Cookie Policy
Effective Date: 18 June 2025
Last Updated: 18 June 2025
Applies To: All visitors and customers of BebeHawaii.com (United States market)
1. Why This Policy Exists
BebeHawaii sells made-to-order Hawaiian shirts exclusively to U.S. customers. To keep your shopping cart working, secure your PayPal or card payment, and improve the browsing experience, we place small data files—called cookies—on your device. This document explains, in plain English, what cookies we use, why we use them, how long they stay, and how you can control them.
2. What Are Cookies?
Cookies are simple text files that a website saves in your browser. They allow the site to:
- Remember your cart contents, size selections, and checkout progress
- Recognise that you are logged in between pages
- Measure site performance and detect errors
- Show only the marketing you have agreed to receive
Cookies can be created by BebeHawaii.com (first-party cookies) or by trusted partners such as PayPal or Google Analytics (third-party cookies).
3. Why We Use Cookies
| Purpose | Hawaiian-shirt example | Legal basis |
|---|---|---|
| Essential | Keep your “XL – Midnight-Teal Flamingo Eagles Shirt” in the cart while you browse | Contractual necessity |
| Security & fraud | Block repeat bots that overload checkout | Legitimate interest |
| Performance analytics | See how long the “New Arrivals” page takes to load | Legitimate interest |
| Marketing (opt-in) | Email a single reminder if you left a shirt in the cart | Consent |
We never use cookies to sell or rent your personal data.
4. Detailed List of Cookies
| Category | Cookie name (examples) | Provider | Lifespan | Description | Opt-out method |
|---|---|---|---|---|---|
| Essential | woocommerce_cart_hash, woocommerce_items_in_cart | BebeHawaii.com | Session | Stores cart ID and item count | Cannot disable – site won’t work |
paypal-commerce-platform-session | PayPal | 3 hours | Enables secure PayPal/card checkout | Cannot disable – payment essential | |
| Security | __cf_bm | Cloudflare | 30 minutes | Differentiates bots from humans | Cannot disable |
| Performance | _ga, _ga_<container> | Google Analytics 4 | 14 months | Counts page views & load times | Use Cookie Settings banner |
_gid | Google Analytics 4 | 24 hours | Distinguishes users for stats | Banner toggle | |
| Marketing (optional) | _kuid_ | Klaviyo | 30 days | Sends cart-abandon emails | Off by default; enable in banner |
fbp | Meta Pixel | 90 days | Optional Facebook retargeting | Off by default; enable in banner |
Exact names may change when we update integrations; the table is reviewed quarterly.
5. Cookie Banner & Consent Choices
- First visit banner – appears at the top of the page:
- “Accept All” (enables Performance & Marketing)
- “Essential Only” (keeps site running, blocks optional cookies)
- “Cookie Settings” (slide-out panel with individual toggles)
- Your choice is stored in a hashed consent token for 12 months, then you’ll be asked again.
- We honour Global Privacy Control (GPC) and browser Do-Not-Track signals by automatically disabling Marketing cookies when detected.
6. Manage or Withdraw Consent
You can change your preference anytime:
- Click “Cookie Settings” in our footer.
- Toggle categories on/off and save.
- Refresh the page for changes to take effect.
You can also delete cookies manually from your browser. If you clear essential cookies, you may need to log in again and rebuild your cart.
7. Similar Technologies
- localStorage / sessionStorage – used to remember the state of the size-selector pop-up. Cleared when you clear browser data.
- Payment tokens – generated by PayPal; they never expose full card details to BebeHawaii.
- Web beacons – small transparent images in our marketing emails that record open rates only if you have opted into marketing.
8. Data Sharing & International Transfers
Cookie-generated data may be processed by partners listed in section 4. All providers store data in the United States, comply with SOC 2 or PCI-DSS standards, and sign Data-Processing Agreements with BebeHawaii. We do not allow partners to use cookie data for their own marketing.
9. Your Rights
Depending on your state (e.g., California CCPA/CPRA) you can:
- Request a copy of cookie-derived personal data
- Ask us to delete any non-essential data linked to you
- Opt out of marketing cookies at any time (see section 6)
We respond within 45 days. Contact details are in section 11.
10. Policy Updates
We update this Cookie Policy when we:
- Add a new payment gateway
- Implement a new analytics or marketing tool
- Change our consent banner design
Material changes are highlighted in a site banner and emailed to registered customers 30 days in advance. The “Last Updated” date at the top always reflects the latest version.
11. Contact Us
BebeHawaii Privacy Team
1798 Mansion Ave, Claymont, DE 19703, United States
Email: privacy@bebehawaii.com
Phone: +1 (707) 753-0726
Support Hours: Mon – Sat, 9 AM – 5 PM EST
Mahalo for your trust!
Every cookie we set is designed to make your journey—from choosing the perfect shirt size to tracking delivery—smooth, secure, and transparent. If you have any questions about this policy or your data, reach out anytime.
Other policies: