Privacy Policy

This Privacy Policy describes how heyhae.co (the “Site” or “we”) collects, uses, and discloses your Personal Information when you visit or make a purchase from the Site.

Contact

After reviewing this policy, if you have additional questions, want more information about our privacy practices, or would like to make a complaint, please contact us by e-mail at hello@heyhae.co or by mail using the details provided below:

Heyhae LLC, 14251 Firestone Blvd. #204, La Mirada, CA 90638, United States

Collecting Personal Information

When you visit the Site, we collect certain information about your device, your interaction with the Site, and information necessary to process your purchases. We may also collect additional information if you contact us for customer support. In this Privacy Policy, we refer to any information about an identifiable individual (including the information below) as “Personal Information”. See the list below for more information about what Personal Information we collect and why.

Device information

• Purpose of collection: to load the Site accurately for you, and to perform analytics on Site usage to optimize our Site.
• Source of collection: Collected automatically when you access our Site using cookies, log files, web beacons, tags, or pixels.
• Disclosure for a business purpose: shared with our processor Shopify.
• Personal Information collected: version of web browser, IP address, time zone, cookie information, what sites or products you view, search terms, and how you interact with the Site.

Order information

• Purpose of collection: to provide products or services to you to fulfill our contract, to process your payment information, arrange for shipping, and provide you with invoices and/or order confirmations, communicate with you, screen our orders for potential risk or fraud, and when in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.
• Source of collection: collected from you.
• Disclosure for a business purpose: shared with our processor Shopify, our fulfillment service provider Shipstation.
• Personal Information collected: name, billing address, shipping address, payment information (including credit card numbers), email address, and phone number.

Customer support information

• Purpose of collection: to provide customer support.
• Source of collection: collected from you.
• Disclosure for a business purpose: shared with our processor Shopify, customer service tool Gorgias.
• Personal Information collected: name, billing address, shipping address, payment information (including credit card numbers), email address, and phone number.

Sharing Personal Information

We share your Personal Information with service providers to help us provide our services and fulfill our contracts with you, as described above. For example:

• We use Shopify to power our online store. You can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy.
• We may share your data within our corporate family of companies that are related by common ownership or control to enable or support us in providing the Services. This sharing is essential for us to offer you a comprehensive service experience and for the streamlined functioning of our various service offerings.
• We may share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.
• We may also disclose Personal Information to third-party service providers and other partners that help us operate, analyze, market, and improve the Site. These may include providers of advertising and conversion measurement, web and session analytics, email and SMS marketing, customer reviews, personalization, affiliate marketing, back-in-stock notifications, fulfillment, customer support, fraud prevention, and related ecommerce functionality. These providers may collect or receive information about your interactions with the Site, such as pages viewed, products viewed, actions taken, and, where you provide it, contact information. The specific providers we use may change from time to time.

Behavioral Advertising

As described above, we use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For example:

• We use Google Analytics to help us understand how our customers use the Site. You can read more about how Google uses your Personal Information here: https://www.google.com/intl/en/policies/privacy/. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.
• We use the Meta/Facebook Pixel and similar technologies to collect or receive information about your interactions with the Site, such as pages viewed, products viewed, and actions taken, to help measure advertising performance and deliver relevant advertising. You can adjust your Facebook ad preferences using the Facebook opt-out link below.
• We share information about your use of the Site, your purchases, and your interaction with our ads on other websites with our advertising partners. We collect and share some of this information directly with our advertising partners, and in some cases through the use of cookies or other similar technologies (which you may consent to, depending on your location).
• We use Shopify Audiences to help us show ads on other websites with our advertising partners to buyers who made purchases with other Shopify merchants and who may also be interested in what we have to offer. We also share information about your use of the Site, your purchases, and the email address associated with your purchases with Shopify Audiences, through which other Shopify merchants may make offers you may be interested in.

For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at https://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

You can opt out of targeted advertising by:

• FACEBOOK - https://www.facebook.com/settings/?tab=ads
• GOOGLE - https://www.google.com/settings/ads/anonymous
• BING - https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads

Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: https://optout.aboutads.info/.

Using Personal Information

We use your Personal Information to provide our services to you, which includes: offering products for sale, processing payments, shipping and fulfillment of your order, and keeping you up to date on new products, services, and offers.

California Privacy Rights

If you are a California resident, you may have certain rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CCPA”), subject to applicable limitations and exceptions.

Notice at Collection for California Residents

For California residents, the sections above and below describe the categories of Personal Information we collect, the purposes for which we use it, whether we sell or share it, how long we retain it, and how you may exercise your California privacy rights.

Categories of Personal Information We Collect

Depending on how you interact with the Site, we may collect the following categories of Personal Information: identifiers; commercial information; internet or other electronic network activity information; approximate geolocation information; inferences; and, where applicable, sensitive personal information. We collect, use, disclose, and otherwise process these categories of Personal Information for the purposes described in this Privacy Policy, including to operate and improve the Site, process orders, provide customer support, communicate with you, conduct analytics and advertising, prevent fraud, comply with legal obligations, and protect our rights.

Disclosure, Sale, and Sharing of Personal Information

We may disclose Personal Information to service providers, contractors, and other partners that help us operate, analyze, market, and improve the Site. To the extent our use of advertising technologies, cookies, pixels, tags, or similar technologies constitutes a “sale” or “sharing” of Personal Information under California law, we may sell or share identifiers, commercial information, internet or other electronic network activity information, approximate geolocation information, and inferences. We do not knowingly sell or share Personal Information of consumers under 16 years of age.

Sensitive Personal Information

We do not use or disclose sensitive personal information for purposes that would require us to provide a right to limit under the CCPA, unless we provide a method for exercising that right.

Your California Privacy Rights

Subject to applicable limitations and exceptions, California residents may have the right to: (i) know/access the Personal Information we collect, use, disclose, sell, or share; (ii) delete Personal Information we collected from you; (iii) correct inaccurate Personal Information; (iv) opt out of the sale or sharing of Personal Information; (v) limit the use or disclosure of sensitive personal information, to the extent applicable; and (vi) not be discriminated against for exercising CCPA rights.

How to Exercise Your Rights

To exercise your rights, you may contact us at hello@heyhae.co or use any request or opt-out mechanism made available on the Site, including the “Do Not Sell or Share My Personal Information” link, if available. We may need to verify your identity before processing certain requests. You may also designate an authorized agent to submit a request on your behalf, and we may require proof of authorization and verification of your identity.

Opt-Out Preference Signals

Where required by applicable law, we will recognize opt-out preference signals, such as Global Privacy Control, as a request to opt out of the sale or sharing of Personal Information for the browser or device that sends the signal.

Retention of Personal Information

We retain Personal Information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Site, process transactions, maintain business records, comply with legal obligations, resolve disputes, prevent fraud, and protect our rights.

GDPR / EEA Privacy Rights

If you are a resident of the European Economic Area (“EEA”), you have the right to access the Personal Information we hold about you, to port it to a new service, and to ask that your Personal Information be corrected, updated, or erased. If you would like to exercise these rights, please contact us through the contact information above.

Your Personal Information will be initially processed in Ireland and then will be transferred outside of Europe for storage and further processing, including to Canada and the United States. For more information on how data transfers comply with the GDPR, see Shopify’s GDPR Whitepaper: https://help.shopify.com/en/manual/your-account/privacy/GDPR.

Lawful basis

Pursuant to the General Data Protection Regulation (“GDPR”), if you are a resident of the EEA, we process your Personal Information under the following lawful bases:

• Your consent;
• The performance of the contract between you and the Site;
• Compliance with our legal obligations;
• To protect your vital interests;
• To perform a task carried out in the public interest;
• For our legitimate interests, which do not override your fundamental rights and freedoms.

Retention of Order Information

When you place an order through the Site, we will retain your Personal Information for our records unless and until you ask us to erase this information. For more information on your right of erasure, please see the “GDPR / EEA Privacy Rights” section above or contact us using the information in the “Contact” section above.

Automatic decision-making

If you are a resident of the EEA, you have the right to object to processing based solely on automated decision-making (which includes profiling), when that decision-making has a legal effect on you or otherwise significantly affects you.

We do not engage in fully automated decision-making that has a legal or otherwise significant effect using customer data.

Our processor Shopify uses limited automated decision-making to prevent fraud that does not have a legal or otherwise significant effect on you.

Services that include elements of automated decision-making include:

• Temporary blacklist of IP addresses associated with repeated failed transactions. This blacklist persists for a small number of hours.
• Temporary blacklist of credit cards associated with blacklisted IP addresses. This blacklist persists for a small number of days.

Cookies

A cookie is a small amount of information that’s downloaded to your computer or device when you visit our Site. We use a number of different cookies, including functional, performance, advertising, and social media or content cookies. Cookies make your browsing experience better by allowing the website to remember your actions and preferences (such as login and region selection). This means you don’t have to re-enter this information each time you return to the site or browse from one page to another. Cookies also provide information on how people use the website, for instance whether it’s their first time visiting or if they are a frequent visitor.

We use the following cookies to optimize your experience on our Site and to provide our services.

Cookies Necessary for the Functioning of the Store

Reporting and Analytics

The length of time that a cookie remains on your computer or mobile device depends on whether it is a “persistent” or “session” cookie. Session cookies last until you stop browsing and persistent cookies last until they expire or are deleted. Most of the cookies we use are persistent and will expire between 30 minutes and two years from the date they are downloaded to your device.

You can control and manage cookies in various ways. Please keep in mind that removing or blocking cookies can negatively impact your user experience and parts of our website may no longer be fully accessible.

Most browsers automatically accept cookies, but you can choose whether or not to accept cookies through your browser controls, often found in your browser’s “Tools” or “Preferences” menu. For more information on how to modify your browser settings or how to block, manage or filter cookies can be found in your browser’s help file or through such sites as: www.allaboutcookies.org.

Additionally, please note that blocking cookies may not completely prevent how we share information with third parties such as our advertising partners. To exercise your rights or opt-out of certain uses of your information by these parties, please follow the instructions in the “Behavioral Advertising” section above.

Do Not Track

Please note that because there is no consistent industry understanding of how to respond to legacy “Do Not Track” signals, we do not alter our data collection and usage practices when we detect such a signal from your browser. This statement does not apply to opt-out preference signals that we are required to recognize under applicable law.

Changes

We may update this Privacy Policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons.

Complaints

As noted above, if you would like to make a complaint, please contact us by e-mail (hello@heyhae.co) or by mail using the details provided under “Contact” above.

Last updated: June 25, 2026