Privacy Policy

Effective Date: July 22, 2026

Last Updated: July 22, 2026

1. OVERVIEW

This Privacy Policy describes how Dr. Loretta, LLC ("Dr. Loretta," "we," "us," or "our") collects, uses, and shares your personal information when you visit or make a purchase from www.drloretta.mom (the "Site").

2. PERSONAL INFORMATION WE COLLECT

A. Information Collected Automatically ("Device Information")

We automatically collect certain information from you when you access our Site.

We use cookies and similar technologies to:

  • tailor our interactions with you;
  • help with our marketing efforts;
  • provide us with valuable data and statistics about the usage and effectiveness of our Site and to help us improve our Site; and
  • help us improve our services.

The cookies on our Site may collect information such as:

  • the IP addresses assigned to the computers and other devices you use;
  • your internet service provider;
  • the device ID number;
  • approximate geographic location;
  • the Site pages visited or clicked on;
  • the date and time you visited the Site, and the amount of time spent on the Site;
  • your operating system, browser type, search requests, and other similar information;
  • behavioral and engagement data used for analytics, personalization, advertising measurement, and targeted advertising;
  • the websites you access before and after visiting the Site, and
  • data related to how and when you use the Site.

We may combine information from cookies with Personal Information, including data obtained from other sources.

We may collect this Device Information using the following technologies:

  • Cookies: Data files placed on your device that often include an anonymous unique identifier. For more information about cookies and how to disable them, visit http://www.allaboutcookies.org.
  • Log Files: Files that track actions occurring on the Site and collect data such as IP address, browser type, Internet service provider, referring and exit pages, and date/time stamps.
  • Web Beacons, Tags, and Pixels: Small electronic files — including images and scripts — embedded in our Site's pages that record information about how you browse the Site and may share certain information with third-party analytics and advertising services.

B. Third-Party Tracking Technologies

Our Site uses the following third-party tracking technologies, each operated by a separate and independent company. When you accept our cookie consent banner, each of these technologies may collect information such as your IP address, device identifiers, and browsing activity and may share certain information with the respective third party for the purposes described below. Please note that these third-party services may independently place or recognize cookies on your browser in accordance with their own privacy policies, over which we have no control.

Google Analytics (Google LLC)

  • Purpose: Helps us understand how visitors use our Site, including which pages are visited most and how long visitors stay. Used for analytics and improving our marketing.
  • Information that may be collected and shared: IP address, browser and device information, pages visited, session duration, and referring URL.
  • Google's Privacy Policy: https://policies.google.com/privacy
  • Opt out of Google Analytics: https://tools.google.com/dlpage/gaoptout

Google Ads (Google LLC)

  • Purpose: Allows us to measure the performance of our advertising campaigns and show relevant ads to people who have previously visited our Site.
  • Information that may be collected and shared: IP address, browser and device information, pages visited, and ad interaction data.
  • Google's Privacy Policy: https://policies.google.com/privacy
  • Manage Google Ads settings: https://adssettings.google.com

Klaviyo (Klaviyo, Inc.)

  • Purpose: Supports our email marketing program by tracking on-site behavior such as pages visited and products viewed, so that we can send more relevant marketing emails.
  • Information that may be collected and shared: IP address, browser and device information, pages visited, and email engagement data.
  • Klaviyo's Privacy Policy: https://www.klaviyo.com/legal/privacy-notice

Meta Pixel (Meta Platforms, Inc.)

  • Purpose: Allows us to measure the effectiveness of advertising on Facebook and Instagram, show our ads to people who have visited our Site, and reach new audiences with similar interests.
  • Information that may be collected and shared: IP address, browser and device information, pages visited, and actions taken on our Site. If you have a Facebook or Instagram account, Meta may independently associate this information with your account in accordance with Meta's own privacy policy.
  • Meta's Privacy Policy: https://www.facebook.com/privacy/policy/
  • Opt out of Meta's off-site tracking: https://www.facebook.com/off_facebook_activity/

Pinterest Tag (Pinterest, Inc.)

  • Purpose: Allows us to measure ad performance and show relevant ads to visitors of our Site on Pinterest.
  • Information that may be collected and shared: IP address, browser and device information, and pages visited.
  • Pinterest's Privacy Policy: https://policy.pinterest.com/en/privacy-policy

C. Information You Provide Voluntarily ("Order Information")

When you make or attempt to make a purchase through the Site, we collect your name, billing and shipping address, payment information (including credit card numbers, processed securely by our payment processor), email address, and phone number. We refer to this as "Order Information."

D. Photos, Reviews, Testimonials, and User-Generated Content

If you voluntarily submit a photo, review, testimonial, comment, or other content to us, we may collect the content you provide, your name or social media handle, and any other information you choose to include. We may use this content for customer service, marketing, advertising, promotional, Site, email, and social media purposes, subject to applicable law and any permissions, releases, or consents we obtain from you.

Please do not submit photos or content that include sensitive personal information, health information, information about children, or information about other individuals unless you have the right and authority to provide that information to us.

E. Sensitive Personal Information

Depending on how you interact with us, we may collect limited information that may be considered "sensitive personal information" under certain privacy laws, such as account login credentials, payment information processed by our payment processors, precise geolocation if enabled through your device settings, or information you voluntarily provide in photos, reviews, messages, or other submissions.

We do not use or disclose sensitive personal information for purposes that require a right to limit under California law, unless we provide you with the required notice and choice. We do not knowingly collect or process sensitive personal information for the purpose of inferring characteristics about you.

3. HOW WE USE YOUR PERSONAL INFORMATION

A. Order Information

We use Order Information to:

  • Fulfill orders placed through the Site (including processing payments, arranging shipping, and providing invoices and order confirmations)
  • Communicate with you about your orders
  • Screen orders for potential risk or fraud
  • Provide you with product information or advertising that aligns with your stated preferences

B. Device Information

We use Device Information to:

  • Screen for potential risk and fraud
  • Understand how customers browse and interact with our Site
  • Assess the effectiveness of our marketing and advertising campaigns
  • Deliver relevant advertising to you on third-party platforms (including Google, Facebook/Instagram, and Pinterest) based on your prior visits to our Site
  • Reach new audiences with similar characteristics to our existing customers

4. SHARING YOUR PERSONAL INFORMATION

We may disclose personal information to the following categories of recipients:

  • E-commerce and Site service providers, including Shopify and related vendors that help us operate the Site, process orders, manage shopping carts, support checkout, provide hosting, maintain security, and perform fraud prevention. You can read Shopify's privacy policy at https://www.shopify.com/legal/privacy.
  • Payment processors, which process payment information securely and independently from us. We do not store complete credit card numbers.
  • Shipping, fulfillment, and logistics providers, which help us process, ship, and deliver orders.
  • Marketing and advertising partners, including Google, Meta, Klaviyo, Pinterest, and similar partners, which may collect or receive information through cookies, pixels, tags, and other tracking technologies to provide analytics, advertising measurement, personalization, retargeting, and targeted advertising.
  • Professional advisors, including attorneys, accountants, auditors, insurers, and consultants.
  • Government authorities, law enforcement, or other third parties where we believe disclosure is necessary to comply with law, respond to legal process, protect our rights, protect the rights or safety of others, detect or prevent fraud, or enforce our terms.
  • Business transaction parties, in connection with a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar corporate transaction.

Some disclosures to advertising and analytics partners may be considered a "sale," "sharing," targeted advertising, or cross-context behavioral advertising under certain U.S. state privacy laws, even though we do not sell personal information for money.

5. COOKIES AND TRACKING TECHNOLOGIES: CONSENT AND YOUR CHOICES

Do Not Track. We do not currently employ a process for automatically responding to "Do Not Track" (DNT) signals sent by web browsers, mobile devices, or other mechanisms. Per industry standards, third parties may be able to collect information, including personal information, about your online activities over time and across different websites or online services when you use the Site.

Global Privacy Control. You can use the Global Privacy Control ("GPC") through a supported browser to signal certain of your opt-out preferences. You may opt-out of the processing of your personal information for purposes of targeted advertising or certain sales of your personal information by broadcasting the Global Privacy Control Signal through a supported browser. If you use the GPC, we will process your request for your browser, but it will not apply outside of that browser to your device. You will need to use the GPC for each browser you use to access the Site If you clear your cookies in your browser after using the GPC, you will need to use the GPC again for us to process your opt out for that browser.

Google Analytics. We use Google Analytics to collect and process information about your use of the Site. Google sets cookies on your browser or device, and then your web browser will automatically send information to Google. Google uses this information to provide us with reports that we use to better understand and measure how users interact with our Site.

To learn more about how Google uses data, visit Google's Privacy Policy and Google's page on "How Google uses data when you use our partners' sites or apps." You may download the Google Analytics Opt-out Browser Add-on for each web browser you use, but this does not prevent the use of other analytics tools. To learn more about Google Analytics cookies, visit Google Analytics Cookie Usage on Websites.

Cookie Banner and Your Choices

We display a cookie consent banner when you first visit our Site. Here is how our consent system works:

  • Before you consent: No third-party advertising or analytics tracking technologies (including the Google Analytics tracker, Google Ads tracker, Klaviyo tracker, Meta Pixel, and Pinterest Tag) will activate or collect information until you have clicked "Accept" on our cookie consent banner.
  • If you accept: The tracking technologies described in Section 2(B) will activate and may begin collecting and sharing certain Device Information with the relevant third parties as described in this Privacy Policy.
  • If you decline: Only cookies and technologies that are strictly necessary for the Site to function will remain active. These include technologies that support your shopping cart, the checkout process, security and fraud prevention, and site load balancing. Advertising and analytics tracking technologies will not be activated.
  • Changing your preference: You may update your cookie preferences at any time by clearing your browser cookies and revisiting our Site (the consent banner will reappear), or by contacting us at info@drloretta.mom.

6. BEHAVIORAL ADVERTISING AND OPT-OUT OPTIONS

We may use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For more information about how targeted advertising works, you can visit the Network Advertising Initiative's educational page at: http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work

You can opt out of targeted advertising through the following options:

  • Google Analytics: https://tools.google.com/dlpage/gaoptout
  • Google Ads: https://adssettings.google.com
  • Meta (Facebook / Instagram): https://www.facebook.com/off_facebook_activity/
  • Pinterest: https://policy.pinterest.com/en/privacy-policy
  • Klaviyo: https://www.klaviyo.com/legal/privacy-notice
  • Industry opt-out tool (DAA): http://www.aboutads.info/choices/
  • Contact us directly: info@drloretta.mom

7. YOUR U.S. PRIVACY RIGHTS

Depending on where you live and the laws that apply, you may have certain statutory data protection rights regarding your personal information. These rights may be subject to exceptions and limitations under applicable law.

You may have the right to:

A. Right to Know

You have the right to request that we disclose: the categories of personal information we have collected about you; the categories of sources from which we collected it; our business or commercial purpose for collecting it; and the categories of third parties with whom we share it.

B. Right to Delete

You have the right to request that we delete personal information we have collected from you, subject to certain exceptions permitted by law.

C. Right to Correct

You have the right to request that we correct inaccurate personal information we maintain about you.

D. Right to Opt Out of Sale or Sharing and Withdraw Consent

You have the right to opt-out of certain processing of your personal information, including (where applicable) targeted advertising, and the sale or sharing of personal information (as those terms may be defined by applicable law). You may also withdraw your consent at any time where we process personal information based on your consent (this will not affect the lawfulness of processing before you withdrew consent).

E. Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. We will not deny you goods or services, charge you different prices, or provide a different quality of service because you exercised your rights.

F. Authorized Agents (where applicable)

In some U.S. states, you may designate an authorized agent to submit a request on your behalf. If you use an authorized agent, we may ask for proof that the agent is authorized, and we may also require you to verify your identity directly with us.

G. Appeals (where applicable)

If we deny your request, you may have the right to appeal our decision. To appeal, please email info@drloretta.mom with the subject line "Privacy Request Appeal" and include your original request and our response. We will review and respond within the time required by applicable law.

H. How to Exercise Your Privacy Rights

To submit a request to know, delete, or correct your personal information, or to opt out of data sharing:

  • Email: info@drloretta.mom (subject line: "Privacy Rights")
  • Mail: Dr. Loretta, LLC, 3961 SW 47th Avenue, Davie, FL 33314

We will respond to verifiable consumer requests within the time required by law. We may request information to verify your identity before processing your request.

Shine the Light. Pursuant to California Civil Code Section 1798.83, if you are a California resident, you have the right to obtain: (a) a list of all third parties to whom we may have disclosed your personal information within the past year for direct marketing purposes, and (b) a description of the categories of Personal Information disclosed, by contacting us per the "Contact Us" Section below.

8. CHILDREN'S PRIVACY

Our Site is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us at info@drloretta.mom and we will take steps to delete that information from our records. If we become aware that we have inadvertently collected personal information from a child under 13, we will promptly delete it.

9. DATA RETENTION

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected. When the information is no longer needed for those purposes, we will take reasonable steps to securely delete or destroy it from our systems. We will also make reasonable efforts to ensure that our service providers delete or destroy personal information they maintain on our behalf. In some circumstances, we may retain personal information for longer periods if required to comply with applicable laws, regulations, legal obligations, or court orders.

In determining how long to retain personal information, we consider factors such as the nature of the information, the purposes for which it was collected, legal obligations, and operational requirements.

10. YOUR EU, UK, AND SWISS PRIVACY RIGHTS

Our Services are hosted in the United States and intended for visitors located within the United States. However, we recognize that individuals located outside the United States, including in the European Economic Area ("EEA"), the United Kingdom ("UK"), and Switzerland, may interact with our Site.

If you are located outside the United States, please be aware that any personal information you provide to us will be transferred to, stored in, and processed in the United States, where data-protection laws may differ from those in your country of residence.

Legal Bases for Processing (EEA, UK, and Switzerland). If you are located in the EEA, the UK, or Switzerland, we process your personal information only where we have a valid legal basis under the General Data Protection Regulation ("GDPR"), the UK GDPR, or the Swiss Federal Act on Data Protection ("FADP"), as applicable. Our legal bases include:

  • Performance of a Contract: We process your data when it is necessary to perform a contract with you or to take steps at your request before entering into a contract—for example, to process a ticket purchase, event registration, or membership enrollment.
  • Legitimate Interests: We process your data when it is necessary for our legitimate business interests (or those of a third party) and your rights do not override those interests—for example, to operate and improve our Site, to detect and prevent fraud, to ensure the safety and security of our facilities and guests, and to send you communications about goods and services that may interest you.
  • Consent: Where required by applicable law, we process your data based on your freely given, specific, informed, and unambiguous consent—for example, for certain marketing communications, for the use of non-essential cookies and tracking technologies, and for the processing of certain categories of sensitive data. You may withdraw your consent at any time by contacting us using the methods described below, without affecting the lawfulness of processing based on consent before its withdrawal.
  • Legal Obligation: We process your data when it is necessary to comply with a legal obligation to which we are subject—for example, to respond to a lawful court order or regulatory request.

International Data Transfers. When we transfer personal information from the EEA, the UK, or Switzerland to the United States or other countries that have not been deemed to provide an adequate level of data protection, we implement appropriate safeguards to protect your data in accordance with applicable law. These safeguards may include:

  • Standard Contractual Clauses ("SCCs") approved by the European Commission (and the UK International Data Transfer Addendum, where applicable);
  • Binding contractual commitments with our service providers and processors requiring them to protect Personal Data to a standard consistent with the GDPR; and
  • Supplementary technical and organizational measures, such as encryption and access controls, where appropriate.

Your Rights Under the GDPR and UK GDPR. If you are located in the EEA or the UK, you have the following rights with respect to your personal information, subject to certain exceptions and limitations under applicable law:

  • Right of Access: You have the right to request confirmation of whether we process your personal information and, if so, to request a copy of that data.
  • Right to Rectification: You have the right to request that we correct inaccurate or incomplete personal information.
  • Right to Erasure: You have the right to request that we delete your personal information in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
  • Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal information in certain circumstances, such as when you contest the accuracy of the data.
  • Right to Data Portability: You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
  • Right to Object: You have the right to object to the processing of your personal information where we rely on legitimate interests as our legal basis. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where the processing is necessary for the establishment, exercise, or defense of legal claims.
  • Rights Relating to Automated Decision-Making: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. We do not currently engage in solely automated decision-making of this nature.
  • Right to Withdraw Consent: Where we process your data based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

Exercising Your Rights. To exercise any of the rights described above, please contact us at info@drloretta.mom. We will respond to your request within one (1) month, though this period may be extended by up to two additional months for complex or numerous requests, in which case we will inform you of the extension and the reasons for it.

Right to Lodge a Complaint. If you are located in the EEA or the UK, you have the right to lodge a complaint with the supervisory authority in the EU Member State of your habitual residence, place of work, or place of the alleged infringement. For UK residents, the relevant authority is the Information Commissioner's Office (ICO) at https://ico.org.uk. A list of EEA supervisory authorities is available at https://edpb.europa.eu.

11. DATA SECURITY

We implement reasonable administrative, technical, and physical safeguards designed to protect your personal information from unauthorized access, disclosure, alteration, or destruction. However, no security system is impenetrable and we cannot guarantee the absolute security of your information. If we become aware of a security incident involving your personal information, we will investigate the matter and take appropriate steps in accordance with applicable laws. If you believe your information may have been compromised, please contact us immediately at info@drloretta.mom.

12. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons. When we update this policy, we will revise the "Last Updated" date at the top of this page. For material changes, we will provide more prominent notice, such as an email notification or a banner on the Site. We encourage you to review this Privacy Policy periodically.

13. CONTACT US

For more information about our privacy practices, to exercise your privacy rights, or to make a complaint, please contact us:

Email: info@drloretta.mom

Mail:

Dr. Loretta, LLC

3961 SW 47th Avenue

Davie, FL 33314

United States

Footer Link: A "Do Not Sell or Share My Personal Information" link is available in the footer of our Site.