Privacy Policy for DRESSTORES

At DRESSTORES ("we", "us", or "our"), we value your privacy and are committed to protecting your personal information. This Privacy Policy outlines how we collect, use, disclose, and safeguard your data when you interact with our website, services, and products. By using our platform or completing a purchase, you consent to the practices described in this policy.

1. Information We Collect:

We collect personal information that you provide directly to us when you create an account, place an order, or contact customer support:

• Name, email address, phone number, and account contact details.
• Billing and shipping addresses required to fulfill and verify your orders.
• Payment Information (Tokenized by Stripe): Payment card transactions are processed directly by Stripe, Inc. DRESSTORES never stores, processes, or has access to your full credit or debit card numbers or CVV security codes on our servers. We only receive tokenized payment status, card brand, and the last 4 digits of the card from Stripe for order reference and receipt generation.
• Order history, size/style preferences, and customer service correspondence.

Additionally, we automatically collect certain technical information when you access our website or complete a checkout transaction:

• IP address, browser type, operating system, and device identifiers (including fraud-prevention device telemetry collected by Stripe Radar).
• Usage data, pages visited, timestamps of checkout actions, and referring URLs.

2. How We Use Your Information:

We use your personal information for the following purposes:

• Processing, verifying, and fulfilling your orders (including sending order confirmations, shipping notifications, and carrier tracking links).
• Fraud Prevention, Payment Security & Dispute Resolution: Verifying cardholder identity via Address Verification System (AVS), 3D Secure (3DS2), and Stripe Radar, preventing unauthorized transactions, and providing transaction, carrier delivery, and IP/device verification records to card networks in the event of a billing dispute or chargeback.
• Responding to customer service inquiries, return requests, and order cancellations.
• Sending marketing communications and promotional updates (only with your consent; you may opt out at any time).
• Complying with applicable United States federal and state legal, tax, and regulatory obligations.

3. Payment Processing & PCI DSS Compliance (Stripe, Inc.):

All online payments on DRESSTORES are processed by Stripe, Inc., which is certified as a PCI DSS Level 1 Service Provider — the highest level of certification available in the payments industry. Your payment data is encrypted in transit using TLS 1.3 and handled in accordance with Stripe's Privacy Policy. For more information on how we protect your checkout data, please visit our Security & Payment Safety page.

4. Cookies and Fraud-Prevention Technologies:

We use essential cookies to maintain your shopping bag, session authentication, and regional currency settings (USD), as well as security cookies set by Stripe (such as __stripe_mid and __stripe_sid) to detect and prevent payment fraud. For a full list of cookies used on our platform, please see our Cookie Policy.

5. Data Sharing and Disclosure:

We do not sell, trade, or rent your personal information to third parties. We share your personal information only with trusted third parties necessary to operate our store:

• Stripe, Inc.: For payment processing, 3D Secure authentication, fraud screening (Stripe Radar), and dispute representation.
• Shipping & Fulfillment Carriers: (Such as USPS, UPS, FedEx, and logistics partners) to deliver your orders and provide real-time tracking updates.
• Legal Authorities & Card Networks: When required by law, subpoena, or card network rules to protect our legal rights or contest fraudulent transactions.

6. Your Privacy Rights (Including US & CCPA Rights):

Depending on your state of residence (including California residents under the California Consumer Privacy Act — CCPA/CPRA), you have the right to:

• Request disclosure of the categories and specific pieces of personal information we have collected about you.
• Request correction or deletion of your personal information (subject to legal retention exceptions for completed commercial transactions, tax records, and dispute defense).
• Opt out of marketing emails at any time using the unsubscribe link in our emails or by contacting customer support.
• Know that DRESSTORES does not sell your personal information and will never discriminate against you for exercising your privacy rights.

7. Children's Privacy:

Our services are not directed to individuals under the age of 16. If we become aware that we have inadvertently collected personal information from a child under 16 without verifiable parental consent, we will promptly delete such information.

8. Changes to This Privacy Policy:

We may update this Privacy Policy from time to time to reflect changes in our practices, payment security standards, or legal requirements. Any updates will be posted on this page with a revised effective date.

9. Contact Us:

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us at:

DRESSTORES — Privacy & Customer Care
Operating Jurisdiction: State of Delaware, United States
Email: support [at] dresstores.com
Hours: Monday to Friday, 9:00 AM – 6:00 PM ET