Privacy Policy

Effective Date: August 14, 2026

Please read this Privacy Policy carefully. By accessing or using the Once Upon The Gown website, you acknowledge that you have read, understood, and agree to the practices described in this policy. If you do not agree, please discontinue use of the site.

Once Upon The Gown is a U.S.-based online marketplace that connects buyers and sellers of pre-loved (secondhand) wedding gowns. Our platform allows individuals to list, browse, and purchase wedding gowns in a safe, dedicated online environment.

This Privacy Policy explains:

• What personal information we collect from you and how we collect it;
• Why we collect that information and how we use it;
• How we protect your personal information;
• Your rights regarding your personal data; and
• How to contact us with questions or requests.

By creating an account, listing a gown, contacting a seller, or otherwise using our website, you agree to the terms of this Privacy Policy. We are committed to handling your information with care and transparency.

We collect different types of information depending on how you use our site.

• IP address and general location data;
• Browser type and version;
• Device type and operating system;
• Pages visited, time spent on pages, and clickstream data;
• Cookies and similar tracking technologies (see Section 7 for details).

• Name and email address (when submitting an inquiry to a seller);
• Shipping address (when required to complete a transaction);
• Contact information voluntarily submitted through the platform's messaging or inquiry features.

• Name, email address, and mailing address;
• Phone number, if voluntarily provided;
• Listing details and photographs of gowns offered for sale;
• Payment and payout information, which is collected and processed directly by Stripe, Inc. (our payment processor) — Once Upon The Gown does not store full banking or card details.

• Server log data (access times, error logs, referral URLs);
• Analytics data (via Google Analytics or similar tools);
• Session data and cookie identifiers;
• Referral source URLs (how you arrived at our site).

We use the information we collect for the following purposes:

• To operate the marketplace — to connect buyers with sellers and facilitate gown listings and inquiries;
• To process payments — to facilitate secure transactions through Stripe on behalf of buyers and sellers;
• To manage seller accounts — to verify seller identities, maintain listing quality, and manage account access;
• To send transactional communications — such as account confirmation emails, listing status updates, and buyer inquiry notifications;
• To send marketing communications — where you have given consent, we may send promotional updates about new listings or platform features; you may opt out at any time;
• To detect and prevent fraud — to protect users from abuse, unauthorized access, and security threats;
• To comply with legal obligations — including applicable federal and state laws, tax regulations, and court orders;
• To improve the website — to analyze how users interact with the site and make improvements to usability and performance.

• To create a seller account, you must provide a valid email address, which will be verified before your account is activated.
• Sellers are solely responsible for the accuracy of their personal information and the accuracy and legality of their listings, including photographs and descriptions.
• Your seller profile information — including your username, listing details, gown photographs, and pricing — may be visible to the general public and to buyers browsing the marketplace.
• Account data is retained for as long as your account remains active. If you choose to delete your account, basic records may be retained for a reasonable period as required for legal compliance, fraud prevention, and dispute resolution (see Section 9).
• All seller payout information (such as bank account or debit card details for receiving funds) is collected and stored by Stripe, Inc. Once Upon The Gown does not have access to, nor does it store, your full banking credentials or payment card numbers.

• When a buyer submits an inquiry or contacts a seller through our platform, only the information necessary to facilitate that communication (such as name and email address) is shared with the relevant seller.
• Buyers are strongly advised not to share sensitive personal information — such as Social Security numbers, bank account details, or financial credentials — directly with sellers through our platform's messaging system.
• Once Upon The Gown does not sell, rent, or trade buyer personal information to third parties for their own marketing purposes.

• All payment processing on Once Upon The Gown is handled by Stripe, Inc., a third-party payment processor.
• Once Upon The Gown does not collect, process, or store full credit card numbers, debit card numbers, bank account details, or any other financial credentials. These are submitted directly to and stored securely by Stripe.
• Stripe is certified as PCI-DSS compliant, meaning it meets the highest industry standards for payment data security.
• Stripe's collection and use of your payment data is governed by Stripe's own Privacy Policy, available at stripe.com/privacy. We encourage you to review it.
• By making a purchase or receiving a payout through our platform, you agree to be bound by Stripe's Terms of Service and Privacy Policy in addition to this policy.

We use cookies and similar technologies to provide a better experience on our site. The types of cookies we use include:

Cookie TypePurposeExamplesStrictly NecessaryRequired for the site to function (e.g., keeping you logged in, maintaining your session)Session cookies, authentication tokensAnalyticsHelp us understand how visitors use our site so we can improve itGoogle AnalyticsFunctionalRemember your preferences and settingsLanguage preferences, saved filters

• Third-party cookies may be placed by services such as Google Analytics, Stripe, and GoDaddy hosting infrastructure.
• You can control or disable cookies through your browser settings. Please note that disabling certain cookies may reduce the functionality of our site.
• We do not currently respond to browser-level Do Not Track (DNT) signals. However, you may opt out of Google Analytics tracking by using the Google Analytics Opt-Out Browser Add-On, available at tools.google.com/dlpage/gaoptout.

We work with a small number of trusted third-party service providers. Each has its own privacy practices:

• GoDaddy (Website Hosting): Our site is hosted on GoDaddy's infrastructure. GoDaddy may collect server logs and basic technical data as part of standard hosting operations. See GoDaddy's privacy policy at godaddy.com.
• Stripe, Inc. (Payment Processing): Stripe handles all transaction and payout data. See Section 6 and stripe.com/privacy for details.
• Google Analytics (Website Analytics): We may use Google Analytics to collect anonymized data about how users interact with our site — such as page views, session duration, and traffic sources. This data is aggregated and does not identify you personally.

Once Upon The Gown is not responsible for the privacy practices of any third-party services. We encourage users to review the privacy policies of each third-party service they interact with. We do not sell your personal data to any third parties.

• Active accounts: Your account information is retained for as long as your account remains active and in good standing.
• After account deletion: Basic records (such as your email address and account history) may be retained for up to 3 years following account deletion for purposes of fraud prevention, legal compliance, and dispute resolution.
• Transaction records: Records related to financial transactions may be retained for up to 7 years in order to comply with applicable financial reporting and tax regulations.
• Data deletion requests: You may request deletion of your personal data at any time by contacting us (see Section 15). We will honor such requests to the extent permitted by law; certain information may be required to be retained for the periods described above.

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) regarding your personal information:

• Right to Know: You may request that we disclose what personal information we have collected about you, including the categories of data, the sources, the business purposes for collection, and any third parties with whom it has been shared.
• Right to Delete: You may request that we delete the personal information we hold about you, subject to certain legal exceptions (such as our obligation to retain transaction records).
• Right to Opt-Out of Sale: We do not sell your personal information. If our practices change in the future, we will update this policy, notify you in advance, and provide a clear opt-out mechanism.
• Right to Non-Discrimination: We will not deny you services, charge you different prices, or provide a lower quality of service because you exercised any of your privacy rights.

To exercise any of these rights, please contact us using the information in Section 15. We will respond to all verifiable requests within 45 days. If additional time is needed, we will notify you of the extension and the reason for it.

• We take reasonable and industry-standard measures to protect your personal information, including SSL/HTTPS encryption for all data transmitted to and from our website, secure hosting through GoDaddy, and internal access controls limiting who can access user data.
• All sensitive payment and financial data is handled exclusively by Stripe under PCI-DSS compliance standards — it is never transmitted through or stored on our own servers.
• No method of data transmission over the internet or electronic storage is 100% secure. While we do our best to protect your information, we cannot guarantee absolute security.
• In the event of a data breach that affects your rights or personal information, we will notify affected users as required by applicable law, including California's data breach notification requirements.

• Once Upon The Gown is intended for adult users and is not directed at children under the age of 13.
• We do not knowingly collect or solicit personal information from anyone under the age of 13.
• If we become aware that we have inadvertently collected personal information from a child under 13, we will take prompt steps to delete that information from our records.
• If you believe a child has provided us with personal information, please contact us immediately using the information in Section 15.

Our website may contain links to external websites, including social media platforms, seller personal websites, or other third-party resources. These links are provided for your convenience only. Once Upon The Gown has no control over and is not responsible for the content, privacy practices, or security of any external website. We encourage you to review the privacy policy of any third-party site you visit before providing any personal information.

• We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.
• Any updates will be posted on this page with a revised Effective Date at the top of the document.
• Your continued use of the Once Upon The Gown website following the posting of any changes constitutes your acceptance of the revised Privacy Policy.
• For material changes that significantly affect your rights or how we use your data, we will make reasonable efforts to notify registered users by email prior to the change taking effect.

If you have any questions, concerns, or requests regarding this Privacy Policy or how your personal data is handled, please reach out to us using the contact information below. We are committed to addressing your inquiries promptly and fairly.

Business NameOnce Upon The GownEmail Address[Insert contact email address]Website[Insert website URL]Mailing Address[Insert mailing address]

We aim to respond to all privacy-related inquiries and verifiable data requests within 45 days of receipt. For California residents exercising CCPA rights, we will confirm receipt of your request within 10 business days.

© 2026 Once Upon The Gown. All rights reserved. This Privacy Policy was last updat