Privacy Policy - NEW

Tori Richard Privacy Policy

Last Revised: August 2026

1. Introduction

This website is owned and operated by TR Retail LLC d/b/a Tori Richard ("Tori Richard," "we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit toririchard.com or any other Tori Richard-branded site, mobile application, or service that links to this Policy (collectively, the "Services"). By using the Services, you agree to the practices described in this document.

2. Our Ecommerce Platform (Shopify)

Shopify Inc. hosts our online store, stores your data on secure servers protected by firewalls, and is certified to the Payment Card Industry Data Security Standard (PCI-DSS). Direct payment transactions are encrypted, processed, and retained only as long as needed to complete your purchase. For more information, visit: Shopify's Privacy Policy.

3. Notice at Collection: Categories, Sources, and Purposes

We collect personal information from you in connection with the following activities:

  • Placing an order on our website
  • Making a purchase at a Tori Richard retail store
  • Returning or exchanging a previously purchased item
  • Making an inquiry or contacting customer service
  • Receiving a gift package
  • Creating an account on toririchard.com
  • Subscribing to receive our emails or SMS messages
  • Entering a contest or sweepstakes
  • Participating in a marketing survey, promotion, or event
  • Navigating our website (see Cookies section below)
  • Engaging with Tori Richard on social media

The categories of personal information we may collect include:

  • Identifiers: Name, email address, postal address, phone number, IP address
  • Commercial information: Products viewed, purchased, and returned; order history; shopping preferences
  • Payment data: Cardholder name, billing address, last four digits of payment card (full payment data is processed and encrypted by our payment processors and is never stored by Tori Richard)
  • Internet and network activity: Device type, browser type, operating system, pages visited, referring URLs, session duration
  • Geolocation data: General location derived from IP address
  • Demographic information: Gender, birthday, and preferences you choose to provide
  • Sensitive personal information: Account login credentials

This data is collected directly from you, automatically through cookies and similar technologies, and from third-party sources. We may combine the information we collect with additional information from other sources.

4. How We Use Your Information

We use your personal information for the following purposes:

  • To process, fulfill, and manage your orders, including order confirmation, shipment tracking, and delivery notifications
  • To communicate with you about our products, services, contests, and promotions via email, postal mail, telephone, text message, or other means — unless you have directed us not to contact you with promotional communications
  • To administer contests, sweepstakes, and other promotions
  • To personalize your shopping experience and provide tailored product recommendations
  • To analyze trends, usage patterns, and site performance
  • To improve our website design, product selection, merchandise assortment, and customer service
  • To detect and prevent fraud, unauthorized transactions, and other illegal activities
  • To protect the security and integrity of our websites and business
  • To comply with applicable laws, regulations, and legal processes
  • To support loyalty, referral, or rewards programs

5. Cookies, Pixels, and Similar Technologies

We and our partners use cookies, pixels, and similar tracking technologies for site functionality, analytics, and advertising. Cookies are small text files placed on your device that help us recognize your browser, remember your preferences, and understand how you interact with our website.

Cookie Categories

We classify cookies into the following categories:

  • Strictly Necessary Cookies: These cookies are essential for core site functions such as shopping cart functionality, account authentication, checkout, and consent management. They cannot be disabled. This category includes cookies set by our consent management platform, OneTrust, which records and stores your consent preferences (e.g., the OptanonConsent cookie).
  • Functional Cookies: These cookies enable enhanced functionality and personalization, such as remembering your language preferences, recently viewed items, or login status. Examples include cookies set by Shopify and Back in Stock.
  • Analytics and Performance Cookies: These cookies help us understand how visitors interact with our website by collecting information about pages visited, time spent on the site, and site errors. These cookies do not directly identify you. Examples include cookies set by Google Analytics (GA4).
  • Marketing and Advertising Cookies (Targeting Cookies): These cookies are used to deliver relevant advertisements, measure ad campaign performance, and build audience profiles for targeted marketing. They may track your activity across websites. Examples include cookies set by Meta Pixel, Google Ads, Klaviyo, and Yotpo.

Consent Management (OneTrust)

We use OneTrust as our consent management platform (CMP) to manage your cookie preferences and ensure compliance with applicable privacy laws. When you visit our website, OneTrust displays a cookie consent banner that allows you to accept or decline non-essential cookies. Your consent preferences are recorded and stored by OneTrust on our behalf. OneTrust processes this consent data as a data processor under our direction.

OneTrust may set its own strictly necessary cookies (such as the OptanonConsent and OptanonAlertBoxClosed cookies) to remember your consent choices across sessions. These cookies are classified as strictly necessary because they are required to fulfill our legal obligations around consent management.

OneTrust also performs periodic automated scans of our website to detect cookies, tags, trackers, pixels, and similar technologies, and to ensure that our cookie disclosures remain accurate and up to date.

Managing Your Cookie Preferences

You can manage your cookie preferences at any time through any of the following methods:

  • Cookie Preference Center: Click the "Cookie Settings" link in our website footer to open the OneTrust preference center, where you can enable or disable specific cookie categories
  • Global Privacy Control (GPC): Our site recognizes and honors GPC signals sent by your browser, which are treated as a request to opt out of the sale or sharing of personal information via cookies and tracking technologies
  • Browser settings: Most browsers allow you to block or delete cookies through their settings. Note that blocking certain cookies may impact site functionality
  • Third-party opt-out tools:

If you disable or decline non-essential cookies, you may still use our website, but some features — such as personalized recommendations, saved preferences, and certain interactive elements — may not function as intended.

Do Not Track / Global Privacy Control

Our website responds to Global Privacy Control (GPC) signals. When we detect a GPC signal from your browser, we treat it as a valid request to opt out of the sale or sharing of your personal information as defined under applicable state privacy laws, including the CCPA/CPRA. Some browsers also offer a "Do Not Track" (DNT) signal; however, there is no universally accepted standard for how websites should respond to DNT signals, and our site does not currently respond to DNT separately from GPC.

6. How We Disclose Information

We do not sell personal information for monetary value. We may share personal information with the following categories of third parties:

  • Service providers who perform services on our behalf, such as order fulfillment, shipping, payment processing, email and SMS marketing, customer service, analytics, and returns processing (see Appendix below)
  • Analytics and advertising platforms that help us understand site traffic and deliver relevant advertising
  • Third-party marketing partners for commercial purposes, including co-branded promotions
  • Legal and regulatory bodies when required by law, regulation, legal process, or governmental request
  • Business transfer parties in connection with a merger, acquisition, reorganization, or sale of assets

We may disclose de-identified or aggregated information to third parties at our discretion. We do not authorize our service providers to use your information for any purpose other than providing services to Tori Richard.

You can opt out of sharing as defined under California law — see Section 7 below.

7. Your Privacy Rights

All Customers

Regardless of your state or country of residence, you have the right to:

  • Request information about the types of personal information we share with third parties for direct marketing purposes
  • Request that your personal information be deleted, erased, or removed from our records
  • Opt out of having your personal information shared with third parties for marketing purposes

California Residents (CCPA/CPRA)

Under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), California residents have additional rights, including:

  • Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you
  • Right to Delete: Request deletion of your personal information, subject to certain exceptions
  • Right to Correct: Request correction of inaccurate personal information
  • Right to Opt Out of Sale/Sharing: Direct us not to sell or share your personal information for cross-context behavioral advertising
  • Right to Limit Use of Sensitive Personal Information: Request that we limit use of sensitive personal information to purposes necessary to provide the Services
  • Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

You may exercise these rights by:

  • Emailing us at trestore@toririchard.com
  • Calling us at 1.877.400.0995
  • Using the Global Privacy Control (GPC) signal in your browser
  • Clicking the "Do Not Sell or Share My Personal Information" link in our website footer

We will verify your identity before processing your request and respond within the timeframes required by applicable law.

Other State Privacy Laws

Residents of states with comprehensive consumer privacy laws (including but not limited to Virginia, Colorado, Connecticut, Texas, Oregon, Montana, and others as enacted) may have similar rights under their respective state laws. Please contact us using the information below to exercise your rights.

8. SMS Enrollment and Mobile Privacy

We value your privacy and the information you consent to share in relation to our SMS marketing service. We use this information to send you text notifications (including order updates and abandoned checkout reminders), text marketing offers, and transactional texts, including requests for reviews.

Our website uses cookies to keep track of items you place in your shopping cart, including when you have abandoned your checkout. This information is used to determine when to send cart reminder messages via SMS.

For complete details regarding our SMS marketing practices, please see our SMS / Mobile Terms of Service.

9. Promotional Communications

You may opt out of promotional communications at any time:

  • Email: Click the "unsubscribe" link at the bottom of any promotional email. Please allow up to 72 hours for this request to take effect.
  • SMS: Reply STOP to any text message, or text STOP to +18445691149
  • Account preferences: Log in to your account to adjust your communication preferences
  • Contact us: Email trestore@toririchard.com or call 1.877.400.0995

Please note that even if you opt out of promotional communications, we may still send you transactional messages related to your orders, account, or other service-related matters.

10. Data Security

We use industry-standard security measures to protect your personal information, including HTTPS encryption across our website, PCI-DSS compliant payment processing, and security monitoring tools. However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

11. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, or as required by applicable law, regulation, or legal obligation. When personal information is no longer needed, we will delete or de-identify it in accordance with our data retention practices.

12. Children's Privacy

Our Services are not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us at trestore@toririchard.com.

13. International Data Transfers

Our Services are operated in the United States. If you are located outside the United States, please be aware that your personal information may be transferred to, stored, and processed in the United States or other jurisdictions that may have different data protection laws than your country of residence. By using our Services, you consent to such transfers.

14. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. If we make material changes, we will post a notice on our website and update the "Last Revised" date at the top of this page. Your continued use of our Services after any changes constitutes your acceptance of the updated Privacy Policy.

15. Contact Us

If you have any questions about this Privacy Policy, our information practices, or wish to exercise your privacy rights, please contact us:

Tori Richard Customer Service 1891 N. King Street Honolulu, HI 96819 Phone: 1.877.400.0995 Email: trestore@toririchard.com

Appendix: Service Providers

We employ the following categories of service providers to perform tasks on our behalf and to assist us in providing the Services. For more information, please contact us at trestore@toririchard.com.

  • Shopify. We use Shopify as our ecommerce platform to power our online store and process transactions. See Shopify's Privacy Policy.
  • Klaviyo. We use Klaviyo for email marketing, SMS marketing, and customer engagement communications. See Klaviyo's Privacy Notice.
  • Google Analytics (GA4). We use Google Analytics to analyze website traffic and user behavior. See How Google Uses Data and Google's Privacy Policy.
  • Meta (Facebook/Instagram). We use Meta's advertising and analytics tools for targeted advertising and campaign measurement. See Meta's Privacy Policy.
  • Google Ads. We use Google Ads for search and display advertising. See Google's Privacy Policy.
  • Loop Returns. We use Loop Returns to facilitate product returns and exchanges. See Loop's Privacy Notice.
  • OneTrust. We use OneTrust for cookie consent management and privacy compliance. See OneTrust's Privacy Policy.
  • TeamWork Commerce. We use TeamWork Commerce for retail point-of-sale and inventory management across our retail stores.
  • Yotpo. We use Yotpo to collect and display customer product reviews and ratings. See Yotpo's Privacy Policy.
  • Zendesk. We use Zendesk for customer service and support ticket management. See Zendesk's Privacy Notice.
  • Back in Stock. We use Back in Stock to notify you by email when a product you are interested in becomes available for purchase. See Back in Stock's Privacy Policy.
  • Boost Commerce. We use Boost Commerce to power product search and filtering functionality on our website. See Boost Commerce's Privacy Policy.
  • Triple Whale. We use Triple Whale for marketing analytics, attribution, and performance reporting across our advertising channels. See Triple Whale's Privacy Notice.
  • Wishlist Plus. We use Wishlist Plus to allow customers to save and manage wishlisted products on our website. See Wishlist Plus's Privacy Policy.
  • Eesel. We use Eesel to power AI-assisted customer support by connecting our knowledge base and help documentation. See Eesel's Privacy Policy.
  • DataFeedWatch. We use DataFeedWatch to manage and optimize our product data feeds for advertising and shopping channels such as Google Shopping and Meta. See DataFeedWatch's Privacy Policy.
  • Elevar. We use Elevar for server-side tracking, data layer management, and ensuring accurate conversion and analytics data across our marketing platforms. See Elevar's Privacy Policy.
  • Avalara. We use Avalara for automated tax calculation, compliance, and reporting on transactions processed through our website and retail operations. See Avalara's Privacy Policy.
  • Mandrill (Mailchimp Transactional Email). We use Mandrill, a Mailchimp product, to send transactional emails such as order confirmations, shipping notifications, and account-related communications. See Mailchimp's Privacy Policy.
  • Endear. We use Endear for retail clienteling, enabling our store associates to provide personalized outreach and communication to customers. See Endear's Privacy Policy.

This Appendix is provided for transparency and may be updated as our service providers change. The inclusion of a service provider does not imply endorsement, and each provider's use of your information is governed by their own privacy policies.