Privacy Policy and Notice of Personal Information Collection

Last updated: July 1, 2026

  • Collection of Information
  • Use of Information We Collect
  • Disclosure of Information
  • Your Privacy Rights
  • Privacy Rights Applicable to UK Users
  • Data Transfers
  • Other Notices
  • Privacy Policy Changes
  • Contact Us

This Privacy Policy describes how ShopStyle Inc. ("we," "us," "our," "Company") collect, use, disclose, and protect information in connection with the Company websites, mobile websites, mobile applications, and any related services that refer or link to this Privacy Policy ("Services"). ShopStyle is part of the Rakuten Group, which includes the affiliates and subsidiaries of our parent company Rakuten Group, Inc., based in Tokyo, Japan.

1. COLLECTION OF INFORMATION

SOURCES OF COLLECTION

We collect information about you when you:

  • Interact with our Services
  • Access our Services through our application(s), including our mobile application
  • Contact us for support

We collect certain information when you submit or provide it to us directly. When you have installed our mobile application or when you interact with our Services online, we also automatically collect information about you and your use of the Services through the use of log processes, cookies, location-identifying technologies, and other tracking technologies.

TYPES OF INFORMATION WE MAY COLLECT

The types of information we collect about you may include personal information of the following types:

  • Identifiers that you provide us directly, such as your first and last name, username, email address, postal address, location
  • Identifiers, collected automatically through your use of the Services, such as unique online or device identifiers, IP address, device or session IDs and information regarding your system configuration (operating system and version), network, and connected hardware (e.g., computer or mobile device and carrier)

We do not collect any "special category" data per the UK General Data Protection Regulation (UK GDPR), or types of information considered "sensitive" personal information under applicable U.S. state privacy laws.

2. USE OF INFORMATION WE COLLECT

We use information we collect about you for the following business and commercial purposes:

To Communicate with you:

  • Reply to your questions, comments, and requests

To Detect Fraud and Improve Security

We use collected information to assess risk related to online security and to investigate and limit fraud, spam, and other malicious online activities in our Services, and to improve our security measures.

To Protect and Assert our Legal Rights and Comply with our Legal Obligations

We may use collected information as necessary to assert our legal rights or to defend our legal rights against third parties in the event of a lawsuit or other legal or regulatory action.

3. DISCLOSURE of INFORMATION

We may disclose the below-specified categories of information for our business or commercial purposes, including the following:

Disclosure to our Service Providers

We may disclose all categories of your personal information as necessary to our service providers (which may include third parties and Company affiliates) who perform various business operations on our behalf, under our instructions and in compliance with appropriate contractual, technical and organizational security measures to protect your data from unauthorized use, retention, or disclosure. For example, we may partner with other companies to provide you customer support services, prevent fraud on our Services, and manage our databases.

Rakuten Group Companies

We work closely with our affiliated businesses and companies within the Rakuten Group and disclose your personal information to them for our internal business administration.

Disclosure for Legal Purposes

We may disclose the information we collect, including personal information, to the extent permitted by the data protection laws applicable in your jurisdiction, (i) in response to subpoenas or other legal processes or if, in our good faith opinion such disclosure is required or permitted by law without a specific disclosure; (ii) at the request of governmental authorities conducting an investigation; (iii) to enforce our terms and conditions or other policies applicable to our Services; and (iv) to protect the rights, property, life, health, security and safety of Company or any third party.

In Relation to Business Asset Transfers

We may disclose the information we collect, including personal information, to any third party in connection with, or during confidential negotiations of, any proposed or actual merger, purchase, sale (including a liquidation, realization, foreclosure or repossession) or any other type of acquisition of all or any portion of Company assets, conveyance or transfer of all or a portion of our business to another company. In such event, the acquiring company would be contractually required to use your collected information in accordance with this Privacy Policy and applicable law or to provide prior notice to you of any new or materially changed practices.

Legal basis for using your Personal Information

If you are a visitor from a location that requires legal basis for collecting and using the personal information described above, our legal basis for collecting and processing personal information will depend on the personal information concerned and the specific context in which we collect it, and may include the following:

  • Performance of a contract. The use of your personal information may be necessary to provide you our Services and meet our obligations as set forth in our Services terms and conditions and other policies under which we provide our Services.
  • Legitimate interests. We may use your personal information to serve our legitimate interests in protecting our legal rights and complying with our legal obligations. In such circumstances it is for us to ensure that these interests do not override your data protection interests or fundamental privacy rights and freedoms.

4. YOUR PRIVACY RIGHTS

You have certain rights regarding your personal information based on applicable local laws, which may include the following rights:

To Know and Access your personal information/data portability

You have the right to know the categories and elements of personal information about you that we collected, used, and disclosed for a business purpose. You have the right to request that we send you (or another organization, under certain conditions) a copy of your personal data we process, in a readily usable and portable format.

To Rectify or Correct the information we hold about you

You have the right to request that we correct any personal information about you that is factually inaccurate or complete any personal information that is incomplete.

To Erase or Delete your personal information

You have the right to request that we erase or delete your personal information we collected from or maintain about you. We will delete your personal information upon such request, except to the extent we determine that we need the information for a business purpose and have a legal right to maintain it, or if an exception applies, in which case we will inform you of that legal exception.

To Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights.

Unless otherwise permitted by applicable law, we will not do any of the following because you request to know, access, correct, or delete your information:

  • Refuse to process valid privacy requests,
  • Impose any fees or penalties for exercising your privacy rights, consistent with applicable law,
  • Provide a different level of support for privacy requests based on your previous history with our platform.

To Modify Your Data Collection Preferences

You may in some cases have the option to decline to provide us with certain information; however, your choice may impact the functionality of certain features or services for which that information is a necessary component. You can prospectively stop all collection of information by our mobile application by uninstalling our mobile application. Because installation of the mobile application permits our data collection about your online behavior on that device, even without your interaction with the application, it must be uninstalled to completely withdraw your consent to this data collection.

How To Exercise Your Rights to Know, Access, Correct, and Request Deletion:

To assert your privacy rights please send your request through the details provided in the Contact Us section below. To verify your identity, we will ask you to verify your identity from the information we have on file, we may request additional information from you, which we will only use to verify your identity, and for security or fraud-prevention purposes. Please note that under the laws of certain jurisdictions, we are not required to respond to requests to know and access your information more than twice within a 12-month period.

Agents

Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your personal information. For any agent making a request on your behalf, we may require you to prove that you authorized this agent to submit a request on your behalf, and we may require you to independently verify your identity.

Right to Appeal

You may have the right to appeal our decision regarding your privacy rights request, depending on your state of residence. You may submit an appeal request by contacting us through the details provided in the Contact Us section, below. We will respond according to the law applicable in your location.

5. PRIVACY RIGHTS APPLICABLE TO UK USERS

If your personal information is subject to the protections offered by UK privacy law, you may:

  • Request to access, correct, update, delete or receive in a portable format your personal information that we hold, at any time by contacting us using the information provided in the Contact Us section below.
  • Object to processing of your personal information or ask us to restrict processing of your personal information. You have the right to request that we limit or restrict our processing of your personal information, under certain circumstances.
  • Withdraw your consent at any time if we have collected and process your personal information based on your consent.
  • Complain to a data protection authority about our collection and use of your personal information. For more information, please contact your local data protection authority. (Contact details for data protection authorities in the UK at https://ico.org.uk/global/privacy-notice/how-you-can-contact-us/)

To exercise any of these rights please contact us in accordance with the contact details set forth in the Contact Us section below.

6. DATA TRANSFERS

If you are visiting our site from regions with laws governing cross-border transfer of personal data, please note that your personal information may be transferred for the purposes described under this Privacy Policy for processing in the United States and in other countries with less rigorous data protection laws than your jurisdiction. We take great care in protecting your personal information and have put in place adequate mechanisms to protect it when it is transferred internationally, including Standard Contractual Clauses. As part of the Rakuten Group, we rely on the Rakuten Binding Corporate Rules, found at https://corp.rakuten.co.jp/privacy/en/bcr.html, to legitimize international data transfers within the Rakuten Group.

7. OTHER NOTICES

Shine the Light. California law permits residents of California to request certain details about how their information is shared with third parties for direct marketing purposes. We do not share your information with third parties for their direct marketing purposes.

Notice regarding information of minors. This site and any related services are intended for adults 18 years of age or over, and we do not knowingly collect or sell or share personal information of consumer under 18 years of age without affirmative authorization or without verifiable opt-in consent from a parent for those under age 13.

Retention of Data. We may retain information about you for as long as it is necessary to fulfill the purposes described Section 2. Some of your information may be retained in our systems even after you request your information to be deleted if an exception applies, or in order to comply with our obligations under applicable law, collect fees owed, resolve disputes, enforce our legal rights, otherwise use internally in a lawful manner that is reasonably aligned with your expectations or compatible with the context in which the information was provided, and to undertake any investigations necessitated by the foregoing.

Information Security. We have implemented technical and organizational measures to provide a level of security appropriate to the risk to the personal information that we process. These measures are aimed at preserving the ongoing integrity and protecting the confidentiality of users' personal information. We evaluate these measures on a regular basis to confirm that they continue to maintain and apply an appropriate level of security.

8. CHANGES TO PRIVACY POLICY

This Privacy Policy is current as of the date set forth above. We reserve the right to change this Privacy Policy from time to time consistent with applicable privacy laws and principles and our practices in relation to personal information. If we make changes to this Privacy Policy we will notify you by revising the date at the top of this Privacy Policy.

9. CONTACT US

If you have any questions regarding this Privacy Policy, please feel free to contact us by email at privacy@shopstyle.com or by mail at ShopStyle Inc., 800 Concar Drive, Suite 175, San Mateo, CA 94402, ATTN: ShopStyle Legal.