Privacy policy
Privacy Policy
Last updated: 19.05.2026
Hello Fay ("we," "us," "our," or "Hello Fay") operates the website https://hellofay.com (the "Site"), including all related products, features, content, and services (collectively, the "Services"). The Site is operated by Noire Eagle LLC, a Wyoming limited liability company.
This Privacy Policy describes how we collect, use, disclose, and protect the personal information of individuals who visit the Site, make a purchase, or otherwise interact with us, and explains your privacy rights under applicable U.S. state laws.
Please read this Privacy Policy carefully. By using the Site or providing us with personal information, you acknowledge that you have read and understood this Privacy Policy.
1. CONTROLLER OF YOUR PERSONAL INFORMATION
The entity responsible for the personal information collected through the Site is:
Noire Eagle LLC
2106 House Ave Suite 620
Cheyenne, WY 82001, USA
Email: support@hellofay.com
2. PERSONAL INFORMATION WE COLLECT
We collect the following categories of personal information:
a) Identifiers and contact information: full name, billing address, shipping address, email address, telephone number (if provided), and order number.
b) Commercial and transaction information: products viewed, added to cart, wishlisted, or purchased; order history; returns and exchanges; payment history.
c) Payment information: payment method type, last four digits of payment card (full card numbers are processed by our payment processor and not stored by us), and PayPal account identifiers.
d) Account information (if you create an account): username, password (encrypted), account preferences, saved addresses.
e) Customer service communications: emails, support requests, chat messages, and other communications you send to us.
f) Health and product-use information (limited): if you contact us about a skin reaction, allergy, or other adverse event, we may collect information about the reaction, including photographs you provide, descriptions of symptoms, and details of any medical care. This information is processed in connection with our obligations under the Modernization of Cosmetics Regulation Act (MoCRA).
g) Device and technical information: IP address, browser type, operating system, device type, unique device identifiers, mobile network information, time zone, and screen resolution.
h) Usage and behavioral information: pages viewed, time spent on pages, scroll depth, click events, products clicked, referral source, search terms used on the Site, and similar interaction data.
i) Marketing and advertising data: information about how you interact with our marketing emails, advertisements, and social media content; ad attribution data; conversion events.
j) Inferences: characteristics, preferences, and predictions derived from the categories above, used to personalize content and advertising.
We do not knowingly collect the following sensitive personal information unless voluntarily provided: Social Security numbers, driver's license numbers, financial account credentials, precise geolocation, racial or ethnic origin, religious beliefs, union membership, or genetic data.
3. SOURCES OF PERSONAL INFORMATION
We collect personal information from the following sources:
a) Directly from you, when you place an order, create an account, sign up for marketing emails, contact customer service, or use the Site;
b) Automatically through cookies, pixels, web beacons, and similar tracking technologies when you visit or interact with the Site;
c) From our service providers, including our e-commerce platform (Shopify Inc.), payment processors (Shopify Payments, PayPal), email marketing platform (Klaviyo or similar), analytics providers (Google Analytics or similar), and advertising partners (Meta Platforms, TikTok, Google Ads);
d) From advertising platforms when you interact with our ads on third-party sites or social media.
4. HOW WE USE YOUR PERSONAL INFORMATION
We use personal information for the following business purposes:
a) Order processing and fulfillment, including communicating with our supplier and shipping partners in the People's Republic of China and the United States to dispatch and deliver your order;
b) Customer service, including responding to inquiries, resolving complaints, processing returns, and handling adverse event reports;
c) Payment processing and fraud prevention;
d) Account management;
e) Marketing and advertising, including sending promotional emails, displaying targeted advertisements on third-party platforms (Meta, Google, TikTok), and analyzing the effectiveness of marketing campaigns;
f) Site analytics and improvement, including understanding how visitors use the Site and improving Site functionality;
g) Legal compliance, including compliance with tax obligations, consumer protection laws, and product safety obligations under MoCRA;
h) Security, including detecting and preventing fraud, unauthorized access, and other unlawful activity;
i) Internal business operations, including financial reporting, audits, and corporate planning.
5. DISCLOSURE OF PERSONAL INFORMATION TO THIRD PARTIES
We may disclose personal information to the following categories of third parties:
a) Service providers acting on our behalf, including:
- E-commerce platform: Shopify Inc.
- Payment processors: Shopify Payments, PayPal
- Fulfillment and shipping partners (in the People's Republic of China and the United States)
- Email marketing platforms: Klaviyo or similar
- Customer service software providers
- Analytics providers: Google Analytics or similar
- Cloud storage providers
b) Advertising and marketing partners, including:
- Meta Platforms, Inc. (Facebook, Instagram)
- Google LLC (Google Ads, YouTube)
- TikTok Inc.
- Pinterest, Snapchat, or similar platforms (if used)
c) Affiliates and corporate entities related to Noire Eagle LLC;
d) Legal and regulatory authorities, including the U.S. Food and Drug Administration (specifically for serious adverse event reports under MoCRA), tax authorities, courts, and law enforcement, where required by law or to protect our rights;
e) Successors in interest, in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our assets.
We do not sell personal information for money. However, certain disclosures to advertising partners (such as Meta Platforms and Google) for purposes of targeted advertising may be considered a "sale" or "sharing" of personal information under California, Colorado, Connecticut, Virginia, and other state privacy laws. See Section 9 for your right to opt out.
6. TRACKING TECHNOLOGIES, COOKIES, AND PIXELS
The Site uses cookies, pixels, web beacons, software development kits (SDKs), and similar tracking technologies, including:
a) Strictly necessary cookies — required for basic Site functions (such as your shopping cart, checkout, and security). These cannot be disabled.
b) Performance and analytics cookies — collect information about how visitors use the Site. We use Google Analytics or similar tools for this purpose.
c) Advertising and tracking pixels — used to deliver targeted advertising and measure campaign effectiveness. We use:
- Meta Pixel (Facebook/Instagram)
- Google Ads conversion tracking
- TikTok Pixel (if applicable)
- Pinterest Tag (if applicable)
These third-party pixels and SDKs may collect information about your activity on the Site and share it with the respective platforms. The platforms may use this information for their own purposes, including ad targeting on their platforms and broader advertising networks.
YOUR CONSENT: By continuing to use the Site after seeing the cookie consent banner, you consent to the use of cookies and tracking technologies. You may manage your preferences at any time by clicking the "Cookie Preferences" link in the footer of the Site or by adjusting your browser settings.
OPT-OUT: For information on opting out of targeted advertising, see Section 9 (state-specific rights) and the following platform-specific opt-out tools:
- Meta: https://www.facebook.com/about/ads
- Google: https://adssettings.google.com
- Digital Advertising Alliance: https://www.aboutads.info/choices
- Network Advertising Initiative: https://www.networkadvertising.org/choices
7. DATA RETENTION
We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, including:
a) Order and transaction data: retained for the period required by U.S. tax and accounting laws (generally 7 years);
b) Account data: retained for as long as your account remains active, plus a reasonable period thereafter;
c) Marketing data: retained until you opt out or unsubscribe, after which it is retained only in suppression form to prevent future marketing;
d) Adverse event records: retained for at least 6 years from the date of receipt, in accordance with MoCRA recordkeeping requirements (21 U.S.C. § 364d);
e) Customer service communications: retained for 3 years, or longer if required for legal compliance.
8. SECURITY OF YOUR PERSONAL INFORMATION
We implement reasonable administrative, technical, and physical safeguards to protect personal information against unauthorized access, alteration, disclosure, or destruction. These include encryption of payment data in transit, restricted access controls, and use of reputable service providers (Shopify, PayPal) that maintain industry-standard security.
However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security and disclaim any warranty to that effect.
In the event of a data breach affecting your personal information, we will notify you and applicable authorities in accordance with applicable state and federal data breach notification laws.
9. YOUR STATE PRIVACY RIGHTS
Depending on your state of residence, you may have specific privacy rights as described below. To exercise any of these rights, contact us at support@hellofay.com with the subject line "Privacy Rights Request" and provide sufficient information to verify your identity and the state in which you reside.
a) CALIFORNIA RESIDENTS (CCPA / CPRA)
If you are a California resident, you have the following rights:
(i) Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purposes for collecting or sharing it, and the categories of third parties with whom we share it.
(ii) Right to Delete: You may request that we delete personal information we have collected from you, subject to certain exceptions (such as completing a transaction, complying with legal obligations, or maintaining adverse event records under MoCRA).
(iii) Right to Correct: You may request that we correct inaccurate personal information.
(iv) Right to Opt Out of Sale or Sharing: You may request that we stop selling or sharing your personal information for targeted advertising purposes. To exercise this right, click the "Do Not Sell or Share My Personal Information" link in the footer of the Site or contact us at support@hellofay.com.
(v) Right to Limit Use of Sensitive Personal Information: Hello Fay does not use sensitive personal information for purposes beyond those permitted by the CCPA. No additional opt-out is required.
(vi) Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights.
We will respond to verifiable requests within 45 days. We may extend this period by an additional 45 days where reasonably necessary, with notice to you.
NOTICE AT COLLECTION (CCPA): Categories of personal information collected, purposes of collection, and disclosure recipients are described in Sections 2, 4, and 5 above.
NOTICE OF FINANCIAL INCENTIVE: We do not currently offer financial incentives in exchange for personal information.
b) VIRGINIA, COLORADO, CONNECTICUT, UTAH, TEXAS, OREGON, MONTANA, DELAWARE, IOWA, NEW HAMPSHIRE, NEW JERSEY, TENNESSEE, AND FLORIDA RESIDENTS
If you are a resident of these states, you have rights similar to (but not identical to) California residents, generally including:
(i) Right to access your personal data;
(ii) Right to correct inaccurate personal data;
(iii) Right to delete personal data;
(iv) Right to obtain a portable copy of your personal data;
(v) Right to opt out of targeted advertising and "sale" of personal data;
(vi) Right to appeal a denied request (where applicable);
(vii) Right to non-discrimination.
To exercise any of these rights, contact us at support@hellofay.com. We will respond within the timeframe required by your state's law (typically 45 days, with possible extensions).
c) RIGHT TO APPEAL
If we decline to act on a privacy rights request, you may appeal our decision by emailing support@hellofay.com with the subject line "Privacy Rights Appeal." We will review the appeal and respond within the timeframe required by applicable law (typically 45 to 60 days). If your appeal is denied, you may contact your state attorney general to file a complaint.
10. CHILDREN'S PRIVACY
The Site is not directed to, and we do not knowingly collect personal information from, children under the age of 13. Hello Fay is a chemical depilatory product not intended for use by minors, and we require all purchasers to confirm they are at least 18 years of age.
If you are a parent or guardian and believe we have collected personal information from a child under 13, please contact us at support@hellofay.com and we will delete such information.
In compliance with the California "Eraser Law" (Cal. Bus. & Prof. Code § 22581), minors under 18 who are registered users may request removal of content or information they have posted publicly.
11. DO NOT TRACK SIGNALS AND GLOBAL PRIVACY CONTROL
Some browsers and browser extensions may transmit "Do Not Track" (DNT) signals or Global Privacy Control (GPC) signals. We currently respond to GPC signals from California, Colorado, and Connecticut residents by treating them as a valid opt-out of "sale" and "sharing" of personal information. We do not currently respond to general DNT signals due to the absence of a uniform standard.
12. INTERNATIONAL DATA TRANSFERS
Your personal information may be transferred to, stored, and processed in countries outside the United States, including:
a) The People's Republic of China — for order fulfillment by our supplier's warehouse;
b) Other countries — where our service providers operate (Shopify and others may process data in various jurisdictions, including Canada and Ireland).
By using the Site and providing personal information, you consent to such international transfers.
13. THIRD-PARTY LINKS AND SERVICES
The Site may contain links to third-party websites, plug-ins, and services (such as social media sharing buttons). This Privacy Policy does not apply to those third parties. We are not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party site or service you visit.
14. UPDATES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this Policy will reflect the date of the most recent revision. Material changes will be highlighted on the Site or communicated to you by email where appropriate. Your continued use of the Site after a revision constitutes your acceptance of the updated Privacy Policy.
15. CONTACT US
For questions about this Privacy Policy, to exercise your privacy rights, or to file a complaint:
Noire Eagle LLC
2106 House Ave Suite 620
Cheyenne, WY 82001, USA
Email: support@hellofay.com
If you are a California resident, you may also contact the California Attorney General's office at https://oag.ca.gov/privacy/ccpa. If you are a resident of another state with privacy rights, you may contact your state attorney general's office for further information about your rights.