La Bâché LC Bryant LLC ("La Bâché," "we," "us," or "our") operates shoplabache.com and sells small-batch, luxury skincare, hair care, and Homme & beard care products (the "Services"). This Privacy Policy describes how we collect, use, disclose, and protect personal information when you browse our catalog, place an order, contact customer care, or otherwise interact with us, whether you're shopping our Skin, Hair, or Homme collections.

We are a women-owned, family-led company registered at 6560 N Mascher Street, Philadelphia, Pennsylvania 19120, United States, and we ship to customers in the United States, Japan, and the European Union, EEA, and United Kingdom. Because privacy law differs meaningfully across these regions, Sections 9 through 11 of this policy set out region-specific rights in detail, rather than relying on one generic global clause.

Our store is built on Shopify, and Shopify itself processes certain personal information as an independent controller for its own purposes — this relationship is explained fully in Section 6. If you'd prefer to exercise an opt-out choice directly rather than read through this full policy, you can do so any time on our Privacy Opt-Out Request Form.

Directly from you — when you create an account, place an order, sign up for our list, or contact customer care.

Automatically through the Services — via cookies and similar technologies as you browse, described fully in Section 5.

From our service providers — including Shopify, our payment processor, our email/SMS platform, and shipping carriers, when they process information on our behalf.

From advertising and analytics partners — who may share limited information back with us about how our marketing is performing.

We use cookies and similar technologies (pixels, tags, local storage) to run checkout securely, remember your cart, understand site performance, and — unless you opt out — personalize and measure advertising.

Strictly necessary cookies keep checkout, cart, and account security functioning and are always on, since they don't constitute a "sale" or "share" of personal information under any privacy law referenced in this policy.

Analytics cookies help us understand aggregate site performance, such as which pages and products get the most attention.

Advertising pixels, including TikTok Pixel. We use TikTok Pixel and comparable advertising technologies to collect data about your browsing behavior — pages visited, products viewed, and purchases made — and share this with TikTok and similar platforms to deliver personalized advertising and measure campaign performance. You can manage this through TikTok's own ad settings, your device's ad settings, or by opting out on our Privacy Opt-Out Request Form.

Shopify audiences and personalized advertising. As a Shopify-powered store, we use Shopify features that draw on data from your interactions with our store, together with other Shopify merchants and Shopify itself, to support personalized advertising. Shopify's own handling of this data is described in the Shopify Consumer Privacy Policy.

Global Privacy Control (GPC). If your browser sends the GPC signal, we treat it as a valid opt-out-of-sale/sharing request for that browser and, where we can match it to your account, for your account as well. We do not currently act on other "Do Not Track" browser signals.

You can also block or delete cookies at any time through your browser settings; doing so may affect certain site features such as a saved cart.

We do not sell personal information for cash. We do disclose personal information in the following limited circumstances:

Service providers — Shopify (our e-commerce platform), our payment processor, our email/SMS provider, shipping carriers, and cloud storage, who process information strictly to perform services on our behalf.

Advertising and marketing partners — including TikTok and Shopify's personalized-advertising features, for the purposes described in Section 5. This kind of disclosure can meet the legal definition of a "sale" or "sharing" under certain U.S. state laws, even without any money changing hands, which is why the opt-out in Section 9 exists.

At your direction — such as when you use a social login or ask us to ship to someone else.

Business transfers — in connection with a merger, acquisition, or sale of assets.

Legal reasons — to comply with law, respond to valid legal process, or protect the rights, property, or safety of La Bâché, our customers, or others.

Our Relationship With Shopify

Shopify hosts our store and processes personal information both on our behalf and, for certain platform-level features, as an independent controller in its own right. To learn how Shopify uses your information and what rights you may have directly with Shopify, visit the Shopify Consumer Privacy Policy or the Shopify Privacy Portal.

We keep personal information only as long as reasonably necessary for the purposes described in this policy, taking into account the following:

Order and payment records are retained for the period required by U.S., Japanese, and EU tax and accounting law — typically several years after purchase.

Account information is retained for as long as your account remains active, plus a reasonable period afterward in case you return.

Marketing data is retained until you unsubscribe or opt out, and deleted or anonymized within a reasonable period afterward.

Customer service communications are retained long enough to resolve your inquiry and document our compliance with policies such as our Cancellation and Refund policies.

We rely on Shopify's PCI-DSS-compliant infrastructure and encrypted checkout to protect payment data, and we limit internal access to personal information to team members who need it to do their jobs. No security measure is perfect, and we cannot guarantee absolute security of information transmitted to us — we recommend avoiding unsecured channels for sensitive information.

If we ever become aware of a data breach affecting your personal information, we will notify you and the relevant regulators as required by applicable law, including state breach-notification laws in the U.S., the GDPR in the EU/EEA/UK, and the APPI in Japan.

California — CCPA, as Amended by the CPRA

California residents have rights under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (Cal. Civ. Code § 1798.100 et seq.):

Exercise any of these rights on our Privacy Opt-Out Request Form. We also honor the Global Privacy Control signal as a valid opt-out-of-sale/sharing request.

Virginia, Colorado, Connecticut, Utah & Other States

Virginia's Consumer Data Protection Act (VCDPA), Colorado's Privacy Act (CPA), Connecticut's Data Privacy Act (CTDPA), Utah's Consumer Privacy Act (UCPA), and comparable laws in states such as Oregon, Texas, Montana, Iowa, and Delaware give residents similar rights, including the right to access, correct, delete, and port their data, and to opt out of targeted advertising, the sale of personal data, and certain profiling.

Appeal rights. If we decline a request under one of these laws, several states — including Virginia and Colorado — give you the right to appeal. Email bonjour@shoplabache.com with "Appeal" in the subject line, and we will respond within 60 days.

We do not require proof of residency in a specific state to honor these rights — any U.S. customer may submit a request through our Privacy Opt-Out Request Form, and we will apply the same protective standard.

If you order from Japan, your personal information is protected by Japan's Act on the Protection of Personal Information (個人情報保護法, "APPI"), as most recently amended. As a business handling the personal information of individuals in Japan, La Bâché gives you the following rights:

Purpose of use. We use your personal information to process and ship your order, provide customer support, and — unless you opt out — send marketing communications and show relevant advertising.

Right to opt out of third-party provision. Where we provide personal information to a third party for advertising or analytics, you may direct us to stop via our Privacy Opt-Out Request Form.

Right to disclosure, correction & suspension of use. You may request disclosure of the personal information we hold, ask us to correct or add to it, or request suspension of its use or deletion, where APPI requirements are met.

Cross-border transfer. Because La Bâché is based in the United States, personal information you provide is transferred to and processed in the United States. We take contractual and technical measures with our processors consistent with APPI requirements for cross-border transfers.

Retention for tax purposes. Order and payment records may be retained for the period required under Japanese tax law even after an opt-out or deletion request.

"You have the right to object, at any time, to the processing of your personal data for direct marketing purposes, including profiling to the extent it is related to such marketing."

If your order or account is connected to the European Union, the wider European Economic Area, or the United Kingdom, the General Data Protection Regulation (EU) 2016/679, and the equivalent UK GDPR, give you the following rights:

Right to object (Article 21) to processing based on legitimate interest, including marketing profiling.

Right to withdraw consent (Article 7(3)) at any time, as easily as you gave it.

Right of access, rectification & erasure (Articles 15–17), subject to limited exceptions such as tax recordkeeping.

Right to restrict processing & data portability (Articles 18, 20).

Right to lodge a complaint with your national data protection authority — see Section 15.

Exercise any of these rights through our Privacy Opt-Out Request Form.

Shoplabache.com is directed at adults and is not intended for children. We do not knowingly collect personal information from anyone under 16, and we do not knowingly sell or share the personal information of anyone we know to be under 16 years old.

If you believe a minor has provided us with personal information, contact us at bonjour@shoplabache.com and we will investigate and delete it promptly.

Because we are based in the United States, personal information we collect — including from customers in Japan and Europe — is transferred to and processed in the United States, and may be processed by service providers located elsewhere.

When we transfer personal information out of the European Economic Area or the United Kingdom, we rely on recognized transfer mechanisms such as the European Commission's Standard Contractual Clauses, or equivalent contracts issued by the relevant UK authority, unless the transfer is to a country already recognized as providing an adequate level of protection.

Our Services may link to websites or platforms we don't operate, including Instagram, TikTok, and Faire (for wholesale customers). If you follow those links, review their own privacy policies — we are not responsible for the practices of sites we don't control.

Anything you share on public or semi-public platforms, including social media, may be viewable by others without limitation as to its use by us or a third party.

If you have concerns about how we handle your personal information, please contact us first using the details in Section 17 — we reply personally, typically within one business day, and want the chance to make it right directly.

Depending on where you live, you may also have the right to lodge a complaint with your local data protection authority (in the EU/EEA/UK) or, where applicable, a relevant U.S. state attorney general's office. Contacting us first never limits your right to escalate to a regulator afterward.

As La Bâché grows and privacy law in the United States, Japan, and Europe continues to evolve, we may update this Privacy Policy to reflect new products, new shipping regions, or legal changes. When we make a material change, we will update the "Last Updated" date at the top of this page and, where required by law, provide additional notice.

Continued use of shoplabache.com after an update constitutes acknowledgment of the revised policy; any opt-out choice you've already made remains in effect.