exercising applicable privacy rights.

How to submit a request

To submit a privacy request, please email info@bonbonruekids.com with the subject line "Privacy Request," or write to us at the address listed in Section 13. Please describe your request with enough detail for us to understand, evaluate, and respond to it.

Verification and authorized agents

To protect your information, we may need to verify your identity before processing certain requests. Where permitted by applicable law, you may designate an authorized agent to make a request on your behalf, subject to our verification requirements.

Appeals

If we deny your request and applicable law gives you the right to appeal, you may email info@bonbonruekids.com with the subject line "Privacy Appeal" within a reasonable period after receiving our decision. We will review the appeal in accordance with applicable law.

Our website is intended for adults, including parents, guardians, and other purchasers of children's products. We do not knowingly collect personal information online from children under 13. If you believe a child under 13 has provided personal information to us, please contact us and we will review and address the issue as appropriate.

Our website may contain links to websites, plugins, or services operated by third parties. We are not responsible for the privacy practices of those third parties, and we encourage you to review their privacy policies before providing personal information.

We may update this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or website functionality. When we do, we will post the revised version on our website and update the "Last updated" date above. Material changes will be communicated as required by applicable law.