Privacy Policy
Information We Collect
Operating an e-commerce platform requires the collection of certain information from our customers, and we are committed to being transparent about what we gather and why. The data we collect falls into several distinct categories, each serving defined and necessary functions within our business. When you create an account on notyourmothers.com, we collect identity and contact information including your full name, email address, shipping and billing addresses, and telephone number. These data points form the foundation of your customer profile and are essential for processing your orders, communicating with you about your purchases, and ensuring that deliveries reach the correct destination. Without accurate contact and address information, the fundamental transaction of buying and shipping products could not be completed. We collect only the minimum identity data required for these purposes and do not request extraneous personal details that have no bearing on our ability to serve you.
Transaction and payment information is collected at the point of purchase to process your orders and maintain accurate business records. This includes the specific products you buy, their prices, any discounts or promotions applied, the payment method selected, and the transaction outcome. Full payment card numbers are transmitted through encrypted channels directly to our certified payment processor and are never handled or stored by our servers. We retain only truncated payment references sufficient for customer service purposes such as identifying which card was used for a particular order or processing a refund. Order history and transaction records are maintained to support returns and exchanges, provide customer service, comply with accounting and tax obligations, and analyze aggregate purchasing patterns to improve our product assortment and inventory management.
Behavioral and interaction data is collected automatically as you browse and use our platform. This includes the pages you visit, the products you view, the search terms you enter, the time you spend on various sections, the items you add to or remove from your shopping cart, and your navigation patterns through our website. We also collect device and technical information including your IP address, browser type and version, operating system, device type, screen resolution, and language preferences. This behavioral and technical data helps us understand how customers use our platform, identify usability issues, optimize page layouts and navigation, detect and prevent fraudulent activity, and deliver a personalized shopping experience that surfaces products and content relevant to your interests. The collection of this data is governed by your cookie and tracking preferences, which you can manage at any time through our consent management tool.
Communication and feedback data encompasses all interactions you initiate with our customer support team, whether through email, live chat, telephone, or social media channels. Support correspondence, call recordings where disclosed in advance, and chat transcripts are retained to maintain a complete service history, train our support staff, and improve our response quality over time. Product reviews, ratings, survey responses, and any other feedback you voluntarily provide are also collected and may be displayed publicly on our platform in accordance with the preferences you express at the time of submission. We collect all information through lawful and fair means, with appropriate disclosure at each collection point. We do not engage in undisclosed data gathering, deceptive collection methods, or any practice designed to obtain information without your awareness. The data ecosystem on notyourmothers.com exists solely to power and improve the shopping services we provide, not to build extensive personal profiles for purposes unrelated to our commercial relationship with you.
How We Use Your Information
Every use of your personal information within our organization is tied to a specific, documented purpose that we have evaluated for legitimacy and necessity. The primary and most foundational use is order fulfillment: processing your payment, preparing your items for shipment, generating shipping labels, coordinating with carriers, and communicating with you about your order status. This category of use is essential to the commercial transaction you have initiated and cannot be separated from our ability to deliver the products you purchase. Your address data flows to our shipping partners solely for delivery purposes. Your payment data flows to our payment processor solely for transaction authorization and settlement. Your contact data flows to our communication systems solely for order-related notifications. Each data flow is purpose-bound and contractually constrained, ensuring that your information is used only for the specific function each service provider performs on our behalf.
Personalization of your shopping experience represents a secondary but significant use of your data. By analyzing your browsing history, purchase patterns, search behavior, and product interactions, our recommendation systems can surface items that align with your demonstrated interests, reducing the effort required to discover products you are likely to appreciate. This personalization extends to customized homepage content, tailored promotional communications where you have opted to receive them, and search result ranking that prioritizes products matching your preferences. Personalization is designed to enhance your experience by making our platform more relevant and efficient, not to manipulate purchasing behavior or extract maximum value from each transaction. You have full control over personalization through your account settings, and you may disable it entirely if you prefer a generic, non-personalized shopping experience.
Platform security and fraud prevention constitute another critical use of your data. Our security systems analyze transaction patterns, login behavior, device fingerprints, and browsing characteristics to detect anomalies that may indicate fraudulent activity or unauthorized account access. These systems operate in real time, evaluating each interaction against risk models and flagging suspicious events for review by our security team. The data processed for security purposes is handled under strict access controls and is retained only as long as necessary for threat detection and forensic analysis. We also use aggregated and anonymized data for business analytics, including sales trend analysis, inventory demand forecasting, customer demographic segmentation, and marketing channel attribution. These analytical applications use data that has been stripped of direct personal identifiers wherever possible, and the insights derived inform strategic business decisions rather than individual customer actions. Your information is never sold, rented, or traded to third parties for their independent marketing purposes. This prohibition is absolute and applies regardless of the commercial value such arrangements might offer.
Data Protection and Security
Protecting your personal information against unauthorized access, disclosure, alteration, and destruction is a fundamental obligation that we fulfill through a comprehensive, multilayered security program. Our technical defenses begin at the network perimeter with firewalls, intrusion detection and prevention systems, and web application firewalls that monitor and filter all traffic to our platform. These systems are continuously updated with current threat intelligence and are configured to block known attack patterns while alerting our security team to suspicious activity that warrants investigation. All data transmitted between your browser and our servers is encrypted using Transport Layer Security with strong cipher suites and perfect forward secrecy, ensuring that intercepted traffic cannot be decrypted even if encryption keys are later compromised. Within our infrastructure, network segmentation isolates systems that store or process sensitive personal data from other operational systems, limiting the potential blast radius of any security incident.
Our application security practices are embedded throughout the software development lifecycle to prevent vulnerabilities from reaching production. Every code change undergoes peer review that specifically evaluates security implications, and automated static analysis tools scan our codebase for common vulnerability patterns before deployment. We conduct regular dynamic application security testing that simulates attacks against running instances of our platform, identifying vulnerabilities that might escape static detection. Authentication and authorization systems enforce strong password policies, support multi-factor authentication, and implement role-based access controls that restrict each user and service account to the minimum permissions necessary for their function. Session management includes automatic timeouts, secure cookie attributes, and protection against common session-based attacks. We perform annual independent penetration tests conducted by qualified external security firms that attempt to breach our defenses using real-world attack techniques, and we address all findings with the highest priority.
Beyond technical controls, our security posture relies on robust organizational policies and human practices. All employees undergo background checks prior to employment and receive mandatory security awareness training annually. Personnel with access to personal data receive additional role-specific training on data handling procedures, privacy requirements, and incident reporting obligations. Access to personal data is granted on a strict need-to-know basis and is reviewed and recertified quarterly, with access promptly revoked upon role changes or termination. We maintain comprehensive security policies covering data classification, acceptable use, incident response, vendor risk management, and business continuity. Our incident response team follows a documented plan that defines procedures for detection, containment, eradication, and recovery, and we conduct regular tabletop exercises to maintain readiness. In the event of a data breach affecting your personal information, we will notify you without undue delay and provide details about the nature of the incident, the types of data affected, and the steps you can take to protect yourself.
Cookies and Tracking Technologies
Our platform employs cookies and similar tracking technologies to deliver core functionality, enhance your browsing experience, and gather analytics that inform our continuous improvement efforts. A cookie is a small text file that our website places on your device when you visit, storing information that is read back by our servers on subsequent visits. These technologies serve several distinct purposes that we have categorized for transparency and to enable your informed consent choices. Strictly necessary cookies are essential for the basic operation of our website and cannot be disabled without breaking core functionality. These include session cookies that maintain your login state as you navigate between pages, cart cookies that remember the items you have added for purchase, and security cookies that support our authentication infrastructure and protect against fraudulent use of your account.
Performance and analytics cookies collect information about how visitors use our platform, including which pages are most frequently visited, how long visitors spend on various sections, which search terms generate the most engagement, and where visitors encounter errors or difficulties. This data is aggregated and anonymized before analysis, and it helps us identify usability improvements, optimize page load speeds, and ensure that our platform functions correctly across different devices and browsers. Functional cookies remember choices you make to provide enhanced features and a more personalized experience. These may include preference cookies that store your language selection, currency display preference, recently viewed products, and items saved to your wish list. They enable features such as viewing your browsing history and receiving product recommendations based on your past interactions.
Advertising and targeting cookies are used to deliver advertisements that are relevant to your interests, both on our platform and on third-party websites. These cookies track your browsing behavior across our site to build a profile of your interests, which then informs which advertisements are displayed to you through our advertising partners. We use these technologies to measure the effectiveness of our marketing campaigns, to avoid showing you advertisements for products you have already purchased, and to ensure that our advertising budget is spent reaching people likely to be interested in our products. Our cookie consent management tool, accessible from any page on our website, allows you to accept or reject each category of cookies individually and to change your preferences at any time. We also respect browser-level Do Not Track signals, adjusting our tracking practices accordingly when such a signal is detected.
Your Rights and Choices
We believe that meaningful privacy protection requires giving you substantive control over your personal information, and we have built notyourmothers.com to honor this principle. Your account dashboard serves as the central hub for managing your data and preferences, providing access to a range of self-service tools. Through your dashboard, you can view and edit your profile information, manage your saved addresses and payment methods, review your complete order history, and adjust your communication and privacy settings. For more comprehensive access, you may request a complete export of all personal information we maintain about you, which we will provide in a structured, commonly used, and machine-readable format. This export covers your account data, transaction records, communication history, and any other personal information associated with your profile.
Your right to correct inaccurate or incomplete information can be exercised directly through your account settings for most data points or through assistance from our support team for records requiring administrative access. The right to deletion allows you to request that we erase your personal information from our systems. We will comply with deletion requests unless we have a compelling legitimate basis for retaining certain data, such as fulfilling legal obligations, maintaining records necessary for tax and accounting compliance, or defending against legal claims. When we delete your data, we take reasonable steps to ensure removal from our active systems and from the systems of service providers who process data on our behalf. Some information may be retained for a limited period in backup archives, which are governed by separate retention and destruction schedules.
Your communication preferences give you granular control over the types of messages you receive from us. You can independently manage preferences for transactional notifications about your orders, promotional emails featuring products and offers, newsletters and content updates, abandoned cart reminders, and back-in-stock alerts. Each category can be toggled on or off, and you may unsubscribe from all marketing communications simultaneously if you prefer. Your cookie and tracking preferences, managed through our consent tool, allow you to accept or reject different categories of cookies based on their purpose. You may also opt out of interest-based advertising through your account settings or through industry opt-out mechanisms provided by advertising self-regulatory programs. We honor all preference changes promptly, and we do not penalize or degrade your experience for exercising your privacy choices. We may update this Privacy Policy periodically to reflect changes in our practices or the legal landscape. Material changes will be communicated prominently through our platform and, where appropriate, through direct notification. We encourage periodic review of this policy to stay informed about how we protect your data.