Effective Date: May 1, 2026 · Last Updated: May 1, 2026
FETCHING USA LLC, a Delaware limited liability company ("Fetching USA," "we," "us," or "our"), together with its affiliate Fetching Co., Ltd. (Republic of Korea, "Fetching Korea" or "Affiliate"), respects your privacy and is committed to protecting your personal information. This Privacy Policy applies to all U.S.-based users of the Fetching website, mobile application, and related services (collectively, the "Platform").
This policy is designed to comply with the California Consumer Privacy Act (CCPA) and its amendment, the California Privacy Rights Act (CPRA), as well as applicable privacy laws in Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), Oregon (OCPA), Delaware (DPDPA), Montana (MCDPA), Tennessee (TIPA), Indiana (ICDPA), Kentucky (KCDPA), Nebraska (NDPA), New Hampshire (NHPA), New Jersey (NJDPA), and other U.S. states with comprehensive privacy laws.
Category
Examples
CCPA Category
Identifiers
Name, email, username, phone number
Identifiers
Account Info
Date of birth, gender, login credentials
Identifiers
Transaction Data
Shipping/billing address, purchase history
Commercial Information
Payment Info
Card data (processed via PCI-DSS compliant third parties — we do not store full card numbers)
Financial Information
Communications
Support messages, reviews, survey responses
Customer Records
Purpose
CCPA Business Purpose
Process orders, payments, shipping
Providing services
Account creation and authentication
Providing services
Customer support and dispute resolution
Providing services
Fraud detection and security
Security & integrity
Marketing and personalized recommendations (opt-in)
Advertising / Analytics
Analytics and service improvement
Analytics
Legal compliance
Legal compliance
Promotional communications (opt-out available)
Advertising
We may use automated systems to personalize product recommendations and detect fraud. We do not use ADMT to make consequential decisions (e.g., denial of service, discriminatory pricing) without meaningful human review. Consistent with CCPA regulations effective January 1, 2026, you may request information about our use of ADMT and, where applicable, opt out by contacting help@fetchingshop.com.
We do not sell your personal information in the traditional sense. However, certain data-sharing with advertising partners may constitute a "sale" or "sharing" under CCPA/CPRA. You have the right to opt out — see Section 7.
Vendor Type
Purpose
Shipping & Logistics
Order fulfillment and delivery
Payment Processors (e.g., Stripe)
Secure payment processing
Cloud Infrastructure
Data hosting and storage
Email Service Providers
Transactional and marketing emails
Analytics Providers
Usage analysis
Customer Support Tools
Help desk and ticketing
We may share certain identifiers (e.g., cookie IDs, hashed emails) with advertising platforms for targeted advertising. This may constitute "sharing" under CPRA. You may opt out via our Privacy Preference Center or by emailing help@fetchingshop.com.
We may disclose personal information when required by law, court order, or government authority.
In the event of a merger, acquisition, or asset sale, personal information may be transferred. We will notify users via email or prominent website notice.
Personal information may be transferred to and processed in the Republic of Korea by our affiliate Fetching Co., Ltd. for order fulfillment, customer support, and analytics purposes. We implement contractual safeguards — including data processing addenda with terms equivalent to the EU Standard Contractual Clauses — to protect information transferred outside the United States. You may contact help@fetchingshop.com to request additional information about our cross-border transfer safeguards.
Data Type
Retention Period
Legal Basis
Account information
Duration of account + 3 years after deletion
Business / legal purpose
Transaction records
7 years
U.S. tax law (26 U.S.C. § 6001) and state sales-tax recordkeeping
Customer communications
3 years
Dispute resolution
Payment records
7 years
Financial recordkeeping
Server / access logs
90 days
Security monitoring
Marketing preferences
Until opt-out + 1 year
Consent records
We implement reasonable and appropriate technical and organizational measures, including:
We conduct annual cybersecurity risk assessments and maintain an incident response plan consistent with CPRA regulations effective January 1, 2026. In the event of a security breach affecting your personal information, we will notify you without unreasonable delay, and in no event later than 45 days after discovery, as required by Cal. Civ. Code § 1798.82 and applicable state breach-notification laws.
Right
Description
Right to Know
Request disclosure of categories and specific pieces of PI collected (including PI collected on or after January 1, 2022, to the extent technically feasible)
Right to Delete
Request deletion of your PI (subject to exceptions)
Right to Correct
Request correction of inaccurate PI
Right to Opt Out of Sale/Sharing
Opt out of sale or sharing for behavioral advertising
Right to Limit Sensitive PI Use
Restrict use of sensitive PI to necessary purposes
Right to Non-Discrimination
No discrimination for exercising privacy rights
Right to Data Portability
Receive a copy of your PI in a portable format
Sensitive Personal Information we may collect: precise geolocation, account credentials, financial account information. Used only for service provision, security, and legal compliance.
Opt out at any time via:
Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Delaware, Montana, Tennessee, Indiana, Kentucky, Nebraska, New Hampshire, New Jersey, and other states with comprehensive privacy laws may have rights similar to those described above. To exercise these rights, contact help@fetchingshop.com.
Appeal Process. If we deny your privacy request in whole or in part, you have the right to appeal. To appeal, email help@fetchingshop.com with "Privacy Request Appeal" in the subject line within 60 days of our decision. We will respond to your appeal within the timeframe required by applicable state law (typically within 60 days). If we deny your appeal, we will inform you of your right to contact your state attorney general or applicable regulator.
By submitting reviews, photos, or other content to Fetching, you grant Fetching the license described in Terms of Service §10.3, which is incorporated by reference.
Regarding Right of Publicity (Cal. Civ. Code § 3344):
Our services are not directed to children under 13 (or under 16 for targeted advertising under CPRA). We do not knowingly collect personal information from children without verifiable parental consent. Contact help@fetchingshop.com if you believe we have inadvertently collected such information.
When we make material changes, we will:
Material changes to our use of sensitive personal information or automated decision-making technology (ADMT) will be notified at least 30 days in advance by email and in-app notification.
California Privacy Protection Agency (cppa.ca.gov) · California Attorney General (oag.ca.gov/privacy)
Term
Definition
CCPA
California Consumer Privacy Act (eff. Jan 1, 2020)
CPRA
California Privacy Rights Act (eff. Jan 1, 2023)
Personal Information (PI)
Information that identifies or could reasonably be linked to a consumer
Sensitive Personal Information (SPI)
Subset of PI with heightened protections under CPRA
Sale
Disclosure of PI for monetary or other valuable consideration
Sharing
Disclosure of PI for cross-context behavioral advertising
Service Provider
Third party processing PI on our behalf under written contract
GPC
Global Privacy Control — browser opt-out signal
ADMT
Automated Decision-Making Technology
UOOM
Universal Opt-Out Mechanism (Colorado)
Appeal
Formal request to reconsider a denied privacy request
Affiliate
An entity under common control with FETCHING USA LLC (e.g., Fetching Co., Ltd.)