Privacy Policy

1. PRIVACY POLICY

Not So Skimpy ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you visit notsoskimpy.com, notsoskimpy.blog, or notsoskimpy.shop.

Ropie Activewear LLC (“Company,” “we,” “our,” or “us”) respects your privacy and is committed to protecting it through our compliance with this policy. This policy describes how we collect, process, retain, and disclose personal data about you when you use our website, notsoskimpy.com, and related e-commerce services (collectively, “Services”), and our practices for using, maintaining, protecting, and disclosing that information.

This policy applies only to information we collect:

• Through the Services.

• In email, text, chat, and other electronic communications between you and the Services.

It does not apply to information collected by us offline or through any other means, including on any other website operated by us that does not link to this policy, or by any third party through any application or content that may link to or be accessible from or through the Services.

Please read this policy carefully to understand our policies and practices regarding your information and how we treat it. By interacting with our Services or providing us with your information, you agree to the collection, use, and sharing of your information as described in this privacy policy. This policy may change from time to time (see “Changes to Our Privacy Policy”). Your continued use of the Services after we make changes is deemed to be acceptance of those changes, so please check the policy periodically for updates.

Children’s and Minors’ Data

Our Services are not intended for, and we do not knowingly collect any personal data from, children under the age of 18. If we learn we have collected or received personal data from a child under 18 years old without verification of parental consent, we will delete that information. If you believe we may have any information from or about a child under 18, please contact us at privacy@notsoskimpy.com.

The Personal Data That We Collect or Process

“Personal data” is information that identifies, relates to, or describes, directly or indirectly, you as an individual, such as your name, email address, telephone number, postal address, or order information.

Email Communications

If you subscribe to our newsletter, we will use your email address to send you weekly content, curated product picks, and community updates. You may unsubscribe at any time using the link in any email we send.

We use HubSpot to manage our email list. Your data is stored and processed in accordance with HubSpot's privacy policy.

The types and categories of personal data we collect or process include:

• Account and contact information, including name, postal address, email address, phone number, username, and other contact information you provide us when creating an account or placing an order.

• Order and purchase history, including information about your purchases, transaction records, and order status.

• Payment information. We use third-party payment processors to handle all payment transactions. We do not collect, store, or have access to your payment card number, bank account information, or other sensitive financial data. Our payment processor(s) collect such information directly from you, subject to their own privacy policies.

• Device information, including your IP address, operating system and version, preferred language, browser type and settings, and other device information.

• Content and information you elect to provide, including product reviews, messages, or other content you submit through the Services.

We also collect:

• Statistical or aggregated information. Statistical or aggregated data does not directly identify a specific person, but we may derive such data from personal data. For example, we may aggregate personal data to calculate the percentage of users accessing a specific feature of our Services.

• Technical information, including information about your internet connection and usage details about your interactions with the Services, such as clickstream information, page response times, length of visits to certain pages, and methods used to browse away from a page.

If we combine or connect non-personal statistical or technical data with personal data so that it directly or indirectly identifies an individual, we treat the combined information as personal data.

How We Collect Your Personal and Other Data

You Provide Information to Us

We collect information about you when you interact with our Services, such as when you create or update an account, place an order, make a purchase, sign up for our email marketing list, submit a product review, or communicate with us..

Automatically Through Our Services

As you navigate through and interact with our Services, we may use automatic data collection technologies to collect information, including personal data. Information collected automatically may include usage details, IP addresses, operating system, and browser type, and information collected through cookies, web beacons, and other tracking technologies.

Using automatic collection technologies helps us improve our Services and deliver a better, more personalized experience.

The technologies we use for this automatic data collection include:

• Cookies. A cookie is a small file placed on your device when you interact with the Services. You may refuse to accept or disable cookies by activating the appropriate setting on your browser or device. However, if you select this setting, you may be unable to access certain features of the Services.

• Web Beacons. Some parts of the Services and our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit the Company to count users who have visited those parts or opened an email and for other related website statistics.

• Google Analytics. We use Google Analytics, a web analytics service provided by Google LLC, to collect information about how visitors use our Website. Google Analytics uses cookies to collect information such as how often you visit the Website, which pages you visit, and what other websites you visited prior to coming to our Website. Google Analytics may collect your IP address. You may opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on, available at https://tools.google.com/dlpage/gaoptout. For more information about Google’s privacy practices, visit https://policies.google.com/privacy.

• Meta (Facebook) Pixel. We use the Meta Pixel, provided by Meta Platforms, Inc., to track conversions, optimize advertising, and build audiences for advertising campaigns on Meta platforms (including Facebook and Instagram). The Meta Pixel may collect information about your browsing activity and actions on our Website and link that information to your Meta profile, if applicable. You may manage Meta’s use of your data by adjusting your Ad Preferences in your Meta account settings or by visiting https://www.youronlinechoices.com/.For more information about Meta’s data practices, visit https://www.facebook.com/privacy/explanation.

• Shopify Analytics. Our Website may be hosted on the Shopify e-commerce platform, which collects information about how visitors interact with our store for operational and analytics purposes. For more information about Shopify’s privacy practices, visit https:www.shopify.com.

To the extent any of these automated technologies are considered a personal data sale, targeted advertising, or profiling under applicable laws, you may have the right to opt out, depending on where you live. Please see “Your Rights and Choices About Your Information” below for more detail.

Some browsers and browser extensions support the Global Privacy Control (“GPC”) signal. When we detect a GPC signal, we will make reasonable efforts to honor it to the extent required by applicable law.

From Service Providers and Business Partners

We may receive personal data about you from other sources and combine that with information we collect directly from you. For example, we may obtain information from service providers that we engage to perform services on our behalf, such as email platform providers, payment processors, shipping and fulfillment providers, analytics providers, and security and anti-fraud services.

How We Use Your Information

We use information that we collect about you or that you provide to us, including any personal data, to:

• Provide you with the Services and any content, features, products, or services that we make available through the Services.

• Fulfill and manage purchases, orders, deliveries, payments, returns, and exchanges.

• Fulfill any other purpose for which you provide it.

• Provide you with notices about your account, including order confirmations, shipping updates, and account-related notifications.

• Improve our Services, including by analyzing your information and creating aggregated data to develop, maintain, analyze, improve, and report on our Services and their features and how users interact with them.

• Promote our Services, business, and offerings, including by sending you marketing and promotional emails if you have opted in or where otherwise permitted by law. We may use your information to segment, target, offer, market, and advertise our products and Services to you.

• Carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection.

• Notify you about changes to any products or services we offer or provide.

• For any other purpose disclosed by us when you provide the information, or for any other purpose with your consent.

You may opt out of receiving marketing emails from us at any time. See “Your Rights and Choices About Your Information” below.

Who We Disclose Your Information To

We may disclose aggregated information about our users, and information that does not identify any individual, without restriction.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated date.

We may also disclose personal data that we collect or you provide as described in this privacy policy:

• To our subsidiaries and affiliates.

• To contractors, service providers, and other third parties we use to support our business, including payment processors, shipping and fulfillment providers, email marketing platforms, analytics providers (including Google and Meta), and Shopify as our e-commerce platform provider, each of whom is bound by contractual obligations to keep personal data confidential and use it only for the purposes for which we disclose it to them.

• To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Ropie Activewear LLC’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding.

• To fulfill the purpose for which you provide it.

• For any other purpose disclosed by us when you provide the information.

• With your consent.

We may also disclose your personal data:

• To comply with any court order, law, or legal process, including to respond to any government or regulatory request.

• To enforce or apply our terms of use and other agreements, including for billing and collection purposes.

• If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of our organization, our customers, or others, including exchanging information with other companies and organizations for fraud protection and credit risk reduction purposes.

We do not sell your personal data to third parties for their own independent marketing or advertising purposes.

Your Rights and Choices About Your Information

Cookies and Other Tracking Technologies

You can set your browser to refuse all or some browser cookies or other tracking technology files, or to alert you when these files are being sent. If you disable or refuse cookies or similar tracking files, some features of our Services may be inaccessible or not function properly. Some browsers include a Do Not Track (“DNT”) setting. Because there is not a common understanding of how to interpret DNT signals, our Services may not respond uniformly to all DNT signals. However, we do honor the Global Privacy Control (“GPC”) signal to the extent required by applicable law.

Email Marketing Opt-Out

If you do not wish to receive marketing emails from us, you may opt out at any time by clicking the “unsubscribe” link included in any marketing email we send, or by sending us an email requesting removal to privacy@notsoskimpy.com. Please note that even after opting out of marketing communications, you will continue to receive transactional emails related to your orders, account activity, and other non-marketing communications. hello@notsoskimpy.com.

Advertising Opt-Out

You may limit the use of your information for interest-based advertising purposes by following the opt-out instructions provided by Google(https://tools.google.com/dlpage/gaoptout) and Meta (https://www.facebook.com/adpreferences). You may also visit the Network Advertising Initiative opt-out page at https://www.networkadvertising.org/managing/opt_out.asp or the Digital Advertising Alliance opt-out page at https://www.aboutads.info/choices/.

• Access and Data Portability. You may confirm whether we process your personal data and access a copy of the personal data we process. To the extent feasible and required by applicable law, data will be provided in a portable format.

• Correction. You may request that we correct inaccuracies in your personal data that we maintain, taking into account the nature of the information and the purposes of processing.

• Deletion. You may request that we delete personal data about you that we maintain, subject to certain exceptions under applicable law.

• Opt Out of Targeted Advertising, Profiling, and Sales. You may request that we not use your personal data for targeted advertising, certain types of profiling that produce legal or similarly significant effects, or sale to third parties.

The exact scope of these rights varies by state, and there are exceptions where we may not be obligated to fulfill your request. We will not discriminate against you for exercising any of your privacy rights.

Colorado Residents

If you are a Colorado resident, you have rights under the Colorado Privacy Act (C.R.S. § 6-1-1301 et seq.) (“CPA”), including the rights to (i) access and obtain a portable copy of your personal data; (ii) correct inaccuracies in your personal data; (iii) delete personal data about you; and (iv) opt out of the processing of your personal data for purposes of targeted advertising, the sale of personal data, and certain profiling with legal or similarly significant effects. To exercise these rights, please contact us at privacy@notsoskimpy.com or write to us at Ropie Activewear LLC, Attn: Privacy, 4760 Wyandot St, Denver, CO 80211

California Residents

If you are a California resident, you have rights under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, “CCPA/CPRA”), including: (i) the right to know what personal information we collect about you, including the categories of personal information, the categories of sources, our business or commercial purpose for collecting it, the categories of third parties to whom we disclose it, and the specific pieces of personal information we have collected; (ii) the right to delete personal information we have collected about you, subject to certain exceptions; (iii) the right to correct inaccurate personal information; (iv) the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising; and (v) the right to non-discrimination for exercising your CCPA/CPRA rights.

We do not sell or share your personal information for cross-context behavioral advertising as those terms are defined under the CCPA/CPRA. To exercise your California privacy rights, please contact us at privacy@notsoskimpy.com

Nevada Residents

Nevada provides its residents with a limited right to opt out of certain personal data sales. However, we do not currently sell personal data in a manner that triggers Nevada’s opt-out requirements. Nevada residents may still submit inquiries to privacy@notsoskimpy.com.

Other State Residents

Residents of Virginia (VCDPA), Connecticut (CTDPA), Texas (TDPSA), Oregon (OCPA), and other states with comprehensive privacy laws may also have rights to access, correct, delete, and opt out of certain uses of their personal data. To exercise any applicable rights, please contact us at privacy@notsoskimpy.com.

Submitting Requests and Appeals

To exercise any privacy right described in this section, please email privacy@notsoskimpy.com with the subject line “Privacy Rights Request” and describe the right you wish to exercise and the information to which your request relates. We will respond to verified requests within the timeframe required by applicable law. To appeal a decision we make in response to a privacy rights request, please email privacy@notsoskimpy.com with the subject line “Privacy Rights Appeal.”

Additional Information for European Union and EEA Users

If you are located in the European Union (“EU”) or European Economic Area (“EEA”), the following additional provisions apply to you under Regulation (EU) 2016/679 (the General Data Protection Regulation, or “GDPR”) and, where applicable, the UK General Data Protection Regulation (“UK GDPR”).

Data Controller

Ropie Activewear LLC, 4760 Wyandot St, Denver, CO 80211, USA, is the data controller responsible for your personal data. You may contact us at privacy@notsoskimpy.com.

Legal Bases for Processing

We process your personal data under the following legal bases:

• Contract performance (Article 6(1)(b) GDPR): Processing necessary to fulfill orders, manage your account, process payments through our third-party processors, and provide the Services you request.

• Legitimate interests (Article 6(1)(f) GDPR): Analytics, site security, fraud prevention, and improving our Services, where such interests are not overridden by your fundamental rights and freedoms. Our legitimate interests include understanding how visitors use our Website, maintaining the security and integrity of our Services, and improving our product and service offerings.

• Consent (Article 6(1)(a) GDPR): Marketing email communications and non-essential cookies (including Google Analytics and Meta Pixel). You may withdraw your consent at any time without affecting the lawfulness of processing prior to withdrawal by contacting us at privacy@notsoskimpy.com or using the opt-out links described in this policy.

• Legal obligation (Article 6(1)(c) GDPR): Processing required to comply with applicable laws, such as tax, accounting, and financial record-keeping obligations.

EU/EEA Data Subject Rights

In addition to the rights described in the state privacy rights section above, if you are located in the EU or EEA, you have the following rights under the GDPR:

• Right of Access (Article 15): Obtain confirmation of and access to the personal data we hold about you, along with supplementary information about how we process it.

• Right to Rectification (Article 16): Request correction of inaccurate or incomplete personal data.

• Right to Erasure (Article 17): Request deletion of your personal data under certain circumstances, including where the data is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where processing is unlawful (“right to be forgotten”).

• Right to Restriction of Processing (Article 18): Request that we restrict our processing of your personal data in certain circumstances, such as while we verify the accuracy of data you have contested.

• Right to Data Portability (Article 20): Receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller where technically feasible.

• Right to Object (Article 21): Object to our processing of your personal data where we rely on legitimate interests as the legal basis, including object to processing for direct marketing purposes.

• Right to Withdraw Consent (Article 7(3)): Withdraw consent at any time where we rely on consent as the legal basis for processing, without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact us at privacy@notsoskimpy.com. We will respond to verified requests within 30 days, with the possibility of a 60-day extension where necessary due to the complexity or volume of requests, and we will notify you of any such extension.

International Data Transfers

Your personal data may be transferred to and processed in the United States, which the European Commission has not determined provides an equivalent level of data protection to EU/EEA law. For transfers of personal data from the EU/EEA to the United States or other third countries, we rely on appropriate transfer mechanisms to ensure your personal data receives an adequate level of protection, including Standard Contractual Clauses (SCCs) approved by the European Commission pursuant to Article 46(2)(c) GDPR, where applicable. You may request a copy of any applicable SCCs by contacting us at privacy@notsoskimpy.

Cookies and Consent for EU/EEA Users

If you are located in the EU or EEA, we will request your consent before placing non-essential cookies (including Google Analytics and Meta Pixel tracking cookies) on your device, in accordance with applicable EU/EEA member state laws implementing the ePrivacy Directive. You may manage your cookie preferences at any time through our cookie consent tool or by adjusting your browser settings.

Right to Lodge a Complaint

If you have concerns about our processing of your personal data and we have not satisfactorily resolved them, you have the right to lodge a complaint with your local EU/EEA data protection supervisory authority. A list of EU supervisory authorities and their contact information is available at https://edpb.europa.eu/about-edpb/about-edpb/members_en. UK residents may contact the Information Commissioner’s Office (ICO) at https://ico.org.uk/.

How We Protect Your Personal Data

We use commercially reasonable administrative, physical, and technical measures designed to protect your personal data from accidental loss or destruction and from unauthorized access, use, alteration, and disclosure. These measures include secure socket layer (“SSL”) technology for data transmission, access controls for employees and service providers, and regular security assessments.

However, no website, electronic storage, or online service is completely secure, and we cannot guarantee the security of your personal data transmitted to, through, using, or in connection with the Services. In particular, email, texts, and chats sent to or from the Services may not be secure. Any transmission of personal data is at your own risk.

The safety and security of your information also depends on you. You are responsible for keeping any account credentials confidential and taking steps to protect your personal data against unauthorized use, disclosure, and access. Please notify us immediately at privacy@notsoskimpy.com if you suspect any unauthorized access to your account.

How We Retain Your Personal Data

We keep the categories of personal data described in this policy for as long as reasonably necessary to fulfill the purposes described, or as otherwise legally permitted or required. Relevant considerations for determining retention periods include:

• Maintaining the Services and operating our business, including handling returns, exchanges, and customer service inquiries.

• Complying with our legal obligations, including tax and accounting requirements that may require retention of transaction records for up to seven (7) years.

• Resolving disputes and enforcing our agreements.

• Safety, security, and fraud prevention purposes.

At the end of the applicable retention period, personal data will be deleted, destroyed, or de-identified in a manner designed to prevent unauthorized access or reconstruction.

Changes to Our Privacy Policy

We may update this policy from time to time. The date the privacy policy was last updated is identified at the top of the page. We will notify you of material changes to this policy by updating the “last updated” date and posting the updated policy on the Services. You should check our Services periodically to see the current policy and any changes we have made to it. Your continued use of the Services after any change to this policy constitutes your acceptance of the revised policy.

Contact Information

To exercise your rights or ask questions or comments about this privacy policy or our privacy practices, contact us at:

Ropie Activewear LLC

Attn: Privacy

4760 Wyandot St

Denver, CO 80211

Email: privacy@notsoskimpy.com

To register a formal complaint or concern about our data practices, please email privacy@notsoskimpy.comwith the subject line “Privacy Complaint” and we will respond within 30 days.