Privacy policy

Last updated: August 19, 2025

Who we are: CommuniKitty, Inc dba OnlyCats Boutique (“OnlyCats,” “we,” “us,” “our”).

Website: onlycats.boutique · Contact: privacy@onlycats.boutique

1. Information we collect
2. How we use information
3. Cookies & tracking
4. Advertising, analytics & social tools
5. How we share information
6. Retention
7. Security
8. Children
9. Email & SMS marketing
10. Your privacy rights (GDPR/CPRA & others)
11. How to exercise rights
12. International transfers
13. User-generated content
14. Third-party links
15. Changes to this policy
16. Contact us
17. California “Notice at Collection”

1) Information we collect

A. Information you provide

• Account & contact details (name, email, phone, shipping/billing address; passwords if you create an account).
• Order details (products, sizes, customization, gift messages) and support messages.
• Payment information (processed by our payment providers; we don’t store full card numbers).
• Reviews, photos, videos, and social tags/mentions.
• Marketing preferences (email/SMS opt-ins, cookie choices).

B. Information collected automatically

• Device & usage data: IP address, device/browser type, pages viewed, time on site, clicks.
• Cookies/pixels for site functionality, analytics, personalization, and advertising.
• Approximate location derived from IP (city/region level).
• Marketplace event data (impressions, clicks, cart/purchase) when you interact with our listings on platforms.

C. Information from others

• Shopify (store host), payment processors (e.g., Shop Pay/Apple Pay/PayPal), fraud-prevention tools.
• Shipping carriers and address-verification services.
• Ad/analytics partners (Google Analytics/Ads, Meta Pixel, TikTok Pixel) provide aggregated insights and attribution.
• Social platforms if you interact with our pages or use single sign-on.

2) How we use information

• Fulfillment: process payments, produce/ship orders, handle returns and support.
• Operate & improve: debugging, analytics, A/B testing, developing new features.
• Personalize: remember preferences and show relevant products/content.
• Communicate: order updates and support; with consent, marketing by email/SMS/push.
• Protect: prevent fraud and secure our services; comply with legal, tax, and accounting duties.
• Advertise & measure: show offers on our site and elsewhere and measure performance.

EEA/UK legal bases: contract performance, legitimate interests (running a safe, useful shop and relevant marketing), consent (where required), and legal obligation.

3) Cookies & tracking

We use four types of cookies/pixels:

1. Essential — cart/session, checkout, security (cannot be switched off).
2. Performance/Analytics — site analytics and diagnostics.
3. Functionality — remember preferences, recently viewed.
4. Advertising/Retargeting — personalized ads and measurement.

Your choices: manage cookies in our banner/preferences tool (if enabled) and in your browser. You can opt out of interest-based ads via the DAA and NAI. Some services may not respond to “Do Not Track.”

4) Advertising, analytics & social tools

We may share limited, pseudonymous event data (e.g., page view, add-to-cart, purchase value) with platforms so ads and measurement work. Platforms may combine this with their data and your settings. Control ads in your platform settings and via the links above. We do not upload or target sensitive categories.

5) How we share information

We do not sell personal information for money. We share data with:

• Service providers / processors: Shopify, payment processors, fraud tools, printers/warehouses, shipping carriers, email/SMS providers, analytics and ad partners, review widgets, cloud hosting. They may use data only to perform services for us.
• Marketplaces: If you purchase via TikTok Shop, Meta Shops, Google/YouTube Shopping, etc., those platforms receive necessary order and event data per their terms.
• Business transfers & legal: if required by law, to protect rights/safety, or as part of a merger/acquisition.

6) Retention

• Orders/receipts: 7 years (tax/accounting).
• Support messages: 2 years.
• Marketing consent & analytics: up to 24 months (or tool default) unless you opt out/erase.
• Accounts: until you close them or after 24 months of inactivity.

7) Security

We use industry-standard safeguards (HTTPS/TLS, access controls, Shopify’s PCI-compliant checkout). No method is 100% secure, but we work to protect your data.

8) Children

Our store is for 13+. We don’t knowingly collect personal information from children under 13 (or under 16 in some regions). If you believe a child provided data, contact us to delete it.

9) Email & SMS marketing

Email

• Unsubscribe any time via the link in our emails. Transactional/operational emails (e.g., order and shipping updates) may still be sent where permitted.

SMS/MMS Marketing & Notifications

By entering your phone number at checkout, in a form, or by texting a keyword, you consent to receive marketing text messages and transactional messages (e.g., order updates) from OnlyCats Boutique at the mobile number you provided. Consent is not a condition of purchase. Message frequency varies. Message and data rates may apply. Reply STOP to cancel and HELP for help. Carriers are not liable for delayed or undelivered messages. If you change or deactivate your mobile number, you must update your account information to prevent us from sending messages to someone else who may acquire your old number.

What we collect & how we use it

• Identifiers: mobile phone number, IP address, device info.
• Commercial info: products viewed/added to cart, order status.
• Internet activity: cookie/session data used to tailor and trigger messages (e.g., browse or cart reminders).
• Approximate location (optional): derived from IP or zip code to show shipping estimates or local offers.

We use this information to send you marketing messages, abandoned cart reminders, shipping updates, and customer support notifications; to measure performance; and to improve our services.

Abandoned cart & browse messages

If you begin checkout or browse and provide your phone number, we may send cart or browse reminder texts (frequency varies). These are triggered by cookies and similar technologies that associate your device/session with your cart.

Sharing with service providers

We share limited personal data (e.g., your phone number, message content, and engagement metrics) with vendors who power our messaging program and site operations—such as our ecommerce platform, messaging provider (e.g., Klaviyo), analytics, and fulfillment partners. These providers process data on our behalf pursuant to contracts and applicable law.

Opting out

You can opt out of marketing texts at any time by replying STOP. You will receive one final message confirming your opt-out. You may also contact us at shipping@onlycats.boutique to request removal. Note: You may still receive non-marketing texts (e.g., order/shipping updates) where permitted.

10) Your privacy rights

Everyone can request access, correction, deletion, portability (where applicable), and object to/limit certain processing. You can withdraw consent and manage cookies at any time.

California (CPRA)

• Rights to Know/Access, Correct, Delete, and to Opt-out of “Sale” or “Sharing” for cross-context behavioral advertising, plus nondiscrimination.
• We may “share” identifiers and internet/activity data with ad partners for targeted ads. Opt out via our Do Not Sell or Share My Personal Information link or email us.

Other U.S. States (CO/CT/VA/UT, etc.)

Similar rights to access, delete, correct, and opt-out of targeted advertising or profiling. Use the request methods below.

EEA/UK (GDPR)

Rights to access, rectify, erase, restrict/object, portability, and to lodge a complaint with your local supervisory authority. Where we rely on consent, you can withdraw it at any time.

11) How to exercise rights

Email privacy@onlycats.boutique (or use our request form if available) with your name, contact email, request type, and region. We’ll verify identity (e.g., confirm control of your email or ask for order details) and respond within 30–45 days. You may use an authorized agent where allowed (we may require proof plus your verification).

12) International transfers

We and many providers are located in the United States. If you’re outside the U.S., your data may be transferred to and processed in the U.S. and other countries. Where required, we rely on Standard Contractual Clauses or similar safeguards.

13) User-generated content

If you submit reviews, photos, or tag us on social media, you grant us permission to display and reuse that content as described in our Terms of Service. Don’t post content you don’t own or that includes others without permission.

14) Third-party links

We link to other sites or apps. Their privacy practices are their own—please review their policies.

15) Changes to this policy

When we make material changes, we’ll update the “Last updated” date and, where appropriate, notify you (e.g., by email or banner). Continued use of our services means you accept the updated policy.

16) Contact us

Email: privacy@onlycats.boutique · General: hello@onlycats.boutique
Mail: OnlyCats Boutique, 1180 Fernwood Pacific Drive, Topanga, CA 90290

17) California “Notice at Collection”

We do not intentionally collect or use sensitive personal information (e.g., health data, precise location, government IDs).

---

This policy is meant to be clear and comprehensive, but it isn’t legal advice. If you operate in regulated markets or process special categories of data, consult counsel to tailor this to your business.