Privacy Policy

Last Revised: January 27, 2026

This Privacy Policy describes how Rylee & Cru, Inc. and its affiliates (collectively, the “Rylee + Cru Collective,” “we,” “us,” or “our”) collect, use, and share personal information when you visit or make a purchase from ryleeandcru.com, quincymae.com, and shopnoralee.com (collectively, the “Site”).

For purposes of this Privacy Policy, “personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Personal information does not include publicly available information from government records or deidentified or aggregated information.

1. Personal Information We Collect

Information You Provide to Us

Profile Information. When you create an account, join a mailing list, or otherwise interact with us, we may collect your name, email address, phone number, mailing address, account login credentials, and similar information.

Transaction Information. When you make a purchase, we collect information about your order, such as products purchased, order details, delivery information, billing and shipping addresses, and return or exchange information. Payment information is collected and processed by our third-party, PCI-compliant payment processors. We do not store full credit card numbers.

Communications. If you contact us, we may collect your contact details and the contents of your communications, including customer service inquiries.

Information Collected Automatically

When you visit the Site, we automatically collect certain information about your device and usage, including:

IP address and browser type

Device identifiers

Pages viewed, referring URLs, and access dates and times

Interactions with the Site and advertisements

We collect this information using cookies, pixels, web beacons, log files, and similar technologies. You can learn more about cookies and how to disable them at www.allaboutcookies.org.

Information from Third Parties

We may receive personal information from service providers and partners, such as payment processors, fulfillment providers, analytics providers, advertising partners, and fraud prevention services.

2. How We Use Personal Information

We use personal information to:

Provide and operate our Site and services

Process orders, payments, shipping, returns, and exchanges

Create, manage, and secure customer accounts

Communicate with you and provide customer support

Personalize your experience and provide product recommendations

Conduct analytics and improve our Site, products, and marketing

Deliver marketing and advertising communications (with consent where required)

Maintain safety, security, and fraud prevention

Comply with legal obligations and respond to lawful requests

Evaluate or complete business transactions such as mergers or asset sales

3. Sharing of Personal Information

We share personal information with third parties as necessary to operate our business, including:

Service providers (e.g., payment processors, fulfillment partners, customer support tools, IT and security vendors)

Analytics providers (such as Google Analytics)

Advertising and marketing partners (such as social media platforms and advertising networks)

We may also disclose personal information when required to comply with applicable law or protect our rights.

4. Marketing and Targeted Advertising

We use personal information to provide advertisements and marketing communications that may be relevant to you. This may include sharing information with advertising partners for cross-context behavioral advertising.

Email marketing: Where we have a legal basis, we may send emails about our store, new products, and other updates (see our “Marketing Preferences” section for more information).

Text marketing: We may send text messages about our store, new products, and other updates. Updates include Checkout Reminders. The website uses webhooks and cookies (with your consent) to help keep track of items you put into your shopping cart including when you have abandoned your cart and this information is used to determine when to send cart reminder messages via SMS (see our “Marketing Preferences” section for more information).

We will not share your opt-in to an SMS campaign with any third party for purposes unrelated to providing you with the services of that campaign. We may share your Personal Data, including your SMS opt-in or consent status, with third parties that help us provide our messaging services, including but not limited to platform providers, phone companies, and any other vendors who assist us in the delivery of text messages.

Marketing Preferences

We would like to send you information about products and services of ours that we think you might like. We may send you direct marketing communications, product information and promotional offers:

If you have consented to receiving such communications from us

If we have an existing business relationship with you and can rely on your implied consent

If you are from a country where the laws permit us to send you such communications based on our legitimate interests, if you have bought a product or service from us, and have not opted out of receiving communications from us (for example the EEA or UK)

If you are from a country where the laws permit us to send you such communications

The marketing communications we send will be in relation to our own products or services, your personal data will not be used for third-party direct marketing unless separate explicit consent has been collected for that or you are from a country where the laws permit such processing.

You will always have full control of your marketing preferences. If you do not wish to continue receiving marketing information from us at any time:

You can unsubscribe by using the unsubscribe directions or link included in marketing communication from us; or

You may withdraw your consent by contacting us by e-mail at [email protected]

Customers located in certain regions, such as the EEA and UK, also have the right to object to their personal data being processed for direct marketing purposes at any time. If you would like to object you can contact us by e-mail at [email protected]

We will process all requests as soon as possible, but please note that due to the nature of our IT systems and servers it may take a few days for any opt-out request to be implemented.

You can learn more about targeted advertising and opt out through the following resources:

Facebook: https://www.facebook.com/settings/?tab=ads

Google: https://www.google.com/settings/ads

Digital Advertising Alliance: https://optout.aboutads.info

 

5. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Our general retention practices are as follows:

Account information: retained while the account is active and for up to 24 months after account closure

Order and transaction records: retained for 7 years for accounting, tax, warranty, and legal compliance purposes

Customer support communications: retained for 2–3 years

Marketing contact information and preferences: retained until you opt out, and thereafter as necessary to maintain a suppression list

Analytics and advertising data: retained for approximately 13–26 months, subject to cookie settings and partner controls

6. Children’s Privacy

Our Site is intended for a general audience and is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13.

7. California Privacy Notice (CCPA/CPRA)

This section applies to California residents and is intended to comply with the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act (collectively, the “CCPA/CPRA”).

Categories of Personal Information Collected

In the past 12 months, we have collected the following categories of personal information:

Identifiers (e.g., name, email address, IP address)

Customer records information (e.g., contact details, billing address)

Commercial information (e.g., purchase history)

Internet or network activity (e.g., browsing interactions)

Approximate geolocation data (derived from IP address)

Inferences used for product recommendations and marketing

Sensitive Personal Information

We use sensitive personal information only as reasonably necessary to provide services, maintain security, prevent fraud, and comply with legal obligations.

Sale or Sharing of Personal Information

We share personal information with advertising partners (including Meta/Facebook and Google) through pixels and tracking technologies for cross-context behavioral advertising purposes. This activity may constitute a "sale" or "sharing" under the CCPA/CPRA.

The categories of personal information we may share for these purposes include:

Identifiers (such as IP addresses and device identifiers)

Internet or network activity (such as browsing interactions)

Commercial information (such as products viewed and purchase history)

You may opt out at any time by visiting:

https://ryleeandcru.com/pages/data-sharing-opt-out

Global Privacy Control

We recognize and honor opt-out preference signals such as the Global Privacy Control (GPC), where required by law.

Your California Privacy Rights

California residents have the right to:

Know what personal information we collect, use, and disclose

Request deletion of personal information

Request correction of inaccurate personal information

Opt out of the sale or sharing of personal information

Not be discriminated against for exercising these rights

How to Exercise Your Rights

You may submit a request by contacting us at:

Email: [email protected]
Mail: Rylee & Cru, 11035 Technology Place, Suite 100, San Diego, CA 92127, United States

We will verify your request and respond within the timeframes required by law.

8. U.S. State Privacy Rights

This section applies to residents of Virginia, Colorado, Connecticut, Utah, Montana, and other U.S. states with comprehensive consumer privacy laws.

Depending on your state of residence, you may have the right to:

Access personal information we have collected about you

Request deletion of your personal information

Request correction of inaccurate personal information

Receive a copy of your personal information in a portable format (where applicable)

Opt out of targeted advertising and certain data sharing

If we deny your request, you may have the right to appeal our decision by contacting us using the information above.

9. Enhanced Account Features

We offer features designed to improve your shopping experience, including passwordless login, AI-powered product recommendations, and personalized account dashboards. These features do not produce legal or similarly significant effects.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be reflected by updating the revision date above.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our privacy practices, please contact us at:

Email: [email protected]
Mail: Rylee & Cru, 11035 Technology Place, Suite 100, San Diego, CA 92127, United States