Privacy Policy
In effect from Sep 28, 2026.
| Data | Why it’s collected | Kept for |
|---|---|---|
| Name, email, phone, billing and shipping addresses | to fill, deliver, and support orders | 6 years with the order record |
| Dresses ordered and amounts paid | tax and accounting records | 6 years |
| Card brand and last four digits, or PayPal email | matching payments and refunds | 6 years |
| Messages and photos sent to customer service | answering them and settling claims | 3 years |
| IP address, browser, and pages visited | site security and error fixing | 90 days in server logs |
Explaining what this policy covers
This policy covers horizonpicks.com and every email, call, and form message exchanged with customer service. ERIN ASHLEY HUNT FUNY LLC, which trades as Horizon Picks, decides how this data is used. When this policy is revised, the date above changes to match.
Selling personal data to nobody
Horizon Picks doesn’t sell personal information, and it doesn’t share it for cross-context behavioral advertising. No third party has bought shopper data from Horizon Picks, and none is lined up to buy it.
Passing order details to the partner and carriers
Five kinds of recipient get part of an order’s data, each for one job:
| Recipient | What it receives | Its job |
|---|---|---|
| Fulfillment partner in China | name, shipping address, phone, dresses ordered | packing and labeling the shipment |
| Cross-border and US carriers | name, shipping address, phone | delivering the shipment |
| Stripe and PayPal, through a checkout gateway service | billing details, amount, payment data | taking and refunding payments |
| Email delivery service | email address and message content | sending order and support emails |
| Web host and Cloudflare | IP address and technical request data | running, protecting, and measuring the site |
Public authorities receive data only when a law or a court order requires it.
Listing service providers by job
Each provider above works on Horizon Picks’ behalf and gets only the data its job needs. In CCPA terms, the categories shared with service providers are identifiers (name, email, address, phone), commercial information (orders and payments), and internet activity (technical request data). No data broker or ad network receives any of it.
Transferring data to China
Orders are packed in China, so the name, shipping address, phone number, and dress details on each order are sent to the partner there. Chinese data protection law differs from US law. The partner receives no card data, no email address, and no browsing data. Payment data handled by Stripe or PayPal may be stored or processed abroad, and each company applies its own safeguards to it.
Collecting what shoppers type in
Checkout collects name, email, phone, billing and shipping addresses, and the dresses ordered. Checkout runs as a guest checkout, so no shopper account or password is created. Messages, size questions, and claim photos sent to customer service are kept with the order.
Recording device and visit data
Each visit leaves a server log line: the IP address, the browser and device, the page requested, the page that linked to it, and a timestamp. These logs serve security and error fixing only. Cloudflare, which carries the site’s traffic, may also count page views and page load times with its cookie-free Web Analytics script, which sets no cookie and doesn’t follow visitors to other websites.
Receiving data from processors and carriers
Stripe and PayPal report whether a payment went through, the card brand and last four digits, and any fraud-screening result. Carriers add their scan history, including the delivery record.
Putting the data to use
The data is used to take payment, send the order to the partner, deliver it, send order and tracking emails, answer questions, handle returns and refunds, prevent fraud, and keep the records tax law requires. Horizon Picks sends no marketing email and runs no newsletter.
Setting cookies
The site sets WooCommerce cookies for the cart, the checkout session, and sign-in, plus a short-lived Cloudflare security cookie that separates people from bots. Stripe’s and PayPal’s payment fields set their own cookies for fraud checks. No advertising or analytics cookie is set, so there’s no cookie banner to answer. A browser sending Global Privacy Control counts as an opt-out from sale and sharing.
Guarding the data
Every page runs over HTTPS. Card numbers stay with the payment processor. Order records are open only to the people who run Horizon Picks and to the partner for the shipping fields it needs. If a breach affecting personal data is confirmed, affected shoppers are notified by email as Virginia law (Va. Code § 18.2-186.6) requires.
Holding records for set periods
Order and payment records stay for 6 years, the period tax and accounting rules call for. Claim photos and customer service emails stay for 3 years. Server logs are deleted after 90 days. Data past its period is deleted, not archived.
Requesting access, correction, or deletion
Any shopper, in any state, can ask for a copy of their data, a correction, or deletion by writing to contact@horizonpicks.com; a subject line reading Privacy request gets it routed to the right folder. The request is confirmed within 5 business days and answered within 45 days, or within 90 days when Horizon Picks explains the need for more time. To confirm identity, customer service matches the request’s email address against the order. Deletion stops at records tax law requires Horizon Picks to keep. Shoppers who disagree with a refusal can answer with the single word Appeal as the subject line, and appeals get a written decision within 60 days.
Exercising California rights
California residents have the rights the CCPA and CPRA give them: to know what’s collected and why, to receive a copy, to have mistakes fixed, to have it erased, to opt out of sale and sharing, to restrict how sensitive information is used, and to equal treatment after using any of these rights. Horizon Picks doesn’t sell or share personal information and collects no sensitive personal information. How an opt-out is still recorded is set out on Do Not Sell or Share My Personal Information.
Extending the same rights to other states
Eighteen states besides California have consumer privacy laws in force in 2026. In the West and Midwest they are Colorado, Indiana, Iowa, Minnesota, Montana, Nebraska, Oregon, and Utah. In the South and East they are Connecticut, Delaware, Kentucky, Maryland, New Hampshire, New Jersey, Rhode Island, Tennessee, Texas, and Virginia. Residents of those states, and of every other state, use the same “Privacy request” email and get the same deadlines.
Leaving sensitive data out
Horizon Picks doesn’t collect Social Security numbers, government ID, precise location, health data, or any other sensitive category. Body measurements a shopper shares for size advice are used for that answer only.
Training no AI models on customer data
Horizon Picks doesn’t use personal data to train artificial intelligence models, including large language models, and doesn’t sell or pass personal data to anyone for that purpose.
Protecting children under 13
The store is for adults. Horizon Picks doesn’t knowingly collect data from children under 13, and any such data found is deleted.
Visiting sites linked from here
Carrier tracking pages, PayPal, and other linked websites run under their own privacy policies.
Contacting Horizon Picks about privacy
Privacy questions and requests go to contact@horizonpicks.com with the subject line “Privacy request”, or to +1 (826) 287-0144 on weekdays from 8:00 AM until 4:00 PM Eastern Time. Questions get a reply within one business day, and formal requests follow the deadlines above. The Contact page form works too, and ERIN ASHLEY HUNT FUNY LLC receives mail at 2825 Tillett Rd SW, Roanoke, VA 24015, United States.