Last Updated: August 1, 2025

Ivette’s Chocolate Chip Cookies (“we,” “us,” or “our”) operates this website and provides a comprehensive range of products and services (collectively referred to herein as the “Services”). The Services, powered by Site Mammoth, offer you a curated shopping experience. This Privacy Policy explains how we collect, use, and disclose your personal information when you access or interact with our website, make a purchase, or otherwise communicate with us. In instances where our Terms of Service conflict with this Privacy Policy, this Privacy Policy shall govern the collection, processing, and disclosure of your personal information. Please read the following carefully. By accessing or using the Services, you acknowledge that you have read and understood the practices described herein.

Personal Information We Collect

For the purposes of this policy, “personal information” refers to any data that can be used to identify you, either directly or when combined with other information. Information provided anonymously or de-identified such that it cannot be linked to you is not considered personal information. Depending on your interaction with the Services and in compliance with applicable law, we may collect and process various categories of personal information, including:

• Contact Details: Such as your name, mailing address, billing and shipping addresses, telephone number, and email address.
• Financial Information: Including credit or debit card numbers, payment card details, financial account information, transaction histories, payment method details, and payment confirmations.
• Account Information: Such as usernames, passwords, security questions, preferences, and settings.
• Transaction Information: Including details about items you view, add to your cart or wish list, purchase, return, exchange, or cancel, as well as records of past transactions.
• Communications: Content provided during interactions with our customer support or other communications.
• Device Information: Information regarding your device, browser, network connection, IP address, and other unique identifiers.
• Usage Information: Data about how you interact with the Services, including navigational and behavioral data.

Sources of Personal Information

We collect personal information from multiple sources:

• Directly from You: When you create an account, interact with our Services, or otherwise provide information directly.
• Automatically: Through your device and browser activities when using our products or visiting our website, including the use of cookies and similar technologies.
• Service Providers: From third parties who perform services on our behalf, such as IT management, payment processing, and data analytics.
• Business Partners and Third Parties: From partners or other external sources as allowed or required by law.

How We Use Your Information

Your personal information is used for various purposes in connection with the Services, including but not limited to:

• Service Provision and Enhancement:
  • Fulfilling orders and processing payments.
  • Managing your account, including retaining preferences and interests.
  • Facilitating shipping, returns, and exchanges.
  • Sending account-related notifications and tailoring your shopping experience, including personalized product recommendations.
• Marketing and Advertising:
  • Delivering marketing, advertising, and promotional materials via email, SMS, postal mail, or online channels based on your previous interactions with our website.
  • Displaying targeted advertisements on our site or on third-party websites in partnership with platforms such as Yelp, Instagram, Facebook, and TikTok.
  • You may opt out of targeted advertising as outlined in this policy.
• Security and Fraud Prevention:
  • Verifying your identity and securing your account.
  • Detecting, investigating, and mitigating potentially fraudulent or unlawful activities.
  • Protecting public safety and the integrity of our Services.
• Customer Communication:
  • Providing responsive customer support and maintaining ongoing business relations.
• Legal Compliance:
  • Responding to legal processes, such as subpoenas or requests from law enforcement.
  • Ensuring compliance with applicable laws, and investigating or addressing violations of our policies.

How We Disclose Your Personal Information

We may share your personal information with third parties for legitimate purposes, subject to this Privacy Policy. Disclosures may occur under the following circumstances:

• Service Providers and Vendors:
  • With entities such as Site Mammoth, and other vendors who provide services like IT management, payment processing, data analytics, cloud storage, and customer support.
• Marketing Partners:
  • With business or marketing partners to facilitate advertising and promotional activities. These partners are required to adhere to their own privacy policies regarding your data. Depending on your jurisdiction, you may have the right to prevent the sharing of your data for targeted advertising purposes, which you can opt out of as described herein.
• At Your Request:
  • When you explicitly consent to the disclosure of your information, for instance, when arranging product shipments or linking social media accounts.
• Within Our Corporate Group:
  • Sharing may occur internally among our affiliates or entities within our corporate group.
• Business Transactions or Legal Requirements:
  • In connection with mergers, acquisitions, bankruptcy proceedings, legal obligations (including responses to subpoenas or search warrants), or to enforce our terms and policies.

Relationship with Site Mammoth:
The Services are hosted by Site Mammoth, which collects and processes data regarding your access and usage to enhance the Services. Data may be transmitted and stored in jurisdictions outside your country of residence. For more details regarding Site Mammoth’s data practices and your rights in relation to their processing of your information, please review their private policy https://sitemammoth.com/privacy-policy

Third-Party Websites and Links

The Services may include links to third-party websites or platforms. We recommend reviewing the privacy and security policies of these external sites as we do not have control over their practices. Information you share publicly on these platforms may be accessible to others and used in accordance with their respective terms.

Children’s Privacy

The Services are not intended for children. We do not knowingly collect personal information from individuals under the age of majority in your jurisdiction. If you are a parent or guardian and become aware that your child has provided us with personal data, please contact us to request its deletion. As of the effective date of this policy, we do not knowingly “sell” or “share” the personal information of individuals under 16 years of age as defined under applicable law.

Security and Data Retention

While we strive to protect your personal information through robust security measures, no system is completely infallible. Please refrain from using insecure channels to transmit sensitive data. The duration for which we retain your personal information will depend on operational needs, legal requirements, and the nature of our business relationship with you.

Your Rights and Choices

Depending on your jurisdiction, you may have certain rights regarding your personal information, including:

• Access: Requesting access to the personal information we hold about you.
• Deletion: Requesting that your personal information be erased from our records.
• Correction: Requesting correction of any inaccuracies in your personal information.
• Portability: Requesting a copy of your personal information for transfer to a third party.
• Opt-Out: Depending on local regulations, opting out of the “sale” or “share” of your information for targeted advertising purposes. For opt-out procedures, please follow the provided links or instructions within the Services.

Requests to exercise these rights can be submitted via the contact details below. We may require identity verification prior to processing such requests, and you may also appoint an authorized representative to act on your behalf.

Managing Communication Preferences

You have the option to manage your communication preferences. If you wish to unsubscribe from promotional emails, please use the unsubscribe link provided in the communications. Non-promotional communications, such as those related to your account or order information, may still be sent.

International Data Transfers

Your personal information may be transferred, stored, and processed in countries other than your own. If the data is transferred from the European Economic Area or the United Kingdom, we will utilize approved transfer mechanisms such as the European Commission’s Standard Contractual Clauses or their UK equivalent, unless the receiving country has been recognized as providing an adequate level of data protection.

Changes to This Privacy Policy

We may revise this Privacy Policy periodically to reflect changes in our practices, technology, or regulatory requirements. Updated versions will be posted on our website with a revised “Last Updated” date, and any material changes will be communicated as required by law.

Contact Us

For any questions regarding this Privacy Policy, concerns about our privacy practices, or to exercise your rights, please contact us using the following details:

• Email: Ivette.chocolatechip.cookies@gmail.com
• Phone: 786-280-5147

We are committed to addressing your inquiries and ensuring your rights are protected.