1. Scope & Who We Are

SkyyRose LLC (“SkyyRose,” “we,” “our,” or “us”) is a California limited liability company operating the luxury streetwear brand and online store at https://skyyrose.co (“the Site”). Our principal place of business is in Oakland, California.

This Privacy Policy applies to personal information collected through the Site, our WooCommerce-powered store, and any related communications or services we provide. It does not apply to third-party websites or services that may be linked from our Site.

For questions about this policy, contact us at privacy@skyyrose.co.

2. Information We Collect

We collect the following categories of personal information:

A. Identifiers

• Name (first and last)
• Email address
• Shipping and billing address
• Phone number (if provided)
• IP address and device identifiers
• Account username and password (hashed)

B. Commercial Information

• Order history (products purchased, quantities, prices)
• Cart contents and wish lists
• Return and exchange records
• Pre-order records and estimated ship dates

C. Internet / Device Activity

• Pages visited, time on page, referring URLs
• Browser type and version, operating system
• Clickstream data, search queries on the Site
• Cookie identifiers and session tokens (see Section 7 and our Cookie Policy)
• Advertising interaction data (ad views, clicks) via TikTok pixel and Google Analytics advertising features

D. Approximate Geolocation

We infer a general geographic location (city/region/country) from your IP address for analytics, fraud prevention, and currency/shipping-rate calculation. We do not collect precise GPS-level location data.

E. Payment Information

Payment card numbers and financial account details are collected and processed directly by our payment processors (Stripe and PayPal). We do not store payment card data on our servers. We retain only non-sensitive confirmation details such as the last four digits of a card, card type, and transaction identifiers returned by the processor.

3. How We Collect It

Directly from you

When you create an account, place an order, submit a return request, contact support, sign up for our email list, or otherwise interact with us, you provide information directly.

Automatically

When you visit the Site, we and our service providers automatically collect device and usage data through cookies, web beacons, pixel tags, and similar technologies. For a full description of these technologies and your controls, see Section 7 — Cookies & Tracking Technologies and our Cookie Policy.

From third parties

• Payment processors (Stripe, PayPal): transaction confirmation data.
• Analytics platforms (Google Analytics): aggregated and segmented usage data.
• Advertising platforms (TikTok): ad interaction signals to measure campaign performance.
• WordPress.com / Automattic (Jetpack): hosting, security scanning, and site-statistics data from our hosting and infrastructure provider.

4. How We Use Your Information

We use personal information for the following purposes:

• Fulfill orders. Process payments, arrange shipping, send order confirmations and tracking updates, handle returns and exchanges.
• Customer communications. Respond to inquiries, support tickets, and return/exchange requests via support@skyyrose.co.
• Account management. Create and maintain customer accounts; enable order history and wishlist features.
• Marketing with consent. Send promotional emails, new-collection announcements, and special offers where you have opted in. You may unsubscribe at any time.
• Site improvement. Analyze usage patterns to improve navigation, content, and shopping experience.
• Advertising. Measure ad performance and, where permitted, serve or retarget relevant advertising through TikTok and Google advertising features.
• Fraud prevention and security. Detect and prevent fraudulent transactions, abuse, and unauthorized access.
• Legal compliance. Meet our obligations under applicable law, respond to lawful requests from government authorities, and enforce our Terms of Service.

5. Legal Bases for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data under the following legal bases:

6. How We Share & Disclose

Service providers and data processors

We share personal information with the following categories of vendors who process data on our behalf:

Legal and safety disclosures

We may disclose personal information when required by law, court order, or lawful government request; to protect the rights, property, or safety of SkyyRose, our customers, or others; or to detect, prevent, or investigate fraud.

Business transfers

If SkyyRose LLC is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, personal information may be transferred as part of that transaction. We will notify affected users via email or prominent Site notice prior to any such transfer and change of use.

We do not sell personal information for money

SkyyRose LLC does not sell your personal information to third parties for monetary compensation. However, our use of the TikTok pixel and Google Analytics advertising features may constitute “sharing” of personal information for cross-context behavioral advertising under California law. See Section 9 for how to opt out.

7. Cookies & Tracking Technologies

We use cookies, pixel tags, web beacons, and similar technologies to operate the Site, remember your preferences, analyze traffic, and serve targeted advertising. Cookies placed on our Site include:

• Strictly necessary cookies: Required for cart functionality, checkout sessions, and security (WooCommerce session, WordPress login).
• Analytics cookies: Google Analytics collects pseudonymous usage data to help us understand how visitors use the Site.
• Advertising / targeting cookies: The TikTok pixel and Google advertising features track browsing behavior to measure ad performance and enable interest-based advertising.
• Functional cookies: Jetpack and WordPress cookies that support site features such as search and sharing.

For a complete list of cookies we use, their purposes, durations, and your consent and opt-out controls, please see our Cookie Policy.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect Site functionality.

8. Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020 (CCPA/CPRA) grants you the following rights with respect to your personal information:

Right to Know

You may request that we disclose: the categories and specific pieces of personal information we have collected about you; the categories of sources from which we collected it; the business or commercial purpose for collecting or sharing it; and the categories of third parties to whom we disclosed it.

Right to Delete

You may request deletion of personal information we have collected from you, subject to certain exceptions (such as completing a transaction, detecting security incidents, or complying with a legal obligation).

Right to Correct

You may request correction of inaccurate personal information we maintain about you.

Right to Opt Out of Sale / Sharing

You have the right to opt out of the “sale” or “sharing” of your personal information for cross-context behavioral advertising. See Section 9 for how to exercise this right.

Right to Limit Use of Sensitive Personal Information

To the extent we process “sensitive personal information” as defined by CPRA (such as precise geolocation or financial account details), you may have the right to limit our use of such information to purposes necessary to provide the services you requested. We do not use sensitive personal information for any purpose beyond service delivery, and payment card data is handled exclusively by our PCI-compliant processors.

Right to Non-Discrimination

We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you goods or services, charge you a different price, or provide you a different level of quality because you exercised a privacy right.

Categories collected and disclosed in the last 12 months

How to submit a verifiable consumer request

To exercise your rights under CCPA/CPRA, submit a verifiable consumer request by:

• Emailing privacy@skyyrose.co with the subject line “California Privacy Request”; or
• Writing to us at: 3400 Cottage Way, Suite G2, Sacramento, CA 95825

We will respond within 45 days. We will need to verify your identity before processing the request; we may ask you to provide information that matches our records. You may designate an authorized agent to make a request on your behalf by providing written authorization or a power of attorney. We may still require you to verify your own identity directly with us.

California “Shine the Light” (Civil Code § 1798.83)

California residents may request information about personal information disclosed to third parties for their direct marketing purposes during the preceding calendar year. We do not disclose personal information to third parties for direct marketing purposes as defined under Shine the Light. To inquire, contact privacy@skyyrose.co.

9. Do Not Sell or Share My Personal Information

Although we do not sell personal information for money, our use of the TikTok pixel and Google Analytics advertising features (including remarketing and audience-building) constitutes “sharing” of personal information for cross-context behavioral advertising under the CPRA. You have the right to opt out of this sharing.

How to opt out

• Email request: Send an email to privacy@skyyrose.co with the subject line “Do Not Share My Personal Information.” We will process your request within 15 business days.
• Cookie controls: You may disable advertising and analytics cookies through our Cookie Policy consent tool or through your browser settings. Disabling these cookies will prevent the TikTok pixel and Google advertising cookies from operating on your device.
• Global Privacy Control (GPC): We honor the Global Privacy Control browser signal. If your browser or browser extension transmits a GPC signal, we will treat it as an opt-out of the sharing of your personal information for cross-context behavioral advertising from that browser on that device. Note that the GPC signal is device- and browser-specific and does not automatically apply to your account or other devices.
• Platform-level opt-outs: You may also opt out of interest-based advertising through the TikTok app settings and through Google’s Ad Settings.

Opting out will not affect your ability to place orders or use any Site features.

10. Your Rights Under GDPR / UK GDPR

If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights regarding your personal data under the General Data Protection Regulation (GDPR) and, where applicable, the UK GDPR:

• Right of access (Art. 15): Request a copy of the personal data we hold about you.
• Right to rectification (Art. 16): Request correction of inaccurate or incomplete personal data.
• Right to erasure / “right to be forgotten” (Art. 17): Request deletion of your personal data, subject to certain exceptions (legal obligations, contractual necessity).
• Right to restriction of processing (Art. 18): Request that we limit the way we use your data in certain circumstances.
• Right to data portability (Art. 20): Receive personal data you have provided to us in a structured, commonly used, machine-readable format, where technically feasible.
• Right to object (Art. 21): Object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, email privacy@skyyrose.co. We will respond within 30 days (extendable by a further two months for complex requests, with notice to you).

Right to lodge a complaint

You have the right to lodge a complaint with your local data protection supervisory authority. For EEA residents, the relevant authority is in your member state of habitual residence, place of work, or the place of the alleged infringement. For UK residents, the relevant authority is the Information Commissioner’s Office (ICO) at ico.org.uk.

International data transfers

SkyyRose LLC is based in the United States. When we transfer personal data from the EEA or UK to the United States or other countries that may not provide the same level of data protection as your home country, we rely on appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission (and, for the UK, the UK Addendum to SCCs), or other lawful transfer mechanisms. You may request a copy of the applicable transfer mechanism by contacting privacy@skyyrose.co.

EU / UK Representative

SkyyRose LLC has determined that it is not required to appoint an EU or UK representative under Article 27 of the GDPR / UK GDPR. EEA and UK residents may exercise their rights or raise concerns by contacting us directly at privacy@skyyrose.co.

11. Children’s Privacy

The Site is a general-audience commercial website. Our Kids Capsule collection features children’s apparel, but all purchases are made by adults. We do not knowingly collect personal information from children under 13 years of age. If we learn that we have inadvertently collected personal information from a child under 13, we will delete it promptly.

If you believe we may have collected information from a child under 13, please contact us at privacy@skyyrose.co and we will investigate and take appropriate action.

12. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy or as required by applicable law, whichever is longer. Key retention considerations include:

• Order and transaction records are retained for a minimum of seven (7) years for tax and accounting compliance.
• Account information is retained for the duration of your account; if you close your account, we will delete or anonymize your data within a reasonable period, subject to legal obligations.
• Marketing preferences and communications are retained until you unsubscribe or request deletion.
• Analytics and log data is typically retained for up to 26 months (Google Analytics default) or as configured; IP-level data is anonymized sooner.

When personal information is no longer needed and no legal obligation requires its retention, we delete it or anonymize it so it can no longer be linked to you.

13. Data Security

We implement reasonable and appropriate administrative, technical, and physical safeguards to protect personal information against unauthorized access, use, disclosure, alteration, or destruction. Specific measures include:

• SSL/TLS encryption for all data in transit between your browser and the Site (HTTPS).
• PCI-DSS compliance for payment card data, handled exclusively by Stripe and PayPal — card numbers are never transmitted through or stored on our servers.
• Access controls limiting access to personal data to authorized personnel on a need-to-know basis.

No method of transmission over the internet or method of electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security. In the event of a data breach that affects your rights and freedoms, we will notify affected individuals and relevant authorities as required by applicable law.

14. Third-Party Links

The Site may contain links to third-party websites, social media platforms, or services (including TikTok, Instagram, and payment processor portals). These third-party sites have their own privacy policies, and we are not responsible for their privacy practices or content. We encourage you to review the privacy policies of any third-party sites you visit.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or Site functionality. When we make material changes, we will post the updated policy on this page with a new “Last updated” date and, where required by law, provide additional notice (such as an email notification or a prominent banner on the Site).

Your continued use of the Site after the effective date of any update constitutes your acknowledgment of the revised policy. We encourage you to review this page periodically.

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: privacy@skyyrose.co
• Mailing address:
  SkyyRose LLC
  Attn: Privacy
  3400 Cottage Way, Suite G2, Sacramento, CA 95825

For order, return, or shipping inquiries, contact support@skyyrose.co.
For legal or terms-related matters, contact legal@skyyrose.co.