Privacy Policy

Effective Date: June 30, 2026 Last Updated: June 30, 2026

Heart Circle LLC ("Heart Circle," "we," "us," or "our") respects your privacy. This Privacy Policy explains what personal information we collect when you visit www.heartcircle.co (the "Site"), how we use and share it, the choices you have, and the rights you can exercise. This Policy applies to all visitors, customers, and other users of the Site.

By using the Site, you acknowledge the practices described in this Policy. If you do not agree, please do not use the Site.

1. Notice at Collection

We collect the following categories of personal information. Each category is described in more detail in Section 2.

 

We do not knowingly collect sensitive personal information as defined by California law (e.g., Social Security numbers, precise geolocation, racial or ethnic origin, religious beliefs, genetic data, health information). We do not knowingly collect personal information from anyone under the age of 16.

2. Information We Collect

Information You Provide Directly

When you place an order, create an account, contact customer service, or sign up for marketing communications, you provide us with personal information including your name, email address, shipping and billing address, phone number, and payment information. We refer to this as "Order Information."

Information Collected Automatically

When you visit the Site, we and our service providers automatically collect certain information about your device and browsing activity, including your IP address, browser type and version, operating system, time zone, referring URLs, pages visited, time spent on pages, and interactions with the Site. We refer to this as "Device Information."

We collect Device Information using the following technologies, which we describe in detail in Section 6:

• Cookies — small data files stored on your device
• Log files — server-side records of activity on the Site
• Web beacons, tags, and pixels — electronic files used to record browsing behavior
• Local storage — browser-based storage for site functionality

When we refer to "Personal Information" in this Policy, we mean both Order Information and Device Information.

3. How We Use Personal Information

We use your Personal Information for the following purposes:

To fulfill orders. We use Order Information to process payments, ship products, send order confirmations and shipping updates, and provide customer service.

To prevent fraud. We use Order Information and Device Information (in particular, IP address) to screen orders for potential fraud or risk.

To communicate with you. We use your contact information to respond to inquiries, send transactional messages (e.g., order updates), and — with your consent where required — send marketing communications.

To improve the Site. We use Device Information to understand how visitors interact with the Site, identify performance issues, and improve product offerings.

To personalize your experience. With your consent where required, we use information about your browsing and purchase history to show you relevant products and recommendations.

To deliver advertising. With your consent where required, we work with advertising partners to show you Heart Circle products on other websites and platforms.

To comply with legal obligations. We retain certain information to comply with tax, accounting, consumer protection, and other applicable laws.

4. Legal Bases for Processing (For Visitors in the EEA, UK, and Switzerland)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, we process your Personal Information under the following legal bases:

• Performance of a contract — to fulfill orders and provide customer service
• Consent — for marketing communications, non-essential cookies, and advertising
• Legitimate interests — for fraud prevention, site security, and analytics (balanced against your rights)
• Legal obligation — for tax, accounting, and regulatory compliance

You may withdraw consent at any time using the methods described in Section 9.

5. How We Share Personal Information

We share Personal Information with the following categories of third parties:

Service Providers. We use third-party service providers to operate the Site and our business. These include:

• Shopify — eCommerce platform, hosting, and Shopify Payments
• Consentmo — cookie consent management
• Google (Analytics and Ads) — analytics and advertising (with consent where required)
• Meta (Facebook and Instagram) — advertising and pixel-based measurement (with consent where required)
• TikTok — advertising and TikTok Shop integration (with consent where required)
• Pinterest - analytics and advertising (with consent where required)
• Microsoft Clarity (if enabled) — session analytics (with consent where required)
• Payment processors, shipping carriers, fraud-screening providers, and customer service tools

Advertising and Analytics Partners. Under the broad definitions used by the California Consumer Privacy Act ("CCPA"), as amended by the California Privacy Rights Act ("CPRA"), our use of advertising and analytics cookies may constitute "sharing" or "selling" of personal information for the purpose of cross-context behavioral advertising. You have the right to opt out of this — see Section 9.

Legal Requirements. We may disclose Personal Information when required by law, such as in response to a subpoena, court order, or other lawful request, or to protect our legal rights or the safety of others.

Business Transfers. If Heart Circle is involved in a merger, acquisition, or sale of assets, your Personal Information may be transferred as part of that transaction. We will notify you before your Personal Information is transferred and becomes subject to a different privacy policy.

We do not sell your Personal Information for monetary consideration. The only "sharing" or "selling" that may occur under CCPA/CPRA definitions is the sharing of online identifiers with advertising partners (Google, Meta, TikTok) for cross-context behavioral advertising — and only when you have not opted out.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies on the Site, organized into the following categories:

• Strictly Necessary Cookies — required for basic Site functionality (e.g., shopping cart, checkout, login). These cannot be disabled.
• Analytics Cookies — help us understand how visitors use the Site (e.g., Google Analytics 4). Set only with your consent.
• Marketing/Advertising Cookies — used by advertising partners (e.g., Meta Pixel, Google Ads, TikTok Pixel) to deliver relevant ads and measure campaign performance. Set only with your consent.
• Preference Cookies — remember your settings and preferences. Set only with your consent.

A complete and current list of cookies and tracking technologies used on the Site, including their providers and durations, is available through our Cookie Consent Banner, which appears on your first visit and can be reopened at any time via the "Cookie Preferences" link in the Site footer.

Consent. When you visit the Site from a jurisdiction with applicable consent requirements (including California, the EEA, UK, and others), we will display a Cookie Consent Banner before any non-essential cookies or tracking technologies are activated. You may accept, reject, or customize your choices. Non-essential trackers are blocked until you provide consent. You may withdraw or change your consent at any time using the "Cookie Preferences" link.

Global Privacy Control (GPC). We honor the Global Privacy Control signal as a valid opt-out request for the sale or sharing of personal information under California law. If your browser sends a GPC signal, we will treat it as a Do Not Sell or Share request automatically.

Do Not Track. Most browsers offer a "Do Not Track" setting. There is no industry standard for how websites must respond to Do Not Track signals, and we currently honor only the more specific Global Privacy Control signal described above. We do not knowingly engage in tracking that would require a Do Not Track-based response beyond what GPC handles.

7. Behavioral Advertising

With your consent where required, we use your Personal Information to deliver targeted advertisements and marketing communications we believe may be of interest to you. This includes using:

• Google Ads to show ads on Google's network and partner sites
• Meta Ads to show ads on Facebook and Instagram
• TikTok Ads to show ads on TikTok
• Pinterest Ads to show ads on Pinterest

You can opt out of targeted advertising in the following ways:

• Through our Cookie Consent Banner ("Cookie Preferences" link in the footer)
• By sending a Global Privacy Control signal from your browser
• By using the industry opt-out tools at www.aboutads.info/choices (Digital Advertising Alliance) and www.networkadvertising.org/choices (Network Advertising Initiative)
• By adjusting your advertising preferences directly with Google, Meta, and TikTok

8. Data Retention

We retain Personal Information only for as long as necessary to fulfill the purposes described in this Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods are summarized in Section 1.

You may request deletion of your Personal Information at any time using the methods described in Section 9, subject to exceptions required by law (e.g., we may need to retain transaction records for tax purposes).

9. Your Privacy Rights

Your rights depend on where you live. Heart Circle honors all rights described below for all customers regardless of jurisdiction.

California Residents (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what categories and specific pieces of Personal Information we have collected about you, the sources, the purposes for collection, and the categories of third parties with whom we share it
• Delete Personal Information we have collected, subject to certain exceptions
• Correct inaccurate Personal Information
• Opt out of the sale or sharing of Personal Information, including for cross-context behavioral advertising
• Limit the use of sensitive Personal Information (we do not knowingly collect sensitive PI as defined by CPRA)
• Non-discrimination for exercising your rights — we will not deny services, charge different prices, or provide a different level of service because you exercised your rights

To exercise these rights, contact us using the information in Section 14, submit a request at hello@heartcircle.co, or use the "Do Not Sell or Share My Personal Information" link in our Site footer.

We will verify your identity before responding to any request. We will respond within 45 days, with one 45-day extension if reasonably necessary.

You may also designate an authorized agent to make a request on your behalf. The agent must provide proof of authorization, and we may require you to verify your identity directly.

Virginia, Colorado, Connecticut, Utah, and Other US State Residents

If you are a resident of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), or any other US state with a comprehensive consumer privacy law, you have rights similar to those described above for California residents, including the rights to access, delete, correct, and opt out of targeted advertising and sale of personal data. To exercise these rights, contact us using the information in Section 14.

EEA, UK, and Swiss Residents (GDPR / UK GDPR)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the right to:

• Access the Personal Information we hold about you
• Request correction or deletion of your Personal Information
• Object to or restrict our processing of your Personal Information
• Data portability (receive your data in a structured, machine-readable format)
• Withdraw consent at any time (without affecting the lawfulness of prior processing)
• Lodge a complaint with your local data protection authority

To exercise these rights, contact us using the information in Section 14.

If you are not satisfied with our response, you may lodge a complaint with your local supervisory authority. A list of EU supervisory authorities is available at edpb.europa.eu. UK residents may contact the Information Commissioner's Office at ico.org.uk.

Please note that your Personal Information may be transferred outside the EEA, UK, or Switzerland, including to the United States. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.

10. Children's Privacy

The Site is not directed to children under the age of 16, and we do not knowingly collect Personal Information from anyone under 16. If you believe we have collected information from a child, please contact us immediately at hello@heartcircle.co and we will take steps to delete it.

11. Security

We use commercially reasonable administrative, technical, and physical safeguards to protect Personal Information. However, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.

Payment processing is handled by PCI-compliant third-party processors. We do not store full payment card numbers on our systems.

12. Third-Party Links

The Site may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices of those third parties. We encourage you to read their privacy policies before providing any Personal Information.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date at the top of this Policy and, where required by law, provide additional notice (such as a banner on the Site or an email to registered customers).

Your continued use of the Site after changes take effect constitutes acceptance of the updated Policy.

14. Contact Us

For questions, requests, or complaints regarding this Privacy Policy or our privacy practices, please contact us:

Heart Circle LLC
2807 N Parham Rd, Ste 320 #4495
Henrico, Virginia 23294

Email: hello@heartcircle.co Phone: 1-(800)-733-7120

For privacy-specific requests, please use the subject line "Privacy Request" so we can route your inquiry promptly.

Notice

Heart Circle will never sell your data or use it for any purposes not intended to optimize your shopping experience on the Site. You can browse and shop in full confidence that your data is safe and secure.