Privacy Policy

1. Who this covers

This policy applies to visitors to this website and to customers who place orders with us. We are a United States retailer and we serve US customers only.

About this demonstration build. The site you are reading has no server, no database and no analytics. Nothing you type into any form here is transmitted or stored anywhere. The only data kept on your device is your shopping cart and your cookie-notice choice, both in your browser's local storage. The policy below describes how a live version of this store would handle data, so that the terms are complete and reviewable.

2. What we collect

We do not collect sensitive personal information as defined by California law — we do not ask for your Social Security number, driver's license number, precise geolocation, racial or ethnic origin, religious beliefs, union membership, health data, biometric data, or the contents of your private communications.

3. How we use it

• To fulfill your order — payment authorization, packing, shipping, delivery notifications, returns and refunds.
• To support you — answering questions about sizing, orders, returns and privacy requests.
• To run the store — preventing fraudulent orders, fixing faults, and improving pages that confuse people.
• To meet legal duties — sales tax reporting, accounting records, and responding to lawful requests.
• To market, only if you opt in — the seasonal newsletter is opt-in and every message carries an unsubscribe link.

We do not use your personal information to train machine learning models, and we do not build advertising profiles about you.

4. Cookies and similar technologies

This site uses a small number of strictly necessary storage items: your shopping cart and your cookie-notice choice. Both are stored in your browser and never sent to us.

Web fonts are requested from Google Fonts, which means your browser makes a request to a Google server that includes your IP address. If you prefer to avoid that request entirely, the site is fully readable with the fonts blocked — the layout falls back to fonts already on your device.

Full detail, including how to control storage in each browser, is in the Cookie Policy.

5. Who we share it with

We share personal information only with service providers who need it to do a job for us, and only for that job. On a live version of this store those categories would be:

• Payment processor — to authorize and settle payments, and to process refunds. They receive your card details directly; we receive only the result and the last four digits.
• Shipping carriers — to deliver your order. They receive your name, address, phone number and parcel details.
• Email platform — to send order confirmations, shipping notifications and, if you opted in, the newsletter.
• Analytics provider — to report aggregate page traffic. (This demonstration build uses none.)
• Professional advisers — accountants and lawyers, where necessary and under confidentiality.

We may also disclose information if required by law, to respond to a valid legal process, or to protect our rights or the safety of others. If our business is sold or merged, customer records may transfer to the buyer; we would notify you here before that happened.

We do not sell customer lists, and we do not share your contact details with other retailers.

6. Do Not Sell or Share My Personal Information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising — the two activities that California's CPRA gives you the right to opt out of. We have never done either.

Because we do not sell or share, there is nothing to opt out of. You can still tell us to record an opt-out preference against your record, and we will honor it permanently, including if our practices ever change. To do that:

• Email privacy@hollisandhem.com with the subject line “Do Not Sell or Share”, or
• Use the contact form and choose the topic “A privacy request”, or
• Call (555) 010-4827 during Monday–Friday, 9:00 AM – 6:00 PM ET.

We honor browser-based opt-out preference signals, including Global Privacy Control (GPC), where they are sent. You do not need an account to make this request, and we will not ask you to create one.

7. Your privacy rights

If you are a California resident, the CCPA as amended by the CPRA gives you these rights:

• Right to know — what personal information we have collected about you, where it came from, why we collected it, and who we disclosed it to.
• Right to access — a copy of the specific pieces of personal information we hold, in a portable format.
• Right to delete — deletion of your personal information, subject to exceptions such as completing a transaction or keeping records we are legally required to keep.
• Right to correct — correction of inaccurate personal information.
• Right to opt out of sale or sharing — see section 6.
• Right to limit use of sensitive personal information — we do not collect any, so there is nothing to limit.
• Right to non-discrimination — we will never charge you a different price, give you a lower-quality service, or refuse to serve you because you exercised a privacy right.

8. How to exercise your rights

1. Email privacy@hollisandhem.com, use the contact form, or call (555) 010-4827. Say which right you are exercising.
2. We verify that the request is really from you — usually by confirming the email address on file and a recent order number. We ask for the minimum needed to be sure.
3. We confirm receipt within 10 business days and respond substantively within 45 calendar days. If we need more time we will tell you why and take no more than a further 45 days.
4. There is no charge for a request, unless requests are excessive or repetitive, in which case we will explain the cost before doing anything.

You may use an authorized agent. We will ask for written permission signed by you, plus verification of your identity.

If we decline a request, we will tell you which legal exception applies. You may appeal by replying to our decision, and we will have a different person review it.

9. How long we keep data

10. Security

A live version of this store would serve every page over HTTPS, would never store full card numbers, and would restrict access to order data to the staff who need it. No method of transmission or storage is perfectly secure, and we will not claim otherwise. If a breach affected your personal information, we would notify you as required by the law of your state.

11. Children's privacy

This store sells adult women's clothing and is not directed to children. We do not knowingly collect personal information from anyone under 13, consistent with the Children's Online Privacy Protection Act (COPPA), and we do not knowingly sell or share the personal information of anyone under 16.

If you believe a child has given us personal information, email privacy@hollisandhem.com and we will delete it promptly.

12. Other US state privacy laws

Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana and other states with comprehensive privacy laws have comparable rights to access, correct, delete and obtain a copy of their personal information, and to opt out of targeted advertising and the sale of personal data. We apply the rights described in sections 7 and 8 to every US customer regardless of state, so you do not need to work out which law applies to you.

Some states also give you the right to appeal a refused request and to contact your state attorney general if you remain dissatisfied.

13. Changes to this policy

If we make a material change we will update the effective date at the top of this page and, where the change affects how we use information you already gave us, email customers on file before it takes effect.

14. Contact us