Privacy Policy

Table of contents

DandyMen Privacy Policy

Last Updated: March 17, 2026

Introduction

DandyMen respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

Information We Collect

Information You Provide to Us

  • Account Information: When you register, we collect your email address and (securely-hashed) password for account creation and authentication.
  • Billing Information: If you subscribe to our paid features, we collect payment information via our payment processor (Shopify). We do not store your full credit card details—Shopify handles all payment data.
  • Shipping Information: Name, shipping address, billing address entered at time of ordering.

Information Automatically Collected

  • Usage Data: Details about how you interact with our website.
  • Device Information: Browser type, IP address, device type, operating system, and other technical data.
  • Cookies and Similar Technologies: We use cookies, local storage, and similar tracking technologies to remember your preferences (e.g., language, display settings) and to track usage for analytics and performance monitoring.

How We Use Your Information

We use the data we collect for the following purposes:

Provide products and services to you to fulfill orders and contracts

  • Provide invoices, order confirmations, and communications related to your order

Process Payments:

Manage subscriptions, billing, invoicing, and any refunds. (All payment processing is handled securely by Shopify.)

Improve and Develop New Features:

  • Aggregate and anonymize certain usage data to improve our website and services (for example, to improve content-suggestion quality) without storing any personally identifiable information.

Communications:

  • Respond to requests and inquiries
  • Send you service-related notices (e.g., password reset emails, payment receipts, important product updates).
  • Offer optional marketing communications. You can opt out of these at any time via your account settings or the unsubscribe link in each email.

Legal Basis: This processing is necessary for the performance of a contract with you or to take steps at your request prior to entering into a contract.  Further, the processing of data as described in this Section 3 is based on our legitimate interest in maintaining, securing, and improving our services.

Sharing Your Information

Third-Party Service Providers

We share data only with the following categories of service providers, strictly as necessary to operate the platform:

  • Payment Processors (Shopify): To securely process subscription and order fees. We send only the billing information required by Shopify, and they handle all credit-card data under their own compliance controls.
  • Cloud Hosting Providers: We host our application and store data (including user profile data, uploaded documents, and tokens) on secure servers (e.g., AWS, Google Cloud). We never share raw personally identifiable data with them for any other purpose.

We also use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For example:

For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

Legal Requirements

We may disclose or preserve your personal information if required to do so by law or in response to valid legal process (e.g., a subpoena, court order, or other legal request). We may also share data to protect the rights, property, or safety of DandyMen, our users, or others.  We generally retain data for a period of time consistent with the original purpose of collection or as otherwise required by law.

Data Security

We implement industry-standard security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Secure Access Controls: Your account credentials are hashed (bcrypt or equivalent). We use role-based access on our internal systems so that only authorized staff/servers can access production data.
  • Two-Factor Authentication (2FA): We strongly encourage you to enable 2FA for your DandyMen account.
  • Regular Audits & Penetration Testing: We conduct periodic security reviews and testing (either in-house or via third-party auditors) to identify and remediate potential vulnerabilities.

However, no method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security of any information you transmit to us.

Data Retention

  • Active Accounts: We retain your personal information (profile data, tokens, usage history, uploaded content) for as long as your account is active or as needed to provide you our services.
  • Inactive Accounts: If your account remains inactive for more than 24 months, we may send you an email to confirm whether you wish to keep it. If you do not respond within 30 days, we may automatically anonymize or delete your data, subject to any legal obligations (e.g., tax records, fraud detection).
  • Payment Records: Even if you close your account, we retain minimal billing records (date, amount, transaction ID) for up to 5 years to comply with financial regulations. We do not keep your full credit-card data—Shopify retains that in accordance with their own PCI-DSS compliance.
  • Content You Upload: When you request account closure, we remove or anonymize all personally identifiable content (including images, videos, documents, and text you've created) from our active systems. However, backups of those items may remain in encrypted archives for up to 90 days, only for disaster-recovery purposes; after that period, they are permanently deleted.

Your Rights and Data Deletion

Access, Correction & Portability

Depending on where you live, you may have rights to:

  • Access the personal information we hold about you.
  • Correct any inaccurate or incomplete data.
  • Port your information in a structured, machine-readable format (for example, if you want a JSON file of your content, usage history, and connected Page IDs).

To make a request, please email info@dandymen.com with the subject line "Data Access Request." We will verify your identity (e.g., by confirming the email associated with your account) before fulfilling any data-access request.

Deletion and Objection

If you wish to have your personal information deleted, or if you want to object to certain uses (e.g., analytics tracking, marketing emails), you can Email info@dandymen.com with the subject line "Data Deletion Request."

We will process your deletion request within 30 days of verification and notify you once everything has been removed.


GDPR

If you are a resident of the EEA, you have the right to access the Personal Information we hold about you, to port it to a new service, and to ask that your Personal Information be corrected, updated, or erased. If you would like to exercise these rights, please contact us through the contact information below.

Your Personal Information will be initially processed in Ireland and then will be transferred outside of Europe for storage and further processing, including to Canada and the United States. For more information on how data transfers comply with the GDPR, see Shopify’s GDPR Whitepaper: https://help.shopify.com/en/manual/your-account/privacy/GDPR.


CCPA

If you are a resident of California, you have the right to access the Personal Information we hold about you (also known as the ‘Right to Know’), to port it to a new service, and to ask that your Personal Information be corrected, updated, or erased. If you would like to exercise these rights, please contact us through the contact information below.

If you would like to designate an authorized agent to submit these requests on your behalf, please contact us at the address below.


Children's Privacy

Our services are not intended for individuals under 18 (or under the age required by local law). We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected data from a child under 18, please contact us at info@dandymen.com, and we will delete that information as soon as possible.

International Data Transfers

DandyMen is headquartered in the United States. We may transfer and store your information on servers located outside your country of residence (for example, AWS or Google Cloud data centers). When we transfer personal data to other countries, we implement appropriate safeguards—such as Standard Contractual Clauses (SCCs) or reliance on an approved third-party certification scheme—to ensure that your data remains protected under comparable privacy standards.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. When we do, we will:

  • Update the "Last Updated" date at the top of this page.
  • If changes are material (e.g., adding a new category of data collection or a new third-party sharing arrangement), we will send you a notification via email or display a prominent notice within the website.


We encourage you to review this Privacy Policy periodically to stay informed about how we're protecting your information.

Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:

DandyMen

Email: info@Dandymen.com

Address: 8200 SW Regional Airport Blvd, Bentonville, AR 72712

 

You can also reach out if you wish to submit a data access, correction, or deletion request, or if you have any general privacy questions.

Thank you for trusting DandyMen with your data. We take that responsibility seriously and will continue to innovate while keeping your personal information safe and secure.