Privacy Policy

Velar Logistic LLC DBA Hebes by Chloe ("Ebes Market", "Hebes by Chloe", "we", "us", or "our") operates this ecommerce website and related customer services. This Privacy Policy explains what personal information we collect, how we use it, how we share it, and the choices available to you.

This Policy applies globally and includes disclosures for the EU/EEA and UK General Data Protection Regulation (GDPR/UK GDPR), the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), and other applicable US state privacy laws.

We collect information in the following ways:

Information you provide

• Account and contact details, such as name, email address, phone number, billing address, shipping address, and account login information.
• Order and transaction details, such as products viewed or purchased, cart contents, payment status, returns, exchanges, warranty requests, and customer service history. Payment card data is handled by payment processors; we do not store full card numbers.
• Communications, such as messages sent through forms, email, live chat, social media, or customer support.

Information collected automatically

• Usage data, such as pages viewed, clicks, search terms, product interactions, referring pages, and checkout events.
• Device and log data, such as IP address, browser, operating system, device identifiers, approximate location, and timestamps.
• Cookies and similar technologies, described in Section 6 below.

Information from third parties

• Payment, shipping, fraud prevention, analytics, advertising, and ecommerce service providers.
• Social platforms or messaging services when you interact with our pages, ads, or login features.
• Publicly available or commercially available information where permitted by law.

We use personal information to:

• Operate the website, cart, checkout, account, customer support, returns, exchanges, warranty, and order fulfillment services.
• Process transactions, send order confirmations, shipping updates, receipts, support messages, and service notices.
• Personalize product recommendations, store preferences, and shopping experiences where permitted.
• Measure site performance, understand product interest, improve services, and troubleshoot technical issues.
• Send marketing messages or show advertising where you have consented or where allowed by law.
• Detect, prevent, and investigate fraud, abuse, security incidents, and illegal activity.
• Comply with legal, tax, accounting, consumer protection, and regulatory obligations.

GDPR/UK GDPR legal bases

• Contract performance - to process purchases, provide accounts, and deliver requested services.
• Legitimate interests - to secure and improve the website, prevent fraud, respond to requests, and operate our business, where not overridden by your rights.
• Consent - for non-essential analytics or marketing cookies, certain marketing communications, and other processing where consent is required.
• Legal obligation - to meet tax, accounting, product safety, consumer protection, and regulatory duties.

We do not sell personal information for money. We may share information in the following circumstances:

• Service providers and processors that help with hosting, ecommerce infrastructure, payment processing, shipping, analytics, advertising, fraud prevention, customer support, email, SMS, and business operations.
• Advertising and analytics partners where you have consented or where law allows. California law may treat some cross-context advertising disclosures as "sharing"; you can reject marketing cookies through our cookie banner.
• Legal and safety purposes, including responding to lawful requests, enforcing policies, protecting rights, preventing fraud, or addressing security incidents.
• Business transfers, such as a merger, acquisition, financing, reorganization, or sale of assets.
• With your direction or consent, such as when you connect a third-party service or ask us to share information.

We are based in the United States. If you access the website from outside the United States, your information may be transferred to and processed in the United States or other countries where we or our service providers operate.

For personal data transferred from the EEA, UK, or Switzerland, we use appropriate safeguards where required, such as Standard Contractual Clauses or other legally recognized transfer mechanisms.

We retain personal information for as long as reasonably necessary for the purposes described in this Policy, including providing services, maintaining accounts, fulfilling orders, resolving disputes, preventing fraud, and complying with legal obligations. Retention periods vary based on the type of information, our relationship with you, legal requirements, and business needs. When information is no longer needed, we delete, de-identify, or aggregate it where practical.

We use cookies, pixels, SDKs, local storage, and similar technologies. You can manage non-essential choices through the cookie banner on our website.

You can also configure your browser to block cookies. Blocking essential cookies may affect account, cart, checkout, or security features.

All users

• Access, correct, update, or delete certain account information.
• Opt out of marketing emails by using unsubscribe links or contacting us.
• Manage non-essential cookie preferences through the cookie banner.

EU/EEA and UK residents

Subject to legal limits, you may request access, correction, deletion, portability, restriction, objection, or withdrawal of consent. You may also lodge a complaint with your local data protection authority.

California residents

California residents may request to know/access, delete, correct, opt out of sale or sharing, limit use of sensitive personal information where applicable, and not receive discriminatory treatment for exercising privacy rights. We do not sell personal information for money. To opt out of sharing for cross-context behavioral advertising, reject marketing cookies in the cookie banner.

Other US state rights

Residents of Virginia, Colorado, Connecticut, Texas, and other states may have rights to access, correct, delete, port data, opt out of targeted advertising, sale, or profiling, and appeal certain decisions.

To exercise rights, contact us using the details below. We may need to verify your identity and, where applicable, verify an authorized agent.

We use administrative, technical, and organizational safeguards designed to protect personal information, including encryption in transit, access controls, and monitoring. No internet or storage system is perfectly secure, so we cannot guarantee absolute security.

Our website is not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child provided personal information to us, please contact us so we can take appropriate action.

Our website may link to third-party websites, social platforms, payment processors, shipping providers, or embedded services that we do not control. Their privacy practices are governed by their own policies.

If you used a Facebook login or connected Facebook app for Hebes by Chloe, you can remove app activity from Facebook by going to your Facebook account Settings & Privacy, selecting Apps and Websites, finding the Hebes by Chloe app, and clicking Remove. You may also contact us to request deletion of personal information we control.

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date and provide additional notice where required by law.

If you have questions, concerns, or privacy requests, please contact us:

• Email: info@hebesbychloe.com
• Phone: +1.714.643.9114
• Brand: Velar Logistic LLC DBA Hebes by Chloe / Ebes Market

EU/EEA representative information, where required, is available by contacting us at the email above.