Privacy policy

Last updated: August 26, 2026

This policy explains what personal information bymayvelle.com collects, why, who we give it to, how long we keep it, and what you can ask us to do about it. It covers this website, orders placed on it, our email, and our advertising.

This store is written for delivery in the United States. Orders to other countries are handled case by case — contact us before ordering.

Read it with our Terms of Service, Shipping Policy and Return & Refund Policy.

1. Who is responsible

Our store runs on Shopify. Shopify hosts the storefront and checkout and processes this store's data on our instructions.

2. What we collect

2.1 Information you give us

What When Required?
Name, shipping address, billing address At checkout Yes — we cannot ship without it
Email address At checkout, at signup, when you write to us Yes — we send order confirmations by email
Phone number At checkout Optional; used for delivery and customs contact
Order contents, sizes, quantities, order value At checkout Yes
Return details, including the reason for return When you request a return Yes
Photographs of an item If you choose to send them with a return or damage report No. Photos help us judge a fault faster, but they are never required
Messages you send to hello@bymayvelle.com When you write to us Yes, to answer you
Marketing preferences When you subscribe or unsubscribe Optional

2.2 Payment information

Payments are processed by our payment providers (Visa, Mastercard, American Express, UnionPay, Apple Pay, Google Pay and Shop Pay). Your card or account details go directly to the provider. We never receive or store your full card number, expiry date or security code. We receive only the last four digits and card brand, the billing name and address, the authorization result, amount, currency and transaction reference, and a fraud risk indicator.

2.3 Information collected automatically

  • device and browser type, operating system, screen size, language;
  • IP address, and the approximate city, state and country derived from it;
  • referring website or ad, and the campaign parameters in the link you arrived on;
  • pages and products viewed, items added to cart, searches on the site, time and length of each visit;
  • a cookie or similar device identifier that lets us recognize the same browser on a later visit.

We do not collect precise GPS location, biometric data, Social Security or driver's license numbers, financial account logins, health data, or information about race, religion, sexual orientation, union membership or immigration status.

2.4 Information from third parties

  • Shopify — storefront, cart, checkout, fraud signals.
  • Payment providers — payment results, disputes and chargebacks.
  • Carriers — tracking scans and delivery status.
  • Advertising and analytics platforms, including Google and Meta — aggregated reports that a click on an ad led to a visit or an order.

3. How we use it

1. To take and fulfil your order: charging you, sending the order to our supplier for packing, creating the label, clearing customs, giving you tracking.

2. To email you about your order: confirmation, dispatch, delays, refunds, and answers to your questions.

3. To handle returns, refunds, disputes and chargebacks.

4. To prevent and investigate fraud and misuse of the site.

5. To keep accounting, tax and customs records the law requires.

6. To measure and improve the store.

7. To send marketing email to people who asked for it, and to advertise as described in Section 5.

8. To comply with the law and answer lawful requests from public authorities.

Fraud scores are advisory only. A person reviews any order before it is cancelled for suspected fraud. We do not use automated decision-making or profiling that produces legal or similarly significant effects.

4. Cookies and similar technologies

Cookies are small files placed on your device. Pixels, tags, local storage and SDKs do the same job. We group them as follows.

Strictly necessary — cart, sign-in, load balancing, checkout security, fraud prevention. The store does not work without them.

Analytics — how many people visited, which products were viewed, where sessions ended.

Advertising — the Google tag (Google Ads remarketing and conversion tracking) and the Meta pixel. They record that a browser visited this site or a product page, so our ads can be shown to that browser elsewhere, and so we can count the orders an ad produced.

Preferences — currency, language, dismissed notices.

You can refuse or delete cookies in your browser settings; strictly necessary cookies will still be set while you use the site. To stop personalized advertising, use Section 5.4 or the link in Section 13.

5. Advertising and analytics

We advertise this store on Google and on Meta (Facebook and Instagram).

5.1 How we use data for online advertising

We use the data in Section 2.3 — pages and products you viewed on bymayvelle.com, items you added to cart, whether you completed an order, the order value, and the cookie or device identifier attached to your browser — to build advertising audiences, to show you our ads again after you leave the site (remarketing), to reach people whose browsing resembles our customers', and to measure how many sales our ads produced. We may upload a hashed (irreversibly scrambled) version of an email address you gave us so Google or Meta can match it to their own users for advertising and measurement. We do not upload your name, street address, payment details or order contents for advertising.

5.2 Third parties, including Google, show our ads across the internet

Third-party vendors, including Google, show bymayvelle.com ads on websites and apps across the internet, including the Google Display Network, YouTube, Gmail, Google Search and Shopping, and Facebook and Instagram. We do not control which specific site or app an ad appears on.

5.3 Third parties, including Google, use cookies and device identifiers based on your prior visits

Third-party vendors, including Google, use cookies and device identifiers to serve ads based on your prior visits to bymayvelle.com and to other sites. Google's use of advertising cookies enables it and its partners to serve you ads based on your visit to this site and other sites on the internet.

5.4 How to opt out

  • Google: turn off personalized advertising in Google Ads Settings at https://adssettings.google.com (also at https://myadcenter.google.com).
  • Industry-wide: opt out of participating vendors at the Network Advertising Initiative at https://optout.networkadvertising.org and at the Digital Advertising Alliance at https://optout.aboutads.info.
  • Google Analytics: the Google Analytics Opt-out Browser Add-on at https://tools.google.com/dlpage/gaoptout.
  • Meta: ad preferences in your Facebook or Instagram account settings.
  • This site: the link in Section 13.

Opting out stops personalized advertising. It does not stop you seeing ads, and it does not delete data already collected. Browser-based opt-outs must be repeated on each browser and device, and after you clear cookies.

6. Marketing email

If you subscribe, we send email about new arrivals, restocks and promotions. Every marketing email has an unsubscribe link; unsubscribing takes effect within 10 business days. You can also email hello@bymayvelle.com with "Unsubscribe" in the subject.

Unsubscribing from marketing does not stop order email. We still send confirmations, dispatch notices, delay notices and refund confirmations, because those relate to a purchase you made.

7. Who we share it with

We do not sell your name, address, order history or payment data for money. We disclose personal information only to these recipients, for these purposes.

Recipient What they receive Why
Shopify (platform, checkout, analytics, fraud tools) Order and account data, site usage data To run the store
Payment providers (Visa, Mastercard, American Express, UnionPay, Apple Pay, Google Pay and Shop Pay) Name, billing address, email, amount, card token To take payment, refund, and handle chargebacks
Our supplier and its fulfilment staff in China Recipient name, address, phone, email, order contents To pack and dispatch your parcel
Carriers, including USPS, UPS, FedEx and DHL eCommerce Recipient name, address, phone, email, parcel weight and declared contents To carry and deliver the parcel and give you tracking
Customs and postal authorities in China, in transit countries, and U.S. Customs and Border Protection Recipient name, address, phone, description and declared value of goods Mandatory import clearance and duty assessment
Return processing at our return address in Yuen Long, Hong Kong Name, order number, returned items To receive, inspect and refund returns
Email and analytics tools Email address, first name, order history, marketing preferences, site usage data Order email, marketing email you asked for, measurement
Advertising platforms (Google, Meta) Cookie or device identifier, pages and products viewed, order value and order ID, hashed email where applicable Advertising and measurement, as in Section 5
Accountants, advisers, insurers Order and financial records Accounting, tax, legal advice
Law enforcement, regulators, courts Whatever a valid legal request requires Legal obligation
A buyer or successor The above If the business or its assets are sold or reorganized. We will post notice here first

Our service providers may use your information only to perform services for us, under contract. The exception is Google and Meta, which act for their own purposes in the advertising described in Section 5 — under some state laws that counts as a "sale" or "share". See Section 12.

8. International transfers

Goods are dispatched from China, and approved returns go to our return address in Yuen Long, Hong Kong. To make that happen we transfer your name, shipping address, phone number, email address and order contents outside the United States — to our supplier, to international carriers, and to customs authorities in China, in transit countries and in the United States.

Some service providers also store or access data outside the United States. Data protection law in those countries may be different from, and less protective than, the law of your state, and government authorities there may be able to access data under their own laws. Our processors are bound by contract to use your data only on our instructions.

If you do not want your details transferred abroad, do not place an order. We cannot ship without doing so.

9. How long we keep it

Record Retention
Order, invoice, shipping and customs records 7 years from the order date
Payment records we hold (last 4 digits, transaction reference) 7 years from the order date
Return, refund, dispute and chargeback records 7 years from closure
Customer support email 24 months from the last message in the thread
Marketing subscriber records Until you unsubscribe, or 24 months after your last interaction with our email
Suppression list (addresses that unsubscribed) Kept indefinitely, used only to make sure we do not email you again
Website analytics and advertising identifiers No longer than 14 months from your last visit
Fraud and abuse records 7 years

When a period ends we delete the record or aggregate it so it can no longer be linked to you. We may keep a record longer where a law, a tax audit, an open dispute or a legal claim requires it, and only for as long as that requires.

10. Security

  • the site and checkout run over HTTPS/TLS;
  • card data is handled by PCI DSS compliant payment providers and is never stored on our systems;
  • admin access is limited to named individual accounts for people who need it;
  • service providers are bound by written data processing terms;
  • order exports are limited to staff who need them.

No website or method of transmission is completely secure, and we do not claim otherwise. If a breach affects your personal information we will notify you and the relevant regulators as the law of your state requires, without unreasonable delay.

11. Children

This store is for adults. We do not direct it to children and we do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has given us personal information, email hello@bymayvelle.com and we will delete it. We do not knowingly sell or share the personal information of consumers under 16.

12. U.S. state privacy rights

This section applies if you live in a state with a comprehensive consumer privacy law — including California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia. Some rights exist only in some states; if a right you asked for does not apply to you, we will say so.

12.1 Categories we collect, disclose and share

Category (CCPA terms) Examples Source Purpose Disclosed to (Section 7) Sold or shared for cross-context behavioral advertising?
Identifiers Name, address, email, phone, IP address, cookie and device identifiers, order number You; your device Fulfilment, support, fraud prevention, advertising Shopify, payment providers, supplier, carriers, customs, email tools, Google, Meta Yes — cookie and device identifiers, and hashed email, go to Google and Meta
Customer records (Cal. Civ. Code §1798.80) Name, address, phone, partial card details You; payment providers Fulfilment, accounting Shopify, payment providers, supplier, carriers, advisers No
Commercial information Products viewed, cart contents, orders, order value, returns You; your device Fulfilment, measurement, advertising Shopify, supplier, Google, Meta Yes — product-view and purchase events
Internet or network activity Pages viewed, on-site searches, referring ad, session length, clicks Your device Site improvement, measurement, advertising Shopify, Google, Meta Yes
Geolocation (approximate) City, state and country from IP address; shipping address Your device; you Shipping, tax, fraud prevention, regional ad targeting Shopify, carriers, customs, Google, Meta Yes — approximate, IP-derived location only
Visual information Photographs you choose to send with a return or damage report You Handling returns Supplier, payment providers in a dispute No
Inferences Interest and style categories used to select ads Advertising platforms Advertising Google, Meta Yes
Sensitive personal information — — We do not collect it — No

We do not sell personal information for money. We do share the categories marked "Yes" with Google and Meta for cross-context behavioral advertising, which counts as a "sale" or "share" under California law and as "targeted advertising" under the laws of Colorado, Connecticut, Texas, Virginia and other states. Section 12.3 stops it.

We do not process sensitive personal information, so the right to limit its use does not arise.

12.2 Your rights

Subject to the exceptions in your state's law, you may:

  • Know / access — confirm whether we process your personal information and obtain the categories and specific pieces we hold, the sources, purposes and categories of recipients.
  • Portability — receive that data in a portable, readily usable format where technically feasible.
  • Correct — have inaccurate information corrected.
  • Delete — have your information deleted, unless we must keep it for a legal reason in Section 9.
  • Opt out of sale, sharing and targeted advertising — see Section 12.3.
  • Non-discrimination — we will not deny you goods, charge a different price, or give lower service for exercising a privacy right. We offer no financial incentives in exchange for personal information.
  • Appeal — see Section 12.5.
  • California "Shine the Light" (Cal. Civ. Code §1798.83) — ask for a list of personal information disclosed to third parties for their own direct marketing in the prior calendar year. We make no such disclosures.

12.3 How to opt out of sale, sharing and targeted advertising

1. Use Do Not Sell or Share My Personal Information — the form on that page, also linked in the footer of every page.

2. Email hello@bymayvelle.com with the subject "Opt out of sale and sharing".

An opt-out made through the link applies to the browser and device you used; repeat it on any other browser or device. An opt-out sent by email is applied to the email address and account we can match.

12.4 How to make a request

Email hello@bymayvelle.com with the subject "Privacy request", write to Apparel Fashion Brands LLC, 30 N Gould St Ste R, Sheridan, WY 82801, United States, or call +1 332 263 9703. Tell us which right you are exercising, the state you live in, and the email address and order number used on your order.

Verification. We match the information you give us against what we hold. For access or deletion we normally ask you to reply from the email address on the order and to confirm the order number and shipping ZIP code. We do not ask for a copy of an ID document. If we cannot verify you we will tell you why and will not release the data.

Authorized agents. An agent may act for you with written permission signed by you, and we may still verify you directly. In California an agent may instead present a valid power of attorney.

Timing. We acknowledge a privacy request within 10 business days and answer it within 45 calendar days. If we need more time we will tell you within those 45 days and take up to 45 additional days. Requests are free. Opt-out requests — including "Do Not Sell or Share" — are always free and are never limited in number. For access, correction and deletion requests we may charge a reasonable fee or refuse a request only where it is manifestly unfounded or excessive, and we will explain why.

12.5 Appeals

If we refuse a request, our decision explains why and how to appeal. To appeal, reply to that decision or email hello@bymayvelle.com with the subject "Privacy appeal". We answer appeals in writing, with reasons, within 45 calendar days. If we deny an appeal we will give you a way to complain to your state Attorney General. Californians may also complain to the California Privacy Protection Agency.

13. Do Not Sell or Share My Personal Information

Do Not Sell or Share My Personal Information

Use that link to opt out of the sale and sharing of your personal information and of targeted advertising. It is also in the footer of every page. You do not need an account, and you do not need to give us your name.

14. Changes

If we change this policy we change the "Last updated" date and post the new version here. If a change materially affects how we use information we already hold about you, we will email subscribers before it takes effect.

15. Contact

We reply to email within 1 business day (Monday–Friday). The one exception is privacy requests under Section 12: acknowledged within 10 business days and answered within 45 calendar days.