Last updated: September 23, 2026

This notice supplements the It's Cassidy Bybee Privacy Policy and applies to visitors and customers in the European Economic Area (EEA) and the United Kingdom. It explains the privacy rights you have under the laws that apply to you and how to use them. Our Privacy Policy describes what personal information we collect, how we use it and who we share it with. If anything in this notice conflicts with the Privacy Policy, this notice controls for residents of the European Economic Area (EEA) and the United Kingdom.

The website www.cassidybybee.com is operated by Cassidy Enterprises Inc d/b/a It's Cassidy Bybee ("we," "us" or "our").

Who is responsible for your data

Cassidy Enterprises Inc d/b/a It's Cassidy Bybee is the data controller of your personal information for the purposes of the EU General Data Protection Regulation (GDPR) and the UK GDPR.

Why we process your data

We rely on the following legal bases:

• Contract: to process, ship and support your orders.
• Consent: for marketing emails and text messages and for non-essential cookies. You can withdraw consent at any time.
• Legitimate interests: to run, secure and improve our store and prevent fraud, where those interests are not outweighed by your rights.
• Legal obligation: to meet tax, accounting and other legal requirements.

Your rights

You have the right to:

• Access the personal information we hold about you and get a copy of it.
• Correct information that is inaccurate or incomplete.
• Delete your personal information, where there is no overriding reason for us to keep it.
• Restrict how we process your information.
• Receive your information in a portable format.
• Object to processing based on legitimate interests, and to object at any time to direct marketing.
• Withdraw consent at any time, without affecting processing that happened before you withdrew it.

International transfers

We are based in the United States. When we transfer personal information out of the EEA or UK, we rely on recognized safeguards such as the European Commission's Standard Contractual Clauses or the UK equivalent, unless the destination has been found to provide adequate protection.

How to make a request

Email us at support@itscassidybybeeshop.com with the subject line "Privacy request" and tell us which right you want to use. To protect your information, we will ask you to confirm your identity before we act, usually by matching details from your account or order. We will respond within one month. If a request is complex, we may extend this by up to two further months and will tell you why.

Complaints

We would appreciate the chance to resolve any concern first, but you have the right to complain to your local data protection authority. EEA authorities are listed at edpb.europa.eu. In the UK, contact the Information Commissioner's Office at ico.org.uk.

Text messages (SMS and MMS)

Text marketing: With your permission, we may send text messages about our store, new products, and other updates. Updates include Checkout Reminders. Webhooks will be used to trigger the Checkout Reminders messaging system.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

We use Postscript, Inc. to send our text messages. You can opt out at any time by replying STOP to any message, or reply HELP for help. Message frequency varies. Message and data rates may apply. Full details are in the Mobile Messaging section of our Privacy Policy.

Contact us

Questions about this notice or our privacy practices? Email support@itscassidybybeeshop.com or write to us at:

Cassidy Enterprises Inc d/b/a It's Cassidy Bybee
3644 West 2400 South, West Haven, UT 84401, United States