Privacy policy

 

PRIVACY POLICY
Siiiba | www.siiiba.com | Los Angeles, California
Last updated: April 17, 2026
This Privacy Policy describes how Siiiba ("we," "us," or "our") collects, uses, and shares information about you when you visit www.siiiba.com, make a purchase, or interact with us. It also describes your rights under applicable US privacy laws, including the California Consumer Privacy Act (CCPA/CPRA), CalOPPA, and the Children's Online Privacy Protection Act (COPPA). By using this site, you agree to the practices described in this policy.
1. INFORMATION WE COLLECT
We collect information in three ways: directly from you, automatically when you visit our site, and from third parties.
Information you give us directly:
- Name, email address, shipping and billing address, and phone number when you place an order or create an account.
- Payment information (processed by our payment processor; we do not store full card numbers).
- Date of birth or age when you use our age verification screen.
- Messages and inquiries you send us through our contact form or email.
- Email address when you sign up for our mailing list.
Information we collect automatically:
When you visit our site, we automatically collect certain technical information, including:
- IP address and approximate location (city/region level).
- Browser type, operating system, and device identifiers.
- Pages visited, time spent, referring URLs, and click behavior.
- Cookie identifiers and similar tracking technologies (see Section 6).
Information from third parties:
We may receive information about you from third-party services we use to operate our business, including Shopify (our ecommerce platform), Klaviyo (email marketing), and payment processors. Each of these services has its own privacy policy.
2. HOW WE USE YOUR INFORMATION
We use the information we collect to:
- Process and fulfill your orders, including sending order confirmations and shipping updates.
- Respond to your questions and customer service requests.
- Send you marketing emails if you have opted in (you can unsubscribe at any time).
- Improve our website and product offerings by analyzing how visitors use our site.
- Comply with legal obligations, including COPPA, tax laws, and fraud prevention.
- Verify the age of visitors before collecting personal information from children (see Section 8).

We do not sell your personal information to third parties for their own marketing purposes.
3. HOW WE SHARE YOUR INFORMATION
We share your information with third parties only as described below.

Service providers: We share information with companies that help us run our business, including Shopify (ecommerce platform), Klaviyo (email marketing), shipping carriers (UPS, USPS, FedEx), and payment processors (Stripe or Shopify Payments). These companies may only use your information to perform services for us.

Legal requirements: We will disclose your information if required by law, court order, or government authority, or if we believe disclosure is necessary to protect the rights, property, or safety of Siiiba, our customers, or others.

Business transfers: If Siiiba is acquired, merged with, or sold to another company, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

We do not sell or share personal information with third-party advertisers for targeted advertising without your consent. California residents can opt out at any time using the 'Do Not Sell or Share My Personal Information' link in our website footer.
4. DATA RETENTION
We keep your personal information for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law.

- Order and transaction records: 7 years (required for tax and accounting purposes).
- Email marketing records: Until you unsubscribe or request deletion.
- Age verification information: Deleted immediately after verification is complete. We do not retain proof of age beyond the verification session.
- Customer service records: 3 years from last contact.

When we no longer need your information, we delete it or anonymize it.
5. YOUR PRIVACY RIGHTS
Depending on where you live, you may have the following rights regarding your personal information.
California residents (CCPA/CPRA):
- Right to know: You can request a copy of the personal information we hold about you and information about how we use and share it.
- Right to delete: You can request that we delete your personal information, subject to certain exceptions (such as completing a transaction you initiated).
- Right to correct: You can request that we correct inaccurate personal information.
- Right to opt out: You can opt out of the sale or sharing of your personal information for targeted advertising purposes using the link in our footer.
- Right to limit use of sensitive personal information: You can limit our use of sensitive personal information (such as precise geolocation) to what is necessary to provide our services.
- Right to non-discrimination: Exercising any of these rights will not result in different pricing, product availability, or service quality.
Residents of other states (Indiana, Kentucky, Rhode Island, Colorado, Connecticut, Virginia, Texas, Oregon, and others):
You have rights to access, correct, delete, and obtain a portable copy of your personal information, and to opt out of targeted advertising and the sale of personal data. The specific rights available to you depend on the laws of your state.
How to submit a request:
Email us at privacy@siiiba.com with the subject line 'Privacy Request' and describe your request. We will respond within 45 days. We may ask you to verify your identity before processing the request. You may also designate an authorized agent to submit a request on your behalf.
6. COOKIES AND TRACKING TECHNOLOGIES
Our website uses cookies and similar tracking technologies to operate and improve the site.

Strictly necessary cookies: Required for the site to function. These include session cookies that keep items in your cart and authentication cookies that keep you logged in. You cannot disable these without breaking the site.

Analytics cookies: We use Google Analytics to understand how visitors use our site (pages visited, time on site, traffic sources). This data is aggregated and does not identify individual visitors. We configure Google Analytics to anonymize IP addresses.

Marketing cookies: If we run advertising campaigns on platforms such as Meta (Facebook/Instagram) or Google, those platforms may set cookies to measure ad performance. We do not permit behavioral advertising cookies to be set for users who have identified as under 13 years old.

You can manage your cookie preferences using the cookie consent banner on our site. You can also opt out of Google Analytics at tools.google.com/dlpage/gaoptout. California, Indiana, Kentucky, Rhode Island, and other state residents may opt out of targeted advertising cookies using the 'Do Not Sell or Share My Personal Information' link in our website footer.
7. EMAIL AND SMS MARKETING
Email: We send marketing emails only to people who have opted in. Every marketing email includes an unsubscribe link. Click it and we will remove you from our list within 10 business days. You can also unsubscribe by emailing hello@siiiba.com.

SMS: If you opt in to receive text messages from us, we will send order updates and, with your separate consent, promotional messages. Message and data rates may apply. To stop receiving texts, reply STOP to any message. To get help, reply HELP.

We do not send marketing communications to children under 13.
8. CHILDREN'S PRIVACY (COPPA NOTICE TO PARENTS AND GUARDIANS)
Siiiba makes products for tweens ages 8-13. Our website is a mixed-audience site: it is directed in part to children, but parents and guardians purchase on their behalf. We take our obligations under the Children's Online Privacy Protection Act (COPPA) seriously.

Age verification: Before we collect personal information from any visitor, we ask for their date of birth. Visitors who identify as under 13 cannot create accounts or submit personal information without verifiable parental consent.

What we collect from children: When a parent or guardian places an order for a child, we collect only the information necessary to complete the transaction: name, shipping address, and order details. We do not collect personal information directly from children under 13 for any purpose other than completing the transaction.

Parental consent: Before collecting, using, or disclosing personal information from a child under 13, we obtain verifiable consent from a parent or guardian. We will describe what information we plan to collect, how we will use it, and whether we will share it with third parties before asking for consent.

No behavioral advertising to children: We do not use personal information collected from or about children under 13 for targeted or behavioral advertising.

Parental rights: Parents and guardians may at any time:
- Review the personal information we have collected from or about their child.
- Request that we delete their child's personal information.
- Refuse to allow further collection or use of their child's information.
- Withdraw consent previously given.

To exercise any of these rights, contact us at support@siiiba.com. We will respond within 10 business days.

Third-party services: Our website uses third-party services (listed in Section 3). These services are configured to not collect personal data from visitors who identify as under 13. We do not knowingly permit third parties to collect personal information from children under 13 on our site.

Data retention for children: We retain personal information collected in connection with a child's transaction only as long as necessary to fulfill that transaction and comply with tax and legal record-keeping requirements. We do not retain children's personal information for marketing purposes.
9. DATA SECURITY
We use industry-standard security measures to protect your personal information, including SSL/TLS encryption for all data transmitted between your browser and our site, and secure hosting through Shopify's PCI DSS-compliant infrastructure. Payment card data is processed and stored by our payment processor and never touches our servers.

No method of transmission over the internet is 100% secure. We cannot guarantee the absolute security of your information, but we take reasonable steps to protect it and will notify you as required by law if a breach affects your data.
10. THIRD-PARTY LINKS
Our site may link to third-party websites. We do not control those sites and are not responsible for their privacy practices. This policy does not apply to information you provide to any third-party site.
11. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. When we do, we will update the 'Last updated' date at the top of this page. If we make material changes, we will notify you by email or by posting a notice on our website. Your continued use of our site after changes become effective constitutes your acceptance of the updated policy.
12. CONTACT US
For privacy questions, data requests, or COPPA-related parental inquiries:

Siiiba
Email: support@siiiba.com
Mailing address: 1234 San Luis Rey Drive, Glendale, California 91208

For California residents, you may also contact the California Privacy Protection Agency at cppa.ca.gov.