Free domestic shipping with $150 order or co-pay $10 …

Privacy Policy

Last updated: 16 September 2026

Bella Bohemian LLC (“Bella Bohemian,” “we,” “us,” “our”) is a small wife-and-husband shop. We operate from Fairfax, Virginia. This page explains what information we handle when you visit bellabohemian.com or place an order, and what we do not do with it.

This is a store policy written in plain language. It is not legal advice. If you do not agree with this policy, do not use the site or place an order.

Age

This site is for adults. You must be 18 or older to use the site, create an account, join the email list, submit personal information for an order, or complete a purchase. We do not offer a parent-or-guardian exception for buyers or subscribers under 18.

Separately, federal law (the Children’s Online Privacy Protection Act) treats 13 as the age below which an operator may not knowingly collect personal information from a child. This site is not directed at children. We do not knowingly collect personal information from anyone under 13. If we learn that we have, we will delete it.

If we have reason to believe a person under 18 has used the site, placed an order, or joined the email list, we will not keep doing business with that person. We will remove that address from the newsletter. An order that has not shipped will be cancelled and refunded. An order that has already been delivered stays with the recipient unless they demand the money back. If a refund is required by law, the goods must come back first — unused, undamaged, and in original condition, in the original packaging with original tags — at the buyer’s expense for insured tracked return shipping. A sealed box that was crushed on the way back is not original condition. Damage in return transit is on the buyer. A 30% restocking fee applies as on the Returns page except where the law requires a fuller refund. We will refuse later orders. We will delete personal information we are not required to keep for tax, fraud, or legal reasons. We do not run an identity check at checkout. We act on what we actually learn.

Who holds your information

The storefront and checkout run on Shopify. Shopify hosts the site and the order data. When you check out with Shop Pay, Shopify’s Shop Pay service handles the saved checkout details. When you check out with Klarna, Klarna handles the payment arrangement you choose. We do not sell or rent customer lists. We do not keep a full credit-card number on our own computers. Card data is processed by Shopify and the payment services you pick at checkout.

What we collect

If you place an order or write to us, we receive what you give us: name, email, phone if you include it, billing and shipping addresses, and order notes. Shopify also records ordinary technical data such as IP address, browser type, device, pages viewed, and cookies that keep a cart and a session working.

We keep a customer list in Shopify. It includes people who have placed an order and people who signed up for the newsletter without buying. Each record can carry a flag for whether that person opted in to the newsletter. Marketing email goes only to those who opted in. You can unsubscribe from the newsletter without deleting an order history.

We do not use Google Analytics. We run Rybbit Analytics on a privately hosted server in our home office. That machine is not a public cloud service. The instance serves only this shop. Nobody outside the shop has access to it. It records technical details such as IP address, browser and device type, pages and products viewed, and similar browsing signals so we can see what people look at and how the site is used, and so we have a record if we later need to look at abuse, fraud, or a lawful request from law enforcement. It is not configured to track orders, checkouts, names, emails, or payment details. That analytics data is never sold or given to other businesses. It is our operational record.

This log is kept as a whole. We cannot pick one person’s internet address out of it and delete only that. Use of the site includes that collection. If you do not accept it, do not use the site.

If you use Shop Pay or Klarna, those companies collect the information their own policies describe so they can complete the payment. Carriers (USPS, UPS, FedEx, freight lines, and similar) receive the name, address, and contact details needed to deliver the package or pallet. When an item is fulfilled by a supplier under a dropship or direct-ship arrangement, that supplier receives the name, shipping address, contact details, and product information needed to pack and send the order to you. They receive it only to fulfill that order. We do not publish a roster of those suppliers on this page. The set of suppliers can change as the catalog changes.

How we use it

We use this information to take the order, pack and ship it (including through a supplier when an item is dropshipped), send tracking, answer questions, handle returns where they apply, keep tax and accounting records, protect the store from fraud, and understand how the site is used so we can stock and present the catalog. We send order-related email when there is an order. Newsletter email goes only to people who opted in. You can stop the newsletter at any time.

Our first-party analytics are used only for our own store operations, security, and fraud review. They are not used to sell a list or to run ads on other companies’ sites.

Who else sees it

We share what is needed to run the shop, and only for that purpose:

  • Shopify, for hosting, checkout, and store operations.
  • Shop Pay and Klarna, if you choose them at checkout.
  • An AI shopping channel when you find a product there through Shopify Catalog / Agentic Storefronts (catalog data). Paying is done on our checkout.
  • Judge.me, if you write or read a product review on this site.
  • Carriers and freight companies, to deliver the order.
  • Suppliers who fulfill an item under a dropship or direct-ship arrangement, for that order only.
  • Accountants, insurers, or lawyers if a specific matter requires it.
  • Authorities when the law, a court order, or a good-faith safety need requires it.

Those companies have their own privacy pages. We do not write their rules. Official pages as of this writing:

AI shopping channels

Shopify lists our products in AI shopping channels through Shopify Catalog and Agentic Storefronts. Listing is on for ChatGPT, Meta, Microsoft Copilot, Shop, and other channels Shopify adds. That is a store-wide setting, not a switch for one visitor. Those channels receive product pages: titles, descriptions, images, prices, and whether something is in stock. That is catalog copy, not our customer list.

Paying for our goods is done on our checkout. Shop Pay may be the method. We have turned off the in-chat pay button on Meta and Microsoft Copilot. We remain the merchant of record. The order lands in our admin.

If you shop while logged into an AI account, what that service stores about your tastes, chats, and login is between you and that service. We do not run their account. We do not get to edit their logs. You ask them about that. You ask us about an order that landed in our admin.

We can turn catalog listing off for a channel in Shopify admin. That change is for the whole shop and can take up to seven days. Products may still appear if a service crawls the public website. A visitor who does not want an AI service to see public product pages should not ask that service to shop for them.

We do not sell personal information for money. We do not rent or trade customer lists. We do not “share” personal information for cross-context behavioral advertising as those words are used in California’s privacy statute. If a future tool would change that, we will say so on this page first.

Do Not Sell or Share

Because we do not sell or share personal information in the senses above, there is no extra “opt-out of sale” switch to flip for our own conduct.

You may email us and ask what we hold, ask us to correct an address, unsubscribe from the newsletter, or ask us to erase personal details on a customer record. In Shopify’s admin we can run Shopify’s “Erase personal data” process on a customer profile. Shopify’s own help text is that this removes personal details such as name and address. Information about what was sold and when may remain in the admin because it is a transaction record. Tax, accounting, warranty, fraud, and other legal duties can also require us to keep some records. We will do what Shopify actually permits and what those duties allow, and we will say so if a piece cannot be removed.

We cannot pick one person’s internet address out of our own analytics log and delete only that. Shopify, Shop Pay, and Klarna have their own privacy pages and request tools for data they hold as their own businesses.

State privacy rights

Depending on where you live, a state law may give you rights to know, access, correct, delete, or obtain a copy of personal information, or to opt out of sale, sharing, or targeted advertising. Virginia’s Consumer Data Protection Act applies to businesses over set volume or data-sale thresholds. Whether or not a particular statute formally covers a shop of our size, we will consider a sincere request about customer and order records in good faith, within the limits described above. Write to us using the contact details below and tell us what you are asking for. We may need to verify it is you.

Cookies

The site uses cookies and similar tools so the Shopify cart and checkout work. We do not load Google Analytics. Rybbit is configured as our own first-party traffic log; it is not used to track checkout or completed orders. You can block cookies in your browser; some cart features may then fail. The analytics host may still record an IP and the pages requested even when some cookies are blocked.

How long we keep it

Customer and order records are kept as long as tax, accounting, warranty, fraud-prevention, and legal duties require. Newsletter consent is kept while the person remains opted in and as needed to prove the opt-in. We do not keep full card numbers. The home-office analytics log is kept for store operations, security, and possible lawful process. It is not an order archive and is not edited person-by-person.

Security

Checkout runs over encrypted connections on Shopify. Our analytics live on a private home-office server that only we operate. Traffic to that server runs through a private encrypted tunnel. No method of transmission or storage is perfect. Please use a strong password on any Shop or Klarna account you create.

Where the shop is

We are a United States shop operating from Fairfax, Virginia. We write this policy and run the shop under the laws of the United States and the Commonwealth of Virginia. We do not appoint a foreign privacy representative and we do not run a separate policy for each country. If you order from outside the United States, local rules where you live may still apply to you; our day-to-day operations and the venue for a dispute with us follow Virginia and federal U.S. law to the extent that is allowed. Shopify and the payment and shipping companies we use may process data on servers in the United States and other countries where they operate. By using the site you understand that.

Changes

When we change this policy we will update the date at the top and post the new text at both privacy URLs on this site. The two addresses will carry the same wording.

How to reach us

Bella Bohemian LLC, Fairfax, Virginia. Use the Contact page at https://bellabohemian.com/pages/contact. Put “Privacy request” in the subject if you are asking about your information.