Privacy Policy

PRIVACY POLICY

Date: 6/22/26

Introduction

The Pulse Boutique LLC ("we," "us," or "our") operates the website at thepulseboutique.com (the "Website"). This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit or make a purchase from our Website.

We are committed to complying with applicable privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), the California Invasion of Privacy Act (CIPA), and CalOPPA. If you are a California resident, Section 9 of this policy contains specific disclosures and rights applicable to you.

We update this policy periodically. The effective date at the top of this page reflects the most recent revision. Material changes will be communicated via a prominent notice on our Website or by email prior to taking effect.

Information We collect

We collect the following categories of personal information:

Information You Provide Directly

Name, email address, phone number, and mailing address when you create an account, place an order, or contact us.
Payment information processed through our third-party payment processors (we do not store payment card details).
Age and loyalty program information if you opt in to our loyalty program.
Communications you send us, including customer service inquiries.

Information Collected Automatically

When you visit our Website, tracking technologies automatically collect the following data from your browser and device before or as you interact with the site:

IP address and approximate geolocation derived from your IP address.
Page URLs visited, including full URL strings and any tracking parameters appended to URLs.
Referring URLs showing the website or search result you came from.
Browser type, version, and operating system.
Device type, device identifiers, and user agent string.
Session identifiers and persistent cookie identifiers.
Time and date of visit and time spent on each page.
Browsing behavior, including pages viewed, links clicked, and interactions with advertisements.
Behavioral inferences and profiles derived from your browsing activity.

Important: Some of this data is transmitted to third-party advertising and analytics platforms in real time, both through browser-based tracking pixels and through server-side data transmission (described in Section 4 below), independent of your browser's cookie settings. Server-side transmission occurs directly from our systems to third-party servers and cannot be blocked by browser-level cookie controls alone.

Sensitive Personal Information

We do not intentionally collect sensitive personal information as defined under CPRA, including precise geolocation, health or medical data, financial account credentials, racial or ethnic origin, religious beliefs, sexual orientation, immigration status, biometric data, or the content of private communications. If you believe we have inadvertently collected such information, please contact us at support@thepulseboutique.com.

Tracking Technologies and Cookies

When you first visit our Website, a cookie consent banner will appear before any non-essential tracking technologies activate. You may accept all cookies, reject non-essential cookies, or manage your preferences by category. Non-essential tracking technologies, including advertising and analytics pixels, will not activate until you provide affirmative consent. Your consent choice is recorded with a timestamp and session identifier. You may change your preferences at any time by clicking the cookie settings link in the footer.

We use cookies, pixels, tags, beacons, and server-side APIs on our Website. These fall into the following categories:

Category

Examples

Purpose / Notes

Strictly Necessary	Session and functionality cookies necessary to operate the Website, including cookies that manage your shopping cart, remember your session, and track visit counts. These are set by Shopify, our website platform.	Required to operate the Website. These fire for every visitor regardless of consent settings and cannot be disabled.
Analytics	Google Analytics, Littledata, Lifetimely, Simprosys	Help us understand how visitors use the Website. Some are configured as Always On and fire for every visitor.
Advertising and Targeting	Meta (Facebook/Instagram) pixel and Conversions API, TikTok pixel and Conversions API, Google Ads, Pinterest, Snapchat Ads, Klaviyo, Attentive, GoAffPro	Used to serve targeted advertising and measure ad performance. These transmit visitor data to third-party advertising platforms via both browser-side pixels and server-side APIs.
Tag Management	Google Tag Manager	Container that manages and loads additional tracking scripts. All tags within GTM are subject to the same consent controls as direct integrations.
Functionality	Redo	Supports site functionality features including return management.

Dismissing or closing the cookie consent banner without making a selection is treated as a rejection of non-essential tracking. Non-essential pixels and tracking technologies do not fire on dismissal.

We honor Global Privacy Control (GPC) signals. If your browser transmits a GPC signal, we treat it as a valid opt-out of sharing your personal information for cross-context behavioral advertising, effective automatically and without any additional action on your part.

Third-Party Data Recipients

The following third-party platforms receive visitor data from our Website. For advertising platforms, data is transmitted via both browser-side pixels and server-side Conversions API integrations. Server-side transmission occurs directly from our servers to each platform's servers and is subject to the same consent controls as browser-side transmission.

Platform	Data Received	Purpose	Privacy Policy
Meta (Facebook / Instagram)	IP address, page URLs, referrer URLs, device identifiers, browser data, cookies, behavioral events, hashed email/phone if Advanced Matching enabled	Targeted advertising, ad measurement, behavioral profiling across websites and apps	facebook.com/privacy/policy
TikTok	IP address, page URLs, referrer URLs, session IDs, device IDs, user agent, cookies, timestamps, behavioral events	Targeted advertising, ad measurement, behavioral profiling across websites and apps	tiktok.com/legal/page/us/privacy-policy
Google / YouTube / Google Ads	IP address, browsing behavior, ad interactions, device data	Analytics, ad conversion tracking, targeted advertising	policies.google.com/privacy
Pinterest	IP address, page URLs, device data, behavioral events	Targeted advertising and ad measurement	policy.pinterest.com/privacy-policy
Snapchat Ads	IP address, page URLs, device data, behavioral events	Targeted advertising and ad measurement	snap.com/en-US/privacy/privacy-policy
Klaviyo	Email address, phone number, purchase history, browsing behavior	Email and SMS marketing	klaviyo.com/legal/privacy
Attentive	Phone number, behavioral data	SMS marketing	attentivemobile.com/privacy-policy
Littledata	Browsing behavior, session data	Analytics and data layer	littledata.io/privacy
Lifetimely	Purchase data, behavioral data	Profit and LTV analytics	lifetimely.io/privacy
Simprosys	Product and browsing data	Google Shopping feed management	simprosys.com/privacy-policy
GoAffPro	Purchase and referral data	Affiliate marketing	goaffpro.com/privacy
Redo	Order and session data	Returns and site functionality	getredo.com/privacy

Note: Google Tag Manager is also active on our Website and may load additional third-party tags. All tags within our GTM container are subject to the same consent controls described in Section 3.

How We Use Your Information

We use the personal information we collect for the following purposes:

To process orders, payments, and returns and to fulfill purchases.
To provide customer support and respond to inquiries.
To create and maintain your account.
To send transactional communications related to your orders.
To send marketing communications, including email newsletters and SMS messages, where you have provided consent.
To personalize your shopping experience and recommend products based on your browsing and purchase history.
To serve targeted advertising on our Website and on third-party websites and platforms, including cross-context behavioral advertising using your activity across other websites and services.
To measure the performance of our advertising campaigns.
To analyze Website traffic and improve our Website and services.
To detect, prevent, and address fraud and security issues.
To comply with legal obligations and respond to legal process.
To operate our affiliate marketing program.

Cross-Context Behavioral Advertising: We share personal information with the advertising platforms identified in Section 4 for cross-context behavioral advertising, meaning advertising targeted to you based on your activity across distinctly branded websites, applications, and services other than our own. This sharing constitutes "sharing" of personal information under California law and is subject to your opt-out rights described in Section 9.

Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law. The following general retention periods apply:

Data Category	Retention Period	Basis
Order and transaction records	7 years	Legal and tax compliance
Account information	Duration of account plus 3 years after closure	Customer relationship
Browsing and behavioral data (first-party)	Up to 2 years	Analytics and personalization
Marketing consent records	Duration of relationship plus 3 years	Legal compliance
Cookie consent logs	3 years	Legal compliance
Customer service records	3 years from last interaction	Business operations

Third-party platforms listed in Section 4 maintain their own retention policies. We encourage you to review their privacy policies directly.

Data Security

We implement reasonable technical and organizational measures to protect your personal information, including SSL/TLS encryption for data transmitted to and from our Website, access controls limiting employee access to personal information on a need-to-know basis, and regular review of our data collection and storage practices.

No method of transmission over the Internet or electronic storage is completely secure. In the event of a data breach affecting your personal information, we will notify you as required by applicable law.

Children's Privacy

Our Website is not directed at children under the age of 16. We do not knowingly collect personal information from children under 16. We do not sell or share the personal information of consumers under 16 without affirmative opt-in consent as required by CPRA. We do not knowingly collect personal information from children under 13, consistent with the Children's Online Privacy Protection Act (COPPA). If you believe we have inadvertently collected information from a child, please contact us at support@thepulseboutique.com and we will take steps to delete it.

California Privacy Rights (CCPA/CPRA)

If you are a California resident, the following rights apply to your personal information under the California Consumer Privacy Act as amended by the California Privacy Rights Act (collectively, CCPA/CPRA).

Your Rights

Right	Description
Right to Know	You may request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the third parties with whom it has been shared, for the preceding 12 months.
Right to Access	You may request a copy of the specific personal information we hold about you.
Right to Delete	You may request deletion of personal information we have collected from you, subject to certain exceptions (e.g., completing a transaction, legal obligations).
Right to Correct	You may request correction of inaccurate personal information we hold about you.
Right to Opt Out of Sale and Sharing	You may opt out of the sale of your personal information and the sharing of your personal information for cross-context behavioral advertising. See the Do Not Sell or Share section below.
Right to Limit Sensitive Information	If we collect sensitive personal information, you may direct us to limit its use to purposes necessary to perform the services you requested.
Right to Non-Discrimination	We will not deny you goods or services, charge you a different price, or provide you a different quality of service because you exercised your privacy rights.

Do Not Sell or Share My Personal Information

We share personal information with third-party advertising platforms for cross-context behavioral advertising, which constitutes "sharing" under CPRA. You have the right to opt out of this sharing at any time.

To opt out, click the "Do Not Sell or Share My Personal Information" link in the footer of our Website. This will suppress transmission of your personal information to third-party advertising platforms, including both browser-side pixels and server-side Conversions API transmissions.

We also honor Global Privacy Control (GPC) signals automatically. If your browser or browser extension transmits a GPC opt-out signal, we will treat it as a valid opt-out of sharing without requiring any additional action from you.

CCPA Data Categories Collected

Cat.	Category Name	Examples	Collected
A	Identifiers	Name, email, IP address, device identifiers, online identifiers	YES
B	California Customer Records	Name, address, phone number, financial information	YES
C	Protected Classification Characteristics	Age	YES (loyalty program opt-in only)
D	Commercial Information	Purchase history, products considered	YES
E	Biometric Information	Fingerprints, voiceprints, facial recognition data	NO
F	Internet / Network Activity	Browsing history, ad interactions, session data	YES
G	Geolocation Data	Approximate location derived from IP address	YES
H	Sensory Data	Audio, visual, electronic data	NO
I	Professional / Employment Information	Job history, performance evaluations	NO
J	Education Information	Student records	NO
K	Inferences	Behavioral profiles, preferences, purchasing tendencies	YES

Submitting a Privacy Rights Request

To exercise any of the rights described above, please contact us by:

Email: support@thepulseboutique.com with the subject line "California Privacy Rights Request"
Mail: The Pulse Boutique LLC, 1503 N 13th Ave E, Newton, Iowa 50208

We will respond to verified requests within 45 days of receipt. We may extend this period by an additional 45 days when necessary, with prior notice. You may designate an authorized agent to submit a request on your behalf; we will require written proof of authorization and may verify your identity directly.

Shine the Light (Cal. Civ. Code § 1798.83)

California residents with whom we have an established business relationship may request information about personal information we have shared with third parties for their direct marketing purposes during the prior calendar year, including the names and addresses of those third parties and the categories of information shared. To make such a request, contact us at support@thepulseboutique.com.

Payment Processing

We use third-party payment processors to handle payment transactions. We do not collect or store your payment card number, CVV, or other financial account credentials. Payment processors we work with include Shopify Pay, PayPal, Amazon Pay, Apple Pay, Google Pay, and major credit card networks (Visa, Mastercard, American Express, Discover, JCB). Each processor's handling of your payment information is governed by their own privacy policy, available on their respective websites. All processors adhere to PCI-DSS standards.

Links to Third-Party Sites

Our Website may contain links to third-party websites. We are not responsible for the privacy practices of those websites. We encourage you to review the privacy policy of every website you visit.