Last Updated: [1/17/2026]

GirlStack is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or make a purchase.

1. Information We Collect

Personal Information You Provide:

• Email address (required for order confirmation and digital product delivery)

• Payment information (processed securely through our payment provider)

• Account information (if you create an account for faster checkout)

• Any information you provide when contacting customer support

Information Collected Automatically:

• IP address

• Browser type and version

• Device information

• Pages visited and time spent on our site

• Referring website

• Cookies and similar tracking technologies

Third-Party Tracking:

• We use Meta Pixel (Facebook) to track website visits and ad performance

• We use analytics tools to understand how visitors use our site

2. How We Use Your Information

We use your information to:

• Process and fulfill your orders

• Send order confirmations and download links

• Provide customer support

• Send promotional emails about new models, sales, and updates (only if you opt-in)

• Improve our website and user experience

• Prevent fraud and ensure security

• Comply with legal obligations

• Run targeted advertising campaigns

3. Email Communications

Transactional Emails: When you make a purchase, we will send you order confirmations and download links. These emails are necessary to deliver your product and cannot be opted out of.

Marketing Emails: If you opt-in to our email list, we will send you promotional emails about new models, sales, and special offers. You can unsubscribe at any time by clicking the "unsubscribe" link in any marketing email.

We will never sell, rent, or share your email address with third parties for their marketing purposes.

4. How We Share Your Information

We do not sell, trade, or rent your personal information to third parties.

We may share your information with:

Service Providers: We work with third-party companies to facilitate our services:

• Squarespace: Website hosting and infrastructure

• Stripe/PayPal: Payment processing (they handle your payment information securely; we do not store credit card details)

• Email service provider: To send transactional and marketing emails

• Meta (Facebook): For advertising and analytics through Meta Pixel

These service providers are contractually obligated to protect your information and may only use it to provide services to us.

Legal Requirements: We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to protect our rights or the safety of others.

5. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Remember your preferences and settings

• Analyze website traffic and user behavior

• Deliver targeted advertising through Meta Pixel

• Improve website functionality

You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of our website.

Meta Pixel: We use Meta Pixel to track conversions from Facebook and Instagram ads, build custom audiences, and optimize ad delivery. Meta may use this data in accordance with its own privacy policy.

6. Data Security

We implement reasonable security measures to protect your information from unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Payment information is processed through secure, PCI-compliant payment processors (Stripe/PayPal) and is not stored on our servers.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.

• Order information: Retained for accounting and legal purposes

• Email addresses: Retained until you unsubscribe from marketing emails

• Analytics data: Retained according to our analytics provider's policies

8. Your Rights and Choices

Depending on your location, you may have the following rights:

Access: Request a copy of the personal information we hold about you

Correction: Request correction of inaccurate or incomplete information

Deletion: Request deletion of your personal information (subject to legal obligations)

Opt-Out: Unsubscribe from marketing emails at any time

Do Not Track: We do not currently respond to "Do Not Track" browser signals

To exercise these rights, contact us at [your email address].

9. Children's Privacy

GirlStack is not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have collected information from someone under 18, we will delete it immediately.

10. International Users

GirlStack is based in the United States. If you access our website from outside the U.S., your information may be transferred to, stored, and processed in the U.S. By using our services, you consent to this transfer.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Your continued use of GirlStack after changes constitutes acceptance of the updated policy.

12. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected

• Right to know if personal information is sold or disclosed

• Right to opt-out of the sale of personal information (we do not sell personal information)

• Right to request deletion of personal information

• Right to non-discrimination for exercising your privacy rights

To exercise these rights, contact us at [your email address].

13. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data

• Right to rectification of inaccurate data

• Right to erasure ("right to be forgotten")

• Right to restrict processing

• Right to data portability

• Right to object to processing

• Right to withdraw consent

To exercise these rights, contact us at [your email address].

14. Contact Us

If you have questions about this Privacy Policy or how we handle your information, contact us at:

Email: [your email address]