Privacy Policy
Effective from Oct. 16, 2026
Is the personal information you give at checkout sold or shared?
No, personal information collected here is used to fill, deliver and support orders, and it is never sold, never shared for cross-context behavioral advertising and never uploaded to advertising platforms.
Scope for this privacy notice
This notice explains how MELISSA NICOLE VARELA FUNY LLC, the company that runs MissFitTribe, handles personal information gathered through missfittribe.com, through orders and through emails with the help desk, and a revised version takes effect on the date printed at the top of the page.
Purposes for collecting data
Personal information is used to take payment, pass the order to the fulfillment partner, deliver the package, stop fraud, reply to messages, process returns and refunds, keep the site secure and meet tax and accounting duties, and it serves no purpose outside that list. Your phone number, for example, travels with the shipping details so that the carrier can reach you about a delivery, and it is not used for marketing calls or texts.
No buyers for customer data
Customer information has not been sold, rented or traded to anyone, contact details included, which leaves no buyer to name in the list that Rhode Island law requires from online stores, and none of it is passed along for cross-context behavioral advertising.
No ad measurement uploads for Google or Meta
No email address or phone number goes to Google, Meta or other ad networks, whether hashed or in plain form, for ad measurement, enhanced conversions or audience matching, and no advertising pixel runs on any page of the site.
No AI training for customer records
Order records, help desk messages and the photos customers send never feed the training of large language models or any comparable AI tool, nor are they handed to anyone else for that purpose.
Details provided for an order
At checkout you provide your name, email address, phone number, shipping and billing addresses and the sweaters you order, and a message to the help desk adds whatever you write plus any photos you attach, such as a picture of a quarter zip with a broken zipper. Card numbers go to Stripe through the payment gateway service and PayPal sign-in details stay with PayPal, so a full card number never reaches the store.
Automatic data from site visits
While you browse, the web server and Cloudflare record the IP address, the browser and device in use, each page requested and its time, and those logs keep the site running and help block abusive traffic. A Cloudflare Web Analytics script also tallies page views and page load speed without setting cookies, and those counts are not tied to an order or used for advertising.
Updates from partners for each order
Stripe, PayPal and the gateway service confirm the outcome of each payment, the carrier reports each scan on the package, and the fulfillment partner confirms dispatch together with the tracking number, and every one of those updates is attached to your order record.
Recipients for order data
Each recipient receives only the fields required for its task, under its own confidentiality and security terms.
| Recipient | What it receives | Why |
|---|---|---|
| Fulfillment partner in the United States | name, shipping address, phone number, sweaters ordered | packing and dispatch |
| Domestic carriers | name, shipping address, phone number, package details | delivery and tracking scans |
| Stripe and PayPal, through the payment gateway service | payment details, billing address, email address, order amount | payment processing and fraud checks |
| Email delivery service | the address and text of each email | order confirmations and help desk replies |
| Web host and Cloudflare | IP address, browser type, pages requested | keeping the site online and protected, counting page views |
Records are also disclosed when a law, a court order or a valid government request requires it, and if the business were ever sold or merged, customer records would move to the new owner only after notice on this page.
CCPA categories for the last 12 months
The categories below use the names in the California Consumer Privacy Act and cover the 12 months before the effective date above.
| Category | Examples | Disclosed for a business purpose to |
|---|---|---|
| Identifiers | full name, phone number, email address, IP address | fulfillment partner, carriers, payment processors, email service, host, Cloudflare |
| Customer records under Cal. Civ. Code § 1798.80(e) | shipping and billing addresses, phone number | fulfillment partner, carriers, payment processors |
| Commercial information | sweaters bought, order totals, returns and refunds | fulfillment partner, payment processors |
| Internet activity | pages requested, browser and device type | host, Cloudflare |
| Sensitive personal information | account sign-in details, only for customers who create an account | nobody; kept for signing in |
Cookies for the cart
The site sets cookies that keep your cart and checkout session working, cookies that keep you signed in if you open an account, and a Cloudflare security cookie, while no advertising or analytics cookies are set at all, which is why no banner asks for cookie consent. A Global Privacy Control signal from your browser is honored as an opt-out request, even though there is no sale or sharing for it to switch off.
Safeguards for stored records
Order records sit behind HTTPS and password-protected accounts held only by the people who run the store, the fulfillment partner sees just the fields needed to ship, and no system can promise perfect security. If a breach ever affects your information, notice reaches you within 45 days, as Arizona’s breach notification law, A.R.S. § 18-552, requires.
Retention periods for each record type
Each kind of record is kept for the period below and then deleted.
| Record | Kept for | Reason |
|---|---|---|
| Orders and payment records | 7 years from the order day | tax and accounting rules |
| Help desk emails and photos | 24 months from the last message | follow-up on returns and claims |
| Server and security logs | 60 days from the visit | site security |
| Account details | until you close the account or ask for deletion | signing in |
Rights for customers in every state
Customers in any state may request access to their personal information, a correction, a deletion or a portable copy, and they can switch off any sale, sharing or targeted advertising. A request emailed to contact@missfittribe.com with the subject line “Privacy request” is confirmed within 10 business days from the request and answered within 45 days from the request, with one 45-day extension when notice is given, and verification works by matching the email address and an order number already on file.
An appeal for a denied request
A denied request can be appealed by replying to the decision with the word “Appeal”, and the appeal is answered within 45 days from the reply, after which a denial that still stands can be taken to the Attorney General of your state.
Extra notices for California residents
Under the California Consumer Privacy Act as amended by the California Privacy Rights Act, residents of California have every right listed above, plus a right to restrict how sensitive personal information is used, which here covers nothing beyond signing in, and a right to equal prices and service after using any of them. The Do Not Sell or Share My Personal Information page, linked in the footer, covers opt-outs in detail, and no personal information goes to third parties for their own direct marketing.
State laws for privacy rights in 2026
As of 2026, comprehensive consumer privacy laws are in effect for residents of California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia, and customers in Arizona and every other state get the same process and the same deadlines.
Protections for children
Orders come only from buyers aged 18 or older, personal information is not knowingly collected from children under 13, and data about a person under 16 is not sold or shared under any circumstances. A parent who believes a child sent information can email the help desk, and the record is deleted within 10 business days from that email.
Outside websites for payments and tracking
A payment completed in PayPal’s window and a tracking page on a carrier’s site fall under those companies’ own privacy notices, which are separate from this one.
Contact for privacy requests
For a privacy request, write to contact@missfittribe.com and put “Privacy request” in the subject line, or call +1 (480) 485-6398 Monday through Friday from 9 AM to 6 PM MT, and every message gets a first reply within 1 business day.
MELISSA NICOLE VARELA FUNY LLC · EIN 99-4915860 · 3778 E Libra Pl, Chandler, AZ 85249, United States