Olivia Grace Bridal LLC, d/b/a Dearly Beloved Bridal (“we,” “us,” “our”)

Website: dearlybelo3dev.wpenginepowered.com

Email: hello@dearlybelo3dev.wpenginepowered.com • Phone: 830-400-0803

1) Who we are

Olivia Grace Bridal LLC, d/b/a Dearly Beloved Bridal (“we,” “us,” “our”). This policy explains what personal data we collect on dearlybelo3dev.wpenginepowered.com and our related pages, how we use and share it, and the choices and rights you have.

Contact: privacy@dearlybelo3dev.wpenginepowered.com (or hello@dearlybelo3dev.wpenginepowered.com)

Mailing address: 4343 McCullough Ave, San Antonio, TX 78212.

2) What this policy covers

  • Our website, product pages, checkout, contact forms, and marketing (email, advertising).

  • Pixels and tags used for analytics, measurement, and ads (e.g., Google, Meta, Reddit).

  • Not covered: third-party sites we link to.

3) The data we collect

  • You provide it: name, email, phone, shipping/billing address, order details, messages to us, return/fit info.

  • Collected automatically: device and browser info, IP address (to infer general location), pages viewed, events (clicks, scrolls), referring/exit pages, and cookie identifiers.

  • From partners: payment processors (transaction results, fraud signals), delivery partners (status), advertising platforms (campaign/attribution data).

4) How we use your data (purposes)

  • To sell and ship orders (payments, fraud prevention, delivery).

  • Customer support (questions, returns, sizing help).

  • Website performance & analytics (measure traffic, fix issues, improve content).

  • Advertising & measurement (reach likely-interested shoppers; limit irrelevant ads; measure performance). Where required, we do this only with your consent (see §6). Google requires sites in the EEA/UK to obtain valid consent before storing/reading cookies for ads/analytics and before using personal data for personalization. 

  • Legal, security, and compliance (fraud, abuse, recordkeeping).

5) The tools and partners we use (disclosures)

Payments

We process payments via Stripe / WooCommerce Payments and PayPal. These processors act as independent controllers for some activities (e.g., fraud prevention) and processors for others. See their privacy pages for how they handle data and global transfers. 

Analytics, tags & advertising

  • Google Analytics 4, Google Ads, and Google Tag Manager. For visitors in the EEA/UK, we implement Google’s EU User Consent Policy and Consent Mode v2 so ad/analytics behavior reflects your consent choices (e.g., ad_user_data, ad_personalization signals). If you decline, we limit or adjust data collection accordingly. 

  • Personalized advertising (e.g., remarketing) follows Google’s personalized ads policy. 

  • Meta (Facebook/Instagram) Pixel and Reddit Pixel may be used for measurement/ads; where required, we obtain consent before setting cookies/identifiers used for advertising. (The UK ICO clarifies advertising/analytics cookies are non-essential and require consent.)    For Reddit’s pixel and consent guidance, see Reddit’s advertiser help. 

Note (EEA/UK): If you do not consent, we disable/limit these pixels or run them in a non-personalized, consent-mode state as applicable. 

Email & SMS marketing

If you opt in, we send promotions or updates; you can unsubscribe at any time. U.S. commercial email must include a working opt-out and postal address (CAN-SPAM).

6) Cookies, consent & your choices

Consent banner (EEA/UK and where required)

On your first visit we present a consent banner to choose Accept, Reject, or Manage categories (e.g., essential, analytics, ads). Until you consent, we don’t set non-essential cookies/pixels for ads/analytics. This aligns with the UK ICO’s guidance on non-essential cookies. 

Google Consent Mode v2

We use Consent Mode v2 so Google tags adapt to your choices for ad_user_data and ad_personalization. This is required to maintain full ads measurement in the EEA/UK. You can change or withdraw consent anytime via our cookie settings. 

“Do Not Sell/Share” & Global Privacy Control (U.S. states)

If you are in California and certain other U.S. states, you may opt out of “selling” or “sharing” personal information (including for cross-context behavioral advertising). We honor Global Privacy Control (GPC) signals sent by your browser to automatically apply this opt-out. 

How to manage:

  • Use our Cookie/Privacy choices link in the footer to manage consent and opt-outs.

  • Send us an email (privacy@dearlybelo3dev.wpenginepowered.com) with “Privacy Request” in the subject.

  • For email marketing, click Unsubscribe in any message (required by CAN-SPAM).

7) Legal bases for processing (EEA/UK visitors)

  • Contract: to fulfill purchases/support.

  • Consent: analytics, remarketing, ad personalization, certain cookies/pixels. 

  • Legitimate interests: security, fraud prevention, service improvement (only where consent isn’t required and interests aren’t overridden).

  • Legal obligations: tax, accounting, consumer law.

8) How we share data

We share limited data with:

  • Service providers (hosting/CDN, email service, customer support tools).

  • Payments & fraud prevention (Stripe/WooCommerce Payments; PayPal). 

  • Analytics/ads partners (Google, Meta, Reddit) when enabled by your consent/opt-in; we configure tools to respect your settings (see §6). 

  • Legal and safety reasons (e.g., fraud, court orders). Stripe notes it may disclose data to public authorities if required by law; similar obligations may apply to other processors. 

We don’t sell your personal information for money. Where state laws define “sale” or “sharing” to include certain ad/analytics disclosures, you can opt out (see §6). 

9) Data retention

We keep data as long as needed for the purposes above—typically:

  • Orders & support records: as required by tax/accounting laws.

  • Marketing data: until you unsubscribe or delete cookies/identifiers; consent logs are kept to evidence compliance.

  • Website logs/fraud prevention: for a reasonable period to protect our services.

10) Security

We use administrative, technical, and physical safeguards appropriate to our size and the nature of data processed (e.g., access controls, TLS encryption in transit, hardened hosting). Payment details are processed by PCI-compliant processors (see their policies). 

11) International transfers

Our providers may process data in the U.S. and other countries. Processors like Stripe state their participation in transfer frameworks and may disclose to authorities where legally required. 

12) Your privacy rights

A) California & other U.S. state rights (CPRA and similar laws)

Depending on your state, you may have the right to know/access, correct, delete, opt out of sale/share/targeted advertising, and limit the use of sensitive data. You can also use the Global Privacy Control (GPC) signal to opt out of sale/share automatically, which we honor. 

How to exercise: use our privacy choices link or email privacy@dearlybelo3dev.wpenginepowered.com. We won’t discriminate for exercising your rights.

B) EEA/UK GDPR rights

You have the right to be informed, access, rectification, erasure, restriction, portability, object, and rights related to automated decision-making/profiling. We provide clear privacy information under Articles 13/14 and respond to requests within the allotted timelines. 

How to exercise: email privacy@dearlybelo3dev.wpenginepowered.com. If unresolved, you can complain to your local data protection authority (e.g., UK ICO). 

13) Children’s privacy

Our site is not directed to children under 13 and we do not knowingly collect personal information from them. Operators that knowingly collect from children must comply with the FTC’s Children’s Online Privacy Protection Rule (COPPA), which requires verified parental consent and specific disclosures; if you believe a child under 13 provided data to us, contact us and we’ll delete it. 

14) Email marketing compliance

We include a clear unsubscribe in every marketing email and a valid postal address, per CAN-SPAM.

15) Your controls (quick links)

  • Cookie/Privacy choices: [link to your consent banner preferences / CMP]

  • Do Not Sell/Share (U.S.): [link to opt-out page]

  • Unsubscribe email: link in any message

  • Contact: privacy@dearlybelo3dev.wpenginepowered.com

16) Changes to this policy

If we materially change what we collect or how we use it, we’ll update this page and change the date above. Where required, we’ll ask for consent again (e.g., for new cookie categories). 


Add-on: what to implement on your site (so the policy matches reality)

  1. Consent banner / CMP with categories (Essential / Analytics / Ads) and the ability to revise choices at any time. Map these choices to Google Consent Mode v2 signals (ad_user_data, ad_personalization, ad_storage, analytics_storage). 

  2. GPC honoring: ensure your CMP or a small script listens for the Global Privacy Control signal and flips your U.S. Do Not Sell/Share state when detected. 

  3. Tag governance: only fire GA4/Ads/Meta/Reddit pixels after consent in regions where required; otherwise run in limited/consent-mode (no ad personalization). 

  4. Footer links: “Privacy Policy,” “Cookie/Privacy Choices,” and “Do Not Sell or Share My Personal Information.” (CPRA). 

  5. Email: include a physical mailing address in the footer or in emails to satisfy CAN-SPAM.


Sources (key references)

  • Google EU User Consent Policy + guidance, and Consent Mode v2 docs for ad_user_data / ad_personalization. 

  • Google Ads personalized advertising policy (remarketing/disclosure expectations). 

  • UK ICO cookie guidance (non-essential cookies—ads/analytics—require consent). 

  • Reddit Pixel help/policy. 

  • California Global Privacy Control & CPRA “Do Not Sell/Share” obligations. 

  • CAN-SPAM (FTC).

  • GDPR Articles 13/14 transparency and individual rights (ICO & text). 

  • Stripe & PayPal privacy resources. 

  • COPPA basics and compliance (FTC).