Privacy Policy

Purposes that your data serves

We use personal data to take payment for an order, to have the dress packed and delivered, to send the emails that belong to an order, to answer messages, to handle returns and refunds, to stop fraud and to keep the tax and accounting records that the law requires. We do not use it for advertising, and we do not build profiles of customers.

Details that you type in

At checkout the customer gives a name, an email address, a phone number, a delivery address and a billing address, and chooses the dresses and sizes. A message to the help desk or through the contact form adds whatever the customer writes, including photos sent with a return. There are no customer accounts on gorgetly.com, so no passwords are created or stored.

Information that the site collects on its own

The server records the IP address, the browser type, the pages requested and the time of each visit, which every website does, and we use those logs only to fix errors and to block attacks. Cloudflare also adds its Web Analytics script to each page, which counts visits and page load times without setting cookies, and the cart and checkout use cookies, which are covered further down this page.

Data that comes from payment and delivery partners

The payment gateway only confirms to us whether the payment succeeded and which card type and final four digits were used, so the full number is never ours to see. Carriers send tracking updates for each parcel, and the payment processors can flag an order that looks like fraud.

Recipients who handle part of an order

Each company below receives only what it needs for its part of the order:

  1. To pack and label your parcel, our fulfillment partner in China gets your name, your delivery address, your phone number and the list of dresses.
  2. The carrier on each leg sees the same name, address and phone number, and nothing about payment.
  3. MeshCheckout, our payment gateway, passes card payments to Stripe and PayPal payments to PayPal, and these companies receive the payment details needed to approve the charge.
  4. Brevo, our email delivery service, receives the email address and the content of order emails.
  5. Our website host and Cloudflare, which protects the site and runs Cloudflare Web Analytics on it, process the technical data of each visit.

Categories that each service provider sees

The service providers above act on our instructions and may not use the data for their own purposes. Identifiers (name, email, phone) and delivery addresses go to the partner and the carriers, payment data stays with MeshCheckout, Stripe and PayPal, email content goes to Brevo, and device data goes to the host and Cloudflare.

A sale of data that never happens

We do not sell personal data to anyone, and we do not share it with advertisers or data brokers for cross-context behavioral advertising. No ad pixel and no social media button runs on gorgetly.com, and the only analytics, Cloudflare Web Analytics, works without cookies and does not follow anyone to other websites, so there is no data stream that could be sold or shared.

AI training that your data stays out of

Nothing we hold is used to train an AI model of any kind, large language models included, and nothing is sold or licensed for that purpose.

Countries where the data travels

Order data is handled in the United States, where the site and the help desk operate, and in China, where our partner packs the parcel; data held in China is subject to Chinese law. Brevo is based in France, so order emails can be processed in the European Union.

Cookies that keep the cart working

Gorgetly uses only the cookies that the shop cannot work without: WooCommerce cookies that remember the cart and the checkout session, cookies that the payment fields set to prevent fraud, and a security cookie that Cloudflare can set to tell visitors from bots. None of them tracks a visitor across other websites, so no cookie banner is needed.

Retention periods that apply to each record

We keep order and payment records 7 years because tax and accounting rules require it, help desk emails 2 years after the last message and server logs 30 days. After those periods the data is deleted, or kept only in a form that no longer identifies anyone.

Safeguards that protect the data

The site runs on HTTPS, only the store’s own operators have administrator access, and card details stay with the payment processors. No system is free of risk, so if a breach affects your data, the section on breaches below says when you will hear from us.

Rights that every customer has

Every customer, whatever the state, can ask what personal data we hold, ask for a copy, correct it, delete it and opt out of any sale or sharing. To use these rights:

  1. Start a new email with Privacy request as its subject.
  2. Address it to contact@gorgetly.com from the email address on your orders, so that we can find your records, and say which right you want to use.
  3. Answer our confirmation email, which arrives within 3 business days and may ask one question to check that the request is yours.

We answer within 45 days, and if a request needs more time we say so within those 45 days and take at most 45 more. Records that the law makes us keep, such as tax records, can be withheld from deletion until the period above ends.

California residents who have extra rights

Residents of California have the rights in the California Consumer Privacy Act and its 2020 amendment, the California Privacy Rights Act: to know, to delete, to correct, to opt out of any sale or sharing and to restrict how sensitive personal information is used. Gorgetly has nothing to stop selling or sharing, but a resident who wants an opt-out on record can still get one through Do Not Sell or Share My Personal Information.

States whose privacy laws are in force

As of October 3, 2026, a general consumer privacy law is in force in 19 states. Five of them are in the West: California, Colorado, Montana, Oregon and Utah. Four are in the Midwest: Indiana, Iowa, Minnesota and Nebraska. Six are in the South: Delaware, Kentucky, Maryland, Tennessee, Texas and Virginia. Four are in the Northeast: Connecticut, New Hampshire, New Jersey and Rhode Island. Customers in every state, New York included, get the same rights and the same deadlines from us, so nobody needs to check their state’s law before writing.

Appeals that follow a refusal

If we refuse a privacy request in whole or in part, the answer explains why, and you can appeal by replying with the word Appeal within 60 days. We answer an appeal within 45 days, and if it is refused you can contact the attorney general of your state.

Sensitive information that checkout never collects

Checkout has no field for a Social Security number, government ID, health details, precise location or biometric data, and the help desk never asks for any of them.

Children who are under 13

Gorgetly sells dresses for adults and does not knowingly collect personal data from children under 13. If a parent finds that a child under 13 has given us personal data, we delete it after the parent writes to the help desk.

Breaches that trigger a 30-day notice

If a breach exposes your personal data, we notify you by email without unreasonable delay and within 30 days after we discover it, as New York General Business Law § 899-aa requires, and we notify the authorities that the law names.

Links that lead to other sites

Once you click through to a carrier, to PayPal or to any other outside site, that site’s own privacy rules apply and this page stops.

The scope and the date that apply to this page

This policy covers gorgetly.com, the checkout, the contact form and the emails sent about orders, and it was last updated on October 3, 2026. Changes are posted on this page with a new date, and a change that affects how existing data is used is also emailed to customers with an open order.

Requests that go to the help desk

If you need Where to find it
To opt out of sale or sharing Do Not Sell or Share My Personal Information
How payment data is handled Payment Policy
The company that holds your data About Us
A person contact@gorgetly.com or +1 (716) 426-1285, 7:50 a.m. to 5:30 p.m. Eastern, Monday through Friday, with a reply within 1 business day; the form on the Contact Us page