Andrew Charles Privacy Policy

Last updated: May 18, 2026

Andrew Charles ("Andrew Charles," "we," "us," or "our") is committed to protecting your personal information and your right to privacy. If you have questions or concerns about this Privacy Policy or our practices, contact us at legal@andrewcharles.com.

When you visit https://www.andrewcharles.com (the "Website") and, more generally, use any of our services (the "Services"), you trust us with your information. This Privacy Policy explains what we collect, how we use it, how we share it, and the choices and rights you may have. If you do not agree with this Policy, please discontinue use of the Services.

This Privacy Policy applies to information collected through the Services and related activities such as sales, support, marketing, and events. Our Services are not directed to children, and we do not knowingly collect personal information from anyone under 16.

Controller & Ownership Alignment

Apparel Production Inc. operates and administers the Shopify storefront and is the data controller for customer and marketing data collected through this storefront. Kim and Andy Hilfiger own the Andrew Charles trademark, creative identity, and social media presence, and Kim owns the domain. If the storefront branding or license changes in the future, Apparel Production Inc. will continue to control the customer and marketing data collected via this storefront; brand intellectual property remains with the respective trademark and domain owners.

1) Information We Collect

A. Information you provide: identifiers and contact data, account credentials, order and support details. Payment is processed by Shopify Payments; we do not store full card numbers.

B. Information collected automatically: device and usage data (IP address, browser and device type), analytics and security logs, and cookie and pixel data.

C. Information from third parties: service providers (fraud prevention, shipping and returns, support), and advertising and analytics partners where permitted. We do not offer social logins at launch.

2) How We Use Information

Account creation and authentication; order processing and fulfillment; support; communications; marketing with preferences honored (email and SMS); personalization and analytics; security and fraud prevention; legal compliance; and business operations (e.g., debugging, auditing) often in de-identified or aggregated form.

3) How We Share Information

We share information with service providers under contract, including Shopify and Shopify Payments, Klaviyo (email and SMS), Gorgias (support), Shippo (shipping), Loop (returns portal), Polar Analytics (analytics), Revealbot (ad automations), Shopify Stocky (inventory), Mechanic (automations), UpPromote Affiliate (affiliate tracking), ShipBots (fulfillment and returns processing), Meta Platforms (Facebook and Instagram advertising and measurement), and Google Workspace (email and documents). We may share in business transfers, for legal or safety reasons, or with your consent. We do not sell personal information. Certain advertising uses may be considered "sharing" under California law — see Your Privacy Rights below.

4) Cookies & Tracking (Opt-In/Opt-Out)

We use cookies and similar technologies for core site functions, analytics, and (if you opt in) marketing. Our banner lets you Accept All, Reject All, or Manage Preferences for non-essential cookies. You can revisit your choices via Cookie Settings in the footer. We honor Global Privacy Control (GPC) where required. To exercise the California "Do Not Sell or Share" right specifically, visit our Your Privacy Choices page.

Advertising Technologies & Data Sharing

We use Meta (Facebook and Instagram) technologies such as Meta Pixel with advanced matching and the Conversions API to measure ad performance and improve relevance. These tools may process identifiers (e.g., hashed first name, last name, email, phone number, IP address, city, state, postal code, and country) along with event data (e.g., page views, add-to-cart, purchases). Personal identifiers are hashed before transmission and used by Meta to attribute ad performance, build lookalike audiences, and improve targeting. You can disconnect this data from your Facebook account at any time through Meta's Off-Facebook Activity controls, and California residents may exercise opt-out rights as described in Your Privacy Rights. To manage cookie-based ad tracking on this site, use Cookie Settings in the footer. Where required, we seek consent before setting non-essential cookies.

5) Email & SMS Marketing (Klaviyo; Twilio Sender)

If you opt in: email unsubscribes are available via the link in our emails; SMS message and data rates may apply; frequency varies; consent is not a condition of purchase. Text STOP to [SMS number/short code to be provided] to opt out; text HELP for help. For assistance, email legal@andrewcharles.com.

6) Data Retention

We keep personal information only as long as needed for the purposes described, including orders, legal and accounting obligations, dispute resolution, and enforcement.

7) Data Security

We use administrative, technical, and physical safeguards. No method is 100% secure; use the Services at your own risk and use strong, unique passwords.

8) Your Privacy Rights

U.S. residents (California, Colorado, Connecticut, Utah, Virginia, and other states with applicable privacy laws): you have rights to know and access, correct, delete, opt out of targeted advertising, opt out of sale or sharing, opt out of certain profiling, and non-discrimination for exercising these rights.

EEA, UK, and Switzerland residents: you have rights to access, correct, delete, restrict or object to processing, data portability, and to lodge complaints with your supervisory authority. International transfers rely on appropriate safeguards.

How to exercise your rights: visit our Customer Data Requests page to submit a request to access, correct, delete, port, or restrict processing of your personal information. To opt out specifically of the "sale" or "sharing" of personal information for targeted advertising (a California right), visit Your Privacy Choices. You may also email legal@andrewcharles.com. We respond to GDPR requests within 30 days and to CCPA/CPRA requests within 45 days. We may need to verify your identity before fulfilling certain requests.

9) International Transfers

We process data in the U.S. and other countries; we implement safeguards for cross-border transfers where required.

10) Third-Party Sites & Services

Links to third-party sites and services are not controlled by us; review their policies before providing information.

11) Changes to This Policy

We may update this Policy; the updated date will reflect changes, and material changes may be additionally noticed.

12) Contact Us

Legal entity: Andrew Charles
Support (orders and questions): support@andrewcharles.com
Privacy (rights requests): legal@andrewcharles.com
Address: 270 W 39th St, New York, NY 10018, USA