Privacy Policy
Last updated: July 21, 2026
Sandy Bella LLC ("Sandy Bella," "we," "us," or "our") operates sandybella.com (the "Site") and respects your privacy. This Privacy Policy explains, in detail, what personal information we collect when you visit, browse, or purchase from the Site, why we collect it, how we use and share it, how long we keep it, and the choices and rights available to you. Please read it carefully. If you do not agree with the practices described here, please do not use the Site.
1. Scope of This Policy
This Policy applies to personal information collected through the Site, through your interactions with our customer support channels (including email and live chat), through our marketing communications, and through any related services we operate. It does not apply to third-party websites, apps, or services that may be linked from the Site; those third parties have their own privacy practices, and we encourage you to review them independently.
2. Personal Information We Collect
We collect information that identifies, relates to, describes, or could reasonably be linked, directly or indirectly, with a particular individual ("Personal Information"). We collect Personal Information in three ways: automatically as you interact with the Site, directly from you, and from our service providers.
2.1 Device and usage information
- What we collect: browser type and version, operating system, IP address, approximate geographic location derived from IP address, device identifiers, referring/exit pages, time zone, the pages and products you view, links you click, search terms used on the Site, and general browsing behavior.
- Why we collect it: to load and render the Site correctly for your device, to diagnose technical issues, to detect and prevent fraud and abuse, and to analyze aggregate Site usage so we can improve navigation, merchandising, and performance.
- How it's collected: automatically, via cookies, log files, web beacons, tags, pixels, and similar tracking technologies described in Section 8 below.
- Who it's shared with: our hosting and e-commerce platform provider, Shopify, and analytics/advertising partners identified below.
2.2 Order and transaction information
- What we collect: full name, billing address, shipping address, email address, phone number, and payment details (payment card information is tokenized and processed by our payment processor; we do not store full card numbers on our own systems).
- Why we collect it: to fulfill our contract with you — process payment, pack and ship your order, send order confirmations and shipping notifications, handle returns and warranty claims, screen for fraud, and, where you've opted in, to tell you about products, restocks, or offers we think you'll like.
- How it's collected: directly from you at checkout or when you contact us.
- Who it's shared with: Shopify (as our commerce platform and payments processor), shipping carriers (to deliver your order), and tax/compliance service providers where legally required.
2.3 Account information
- What we collect: if you create a customer account, we store your name, email, saved addresses, and order history to make future checkouts faster and to let you track orders and manage returns.
- Why we collect it: to operate your account and provide account-related features.
- Source: collected from you when you register.
2.4 Customer support information
- What we collect: the content of your messages to us, attachments (such as photos of a damaged item), and metadata about the conversation (timestamps, channel used).
- Why we collect it: to respond to your questions, resolve order issues, and improve our support quality.
- Who it's shared with: our live-chat provider, Tidio, which processes chat data on our behalf.
2.5 Marketing preference information
- What we collect: your email subscription status, SMS opt-in status, and engagement with our marketing messages (opens, clicks).
- Why we collect it: to send you communications only when you've asked to receive them, and to honor unsubscribe requests promptly.
3. How We Use Personal Information
We use Personal Information for the following purposes: to provide, operate, and maintain the Site; to process and fulfill orders, including payment, shipping, invoicing, and customer service; to communicate with you about your order, account, or inquiries; to detect, investigate, and prevent fraudulent transactions and other illegal activity, and to protect the rights and property of Sandy Bella and others; to personalize your shopping experience and, where you have consented, to send marketing communications and advertising we believe may interest you; to analyze how the Site is used so we can improve its design, content, and performance; and to comply with applicable laws, regulations, and legal process.
4. Sharing Personal Information
We do not sell your Personal Information for money. We do share Personal Information with select service providers and partners so that we can operate the Site and fulfill our obligations to you, including:
- Shopify — our e-commerce platform, which hosts the Site, processes payments, and stores order records on our behalf. Learn more at https://www.shopify.com/legal/privacy.
- Shipping carriers (such as USPS and other national/international couriers) — to deliver your order and provide tracking.
- Tidio — our live-chat and customer support tool.
- Analytics and advertising partners, described in Section 5 below.
- Professional advisors and authorities — such as legal counsel, auditors, or regulators, where necessary to comply with law, enforce our Terms of Service, or protect our rights, property, or safety, or that of our customers or the public.
If Sandy Bella is ever involved in a merger, acquisition, financing, or sale of assets, Personal Information may be transferred as part of that transaction; we will notify you of any such change in ownership or use of your Personal Information.
5. Behavioral Advertising and Analytics
We use your Personal Information to provide you with targeted advertisements and marketing communications we believe may be of interest to you. Specifically:
- We use Google Analytics to understand how customers use the Site. Read more: https://policies.google.com/privacy?hl=en. You can opt out here: https://tools.google.com/dlpage/gaoptout.
- We share information about your Site activity, purchases, and ad interactions with advertising partners such as Meta (Facebook/Instagram) and Google, in some cases through cookies or similar technologies, subject to your consent where required by your location.
For general background on how interest-based advertising works, see the Network Advertising Initiative's guide: networkadvertising.org.
You can opt out of targeted advertising directly with these providers:
- Meta (Facebook/Instagram) — facebook.com/settings/?tab=ads
- Google — google.com/settings/ads/anonymous
- Bing — Bing Ads personalized ads policy
You can also opt out broadly through the Digital Advertising Alliance's portal: optout.aboutads.info. Opting out of one network will not opt you out of all advertising — you may still see generic, non-personalized ads.
6. Your Rights Under the GDPR (EEA/UK Residents)
If you are located in the European Economic Area or the United Kingdom, we process your Personal Information under one or more of the following lawful bases: your consent; performance of our contract with you; compliance with our legal obligations; protection of your vital interests; performance of a task in the public interest; or our legitimate interests, provided those interests do not override your fundamental rights and freedoms.
You have the right to request access to, correction of, deletion of, or portability of your Personal Information, and the right to object to or restrict certain processing. To exercise any of these rights, contact us using the details in Section 13. If you are not satisfied with our response, you may lodge a complaint with your local data protection authority or, for UK residents, the Information Commissioner's Office: ico.org.uk/make-a-complaint.
Where your Personal Information is transferred outside the EEA/UK (including to the United States, where we and Shopify are based), we rely on appropriate safeguards such as standard contractual clauses. See Shopify's GDPR Whitepaper for details: help.shopify.com/en/manual/your-account/privacy/GDPR.
7. Your Rights Under U.S. State Privacy Laws (CCPA/CPRA and Others)
If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"), gives you the right to: know what Personal Information we collect, use, disclose, and (where applicable) sell or share; request deletion of your Personal Information, subject to certain exceptions; request correction of inaccurate Personal Information; opt out of the sale or sharing of your Personal Information; limit the use of sensitive Personal Information; and not be discriminated against for exercising any of these rights.
Sandy Bella shares certain identifiers and internet-activity information with advertising partners for cross-context behavioral advertising, which may be considered a "sale" or "sharing" of Personal Information under the CCPA/CPRA. You can opt out at any time on our dedicated Do Not Sell or Share My Personal Information page, or by contacting us directly.
Residents of other states with comprehensive privacy laws (including, without limitation, Virginia, Colorado, Connecticut, Utah, and others as they take effect) have similar rights to access, correct, delete, and port their Personal Information, and to opt out of targeted advertising, sale, and certain profiling. To exercise any state privacy right, contact us using the details in Section 13; we will verify your request and respond within the time frame required by applicable law. You may designate an authorized agent to submit a request on your behalf by contacting us at the address below and providing proof of the agent's authorization.
8. Cookies and Similar Technologies
A cookie is a small file downloaded to your device when you visit the Site. We use cookies and similar technologies (web beacons, pixels, tags, and local storage) to operate the Site, remember your preferences, keep your cart contents between visits, understand how the Site is used, and deliver relevant advertising. Some cookies are strictly necessary for the Site to function; others are optional and support analytics, personalization, or advertising.
Cookies Necessary for the Functioning of the Store
| Name | Function |
|---|---|
| _ab | Used in connection with access to admin. |
| _secure_session_id | Used in connection with navigation through the storefront. |
| cart | Used in connection with the shopping cart. |
| cart_sig | Used in connection with checkout. |
| cart_ts | Used in connection with checkout. |
| checkout_token | Used in connection with checkout. |
| secret | Used in connection with checkout. |
| secure_customer_sig | Used in connection with customer login. |
| storefront_digest | Used in connection with customer login. |
| _shopify_u | Used to facilitate updating customer account information. |
Reporting and Analytics Cookies
| Name | Function |
|---|---|
| _tracking_consent | Stores your tracking consent preferences. |
| _landing_page | Tracks the first page you landed on. |
| _orig_referrer | Tracks the referring site. |
| _s | Shopify analytics. |
| _shopify_s | Shopify analytics. |
| _shopify_sa_p | Shopify analytics relating to marketing & referrals. |
| _shopify_sa_t | Shopify analytics relating to marketing & referrals. |
| _shopify_y | Shopify analytics. |
| _y | Shopify analytics. |
Session cookies expire when you close your browser; persistent cookies remain until they expire or you delete them (typically between 30 minutes and two years, depending on the cookie). You can control cookies through your browser's settings — usually found under "Privacy," "Security," or "Cookies" in your browser's preferences. Blocking or deleting cookies may affect Site functionality, including your ability to stay logged in or keep items in your cart.
Because there is no consistent industry standard for responding to browser "Do Not Track" signals, we currently do not alter our data collection practices when we detect such a signal.
9. Data Retention
We retain Personal Information for as long as necessary to fulfill the purposes described in this Policy, including to provide our services, comply with our legal and tax obligations (such as record-keeping requirements for financial transactions), resolve disputes, and enforce our agreements. Order records are generally retained for the period required by applicable tax and commercial law. If you ask us to erase your Personal Information, we will do so unless we are legally required or permitted to retain it.
10. Data Security
We use commercially reasonable administrative, technical, and physical safeguards designed to protect your Personal Information from unauthorized access, loss, misuse, or alteration, including relying on Shopify's PCI-DSS-compliant infrastructure for payment processing. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.
11. Children's Privacy
The Site is not directed to children under the age of 16, and we do not knowingly collect Personal Information from children. If you believe a child has provided us with Personal Information, please contact us so we can promptly delete it.
12. Automated Decision-Making
If you are a resident of the EEA, you have the right to object to processing based solely on automated decision-making (including profiling) that produces legal or similarly significant effects. We do not engage in fully automated decision-making that has such an effect. Our payment processor, Shopify, uses limited automated fraud-prevention decisioning that does not have a legal or otherwise significant effect on you, such as: a temporary denylist of IP addresses associated with repeated failed transactions (lasting a small number of hours), and a temporary denylist of payment cards associated with denylisted IP addresses (lasting a small number of days).
13. Contact Us
If you have questions about this Privacy Policy, would like to exercise any of the rights described above, or would like to file a complaint, please contact us:
Sandy Bella LLC
139 Jamacha Road, El Cajon, CA 92019, United States
Email: help@sandybella.com
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. We will post the revised Policy on this page with an updated "Last updated" date. We encourage you to review this Policy periodically. Your continued use of the Site after changes are posted constitutes your acceptance of the updated Policy.