Privacy Policy

Last updated: July 21, 2025

Applicability

This policy describes how we handle personal information collected from our website (AvaOrtiz.shop). This policy applies to the website or application that contains the information. It does not apply to other situations. This includes not applying to our employees or contractors.

Pickup Notice

Information We Collect

The type of information depends on your relationship with us and how you interact with us.

Under California, Colorado, and other state laws, we must tell you if we share certain categories of information for targeted advertising (such as cross-contextual behavioral advertising). For each category below, we have stated whether we need to do so. (To modify your preferences, please read the "Notice of Your Right to Opt Out of Cross-Contextual Behavioral Advertising" below.)

Contact Information. We collect your name and email address. We may also collect your phone number or address. We may share this information for cross-contextual behavioral advertising.

Account Information. If you create an account with us, we collect your username and password.

Purchase and Interest Information. We may collect information about your purchases. We also collect information about your interests. For example, if you prefer certain types of beauty products. We may share this information for cross-context behavioral advertising.

Job Applicant Information. We collect employment information from job applicants, including education and work experience. We may also ask about your skills and qualifications, and your ability to perform for the position.

Payment Information. We collect payment information through third parties when you make a purchase. This includes credit and debit card information.

Site and Device Information. We collect log and session data. This includes online activity and preferences, but also your browser or operating system, and may include IP address or device ID. We may also collect language preferences or general geolocation information. This information may be shared for cross-context behavioral advertising.

Other Information You Submit. We collect personal information that you provide to us. This may include comments or suggestions that you submit online.

How We Use Your Information

We use the information disclosed and described herein.

Communicate with you. We use your information to provide you with shipping information. We may also send you information about your relationship with us. This includes information about this policy. This also includes communication about job applications.

Provide or improve our products and services. We use your information to provide you with the products or services you request. This includes fulfilling orders. This includes providing the Ava Ortiz loyalty program if you have joined. We also use your information for troubleshooting or account maintenance. We use your information to customize your experience. This may include providing you with targeted offers or opportunities.

To comply with legal or regulatory obligations. We may use information to protect our company and customers. We also use information to protect our platform. We may also use information for security purposes and to help prevent fraud.

For marketing purposes. We use your information to update you about new products or offers. We may also tell you about new features or updates.

We use information as permitted by law. We also use information that may be notified to you.

Sensitive Information

We do not use or disclose sensitive personal information as defined by California law to infer characteristics or for purposes other than permitted by law. If we collect such information for any limited reason, we will retain these categories of personal information for as long as necessary or relevant for the purpose for which it was collected. We will also retain the information as required by law.

How Long We Retain Information

We retain these categories of information as necessary or relevant. We will also retain the information as required by law.

More Information About Our Privacy Practices

Please read the rest of this Policy for more information about our practices.

How We Collect Information

We collect information directly from you. For example, we collect information when you contact us. This includes in the "Live Chat" area of our website. This also includes when you inquire about a job opportunity. We also collect information directly from you when you subscribe to our newsletter or purchase our products.

We Collect Information Indirectly. We may receive information about you from third-party vendors or partners.

We Collect Information Passively. We collect information about users across different websites and applications and over time. Our vendors may also collect information in this way. We may use common tracking tools, including cookies and web beacons. We may use this information on our Platforms and in our emails.

We Combine Information

We combine information we collect offline with information we collect online. We also combine information we collect across devices. This may include information collected from computers and information collected from mobile devices. We also combine information we get from others with information we already have. We may combine information we collect over time.

How We Disclose Information to Others

The following are circumstances in which we may disclose your personal information. We also list the categories of entities to whom we may disclose your personal information:

We disclose your information to vendors and others who perform services for us. We may disclose all categories of information to vendors and partners. This includes website hosting services provided by service providers such as Shopify (see the Shopify section below for more information). Also, chat vendors, loyalty program partners, and marketers. Also, payment and shipping vendors.

We share information for cross-context behavioral advertising. This includes online advertising targeted to your interests. The Information Collection Statement (see above) outlines the categories of information we share for this purpose.

We disclose information to comply with the law. We will transfer all categories of information in response to a court order or subpoena. We also disclose information in response to a request from a government agency or investigatory body. This includes U.S. and non-U.S. entities.

We disclose information for security purposes. This includes disclosing information for our own protection. We also disclose information for your protection or for the protection of others.

We transfer information to a successor to all or part of our business. If all or part of our business is sold, we may transfer all categories of information as part of that transaction. We also make such transfers in the event of a merger or acquisition.

We may disclose personal information to our corporate affiliates, including our parent, sister and subsidiary companies.

We may disclose information for other reasons that we make clear to you. We also disclose information as permitted by law.

Additional Information for Residents of Certain States. California, Nevada and Virginia laws require that we tell you if we sell personal information to a third party for monetary or other valuable consideration (in California). We do not do this. We also do not do this with respect to information from minors under 16 years of age.

Services on the Ava Ortiz Website Powered by Shopify

When you browse or shop on the Ava Ortiz website (www.AvaOrtiz.shop), certain features are powered by Shopify, a third-party e-commerce platform. This section explains how Shopify collects and uses your personal information and how this relates to our use of cookies and your privacy rights.

How Shopify Uses Your Information

When you interact with our website, Shopify may act as a data processor (service provider) or a data controller, depending on the functionality.

1. Shopify as our service provider (processor)

In most cases (for example, when you make a purchase, use a shopping cart, or check out), Shopify acts as a service provider to Ava Ortiz. This means that Shopify processes your personal information (such as your name, email address, shipping address, and payment information) only on our instructions in order to:

Process and fulfill your order

Provide secure checkout and payment services

Hosting and operating the Ava Ortiz website

Supporting our account and customer support tools

In these cases, Ava Ortiz remains responsible for the data.

2. Shopify as an independent data controller to enhance the service

Starting July 25, 2025, Shopify may also use some of the data collected from you on AvaOrtiz.shop for its own purposes, such as improving product recommendations or preventing fraud. These “Enhanced Services” are powered by Shopify Network Intelligence, which uses information from the Shopify platform to do things like:

Personalize your shopping experience

Improve platform-wide search and recommendations

Detect fraudulent activity

Power advertising and performance features

In this case, Shopify acts as a data controller and decides how this data is used. You can learn more here: Shopify Privacy Policy - Shopify

3. Shopify as a controller of Shopify account information

If you choose to create or log in to a Shopify account (for use across different Shopify stores), Shopify independently controls and manages that account information - including your order history, login credentials, and account preferences.

How to opt-out of Shopify’s use of your data

If you do not want Shopify to use your personal data to provide enhanced services (such as personalized ads or platform-wide analytics), you can:

Refuse marketing or performance cookies through our cookie banner

Manage your data preferences directly by visiting Shopify’s Privacy Portal: Privacy Controls | Control how Shopify uses your data

Your rights and choices

Marketing choices

You can opt-out of receiving marketing emails from us. Please follow the instructions in the email. You will still receive transactional information from us.

Loyalty Program - The Bum Club

For our loyalty program, if you ask us to delete your information or opt out of using your information, we will comply with your request, but you may lose some or all of the benefits associated with the incentive program. For example, if you ask us to delete your personal information, you will lose all accumulated loyalty program points (called "bananas").

Cookies and Tracking Tools

We collect personal information over time across different websites. We also provide content based on your behavior and interests. This content may be provided on our Platform or on third-party platforms. We also have vendors who provide these services. To do this, we use common tracking tools. These tools may include browser cookies or web beacons. We may also use Flash cookies and similar technologies.

You can control cookies and tracking tools. Your browser may allow you to control cookies or other tracking tools. How you do this depends on the tool you use. Some browsers can be set to reject browser cookies. If you block cookies, some features on our website may not work. If you block cookies, not all tracking features described herein will stop.

Our "Do Not Track" Policy. Some browsers have "Do Not Track" features. These features allow you to instruct websites not to track you. These features are not uniform. We do not currently respond to these signals, except as described in the "Opt-out Sharing Rights Statement" below.

Cross-Contextual Behavioral Advertising. These ads include ads based on your digital activities. To opt out, please read our "Opt-out Sharing Rights Statement".

About Opting Out of Cross-Contextual Behavioral Advertising Rights Statement: You can opt out of sharing your personal information for this purpose by visiting here. On that page, set the cross-contextual behavioral advertising cookie to disable. You can also configure certain browsers to tell websites not to share your information through the "Global Privacy Control" signal. We will respond to this signal in a seamless manner. If you configure this setting in your browser, some features may not work. To learn how to configure this setting, please see here.

The choices you make depend on your specific browser and device.

Specific Rights in Certain Jurisdictions

If you are a consumer residing in the European Union, United Kingdom, California, Colorado, Connecticut, Virginia, Utah, or a jurisdiction with similar laws, you may have additional rights. These rights depend on the relationship between us. These rights are subject to certain limitations and are not absolute. This may include exceptions to applicable laws. If a legal exception applies, we will not be able to process your request.

Rights:

Access and portability. You have the right to know the categories of information we collect and use. For California residents, you have the right to know the source of the information collected and its business purpose. You also have the right to know if your information has been disclosed. You also have the right to get a copy of all of your personal information, including the specific pieces of personal information we collected.

Correction. You have the right to ask us to correct inaccurate personal information.

Erasure. You have the right to ask us to delete your personal information.

Restrict or object to processing. UK and EU residents have the right to restrict the way we use personal information. This can be an alternative to asking us to delete your personal information. You also have the right to object to the way we process your information.

Nevada residents. You can opt out of having your information sold to third parties for them to license or sell that information. To do so, please email us at the contact details listed at the end of this privacy statement.

How it works

To exercise your rights, please submit the form here. You can also contact hey@sunbum.com. For verification purposes, we may ask you to provide information you have already provided. This may include your first and last name and may include your email address or physical address. We may also ask you for a copy of your government-issued ID. If a right does not apply to you, we will let you know. If you disagree with our decision, you can contact us as described at the end of this statement. We will not discriminate against you for exercising your rights.

Third Party Agents

If you are submitting on behalf of someone else, we may ask you for additional verification. This may include a signed letter certifying that you have the authority to submit.California and Colorado require us to provide you with information about financial incentives. You can visit our Financial Incentives Notice for information.

Information Collected from Children

Our websites and applications are intended for adults. We do not knowingly collect personally identifiable information from children under 13 years of age. If you are a parent or legal guardian and believe that your child under 13 has provided us with information, please contact us. You can contact us at the email address or address provided at the end of this policy. Please indicate "COPPA Information Request" in your inquiry. Parents, you can click here to learn more about how to protect children's privacy online.

We Use Standard Security Measures

We take reasonable security measures as required by applicable law. The Internet is not 100% secure. We cannot guarantee that your use of our websites or applications will be absolutely secure. We encourage you to use caution when using the Internet, including not sharing your password.

We Store Information in the United States

The information we collect may be stored in the United States. If you live outside of the United States and choose to use our platform, you understand and agree that you do so at your own risk. You also understand that your information will be sent to the United States. The laws in the United States may not be as protective as the laws in your country.

Links to Third-Party Websites

We may link to third-party websites or applications. Our website may also include third-party content that collects information. We do not control these third parties. This Policy does not apply to the privacy policies of these third-party websites or applications. Please read the privacy policies of other websites carefully. We are not responsible for the privacy policies of these third-party websites or applications.

In addition, you agree to our Message Terms and Message Privacy Policy.

If you have any questions about this Policy or our privacy practices, please email us at Support@AvaOrtiz.shop.

You can also write to us or call us at:

Email: Support@AvaOrtiz.shop

Address: 1265 Broadway #1A, New York, NY 10001

Phone: +1 917-409-0378

We may modify our Privacy Policy from time to time. We will notify you of any significant changes to this Policy as required by law. We will also post the updated version on the website where the updated version is posted. Please visit our website regularly for updates.