Privacy policy

Privacy Policy

Last updated: September 7, 2026

This Privacy Policy explains how Flexnee LLC, doing business as Sculpette ("Sculpette", "we", "us", "our"), collects, uses and shares personal information when you visit sculpette.com, make a purchase, subscribe to our emails or otherwise interact with us (together, the "Services"). Our store is hosted on Shopify, which processes personal information on our behalf and, for some features, on its own behalf, as described in section 8. By using the Services you acknowledge that you have read this Privacy Policy. If there is a conflict between our Terms of Service and this policy, this policy controls on matters of personal information.

Contents

  1. Personal information we collect
  2. Where it comes from
  3. How we use it
  4. Cookies and tracking technologies
  5. Email, SMS and advertising
  6. How we share personal information
  7. Service providers we use
  8. Our relationship with Shopify
  9. How long we keep it
  10. Security
  11. Your rights and choices
  12. California residents
  13. Residents of other US states
  14. Visitors outside the United States
  15. Children
  16. Third-party links
  17. Changes to this policy
  18. Contact

1. Personal information we collect

"Personal information" means information that identifies you or can reasonably be linked to you. Depending on how you use the Services, we may collect:

  • Contact details: name, email address, phone number, billing address and shipping address.
  • Order and payment information: the products you buy, order value, payment method and the last four digits of your card. Full card numbers are handled by our payment processors and never stored by us.
  • Account information: login details, saved addresses and preferences, if you create an account.
  • Communications: the content of emails, contact-form messages, reviews, survey answers and support conversations.
  • Device and usage information: IP address, browser and device type, operating system, referring URL, pages viewed, products viewed or added to cart, time on site and similar analytics data, collected through cookies and similar technologies.
  • Size and fit information you choose to share, such as a bra size entered in a size finder or a sizing question sent to support. We treat this as ordinary personal information and use it only to help you choose a product.
  • Marketing preferences: whether you have subscribed to or unsubscribed from emails or texts, and how you interact with them.

We do not collect sensitive personal information as defined under California law, such as government identifiers, precise geolocation, health data or biometric data, and we ask that you do not send it to us.

2. Where it comes from

  • Directly from you, when you place an order, create an account, subscribe, submit a review, or contact us.
  • Automatically, from your browser or device when you use the Services, through cookies, pixels and similar technologies.
  • From service providers such as Shopify, our payment processors, shipping carriers and email platform, in the course of providing the Services.
  • From advertising platforms such as Meta and Google, which may tell us that you clicked an ad or visited the site, as described in section 5.

3. How we use it

  • To provide the Services: process payments, fulfil and ship orders, send order and shipping confirmations, handle returns and exchanges, manage your account and answer your questions.
  • To improve the Services: understand which products and pages are used, fix problems, and test changes to the site.
  • To market to you: send emails and, with your separate consent, text messages about products, offers and content; show you advertising on other websites and platforms; and measure the results of that marketing. See section 5 for how to opt out.
  • To keep the Services safe: detect and prevent fraud, abuse, chargebacks and security incidents, and enforce our Terms of Service.
  • To comply with law: keep tax and accounting records, respond to lawful requests from authorities, and establish or defend legal claims.

4. Cookies and tracking technologies

We and our service providers use cookies, pixels, tags and local storage to run the site and to understand how it is used. They fall into four groups:

  • Strictly necessary: keep your cart, remember your login and secure checkout. The site does not work without them.
  • Performance and analytics: Shopify analytics and Google Analytics, which tell us which pages are visited and how visitors move through the site.
  • Functional: remember preferences such as the shade you last viewed or a pop-up you closed.
  • Advertising: the Meta Pixel, Google Ads tag and similar tools, which record that you visited the site or viewed a product so that we can show you relevant ads elsewhere and measure our campaigns.

You can control cookies through your browser settings; blocking necessary cookies will prevent checkout. Where we show a cookie banner, you can change your choices there at any time. Most browsers accept "Do Not Track" signals inconsistently, so we do not respond to them, but we do honor Global Privacy Control signals as an opt-out of sale and sharing where required by law.

5. Email, SMS and advertising

Email. If you subscribe, or place an order and do not opt out, we send marketing emails through Klaviyo. Every email has an unsubscribe link; you can also write to us. Unsubscribing does not stop transactional emails about your orders.

Text messages. We send marketing texts only to people who have given separate, express consent, for example by ticking the SMS box at checkout or in a sign-up form. Message and data rates may apply; frequency varies. Reply STOP to any message to opt out and HELP for help. Consent to texts is not a condition of purchase.

Advertising. We use the Meta Pixel, Google Ads and similar tools to show ads for Sculpette on other sites and apps to people who have visited sculpette.com, and to measure whether ads lead to purchases. This involves sharing identifiers such as a hashed email address or a cookie ID with those platforms, which some laws treat as a "sale" or "sharing" of personal information. You can opt out as described in section 11, and you can adjust ad settings directly with Meta and Google.

6. How we share personal information

We do not sell personal information for money. We share it in these situations:

  • With service providers who act on our behalf under contract, listed in section 7.
  • With advertising and analytics partners as described in sections 4 and 5.
  • With shipping carriers, who receive your name, address and phone number to deliver your order.
  • When you ask us to, for example when you post a public review.
  • For legal reasons: to comply with law or legal process, to enforce our terms, to protect the rights, safety or property of Sculpette, our customers or others, or in connection with a merger, financing, acquisition or sale of all or part of our business.

7. Service providers we use

Provider What it does Information involved
Shopify Store hosting, checkout, order management, analytics All order, account and site-usage data
Shopify Payments, PayPal and other processors shown at checkout Payment processing and fraud screening Payment and billing details
Klaviyo Email and SMS marketing Contact details, order history, site activity, marketing preferences
Meta, Google Advertising and measurement Device identifiers, hashed contact details, site activity
Fulfilment and shipping partners, including CJ Dropshipping and the carriers they use Packing and delivering orders Name, shipping address, phone number, order contents
17TRACK Order tracking page Tracking number
Review platform (where enabled) Collecting and displaying reviews Name, email, order, review content

Some of these providers process data outside the United States. Each is bound by contract to use personal information only to provide services to us.

8. Our relationship with Shopify

Shopify hosts the Services and processes personal information to provide them to us. In addition, we use certain Shopify features that draw on data about your interactions with our store and with other Shopify merchants, for example to improve fraud detection or personalise shopping. For those features, Shopify is responsible for the processing and for responding to requests about it. You can read the Shopify Consumer Privacy Policy and exercise rights over data Shopify holds at privacy.shopify.com.

9. How long we keep it

We keep personal information for as long as needed for the purposes above. In practice: order records for at least seven years for tax and accounting; account information until you close the account or it has been inactive for three years; marketing data until you unsubscribe, after which we keep a suppression record so we do not contact you again; support correspondence for three years after the case is closed; analytics and advertising data for the period set by the relevant platform, typically 14 to 26 months. We delete or anonymise information when it is no longer needed.

10. Security

We use administrative, technical and physical safeguards appropriate to the information we hold, including encryption in transit (TLS), restricted staff access and PCI-compliant payment processing through Shopify. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please do not send card numbers or other sensitive details by email.

11. Your rights and choices

Depending on where you live, you may have the right to:

  • Know and access the personal information we hold about you, including the categories collected, the sources, the purposes, and the third parties it was shared with;
  • Correct inaccurate personal information;
  • Delete personal information, subject to exceptions such as completing a transaction or complying with law;
  • Receive a portable copy of your personal information;
  • Opt out of the sale or sharing of personal information for targeted advertising, and of profiling in furtherance of decisions with legal or similarly significant effects (we do not carry out such profiling);
  • Not be discriminated against for exercising any of these rights.

To exercise a right, email support@sculpette.com with "Privacy request" in the subject line, write to the address in section 18, or use the privacy request link in the site footer where available. To opt out of sale or sharing for advertising, use the "Do Not Sell or Share My Personal Information" link in the footer, enable Global Privacy Control in your browser, or email us. We will verify your identity, usually by matching the details you give us against your order or account, and respond within 45 days, extendable once by a further 45 days where permitted. You may authorise an agent to act for you; we will ask the agent for proof of authorisation and may still verify your identity with you directly. If we deny a request, we will explain why and, where the law provides, how to appeal.

12. California residents

This section supplements the rest of the policy for residents of California under the CCPA as amended by the CPRA.

Categories collected in the last 12 months: identifiers; customer records (name, address, payment details); commercial information (purchases and browsing); internet or network activity; geolocation at the level of city or ZIP derived from IP address; inferences drawn from the above for marketing. The sources, purposes and recipients are described in sections 2, 3, 6 and 7.

Sale and sharing. We do not sell personal information for money. We "share" identifiers, commercial information and internet activity with advertising partners for cross-context behavioural advertising, as described in section 5. You may opt out as described in section 11. We do not knowingly sell or share the personal information of consumers under 16.

Sensitive personal information. We do not collect it, other than card details processed by our payment providers for the purpose of completing your purchase, which are not used for any other purpose.

Retention is described in section 9. Financial incentives. Where we offer a discount for subscribing to email or SMS, the incentive is the stated discount, you may withdraw at any time by unsubscribing, and we value the data at the cost of the discount provided. Shine the Light. We do not disclose personal information to third parties for their own direct marketing.

13. Residents of other US states

If you live in a state with a comprehensive privacy law, including Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky and Rhode Island, you have the rights in section 11 to the extent provided by your state's law, including the right to appeal a denied request by replying to our decision email. We do not engage in profiling for decisions producing legal or similarly significant effects.

14. Visitors outside the United States

The Services are directed to customers in the United States and we currently ship only within the United States. If you access the Services from elsewhere, your information will be transferred to and processed in the United States, where privacy laws may differ from your own. Where the law of the European Economic Area or the United Kingdom applies, our legal bases are performance of a contract (orders and accounts), legitimate interests (site operation, security, analytics and non-intrusive marketing), consent (cookies that are not strictly necessary, and SMS marketing) and legal obligation (tax records). Transfers out of those regions rely on the European Commission's Standard Contractual Clauses or the UK equivalent. You may lodge a complaint with your local data protection authority.

15. Children

The Services are intended for adults. We do not knowingly collect personal information from anyone under 18, and we do not knowingly sell or share the personal information of anyone under 16. If you believe a child has provided us with personal information, contact us and we will delete it.

The Services link to sites and platforms we do not control, including carriers, social networks and review platforms. Their privacy practices are their own. Information you post publicly, including reviews and social media comments, may be seen by others.

17. Changes to this policy

We may update this policy to reflect changes in our practices or the law. The "last updated" date shows the current version. For material changes we will give notice on the site or by email where required by law.

18. Contact

Flexnee LLC, doing business as Sculpette
15442 Ventura Blvd, Sherman Oaks, CA 91403, United States
Email: support@sculpette.com (subject line "Privacy request" for rights requests)
Contact form: sculpette.com/pages/contact