Last Updated: September 2026

At clothelyloft (“we,” “us,” or “our”), we are deeply committed to protecting the privacy and security of our users (“user” or “you”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our women’s clothing e‑commerce website http://clothelyloft.com (including all subdomains, mobile sites, and mobile applications – collectively, the “Site”).

Please read this policy carefully. By accessing or using the Site, you consent to the practices described herein. If you do not agree with any part of this policy, please do not use our services.

We reserve the right to update this Privacy Policy at any time. Changes will be posted on this page with an updated “Last Updated” date. Your continued use of the Site after any modifications constitutes your acceptance of the revised policy.

1. Information We Collect

We collect various types of information to provide, improve, and personalise our services, process orders, and communicate with you effectively.

a. Personal Identifiable Information (PII)

You voluntarily provide this information when you:

  • Create an account or log in
  • Place an order
  • Subscribe to our newsletter or promotional communications
  • Participate in surveys, contests, or giveaways
  • Contact our customer support team

This includes:

  • Full name
  • Billing and shipping address(es)
  • Email address
  • Telephone number
  • Account login credentials (username and password – stored in hashed, encrypted form)
  • Demographic information (age, gender, hometown, style and size preferences) – only if you choose to provide these via your profile or preference forms.

b. Financial Data

When you make a purchase, return, or request a refund, we collect the payment information necessary to complete the transaction:

  • Credit/debit card number (encrypted)
  • Card brand and expiration date
  • Billing ZIP/postal code

Important: We do not store full card numbers or CVV codes on our servers. All payment data is transmitted directly to our PCI‑compliant payment processor(s) using tokenisation and strong encryption.

c. Derivative / Automatically Collected Data

As you browse the Site, our servers automatically log certain technical data:

  • IP address
  • Browser type and version
  • Operating system
  • Device type (desktop, tablet, mobile) – including device name, OS, and country for mobile users
  • Referring/exit pages and URLs
  • Date and time of access
  • Pages viewed, products clicked, search queries, and time spent on each page
  • General geographic location (city/country derived from IP)

d. Analytics Data

We use analytics tools (e.g., Google Analytics) to understand how users interact with the Site. This includes:

  • Which pages you view and for how long
  • How you arrived at our Site (e.g., via search engine, social media, or direct link)
  • Whether you are a new or returning visitor

This information is aggregated and anonymised where possible. It helps us allocate resources to service development and improve your shopping experience.

e. Cookies and Similar Tracking Technologies

We use cookies, web beacons, and pixels to enhance functionality, remember preferences, and serve relevant advertisements. These include:

  • Essential Cookies – necessary for core Site functions (e.g., shopping cart, checkout, login). These cannot be disabled without affecting functionality.
  • Performance/Analytics Cookies – help us measure and improve Site performance (e.g., Google Analytics).
  • Advertising/Remarketing Cookies – display personalised ads for women’s fashion products on third‑party platforms (e.g., Google Ads, Facebook). These cookies do not allow us or advertisers to identify you personally.
  • Affiliate Cookies – track referrals from our partner networks (affiliates) to pay commissions on sales. These cookies are anonymised and do not store personal data.

You may manage or disable non‑essential cookies through your browser settings, but doing so may limit certain features (e.g., saved items, product recommendations).

2. How We Collect Information

We collect data through the following channels:

  • Directly from you – when you fill out forms, create an account, place an order, subscribe to communications, or contact our support team.
  • Automatically – via cookies, server logs, and analytics tools during your Site visits.
  • From third parties – occasionally from payment processors (for fraud verification) or shipping carriers (for delivery status updates), but only to the extent necessary to fulfil your order.

3. How We Use Your Information

We use your personal data for the following legitimate purposes:

  • Order Processing & Fulfilment – to process payments, pack and ship your merchandise, provide tracking information, and handle returns or exchanges.
  • Customer Service – to respond to inquiries, resolve issues, and send order‑related notifications (e.g., order confirmation, shipping alerts).
  • Personalisation – to recommend products, tailor content, and improve your shopping experience based on your browsing history, size preferences, and style choices.
  • Marketing & Promotions – to send you email newsletters, special offers, and style updates (you can opt out at any time via the unsubscribe link in each email).
  • Analytics & Site Improvement – to monitor performance, analyse trends, and enhance our product selection, checkout flow, and user interface.
  • Fraud Prevention & Security – to detect and prevent fraudulent transactions, unauthorised access, and other illegal activities.
  • Legal Compliance – to comply with applicable laws, regulations, court orders, or governmental requests.

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

4. Sharing with Third Parties

We share your information only when necessary and with appropriate safeguards:

  • Logistics & Shipping Carriers (e.g., USPS, FedEx, DHL, or regional postal services) – to deliver your order. They receive your name, shipping address, phone number, and email (for tracking notifications).
  • Payment Processors (e.g., Stripe, PayPal, or other PCI‑compliant gateways) – to handle payment transactions. They receive your payment data and billing address; we do not store full card details.
  • IT & Analytics Providers (e.g., Google Analytics, Shopify, or hosting platforms) – to help us operate the Site and analyse traffic. These providers are contractually bound to use data only for our specified purposes.
  • Affiliate & Marketing Partners – to manage referral programmes and deliver targeted advertisements. These partners use cookies or pixels; they do not receive your name, email, or address directly from us.
  • Legal Authorities – if required by law, or to protect our rights, property, or safety, or that of our users or the public.

All third parties are obligated to maintain the confidentiality and security of your data and may not use it for any independent purpose.

5. Payment Security

We take financial data protection extremely seriously. Our security measures include:

  • SSL/TLS Encryption – all payment pages are encrypted using Secure Sockets Layer (SSL) technology (TLS 1.2 or higher).
  • PCI‑DSS Compliance – our payment gateway is certified as PCI‑DSS Level 1, the highest security standard in the payment industry.
  • Tokenisation – your card number is replaced with a unique token that is useless outside our payment system.
  • No Storage of CVV – we never store your card verification value (CVV) or magnetic stripe data.
  • Additional Verification – we may use 3D Secure (e.g., Verified by Visa, Mastercard SecureCode) for added transaction security.

6. Data Retention

We retain your personal information only as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required or permitted by law. For example:

  • Order records are kept for at least 7 years for tax and accounting compliance.
  • Account information is retained until you delete your account or request its removal.
  • Marketing preferences are stored until you opt out.
  • Anonymous analytics data may be retained indefinitely for trend analysis.

When data is no longer needed, we securely delete or anonymise it.

7. International Data Transfers

As we operate globally, we may transfer your data to servers located in the United States or other countries where our service providers operate. When we transfer data from the EU/EEA to the U.S., we rely on appropriate safeguards, such as Standard Contractual Clauses (SCCs) approved by the European Commission, to ensure an adequate level of protection.

8. Cookies – Management and Expiration

You can control cookies via your browser settings:

  • Block all cookies, delete existing cookies, or set preferences per site.
  • Essential cookies cannot be disabled without affecting Site functionality (e.g., login, cart).
  • Non‑essential cookies expire after specified periods (typically 30 days to 2 years, depending on the cookie type).

For more detailed cookie information, please visit the ICO website or Google’s Cookie Policy.

9. Children’s Privacy

Our Site is not intended for children under the age of 16. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such data, please contact us, and we will promptly delete it.

10. Policy Updates

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or operational needs. The revised version will be posted on this page with an updated “Last Updated” date. We encourage you to review this policy regularly. Your continued use of the Site after any changes constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out to us:

clothelyloft
Address: 250 Collins Rd NE, Suite 500, Cedar Rapids, IA 52402, USA

Email: [email protected]
Phone: +1 864 597 6879
Working Hours: Monday – Friday, 09:00 – 18:00 (local time)

Legal Compliance Note: This Privacy Policy is designed to comply with applicable U.S. federal and state privacy laws (including the CCPA/CPRA) and, where applicable, the EU General Data Protection Regulation (GDPR) and other international frameworks. We are dedicated to transparency and the protection of your privacy rights.