Privacy Policy

Last updated: May 16, 2026

This Privacy Policy (hereinafter "Policy") is issued by NOEMÍ, a sole proprietorship organized and operating under the laws of the State of California (hereinafter referred to as "NOEMÍ," "we," "us," or "our"), with its principal place of business in California. This Policy governs the collection, use, storage, disclosure, and protection of personal information obtained through the NOEMÍ website located at noemicollective.com (hereinafter the "Site"), including all pages, subdomains, content, and e-commerce functionality therein.

This Policy applies to all visitors, users, customers, and subscribers who access or interact with the Site in any capacity (collectively referred to herein as "you," "your," or the "User"). By accessing or using the Site, placing an order, creating an account, or subscribing to any NOEMÍ communications, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree to the terms of this Policy, you must discontinue use of the Site immediately.

This Policy is incorporated by reference into NOEMÍ's Terms of Service and Return Policy, each of which constitutes a separate binding agreement. In the event of any conflict between this Policy and any other agreement, this Policy shall govern with respect to matters of personal data collection, use, and disclosure.

1. Information We Collect

NOEMÍ collects personal information through multiple channels, including directly from you when you interact with the Site, automatically through your use of the Site, and in limited circumstances from third-party sources. The categories of personal information we collect are described in detail below.

1.1 Information You Provide Directly

We collect personal information that you voluntarily provide to us in the course of using the Site or communicating with us. This includes, but is not limited to, the following:

  • Identification and contact information, including your full legal name, email address, mailing address, and shipping address, provided at the time of account creation, order placement, or contact form submission

  • Order and transaction information, including the items purchased, quantities, order totals, and any special instructions provided at the time of purchase

  • Payment information submitted at checkout, including credit and debit card details, digital wallet credentials, and billing information. All payment data is processed and handled exclusively by our third-party payment processors — Stripe, Apple Pay, Google Pay, Link by Stripe, Klarna, and Afterpay — and is not stored in its complete form by NOEMÍ

  • Account credentials, including your chosen username and encrypted password, created when you register for a customer account on the Site

  • Communications and correspondence directed to NOEMÍ through the Contact page on the Site, by email, or through social media platforms including Instagram, TikTok, and Pinterest

  • Email marketing subscription preferences collected at the time of subscription to the NOEMÍ newsletter, through which subscribers receive all brand communications including editorial content, product highlights, batch drop announcements, and new arrival notifications

  • Personalization and customization details, such as specifications for gold foil stamping or other custom order requests, submitted in connection with personalized product orders

1.2 Information Collected Automatically

When you access or interact with the Site, certain information is collected automatically by Squarespace, Inc., our website hosting and e-commerce platform, on our behalf. This information is used to operate and improve the Site and to populate analytics data available to us. Automatically collected information may include:

  • Internet Protocol (IP) address and general geographic location derived therefrom

  • Browser type, version, and operating system

  • Device type and screen resolution

  • Pages visited on the Site, time spent on each page, and sequence of pages viewed

  • Traffic source and referral URL, indicating how you arrived at the Site

  • Cart and checkout behavior, including products added to cart, cart abandonment events, and order conversion rates

  • Form and button interaction data, including click rates and submission events

This information is collected through Squarespace's built-in analytics infrastructure and through the use of cookies and similar tracking technologies as described in Section 6 of this Policy. NOEMÍ does not operate any independent analytics infrastructure beyond that provided by Squarespace.

1.3 Information from Third-Party Sources and Cross-Referenced Data

In limited circumstances, NOEMÍ may cross-reference personal information collected through the Site with information received through other channels. Specifically:

  • Customer communications received via direct email may be cross-referenced with order records maintained in Squarespace for the purpose of resolving order inquiries and providing customer service

  • NOEMÍ may identify and reach out to potential customers through publicly available posts on social media platforms including Instagram, TikTok, and Pinterest. Such outreach is conducted exclusively through the native messaging and comment features of the respective platform. NOEMÍ does not collect, record, or store personal information about individuals who do not respond to or engage with such outreach. Any subsequent engagement initiated by the individual is thereafter governed by this Policy

  • If order or business records are exported to Google Sheets or similar tools for internal record-keeping and tax compliance purposes, the relevant transaction data — including name, order details, and contact information — may be transferred to and stored within those tools

2. Purpose for Collection and Use of Personal Information

NOEMÍ collects and processes personal information solely for lawful business purposes. We do not collect personal information beyond what is reasonably necessary to fulfill those purposes. The purposes for which we collect and use your personal information include the following:

  • To process, fulfill, and ship orders placed through the Site, including communication of order confirmations, shipping notifications, and delivery updates

  • To administer customer accounts and provide account-related services, including order history access and checkout personalization

  • To respond to customer inquiries, resolve disputes, and provide post-purchase support

  • To send marketing communications, including the NOEMÍ monthly newsletter, product drop alerts, batch release notifications, exclusive product highlights, and editorial content such as journal prompts, to subscribers who have affirmatively opted in to receive such communications

  • To maintain internal business records, including order histories and transaction records, for accounting, tax reporting, and legal compliance purposes

  • To analyze Site traffic, usage patterns, and commerce performance through Squarespace analytics in order to improve the Site's functionality, content, and user experience

  • To detect, investigate, and prevent fraudulent transactions, unauthorized access, and other potentially illegal or prohibited activities

  • To enforce our Terms of Service, Return Policy, and any other applicable agreements

  • To comply with applicable federal and California state laws, regulations, and legal obligations

3. Disclosure of Personal Information

3.1 Third-Party Service Providers

NOEMÍ does not sell, rent, or trade your personal information to third parties for their own commercial or marketing purposes. We disclose personal information to third-party service providers only to the extent necessary for those providers to perform services on our behalf in connection with the operation of our business. The categories of third-party service providers to whom we disclose personal information, and the nature of that disclosure, are as follows:

  • Squarespace, Inc. — our website hosting, e-commerce, and email marketing platform. Squarespace receives and processes all Site data on our behalf, including visitor analytics, order records, customer account data, and email subscriber information. Squarespace's data practices are governed by its own Privacy Policy, available at squarespace.com/privacy

  • Stripe — our primary payment processing provider. Stripe receives payment card information, billing details, and transaction data necessary to process purchases. Stripe's data practices are governed by its own Privacy Policy, available at stripe.com/privacy

  • Apple Pay and Google Pay — digital wallet payment processors that receive transaction and authentication data necessary to process payments initiated through their respective services

  • Link by Stripe — an accelerated checkout service operated by Stripe that stores customer payment credentials to facilitate faster future checkouts

  • Klarna — a buy-now-pay-later installment payment provider that receives customer identification, contact, and order information necessary to evaluate and administer installment payment plans. Klarna's data practices are governed by its own Privacy Policy

  • Afterpay — a buy-now-pay-later installment payment provider that receives customer identification, contact, and order information necessary to evaluate and administer installment payment plans. Afterpay's data practices are governed by its own Privacy Policy

  • Shipping carriers, including but not limited to USPS and UPS, who receive your name and shipping address for the sole purpose of delivering your order

  • Google LLC — in the event that order or business records are exported to Google Sheets for internal bookkeeping or tax compliance purposes, relevant transaction data may be stored within Google's infrastructure and is subject to Google's Privacy Policy

3.2 Legal Disclosures

NOEMÍ reserves the right to disclose personal information to governmental authorities, law enforcement agencies, or other third parties where we believe in good faith that such disclosure is necessary to: (a) comply with a legal obligation, court order, subpoena, or governmental request; (b) protect and defend the rights or property of NOEMÍ; (c) prevent or investigate possible wrongdoing in connection with the Site; or (d) protect the personal safety of Users or the public.

3.3 Business Transfers

In the event that NOEMÍ undergoes a merger, acquisition, reorganization, sale of assets, or similar business transaction, personal information held by NOEMÍ may be transferred to the acquiring or successor entity as part of that transaction. In such an event, we will provide notice on the Site prior to the transfer and prior to your personal information becoming subject to a materially different privacy policy.

4. Retention of Personal Information

NOEMÍ retains personal information for the period necessary to fulfill the purposes described in this Policy, subject to applicable legal requirements. Specifically:

  • Order records, transaction data, and associated customer information are retained for a minimum of seven (7) years from the date of the transaction, in accordance with federal and California state tax record-keeping requirements, including obligations under the Internal Revenue Code and the California Revenue and Taxation Code

  • Customer account information is retained for as long as the account remains active. Upon account deletion, personal information associated with the account will be removed from active systems subject to any applicable legal retention requirements

  • Email subscriber data, including mailing list preferences and communication history, is retained until the subscriber affirmatively unsubscribes or submits a verified deletion request

  • Customer service communications, including emails and social media correspondence, are retained for a commercially reasonable period sufficient to resolve the relevant inquiry and to maintain a record of customer interactions

  • Analytics and site usage data collected through Squarespace is retained in accordance with Squarespace's own data retention policies

Upon expiration of the applicable retention period, personal information will be deleted, anonymized, or otherwise rendered non-identifiable to the extent technically feasible and not otherwise required to be retained by law.

5. California Privacy Rights

5.1 Applicability

As a business operating under the laws of the State of California, NOEMÍ is subject to the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, the "CCPA/CPRA"). The following section describes the rights afforded to California residents with respect to their personal information, as defined under the CCPA/CPRA.

5.2 Rights of California Residents

California residents have the following rights with respect to their personal information collected by NOEMÍ:

  • Right to Know — You have the right to request that NOEMÍ disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which that information was collected, the business or commercial purposes for which it was collected, and the categories of third parties with whom it has been shared

  • Right to Delete — You have the right to request the deletion of personal information that NOEMÍ has collected about you, subject to certain exceptions provided under the CCPA/CPRA, including where retention is necessary for us to complete a transaction, detect security incidents, comply with a legal obligation, or exercise other rights provided by law

  • Right to Correct — You have the right to request that NOEMÍ correct inaccurate personal information maintained about you, taking into account the nature of the information and the purposes for which it is processed

  • Right to Opt Out of Sale or Sharing — NOEMÍ does not sell or share your personal information with third parties for cross-context behavioral advertising purposes. Accordingly, no opt-out mechanism for the sale or sharing of personal information is applicable to our current data practices

  • Right to Limit Use of Sensitive Personal Information — To the extent NOEMÍ collects sensitive personal information as defined under the CCPA/CPRA, you have the right to limit our use of such information to purposes permitted by applicable law. NOEMÍ does not use sensitive personal information for purposes beyond those necessary to provide the services requested by you

  • Right to Non-Discrimination — NOEMÍ will not discriminate against you for exercising any of your rights under the CCPA/CPRA. We will not deny you goods or services, charge you different prices, provide a different level of service, or suggest that you will receive a different level of service as a result of exercising your privacy rights

5.3 How to Submit a Request

To exercise any of the rights described in Section 5.2, please submit a verifiable consumer request through the Contact page on our website at noemicollective.com. Your request must include sufficient information to allow us to reasonably verify your identity as the person about whom we collected personal information, including your full name, email address, and order number where applicable.

NOEMÍ will respond to a verified consumer request within forty-five (45) calendar days of receipt. If we require additional time, we will notify you of the reason and the extension period, up to a maximum of ninety (90) days total. We may not respond to more than two requests per twelve-month period per consumer.

5.4 Shine the Light Law

California Civil Code Section 1798.83, known as the "Shine the Light" law, permits California residents to request and obtain from businesses once per calendar year information about the personal information, if any, that the business shared with third parties for those third parties' direct marketing purposes in the preceding calendar year. NOEMÍ does not share personal information with third parties for their own direct marketing purposes. Accordingly, this provision does not require any further disclosure by NOEMÍ at this time.

6. Cookies and Tracking Technologies

6.1 What Cookies Are

Cookies are small text files placed on your device — including computers, mobile phones, and tablets — by a website when you visit it. Cookies are widely used to enable websites to function efficiently, to remember user preferences, and to provide analytical information to website operators. In addition to cookies, similar tracking technologies may be employed, including web beacons, pixel tags, scripts, and local storage objects, each of which may serve comparable functions.

Cookies may be classified as either session cookies, which are temporary and expire when you close your browser, or persistent cookies, which remain on your device for a defined period or until manually deleted. Cookies may also be classified as first-party cookies, which are set directly by the Site, or third-party cookies, which are set by external service providers whose content or functionality is integrated into the Site.

6.2 Cookies Used on the NOEMÍ Site

The NOEMÍ website is built on and operated through Squarespace, Inc. Squarespace places two categories of cookies on your browser when you visit the Site: necessary cookies and non-essential analytics and performance cookies.

6.2.1 Necessary Cookies (Essential)

Necessary cookies are strictly required for the Site to function correctly. They enable core functionality such as page navigation, shopping cart operation, customer account authentication, and secure checkout processing. Without these cookies, essential features of the Site cannot operate. Necessary cookies do not require your consent under applicable law, as they are indispensable to the delivery of services you have requested. Necessary cookies placed by Squarespace on the NOEMÍ Site include, but are not limited to, the following:

  • Session management cookies — maintain the continuity of your browsing session, preserve the contents of your shopping cart across pages, and enable the checkout process to function correctly

  • Authentication cookies — verify your identity when you log in to a customer account and maintain your authenticated session for the duration of your visit

  • Security cookies — detect and help prevent fraudulent use of login credentials and protect against unauthorized access to customer accounts

  • Cookie support testing cookies — deployed briefly at the time of your visit to verify that your browser supports cookies; these expire instantly and do not persist

  • Browser error tracking cookies — collect technical diagnostic data regarding browser errors to support Site stability and performance; these are set by Squarespace's infrastructure and expire within a short session window

6.2.2 Non-Essential Cookies (Analytics and Performance)

Non-essential cookies are those that are not strictly required for the Site to function and are used to collect analytical and performance data on our behalf. These cookies are used to populate the data available to us through Squarespace's built-in analytics dashboard, including metrics such as unique visitor counts, traffic sources, page views, session durations, cart abandonment rates, and order conversion rates. Non-essential cookies placed by Squarespace on the NOEMÍ Site include analytics and performance cookies that track visitor interactions across the Site. These cookies require your consent where applicable under law.

You may opt out of non-essential analytics and performance cookies at any time by adjusting your preferences through the cookie consent banner displayed on the Site, or by configuring your browser settings to refuse or delete cookies. Please note that disabling non-essential cookies may affect the accuracy of analytics data but will not impair your ability to browse the Site, add products to your cart, or complete a purchase.

6.3 Third-Party Cookies

Certain third-party services integrated into the Site may place their own cookies on your device. These third-party cookies are governed by the respective privacy and cookie policies of the third parties that set them, and NOEMÍ does not exercise control over such cookies. Third-party cookies that may be present on the Site include cookies associated with the following services:

  • Payment processors — Stripe, Klarna, Afterpay, Apple Pay, Google Pay, and Link by Stripe may place cookies or use similar technologies in connection with the processing of payment transactions and the prevention of payment fraud

  • Squarespace Email Campaigns — cookies or tracking technologies may be used in connection with email marketing functionality to track email open rates, click-through events, and subscriber engagement

NOEMÍ does not currently employ Google Analytics, Meta Pixel, TikTok Pixel, Pinterest Tag, or any other third-party advertising or behavioral tracking technology on the Site. If any such technology is added in the future, this Policy will be updated prior to or at the time of implementation.

6.4 Cookie Consent and Management

In accordance with applicable law, NOEMÍ provides a cookie consent banner on the Site through which you may accept or decline non-essential cookies. You may also manage your cookie preferences at any time through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or receive a warning before a cookie is stored. Please refer to your browser's help documentation for instructions specific to your browser and device.

Please be aware that refusing or deleting cookies may affect certain features of the Site. In particular, disabling necessary cookies may prevent the shopping cart, customer account functionality, and secure checkout from operating correctly. Disabling non-essential cookies will not impair your ability to use the Site's core commerce features.

6.5 Do Not Track

Some browsers include a "Do Not Track" ("DNT") feature that signals to websites that you prefer not to be tracked online. As there is currently no uniform standard for recognizing or honoring DNT signals, NOEMÍ does not alter its data collection practices in response to DNT browser signals. This position may be revisited as industry standards evolve.

7. Email Communications

NOEMÍ operates two distinct categories of email communications, each subject to different opt-in and opt-out mechanisms.

7.1 Marketing Emails

By subscribing to NOEMÍ's mailing list, you consent to receive marketing communications from us. NOEMÍ's email marketing program includes, but is not limited to, the following types of communications:

  • Monthly editorial content, including journal prompts, brand stories, and curated content reflective of the NOEMÍ brand

  • Product highlights, new arrival announcements, and exclusive product previews

  • Batch drop announcements, limited availability notices, and restock notifications

You may unsubscribe from marketing communications at any time by clicking the unsubscribe link included in the footer of every marketing email. Unsubscribe requests will be processed promptly and will take effect within a commercially reasonable timeframe. After unsubscribing, you will no longer receive marketing emails from NOEMÍ unless you affirmatively re-subscribe.

7.2 Transactional Emails

Transactional emails are communications sent in direct connection with a transaction or account action initiated by you. These include order confirmations, shipping notifications, delivery updates, and account-related communications. Transactional emails are not subject to marketing opt-out preferences and will be sent regardless of your subscription status, as they constitute a necessary component of the services you have requested.

8. Data Security

NOEMÍ takes reasonable and appropriate technical and organizational measures to protect personal information against unauthorized access, disclosure, alteration, or destruction. The Site is operated through Squarespace, Inc., which maintains industry-standard security infrastructure including data encryption in transit via Secure Sockets Layer (SSL) technology, secure data storage, and access controls.

All payment transactions conducted through the Site are processed by our third-party payment processors, which maintain Payment Card Industry Data Security Standard (PCI DSS) compliance. NOEMÍ does not receive, store, or transmit full payment card numbers or CVV codes.

Notwithstanding the foregoing, no method of data transmission over the internet and no method of electronic storage is completely secure. NOEMÍ cannot guarantee absolute security of your personal information and shall not be liable for any unauthorized access or data breach that occurs despite our reasonable security measures. In the event of a data breach that poses a risk to your rights and freedoms, we will notify you as required by applicable law.

9. Social Media and Third-Party Platforms

NOEMÍ maintains official business presences on Instagram, TikTok, and Pinterest. Interactions you engage in through these platforms — including comments, direct messages, and tagged posts — are subject to the respective terms of service and privacy policies of those platforms, over which NOEMÍ exercises no control.

NOEMÍ may identify and reach out to potential customers through publicly available posts on the aforementioned platforms. Such outreach is conducted exclusively through the native messaging and comment features of the respective platform, and NOEMÍ does not collect, record, or store personal information about individuals who do not respond to or engage with such outreach. Any subsequent engagement is governed by this Policy.

Our website at noemicollective.com contains a clickable link to the Site in our Instagram profile. When a visitor accesses the Site by clicking such a link, Instagram may record the outbound click event in accordance with its own data practices. NOEMÍ does not control or receive data from Instagram in connection with such events.

The Site does not currently embed any social media sharing buttons, social login features, or social media plugins that would result in the transmission of visitor data to social media platforms directly from the Site.

10. Children's Privacy

The Site is not directed to, and NOEMÍ does not knowingly collect personal information from, children under the age of thirteen (13). If NOEMÍ becomes aware that personal information has been collected from a child under the age of thirteen without verifiable parental consent, we will take prompt steps to delete such information from our records. If you believe that a child under thirteen has provided personal information to us, please contact us immediately through the Contact page on our website.

11. Links to Third-Party Websites

The Site may contain hyperlinks to third-party websites or online resources. These links are provided for informational and convenience purposes only and do not constitute an endorsement by NOEMÍ of the linked website or its content, products, or services. NOEMÍ has no control over the content, data practices, or privacy policies of third-party websites and accepts no responsibility or liability for them. We encourage you to review the privacy policies of any third-party website you visit.

12. International Users

The Site is operated from and directed to users within the United States. NOEMÍ currently conducts commerce exclusively within the United States and does not actively target customers in other jurisdictions. If you access the Site from outside the United States, you do so at your own initiative and you are responsible for compliance with any local laws applicable to your access or use of the Site. Personal information collected through the Site is stored and processed within the United States, and by using the Site, you consent to the transfer of your personal information to the United States.

13. Modifications to This Policy

NOEMÍ reserves the right to modify, amend, or update this Policy at any time and for any reason, including to reflect changes in our data practices, applicable law, or the services we offer. Any modifications will become effective upon posting to the Site with an updated "Last Updated" date. In the event of material changes to this Policy, we will provide notice through the Site or by other means as appropriate. Your continued use of the Site following the posting of any changes constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically to remain informed of our current data practices.

14. Contact

If you have any questions, concerns, or requests regarding this Privacy Policy, including requests to exercise your rights under the CCPA/CPRA or to correct, update, or delete your personal information, please contact NOEMÍ through the Contact page on our website at noemicollective.com. All verified requests will be acknowledged and responded to in accordance with applicable law and the timelines described herein.

NOEMÍ · noemicollective.com · California