Privacy Policy

1. Who we are

This Privacy Policy explains how Enticing Lingerie NJ Inc. ("Sweet Hearts," "we," "us" or "our") handles personal information collected through sweetheartsusa.com and its pages (the "Site"). It does not cover information collected by other companies, including Walmart.com, even when you reach them from our Site.

2. Information we collect

Information you give us

• Contact form: your name, email address, the topic you choose and your message.
• Newsletter: your email address, the date you signed up, where you signed up (our newsletter form, or the opt-in box on our contact form) and the consent wording you agreed to.

Information collected automatically

• One essential cookie. The cookie sh_bag remembers the products and quantities in your bag. It contains no name, email or other identifying details, is not shared with anyone and expires after 30 days.
• Security and server logs. When your browser requests a page, our hosting provider (Google Cloud) automatically records technical details such as your IP address, browser type, the page requested and the time. We use these only to run, secure and troubleshoot the Site.

What we do not collect

We do not collect payment card numbers, account passwords (the Site has no customer accounts), precise location, government ID numbers or other sensitive personal information. We do not use advertising or analytics cookies, tracking pixels, fingerprinting, session recording or similar technologies.

3. How we use information

• To answer your questions and requests.
• To send our newsletter and marketing emails, only if you signed up or ticked the opt-in box on our contact form. Every email includes a way to unsubscribe.
• To keep records of our communications with you and improve our products and service.
• To operate the Site, including keeping your bag between visits.
• To protect the Site, our customers and our business, including detecting and preventing spam, fraud, abuse and security incidents.
• To comply with the law, respond to lawful requests, and establish, exercise or defend legal claims.

We do not use your information to make automated decisions that have legal or similarly significant effects on you.

4. Checkout on Walmart.com

We do not process payments or collect shipping details on our Site. When you select Checkout, your browser is sent to Walmart.com with the item numbers and quantities in your bag so you can review and complete your purchase there. We do not send your name, email address or other contact details to Walmart.

From that point, Walmart's own terms and privacy notice apply to the information you provide to Walmart. Please review them on Walmart.com. We are not responsible for Walmart's practices. As a seller on Walmart Marketplace, we may receive from Walmart the order details needed to fulfill your order and provide customer service, and we use them only for those purposes and as our agreement with Walmart allows.

5. How we share information

We share personal information only as follows:

• Service providers that host and support the Site and our communications, such as Google Cloud (hosting and data storage) and an email service provider if we send you our newsletter. They may use the information only to provide services to us, under confidentiality and security obligations.
• Legal and safety reasons: to comply with law, legal process or government requests; to enforce our Terms of Use; or to protect the rights, property or safety of Sweet Hearts, our customers or others.
• Business transfers: in connection with a merger, acquisition, financing or sale of all or part of our business. Any successor must keep treating your information consistently with this Policy.
• With your consent or at your direction.

We do not sell personal information, we do not "share" it for cross-context behavioral advertising, and we do not process it for targeted advertising or profiling. We have not done so in the past 12 months.

6. Cookies, tracking and your browser signals

The only cookie we set is the essential sh_bag cookie described above. You can block or delete it in your browser settings, but the bag will not remember items without it. Our fonts and product images are served from our own domain, so browsing the Site does not send your information to third-party servers.

Because we do not sell or share personal information or engage in targeted advertising, there is nothing to opt out of. We still honor Global Privacy Control (GPC) signals and treat them as a request to opt out of any such activity should our practices ever change. We also respect Do Not Track browser settings.

7. How long we keep information

• Contact messages: kept as a record of our communications for as long as reasonably needed for our business, and deleted when you ask us to (unless the law requires us to keep them).
• Newsletter sign-ups: kept until you unsubscribe or ask us to delete them. We may keep a minimal record of your email address on a do-not-contact list so we can honor your choice.
• Server and security logs: kept by our hosting provider for a limited period, generally about 30 days, unless needed longer to investigate a security issue.
• Bag cookie: stored in your browser, not on our systems, and expires after 30 days.

We may keep information longer where the law requires it or to resolve disputes and enforce our agreements.

8. How we protect information

We use administrative, technical and physical safeguards designed to protect personal information, including encrypted connections (HTTPS), strict access controls that limit who and what can read stored information, and separation of the Site from our other business systems. No website, transmission or storage system is completely secure, so we cannot guarantee absolute security. If we learn of a security incident affecting your personal information, we will notify you as the law requires.

9. Your rights and choices

Depending on where you live, you may have the right to:

• know or access the personal information we hold about you, and receive a portable copy;
• correct inaccurate personal information;
• delete personal information;
• opt out of the sale or sharing of personal information, targeted advertising and profiling (we do none of these);
• not be discriminated against for exercising your rights.

We honor these requests for all U.S. residents, including residents of states with consumer privacy laws such as California, New Jersey, Virginia, Colorado, Connecticut, Texas and Oregon, whether or not their state's law applies to us.

How to make a request: use our contact form and choose "Privacy request," or email hymgindi@gmail.com. To protect you, we will verify your request by matching information you provide with information we hold, for example by confirming the email address you used. You may use an authorized agent; we may ask for proof of the agent's authority and ask you to verify your identity directly. We respond within 45 days and will tell you if we need more time, as the law allows.

Appeals: if we decline your request, you may appeal by replying to our decision or contacting us with the subject "Privacy appeal." We will respond within the time required by law. If you are not satisfied with the result, you may contact your state Attorney General.

Unsubscribe: use the unsubscribe link in any newsletter email, or contact us.

10. Additional information for California residents

In the past 12 months we have collected these categories of personal information, from the sources and for the purposes described above:

Category	Examples	Disclosed for a business purpose to
Identifiers	Name, email address, IP address	Service providers (hosting, storage, email)
Internet or network activity	Pages requested, browser type, timestamps in server logs	Service providers (hosting)
Commercial information	Items and quantities in your bag	Walmart.com, only when you select Checkout

We do not collect sensitive personal information, and we do not sell or share personal information. California's "Shine the Light" law lets California residents ask about disclosures to third parties for their direct marketing purposes; we make no such disclosures.

11. Children's privacy

The Site is intended for adults. We sell girls' clothing to parents and guardians, but the Site is not directed to children, and we do not knowingly collect personal information from children under 13 (or under 16 where state law sets a higher age). If you believe a child has sent us personal information, contact us and we will delete it.

12. Visitors outside the United States

The Site is intended for visitors in the United States. Information is stored and processed in the United States, where data protection laws may differ from those in your country.

13. Changes to this Policy

We may update this Policy from time to time. We will post the updated version on this page with a new effective date. If we make material changes, we will provide additional notice, for example on the Site or by email if you subscribe to our newsletter.

14. Contact us

Enticing Lingerie NJ Inc.
PO Box 9332, Elizabeth, NJ 07202
Email: hymgindi@gmail.com
Or use our contact form.