Privacy policy

Last updated: September 15, 2026

Keeping you cool is our specialty. So is being clear about your data. This Privacy Policy explains what we collect, why we collect it, who we share it with, how long we keep it, and the choices you have.

1. Who we are

imhotandfabulous.com is run by IMHOTAF LLC, a Florida limited liability company doing business as I'm Hot and Fabulous ("we," "us," "our"). We decide how and why your personal information is used, so under privacy laws we are the "controller" or the "business." Our legal name and business address are on our Contact information page. For anything about your privacy, email us at info@imhotandfabulous.com.

This policy covers our website, orders placed through our checkout, the Shop app and our Instagram and Facebook shops, custom and wholesale orders we handle by email and invoice, purchases at in-person events, and your messages with us on social media. Some international orders are sold by Global-e, our checkout partner and merchant of record. For those orders, Global-e also handles your information under its own privacy notice. If you buy from us on a marketplace such as eBay, that marketplace also handles your information under its own privacy notice.

Our store is hosted by Shopify. Shopify collects and processes your personal information to run our store and to provide its own services, as explained in section 5.

2. What we collect

What we collect depends on how you use our site and shop with us:

  • Contact details: your name, email address, phone number, and billing and shipping addresses, plus your company or organization name if you place a custom or wholesale order for one.
  • Order details: what you buy, your order history, and any returns, exchanges or cancellations.
  • Payment details: handled by our payment providers (Shopify Payments, Shop Pay, PayPal and, for invoices, QuickBooks Payments). We only see limited details, such as the card type and the last four digits. We never store full card numbers. If we agree on another way for you to pay an invoice, we keep the payment record we need to match it to your order.
  • Account details: if you create an account, the email address you sign in with, your saved addresses and your order history.
  • Wishlist: the fans you save to your wishlist, linked to your account if you're signed in, or to your browser if you're not.
  • Custom order details: your event date, guest count and plans, the artwork, logos, names, dates and photos you send us, your proof approvals, and the delivery details for your order. Photos you send may show other people, so please only send photos you have permission to share.
  • Your messages: emails, contact and quote form submissions (including how you heard about us and the ad or link that brought you to the form), social media messages, and booking details if you schedule a call with us through Calendly.
  • Chats with Breezy: Breezy, the assistant on our site, is an AI assistant, not a person. If you chat with Breezy, by voice or by text, the conversation is recorded and transcribed, including what you say or type and Breezy's replies. If you ask Breezy to book, look up, change or cancel a call with us, it uses the name and email address you give it to do that in Calendly. Please don't start a chat with Breezy if you don't want it recorded.
  • Reviews: your rating, review, photos and the name you choose to show, collected through Judge.me.
  • Sign-ups and alerts: the email address, and phone number if a form asks for one, that you give us for back-in-stock alerts, our sign-up offer, our newsletter or other offers, and your preferences.
  • Creator and referral codes: if you use a creator's or a friend's link or code, which one you used, so we can credit the person who sent you.
  • Device and usage information: your IP address, browser and device type, the pages you view, what you add to your cart, how you found our site, and your approximate location based on your IP address. We collect this with cookies, pixels and similar technology (see section 4).
  • Information from others: details from Facebook or Instagram lead forms you fill in, social media posts that tag us, information from our advertising and analytics partners, and, if you buy our fans from another store through Shopify Collective, the order and delivery details that store shares with us so we can ship to you. If you're a journalist or creator who requests samples from us through Press Hook, we also get the name and shipping details you give there.

You don't have to give us any information, but we need your contact, payment and delivery details to fill an order, and your artwork and event details to make a custom order. Everything else is optional.

We don't ask for sensitive information, such as government ID numbers, health information or precise location, and we don't use any information to infer sensitive characteristics about you. We don't use your voice or photos to identify you. If you choose to share something sensitive in a message, chat or review, we only use it to reply to you, to fill your order or to show your review as you wrote it.

3. How we use your information

  • To sell and deliver your order: process payments, ship orders, send order and shipping updates, handle returns, exchanges and refunds, and help with any questions.
  • To save your wishlist: keep the fans you save so you can come back to them.
  • To make custom orders: prepare quotes and proofs, produce your fans, and ship them to you.
  • To keep in touch: answer your questions, including through Breezy, book calls you ask for, send the back-in-stock alerts you asked for, and ask for a review after you buy.
  • For marketing: send marketing emails and offers if you've signed up, and show you ads for our fans on other sites and apps, such as Instagram, Facebook and Google.
  • To run and improve our business: understand how people use our site, measure our ads, see which ads, creators and referrals bring in orders, review Breezy chats to improve its answers, fix problems and improve our products.
  • To keep things safe and legal: prevent fraud, secure our site, keep tax and accounting records, enforce our terms, and meet our legal obligations.

We don't make decisions about you based only on automated processing that have legal or similarly significant effects, and we don't use profiling for that kind of decision. Our payment providers run automatic fraud checks that can flag an order. If yours is flagged, a person at our business reviews it, and you can email us to ask about it.

4. Cookies, pixels and similar technology

We and our partners use cookies, pixels, tags and similar technology to make our site work, remember your cart and preferences, understand how our site is used, and measure and personalize ads. These include tools from Shopify (including Shop Pay and our sign-up forms), Google (Google Analytics, Google Ads and Google Tag Manager), Meta (the Meta Pixel, for Facebook and Instagram), Judge.me, Notify Me (for back-in-stock alerts and wishlists) and ElevenLabs (for Breezy).

You can block or delete cookies in your browser settings, though parts of our site may not work properly without them. To opt out of sales, sharing and targeted advertising, visit our Your Privacy Choices page. Where the law gives you the right to opt out, we treat a Global Privacy Control (GPC) signal from your browser as a request to opt out of sales and sharing for that browser and any profile we link to it. We don't respond to other "Do Not Track" signals.

If you're in the EU, the EEA, the UK or Switzerland, you have the right to refuse cookies and similar technology that aren't essential for our site to work. Where our site shows you cookie choices, you can accept or decline them there, and you can block or delete cookies in your browser settings at any time.

5. Who we share it with

We share personal information only as needed for the purposes above. Some of these companies are located in other countries.

  • Shopify, which hosts our store and processes orders. Information you submit to our store is shared with Shopify. Shopify also collects and processes it for its own purposes, including to provide features that use information from shoppers' activity across Shopify stores, such as analytics, fraud prevention and advertising services, as described in the Shopify Consumer Privacy Policy. You can opt out of or object to some of Shopify's uses of your information at privacy.shopify.com.
  • Payment providers: Shopify Payments, Shop Pay, PayPal and Intuit QuickBooks Payments.
  • Shipping carriers, such as USPS and UPS, which receive your name, address and phone number to deliver your order.
  • Our production partner: for custom orders, the manufacturer that makes and ships your fans, and the online ordering platform we use to place the order with them, receive your artwork and the recipient's name, delivery address and phone number needed to ship them to you.
  • Global-e, for international orders it sells as merchant of record.
  • Creator programs: if you use a creator's link or code, we share the sale through Shopify Collabs so that creator is credited.
  • Service providers that help us run the business: email, calendar and file storage (Google Workspace and Dropbox), marketing email and sign-up forms (Shopify Email and Shopify Forms), accounting and invoicing (QuickBooks), scheduling (Calendly), reviews (Judge.me), back-in-stock alerts and wishlists (Notify Me), samples for press and creators (Press Hook), our on-site assistant (ElevenLabs, which powers Breezy, and the AI model providers ElevenLabs uses to generate Breezy's replies), tools that connect our business apps (Zapier), and AI tools that help us answer messages and manage orders (Anthropic's Claude).
  • Advertising and analytics partners: Meta and Google, which receive device and usage information and, to measure our ads, may receive limited order details such as an order value.
  • Google Customer Reviews: if Google offers you a survey after checkout and you agree to take it, Google receives your email address, order number and expected delivery date so it can send you the survey.
  • Advisers and authorities: accountants, lawyers and government authorities, where needed to meet legal obligations, respond to lawful requests, or protect our rights and our customers.
  • A buyer of our business, if we ever sell or merge it.

We don't sell your personal information for money. Sharing device and usage information with Meta and Google for targeted advertising may count as "selling" or "sharing" under some US state laws, such as California's. You can opt out at any time on our Your Privacy Choices page. Apart from Shopify's own uses described above, we don't share your personal information with other companies for their own direct marketing. If we send texts, we never share or sell your phone number or your agreement to get texts with anyone for their own marketing.

6. More detail for US state privacy laws

This section is our notice at collection and gives more detail for California and other US states with privacy laws. In the past 12 months, we have collected these categories of personal information:

  • Identifiers, such as your name, email address, phone number, postal address, IP address and online identifiers. Collected from you, your device, and the stores and partners listed in section 2. Used to fill and support orders, communicate with you, market to you and keep our site secure. Disclosed to Shopify, service providers, payment providers, shipping carriers and our production partner. IP addresses and online identifiers are sold or shared with advertising partners.
  • Customer records, such as your name, address, phone number and limited payment details. Collected from you and our payment providers. Used to fill orders, take payment and keep tax records. Disclosed to Shopify, service providers, payment providers and shipping carriers. Not sold or shared.
  • Commercial information, such as your purchases, cart activity and wishlist. Collected from you and your device. Used to fill orders, measure our ads and improve our products. Disclosed to Shopify and service providers. Limited order details may be sold or shared with advertising partners.
  • Internet or network activity, such as pages viewed and how you interact with our site and ads. Collected from your device and our advertising and analytics partners. Used to run and improve our site and to measure and personalize ads. Disclosed to Shopify and analytics providers, and sold or shared with advertising partners.
  • Approximate geolocation, based on your IP address. Collected from your device. Used for analytics, fraud prevention and ads. Disclosed to Shopify and service providers, and sold or shared with advertising partners.
  • Audio and electronic information, such as voice recordings and text chats with Breezy, and photos you send for custom orders. Collected from you. Used to answer you, book calls, improve Breezy and make your order. Disclosed to service providers and, for artwork, our production partner. Not sold or shared.
  • Professional information, such as the company or organization you order for. Collected from you. Used to quote, invoice and fill your order. Disclosed to service providers. Not sold or shared.
  • Inferences, such as interests our advertising partners may infer from your activity on our site. Created by our advertising partners. Used to personalize ads. Sold or shared with advertising partners.

We keep each category for the periods in section 8.

Sensitive personal information: we don't collect or use sensitive personal information to infer characteristics about you, and we only use the limited payment details we see to complete your purchase, prevent fraud and keep required records. Because we don't use sensitive personal information for any other purpose, the California right to limit its use doesn't apply.

People under 16: we don't have actual knowledge that we sell or share the personal information of anyone under 16. If we learn that we have, we'll stop unless the law allows it with permission from the teen (ages 13 to 15) or a parent (under 13).

Sign-up and review offers: we sometimes offer a discount or reward, such as a code when you sign up for our emails or a coupon after you leave a review. Under California law, that can count as a "financial incentive." The offer, and what you give us for it (usually your email address, and your review for a review reward), is shown where you sign up or review. You join by choosing to sign up or review, and you can leave at any time by unsubscribing or asking us to delete your review. We estimate that your information is worth about the value of the discount or reward to us, based on the extra sales we expect from customers on our list and what the offers cost us. You never have to join to shop with us.

7. Your privacy rights

Depending on where you live, including California and other US states with privacy laws, the EU, the EEA, the UK and Switzerland, you may have the right to:

  • Know and access: ask what personal information we have about you, where it came from, why we use it and who we disclose it to, and get a copy.
  • Correct: ask us to fix information that's wrong.
  • Delete: ask us to delete your information.
  • Portability: get a copy of your information in a format you can take elsewhere.
  • Opt out of selling, sharing and targeted advertising: use our Your Privacy Choices page, turn on Global Privacy Control in your browser, or email us.
  • Stop marketing: click unsubscribe in any marketing email, or email us. We'll stop within 10 business days. If you get marketing texts from us, reply STOP. We may still send messages about your orders.
  • Appeal: if we turn down your request, you can appeal (see below).

How to make a request: email info@imhotandfabulous.com or use the form on our Contact page. Tell us what you'd like us to do. You don't need an account.

Confirming it's you: before we act on a request to know, access, correct or delete, we'll confirm it's you by matching details you give us, such as your email address and an order number, with what we already have. For copies of specific information, we may ask for a little more. We only use these details to confirm who you are. You don't need to verify an opt-out request.

Someone acting for you: you can ask someone to make a request for you. We'll need their signed permission from you, and we may ask you to confirm your identity with us directly or confirm that you gave them permission, unless they hold a power of attorney.

Timing: we'll confirm we received your request within 10 business days and answer within 45 days. If we need more time, we'll tell you why, and we'll take no more than another 45 days. We act on opt-out requests within 15 business days. In the EU, the EEA, the UK and Switzerland, we answer within one month, which the law lets us extend by up to two more months for complex requests. Some requests have limits, such as records we must keep for tax purposes, and we'll explain if one applies.

Appeals: if we turn down your request, reply to our answer or email us with "Appeal" in the subject line. We'll answer in writing within 45 days and explain our decision. If we still say no, you can contact your state attorney general.

No discrimination: we won't deny you goods, charge you a different price or give you a different level of service for using your rights.

8. How long we keep it

  • Orders, invoices and payment records: as long as tax and accounting laws require, generally up to 7 years.
  • Account details: while your account is open, and then with your order records.
  • Wishlists: until you remove the fans from your wishlist or ask us to delete it.
  • Custom order artwork and proofs: while we make your order and for a reasonable time after, so we can help if you reorder, unless you ask us to delete them sooner.
  • Marketing sign-ups: until you unsubscribe, plus a record that you unsubscribed so we don't contact you again.
  • Messages: as long as we need them to help you and keep a record of our conversation.
  • Breezy chats and voice recordings: stored with ElevenLabs until we delete them. We delete them once we no longer need them to follow up on your chat or improve Breezy, and you can email us to delete yours sooner.
  • Reviews: while they're shown on our site, unless you ask us to remove yours.
  • Device and usage information: only as long as it's useful to measure and improve our site and ads, under the retention settings in our analytics and advertising tools. Most of our cookies expire on their own within 2 years.

9. If you live in the EU, the EEA, the UK or Switzerland

We use your personal information only when the law allows it:

  • To perform our contract with you, such as processing and delivering your order, making a custom order, and running your account.
  • With your consent, such as for marketing emails where consent is required, for cookies and similar technology that aren't essential, for ads based on your activity, and for recorded chats with Breezy. You can withdraw your consent at any time, without affecting anything we did before.
  • For our legitimate interests, such as keeping our site secure, preventing fraud, crediting creators and referrals, answering your messages, and improving our products and service, where those interests aren't outweighed by your rights.
  • To meet legal obligations, such as keeping tax records.

You also have the right to object to or restrict certain uses of your information. You can object to direct marketing at any time, and we'll stop. If you have a complaint, please email us first and we'll look into it. You also have the right to complain to your local data protection authority. You can find EU and EEA authorities here, the UK Information Commissioner's Office at ico.org.uk, and the Swiss Federal Data Protection and Information Commissioner at edoeb.admin.ch.

We're based in the United States, so your information is processed in the United States and in other countries where our service providers and production partner operate. Those countries may not have the same data protection laws as yours. When we or our providers move your information out of the EU, the EEA, the UK or Switzerland, we rely on an adequacy decision, such as the EU-US Data Privacy Framework and its UK and Swiss versions for providers certified under them, or on safeguards such as the European Commission's Standard Contractual Clauses and the UK equivalents. Where we send your details to our production partner or a carrier to make and deliver an order you asked for, we rely on that transfer being necessary to complete your order. Email us for more information about these safeguards.

10. Children

Our site isn't meant for children under 13, and we don't knowingly collect their personal information. If you believe a child under 13 has given us personal information, email us and we'll delete it.

11. Security

We use trusted providers and reasonable safeguards to protect your information, but no website or email is completely secure. Please don't send us sensitive information by email or chat.

12. Other websites and social media

Our site links to other websites and to our social media pages. Their own privacy policies apply to information you give them, and we're not responsible for how they handle it. Anything you post publicly, such as a comment on our Instagram or a review on our site, can be seen by others.

13. Changes to this policy

We review this policy at least once a year and may update it from time to time. The "Last updated" date at the top shows the current version, and we'll give you notice of important changes where the law requires it.

14. Contact us

Questions about your privacy, or want to use your rights? Email us at info@imhotandfabulous.com. Our business details are on our Contact information page.