Privacy Policy

Effective Date: May 1, 2026 · Last Updated: May 1, 2026

1. Introduction & Scope

FETCHING USA LLC, a Delaware limited liability company ("Fetching USA," "we," "us," or "our"), together with its affiliate Fetching Co., Ltd. (Republic of Korea, "Fetching Korea" or "Affiliate"), respects your privacy and is committed to protecting your personal information. This Privacy Policy applies to all U.S.-based users of the Fetching website, mobile application, and related services (collectively, the "Platform").

This policy is designed to comply with the California Consumer Privacy Act (CCPA) and its amendment, the California Privacy Rights Act (CPRA), as well as applicable privacy laws in Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), Oregon (OCPA), Delaware (DPDPA), Montana (MCDPA), Tennessee (TIPA), Indiana (ICDPA), Kentucky (KCDPA), Nebraska (NDPA), New Hampshire (NHPA), New Jersey (NJDPA), and other U.S. states with comprehensive privacy laws.

2. Information We Collect

2.1 Information You Provide Directly

Category

Examples

CCPA Category

Identifiers

Name, email, username, phone number

Identifiers

Account Info

Date of birth, gender, login credentials

Identifiers

Transaction Data

Shipping/billing address, purchase history

Commercial Information

Payment Info

Card data (processed via PCI-DSS compliant third parties — we do not store full card numbers)

Financial Information

Communications

Support messages, reviews, survey responses

Customer Records

2.2 Information Collected Automatically

  • Device & Technical Data: IP address, browser type, OS, device identifiers
  • Usage Data: Pages visited, clicks, session duration, referring URLs
  • Location Data: General location inferred from IP (not precise GPS)
  • Cookies & Tracking: Session cookies, persistent cookies, pixel tags, web beacons
  • Inferences: De-identified or aggregated inferences drawn from the above (e.g., size profiles, style affinities)

2.3 Information from Third Parties

  • Social Login (Google, Apple, etc.): Name, email, profile photo per your social account settings
  • Analytics Partners: Aggregated behavioral data
  • Payment Processors: Transaction confirmation and fraud signals
  • Note: If your social account name is in a non-English language, it may appear as registered unless you update it in your Fetching account settings.

3. How We Use Your Information

Purpose

CCPA Business Purpose

Process orders, payments, shipping

Providing services

Account creation and authentication

Providing services

Customer support and dispute resolution

Providing services

Fraud detection and security

Security & integrity

Marketing and personalized recommendations (opt-in)

Advertising / Analytics

Analytics and service improvement

Analytics

Legal compliance

Legal compliance

Promotional communications (opt-out available)

Advertising

Automated Decision-Making Technology (ADMT)

We may use automated systems to personalize product recommendations and detect fraud. We do not use ADMT to make consequential decisions (e.g., denial of service, discriminatory pricing) without meaningful human review. Consistent with CCPA regulations effective January 1, 2026, you may request information about our use of ADMT and, where applicable, opt out by contacting help@fetchingshop.com.

4. How We Share Your Information

We do not sell your personal information in the traditional sense. However, certain data-sharing with advertising partners may constitute a "sale" or "sharing" under CCPA/CPRA. You have the right to opt out — see Section 7.

4.1 Service Providers

Vendor Type

Purpose

Shipping & Logistics

Order fulfillment and delivery

Payment Processors (e.g., Stripe)

Secure payment processing

Cloud Infrastructure

Data hosting and storage

Email Service Providers

Transactional and marketing emails

Analytics Providers

Usage analysis

Customer Support Tools

Help desk and ticketing

4.2 Advertising & Analytics Partners

We may share certain identifiers (e.g., cookie IDs, hashed emails) with advertising platforms for targeted advertising. This may constitute "sharing" under CPRA. You may opt out via our Privacy Preference Center or by emailing help@fetchingshop.com.

4.3 Legal & Regulatory Disclosures

We may disclose personal information when required by law, court order, or government authority.

4.4 Business Transfers

In the event of a merger, acquisition, or asset sale, personal information may be transferred. We will notify users via email or prominent website notice.

4.5 International Data Transfers

Personal information may be transferred to and processed in the Republic of Korea by our affiliate Fetching Co., Ltd. for order fulfillment, customer support, and analytics purposes. We implement contractual safeguards — including data processing addenda with terms equivalent to the EU Standard Contractual Clauses — to protect information transferred outside the United States. You may contact help@fetchingshop.com to request additional information about our cross-border transfer safeguards.

5. Data Retention

Data Type

Retention Period

Legal Basis

Account information

Duration of account + 3 years after deletion

Business / legal purpose

Transaction records

7 years

U.S. tax law (26 U.S.C. § 6001) and state sales-tax recordkeeping

Customer communications

3 years

Dispute resolution

Payment records

7 years

Financial recordkeeping

Server / access logs

90 days

Security monitoring

Marketing preferences

Until opt-out + 1 year

Consent records

6. Data Security

We implement reasonable and appropriate technical and organizational measures, including:

  • TLS/SSL encryption for data in transit
  • Encryption at rest for sensitive data
  • Access controls and role-based permissions
  • Regular security assessments
  • Incident response procedures

We conduct annual cybersecurity risk assessments and maintain an incident response plan consistent with CPRA regulations effective January 1, 2026. In the event of a security breach affecting your personal information, we will notify you without unreasonable delay, and in no event later than 45 days after discovery, as required by Cal. Civ. Code § 1798.82 and applicable state breach-notification laws.

7. Your Privacy Rights

7.1 California Residents — CCPA/CPRA Rights

Right

Description

Right to Know

Request disclosure of categories and specific pieces of PI collected (including PI collected on or after January 1, 2022, to the extent technically feasible)

Right to Delete

Request deletion of your PI (subject to exceptions)

Right to Correct

Request correction of inaccurate PI

Right to Opt Out of Sale/Sharing

Opt out of sale or sharing for behavioral advertising

Right to Limit Sensitive PI Use

Restrict use of sensitive PI to necessary purposes

Right to Non-Discrimination

No discrimination for exercising privacy rights

Right to Data Portability

Receive a copy of your PI in a portable format

Sensitive Personal Information we may collect: precise geolocation, account credentials, financial account information. Used only for service provision, security, and legal compliance.

7.2 How to Submit a Request

  • Email: help@fetchingshop.com
  • Web Form: [Privacy Request Portal — TBD]
  • Right to Know / Access / Delete / Correct: 45 calendar days (extendable by an additional 45 days with written notice)
  • Right to Opt-Out of Sale or Sharing / Right to Limit Sensitive PI Use: 15 business days (no identity verification required)
  • Verification: Identity verified using information already on file. For opt-out and Sensitive PI requests, verification is not required.

7.3 Do Not Sell or Share My Personal Information

Opt out at any time via:

7.4 Other U.S. State Rights & Appeal Process

Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Delaware, Montana, Tennessee, Indiana, Kentucky, Nebraska, New Hampshire, New Jersey, and other states with comprehensive privacy laws may have rights similar to those described above. To exercise these rights, contact help@fetchingshop.com.

Appeal Process. If we deny your privacy request in whole or in part, you have the right to appeal. To appeal, email help@fetchingshop.com with "Privacy Request Appeal" in the subject line within 60 days of our decision. We will respond to your appeal within the timeframe required by applicable state law (typically within 60 days). If we deny your appeal, we will inform you of your right to contact your state attorney general or applicable regulator.

8. Cookies & Tracking Technologies

Type

Purpose

Duration

Strictly Necessary

Authentication, security, basic functionality

Session

Functional

User preferences, language settings

1 year

Analytics

Usage measurement (e.g., Google Analytics)

Up to 2 years

Advertising

Targeted ads, cross-site behavioral tracking

Up to 2 years

Your Choices

  • Cookie Preference Center: [Cookie Settings] in website footer (URL TBD pending CMP selection)
  • Browser Settings: Block or delete cookies (may affect functionality)
  • Opt-Out Tools: Google Analytics Opt-Out, NAI Opt-Out, DAA Opt-Out
  • Global Privacy Control (GPC): Honored as a valid opt-out from sale/sharing
  • Colorado UOOM: Honored for Colorado residents

Our Cookie Preference Center offers equally prominent "Allow All" and "Decline All" options, consistent with CCPA regulatory guidance.

9. Right of Publicity — User-Generated Content

By submitting reviews, photos, or other content to Fetching, you grant Fetching the license described in Terms of Service §10.3, which is incorporated by reference.

Regarding Right of Publicity (Cal. Civ. Code § 3344):

  • We will not use your name, likeness, voice, or personal identity for commercial advertising or endorsement without your explicit prior written consent
  • User reviews may display a partially anonymized username (e.g., "jon") to protect identity
  • Korean-language names of U.S.-based users will appear as registered, or anonymized per the above standard
  • You may request removal of your likeness or name at any time: help@fetchingshop.com

10. Children's Privacy

Our services are not directed to children under 13 (or under 16 for targeted advertising under CPRA). We do not knowingly collect personal information from children without verifiable parental consent. Contact help@fetchingshop.com if you believe we have inadvertently collected such information.

11. Changes to This Policy

When we make material changes, we will:

  • Update the "Effective Date" at the top
  • Notify registered users by email or in-app notification
  • Post a prominent notice on our website for at least 30 days

Material changes to our use of sensitive personal information or automated decision-making technology (ADMT) will be notified at least 30 days in advance by email and in-app notification.

12. Contact

Privacy Inquiries

  • Email: help@fetchingshop.com
  • Mailing Address: FETCHING USA LLC, 16192 Coastal Highway, Lewes, Delaware 19958, Sussex County, United States
  • Privacy Contact / DPO: help@fetchingshop.com

General Support

  • Customer Support: help@fetchingshop.com
  • Legal: help@fetchingshop.com
  • DMCA: help@fetchingshop.com

Korean Affiliate Reference

  • Email: help@fetching.co.kr
  • Entity: Fetching Co., Ltd., 3F, Rm 308A, 37 Seongsui-ro 22-gil, Seongdong-gu, Seoul 04798, Republic of Korea

For California Residents

California Privacy Protection Agency (cppa.ca.gov) · California Attorney General (oag.ca.gov/privacy)

13. Glossary

Term

Definition

CCPA

California Consumer Privacy Act (eff. Jan 1, 2020)

CPRA

California Privacy Rights Act (eff. Jan 1, 2023)

Personal Information (PI)

Information that identifies or could reasonably be linked to a consumer

Sensitive Personal Information (SPI)

Subset of PI with heightened protections under CPRA

Sale

Disclosure of PI for monetary or other valuable consideration

Sharing

Disclosure of PI for cross-context behavioral advertising

Service Provider

Third party processing PI on our behalf under written contract

GPC

Global Privacy Control — browser opt-out signal

ADMT

Automated Decision-Making Technology

UOOM

Universal Opt-Out Mechanism (Colorado)

Appeal

Formal request to reconsider a denied privacy request

Affiliate

An entity under common control with FETCHING USA LLC (e.g., Fetching Co., Ltd.)