Privacy Policy & GDPR Rights

This Privacy Policy explains how Hat Noble collects, uses, shares, stores, and protects personal information when you visit our website, place an order, make or attempt to make a payment, contact us, subscribe to our emails, or otherwise interact with our online store.

Hat Noble is operated by Yiwu Bapai Trading Co., Ltd, a business registered in China.

In this Privacy Policy, “Hat Noble,” “we,” “us,” and “our” refer to the Hat Noble brand and its operating entity. “You” and “customer” refer to visitors, shoppers, account holders, subscribers, and other users of our website.

This Privacy Policy should be read together with our Cookie Policy, Refund & Return Policy, Shipping Policy, and Terms of Service.

1. Information We Collect

We collect personal information that you provide directly, information collected automatically when you use our website, and information provided by service providers that help us operate our store.

Information you provide to us may include:

• Name, email address, phone number, billing address, and shipping address.

• Order details, including products purchased, order value, delivery details, return requests, refund requests, and customer service history.

• Account information, if you create or use a customer account.

• Customer service messages, product questions, reviews, feedback, or other communications.

• Marketing preferences, such as newsletter subscription status and email opt-in choices.

• Any other information you choose to provide when contacting us.

Information collected automatically may include:

• IP address, device type, browser type, operating system, and language settings.

• Pages viewed, products viewed, referring pages, search terms, session activity, and approximate location information.

• Cookie identifiers, analytics data, and similar tracking technology data.

• Information used to detect fraud, protect our website, secure checkout, and improve store performance.

Payment Information

When you make or attempt to make a purchase from Hat Noble, your payment may be processed by third-party payment service providers, including Stripe, PayPal, Shopify Payments, card networks, financial institutions, or other payment methods displayed and available at checkout.

Depending on the payment service and payment method you select, these providers may collect or process information such as:

• Your name, email address, phone number, billing address, and shipping address.

• Credit card, debit card, bank account, digital wallet, or other payment method information.

• Transaction amount, currency, purchase date, payment status, and transaction reference.

• Products purchased, order status, refund information, dispute information, and chargeback information.

• IP address, device information, browser information, cookie identifiers, and other technical or security signals.

• Information needed to authenticate a payment method, verify a transaction, prevent fraud, assess transaction risk, process refunds, and comply with financial or regulatory obligations.

Full payment card numbers, card security codes, and complete payment credentials are generally collected directly by the applicable payment provider through secure payment technology. We do not directly store your full credit or debit card number or card security code on our own servers.

We may receive limited payment-related information from payment providers, such as:

• Payment status and transaction reference.

• Payment method type.

• Card brand, expiration information, or the last digits of a payment card where provided.

• Billing details.

• Fraud screening, verification, authentication, and transaction risk results.

• Refund, dispute, or chargeback status.

When Stripe processes a payment, Stripe may process personal information on our behalf to authorize and complete transactions, provide payment services, authenticate payment methods, prevent fraud, assess transaction risk, process refunds, handle disputes and chargebacks, and comply with applicable legal and regulatory requirements.

Depending on the Stripe service involved and the circumstances of the processing, Stripe may act as our service provider or data processor, or may process certain personal information for its own security, fraud prevention, service improvement, regulatory, and legal compliance purposes. Stripe’s processing of personal information is also governed by Stripe’s Privacy Policy and the Stripe Privacy Center.

If Stripe Link or another accelerated checkout service is displayed at checkout, you may choose to save certain information, such as your name, contact information, address, and payment method details, with Stripe for faster checkout at participating businesses. Your use of Stripe Link or another Stripe end-user service is subject to Stripe’s applicable privacy terms and user terms.

The payment methods displayed at checkout may vary depending on your country, currency, device, order, transaction risk, and the services currently available through our payment providers.

Sensitive Personal Information

We do not intentionally collect sensitive personal information such as race, ethnicity, religious beliefs, health information, biometric data, or political opinions.

Payment providers, financial institutions, or fraud prevention providers may request additional verification information in limited circumstances when necessary to authenticate a payment, prevent fraud, comply with law, or protect a transaction. Where such information is collected directly by a third-party provider, it will be handled according to that provider’s privacy practices.

Please do not send sensitive personal information to us unless specifically required for a lawful and necessary purpose.

2. How We Use Your Information

We use personal information for the following purposes:

• To process, authorize, confirm, fulfill, and deliver your orders.

• To process payments and receive confirmation of successful, declined, pending, refunded, disputed, or reversed transactions.

• To send order confirmations, shipping updates, delivery notifications, and customer service messages.

• To process returns, refunds, exchanges, disputes, chargebacks, and after-sales support.

• To respond to questions, product inquiries, feedback, and customer support requests.

• To improve our website, product selection, store layout, shopping experience, checkout process, and customer service.

• To personalize content, remember preferences, and improve website functionality.

• To authenticate payments and verify that a payment method is being used by an authorized person.

• To detect, prevent, assess, and investigate fraud, unauthorized transactions, payment abuse, chargebacks, security incidents, or illegal activity.

• To protect Hat Noble, our customers, our payment providers, financial institutions, card networks, and other service providers against financial loss and misuse.

• To send marketing emails, promotions, product updates, and brand news when you have subscribed or where otherwise permitted by law.

• To measure advertising, marketing, and website performance, where permitted by applicable law.

• To comply with legal, tax, accounting, regulatory, customs, logistics, payment, fraud prevention, and recordkeeping obligations.

• To establish, exercise, defend, or respond to legal claims, transaction disputes, chargebacks, and regulatory inquiries.

• To enforce our terms, policies, agreements, and legal rights.

3. Legal Bases for Processing Personal Information

If you are located in the European Economic Area, the United Kingdom, Switzerland, or another region with similar data protection laws, we process your personal information only when we have a valid legal basis.

Contract

We use this basis when processing is necessary to provide products or services you requested.

For example, we process your order, arrange payment processing, confirm your transaction, arrange shipping, handle returns and refunds, and provide customer support.

Consent

We use this basis when you have given us permission to process your information for a specific purpose.

For example, newsletter subscriptions, certain marketing communications, and non-essential cookies where consent is required.

You may withdraw your consent at any time. Withdrawing consent does not affect processing that occurred before the withdrawal.

Legitimate Interests

We use this basis when processing is reasonably necessary for our business and does not override your privacy rights.

For example:

• Improving our website and checkout process.

• Preventing fraud and unauthorized payments.

• Securing our store and transactions.

• Reducing payment disputes and financial loss.

• Analyzing store performance.

• Responding to customer inquiries.

• Establishing or defending legal claims.

Legal Obligation

We use this basis when processing is necessary to comply with applicable laws and regulations.

For example:

• Tax and accounting records.

• Customs documentation.

• Financial and transaction records.

• Anti-fraud and payment security requirements.

• Legal claims and court orders.

• Regulatory, law enforcement, or government requests.

Third-party payment providers, including Stripe, may rely on their own legal bases when they process personal information for purposes for which they act independently. You should review the applicable payment provider’s privacy policy for more information.

4. Cookies and Tracking Technologies

We use cookies, pixels, tags, local storage, software development kits, and similar technologies to operate our website, remember your preferences, improve your shopping experience, analyze traffic, protect checkout, process payments, and support marketing or advertising activities where permitted.

Types of cookies may include:

Essential Cookies

These are required for the website to work properly, such as:

• Shopping cart functionality.

• Checkout functionality.

• Payment processing.

• Payment authentication.

• Account login.

• Website security.

• Fraud prevention and detection.

• Transaction risk assessment.

• Store functionality.

When Stripe or another payment provider is used at checkout, that provider may place or access essential cookies and similar technologies to provide payment services, identify your device or browser, authenticate transactions, prevent fraudulent payments, protect account and transaction security, and ensure that checkout functions correctly.

Stripe may use cookies and similar technologies to collect device, browser, IP address, checkout activity, transaction, and security signals for fraud prevention and payment security purposes.

Disabling essential cookies may prevent the shopping cart, checkout, account, payment, or security features from working correctly.

Performance and Analytics Cookies

These help us understand how visitors use our website, which pages are useful, where technical problems occur, and how we can improve the shopping and checkout experience.

Preference Cookies

These help remember choices such as language, region, currency, login state, checkout preferences, and browsing preferences.

If an accelerated payment service such as Stripe Link is available, cookies or similar technologies may also be used to recognize eligible users and provide saved checkout preferences.

Marketing Cookies

These may help us measure campaigns, show relevant advertisements, or understand product interest, where allowed by applicable law.

Where required by law, we will ask for your consent before using non-essential cookies or similar tracking technologies.

You can manage cookie choices through our cookie banner or preference tools where available. You can also control cookies through your browser settings.

Please note that disabling certain cookies may affect website functionality, including cart, checkout, payment, account, security, fraud prevention, and personalization features.

For more information, please read our Cookie Policy. You may also review Stripe’s Privacy Policy, the Stripe Privacy Center, and the Stripe Cookie Policy.

5. Marketing Communications

If you subscribe to our newsletter or marketing emails, we may send you updates about new products, promotions, offers, style guides, and brand news.

You can unsubscribe at any time by clicking the unsubscribe link in our emails or by contacting us at hello@hatnoble.com.

After you unsubscribe, we may still send non-marketing messages related to your orders, payments, refunds, disputes, account, shipping, customer service, legal notices, security, or other transactional matters.

6. How We Share Personal Information

We do not sell your personal information for monetary compensation.

However, we may share personal information with trusted service providers, payment providers, financial partners, and other parties that help us operate our business, provide services, process payments and orders, protect transactions, and improve our store.

We may share information with:

Shopify

Shopify provides our ecommerce platform, store infrastructure, checkout, hosting, account functionality, and related services.

Because our store is powered by Shopify, your personal information may be processed by Shopify in accordance with Shopify’s applicable privacy terms.

Payment Processors and Financial Partners

We may share personal information with payment processors and payment service providers, including Stripe, PayPal, Shopify Payments, and other payment methods displayed at checkout.

Payment information may also be shared with parties involved in completing and protecting a transaction, including:

• Card networks.

• Acquiring banks.

• Issuing banks.

• Payment method providers.

• Digital wallet providers.

• Payment intermediaries.

• Fraud prevention and transaction security providers.

• Identity verification or authentication providers.

• Financial institutions.

• Dispute and chargeback service providers.

These providers may process personal information to:

• Authorize and complete transactions.

• Authenticate payment methods.

• Confirm payment status.

• Prevent and detect fraud.

• Assess transaction risk.

• Protect account and payment security.

• Process refunds.

• Manage disputes and chargebacks.

• Maintain transaction and accounting records.

• Comply with financial, regulatory, and legal obligations.

When Stripe processes payments or provides related services, Stripe may receive transaction data, contact information, billing and shipping information, payment method information, device and browser information, and fraud prevention signals.

Depending on the service and circumstances, Stripe may process this information as our data processor or service provider, or for Stripe’s own security, fraud prevention, regulatory, legal compliance, and service purposes, as described in Stripe’s Privacy Policy and the Stripe Privacy Center.

Shipping and Logistics Providers

We share information with shipping, warehousing, delivery, and logistics providers so your order can be prepared, delivered, and tracked.

Email and Marketing Service Providers

We may share information with email and marketing service providers when needed to send newsletters, order updates, or promotional messages.

Analytics and Advertising Partners

We may share information with analytics and advertising partners where permitted by law and subject to your cookie or privacy choices.

Customer Service Providers

We may share information with customer service tools and providers when needed to respond to questions, orders, returns, refunds, disputes, or support requests.

Fraud Prevention, Security, and Compliance Providers

We may share information with fraud prevention, payment security, identity verification, risk assessment, cybersecurity, and compliance providers to protect our store, customers, transactions, and service providers.

Professional Advisers

We may share information with accountants, legal advisers, auditors, insurers, banks, and other professional advisers where necessary.

Government and Legal Authorities

We may disclose information to government authorities, regulators, courts, tax authorities, customs authorities, or law enforcement when:

• Required by applicable law.

• Required by a valid legal process.

• Necessary to investigate fraud or illegal activity.

• Necessary to protect our customers, business, service providers, or legal rights.

Our service providers are authorized to use personal information only as needed to provide services to us or as otherwise permitted or required by applicable law and their applicable privacy terms.

7. International Data Transfers

Hat Noble is operated by a business registered in China, and our service providers may be located in or process information in multiple countries, including China, the United States, Canada, Europe, and other regions where our service providers operate.

Payment providers, including Stripe, PayPal, Shopify Payments, banks, card networks, and other financial partners, may process or transfer transaction and payment-related information in countries outside your country of residence.

The location in which payment information is processed may depend on:

• The payment provider used.

• The location of the customer.

• The location of the business or payment account.

• The selected payment method.

• The location of banks, card networks, and financial partners involved in the transaction.

• Applicable financial, security, and regulatory requirements.

If you are located outside these countries, your personal information may be transferred, stored, or processed in a country that may have different data protection laws from your country of residence.

Where required by applicable data protection laws, we rely on appropriate safeguards for international transfers, such as:

• Contractual protections.

• Standard contractual clauses where applicable.

• Service provider commitments.

• Platform and payment provider safeguards.

• Legally recognized transfer frameworks.

• Other lawful transfer mechanisms.

Third-party providers, including Stripe, may maintain their own international transfer safeguards and data transfer terms. Please review Stripe’s Privacy Policy and the Stripe Privacy Center for further information.

8. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Order and transaction records may be retained as needed for:

• Tax and accounting obligations.

• Customs and delivery records.

• Refunds and returns.

• Payment reconciliation.

• Chargebacks and disputes.

• Fraud prevention.

• Security investigations.

• Legal claims.

• Regulatory and legal recordkeeping requirements.

Customer service records may be retained as needed to resolve inquiries, improve support, respond to disputes, and maintain business records.

Marketing information is retained until you unsubscribe, withdraw consent, or request deletion, unless we are legally allowed or required to retain certain records.

Cookie and analytics data may be retained according to the settings of our website, Shopify, analytics tools, payment providers, or other service providers.

Payment providers, including Stripe, may independently retain transaction, payment, fraud prevention, dispute, chargeback, identity verification, and compliance information according to their own legal obligations, contractual requirements, security needs, and retention policies.

We do not control every retention period applied by an independent third-party payment provider. Requests concerning information independently controlled by Stripe or another payment provider may need to be submitted directly to that provider.

When personal information under our control is no longer needed, we will delete, anonymize, or securely retain it in accordance with applicable laws and business requirements.

9. GDPR and European Privacy Rights

If you are located in the European Economic Area, the United Kingdom, Switzerland, or another region with similar privacy laws, you may have additional rights regarding your personal information.

Your rights may include:

Right to Be Informed

You have the right to know how we collect and use your personal information.

Right of Access

You may request a copy of the personal information we hold about you.

Right to Rectification

You may request correction of inaccurate or incomplete personal information.

Right to Erasure

You may request deletion of your personal information where applicable.

This right may be limited where information must be retained for payment records, tax, accounting, fraud prevention, transaction disputes, chargebacks, legal claims, or other legal obligations.

Right to Restrict Processing

You may ask us to limit how we process your personal information in certain circumstances.

Right to Data Portability

You may request a copy of certain personal information in a structured, commonly used, machine-readable format.

Right to Object

You may object to certain processing activities, including direct marketing and some processing based on legitimate interests.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time.

Rights Related to Automated Decision-Making

You may have rights regarding decisions made solely by automated processing that produce legal or similarly significant effects.

Payment providers and fraud prevention services may use automated tools to evaluate transaction risk, detect suspected fraud, authenticate payments, or determine whether a transaction requires additional verification.

We do not intentionally make decisions based solely on automated processing that produce legal or similarly significant effects for customers. However, a payment provider, bank, card issuer, or fraud prevention service may independently decline, delay, flag, or require additional authentication for a transaction.

Questions or requests concerning automated processing independently performed by Stripe, a bank, a card issuer, or another payment provider may need to be directed to that provider.

Right to Lodge a Complaint

You may lodge a complaint with your local data protection authority if you believe your privacy rights have been violated.

To exercise your privacy rights regarding information controlled by Hat Noble, please contact us at hello@hatnoble.com.

Please include “Privacy Request” in the subject line and provide enough information for us to verify and respond to your request.

For security reasons, we may need to verify your identity before fulfilling a privacy request. We will respond within the timeframe required by applicable law.

If your request concerns information independently controlled by Stripe or another payment provider, we may direct you to contact that provider. You can find additional information through the Stripe Privacy Center.

10. U.S. State Privacy Rights

Depending on your U.S. state of residence, you may have privacy rights under applicable state privacy laws.

These rights may include the right to:

• Access personal information.

• Correct inaccurate personal information.

• Delete personal information.

• Obtain a copy of personal information.

• Opt out of certain types of data sharing.

• Opt out of targeted advertising.

• Opt out of the sale of personal information where applicable.

• Appeal the denial of a privacy request where applicable.

We do not sell personal information for monetary compensation.

However, some analytics, advertising, or marketing activities may be considered “sharing,” “targeted advertising,” “sale,” or similar terms under certain privacy laws.

Payment processing, payment authentication, transaction security, fraud prevention, refunds, disputes, and chargeback activities are generally performed to complete transactions, provide requested services, protect customers, and comply with legal or financial obligations.

You may contact us at hello@hatnoble.com to make a privacy request concerning information controlled by Hat Noble.

Requests concerning information independently controlled by Stripe or another payment provider may need to be submitted directly to that provider.

11. Security

We use reasonable administrative, technical, and organizational measures to help protect personal information against unauthorized access, loss, misuse, disclosure, alteration, or destruction.

Payments are processed through third-party payment providers and secure checkout technologies. We do not directly store full payment card numbers or card security codes on our own servers.

Payment providers such as Stripe may use encryption, payment authentication, tokenization, device information, cookies, fraud prevention tools, and transaction monitoring to help protect payments and reduce unauthorized transactions.

However, no method of internet transmission, payment processing, website operation, or electronic storage is completely secure.

We cannot guarantee absolute security, but we work to protect your information using reasonable safeguards and trusted service providers.

12. Children’s Privacy

Our website is not intended for children under the age of 16. We do not knowingly collect personal information from children.

Customers must have the legal capacity to make a purchase or must make a purchase with the authorization and supervision of a parent or legal guardian.

If you believe a child has provided personal information to us, please contact us at hello@hatnoble.com, and we will take appropriate steps to review and delete the information where required.

Please note that transaction information may need to be retained where required for refunds, disputes, fraud prevention, accounting, or legal obligations.

13. Third-Party Links and Services

Our website may contain links to or integrations with third-party websites, social media platforms, payment providers, accelerated checkout services, shipping tracking tools, or other services that we do not control.

These services may include Stripe, Stripe Link, PayPal, Shopify, Shopify Payments, banks, card networks, digital wallet providers, shipping providers, analytics providers, and social media platforms.

When you interact directly with a third-party service, that provider may collect and process personal information according to its own privacy policy, cookie policy, terms, and legal obligations.

Stripe’s processing of personal information, including information processed through Stripe payment services or Stripe Link, is governed by Stripe’s Privacy Policy, the Stripe Privacy Center, the Stripe Cookie Policy, and Stripe’s applicable user terms.

We are not responsible for the privacy practices, content, security, availability, or policies of independent third-party websites or services.

We encourage you to review the privacy policies and terms of any third-party services before providing personal information to them.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, services, payment providers, legal requirements, technology, or privacy practices.

For example, we may update this Privacy Policy if we:

• Add or remove a payment provider.

• Introduce new checkout or accelerated payment features.

• Change how we use cookies.

• Change the countries in which information is processed.

• Introduce new fraud prevention or security services.

• Need to comply with updated privacy laws or regulatory obligations.

When we update this policy, we will revise the “Last updated” date at the bottom of this page.

Where required by law, we may provide additional notice or request consent before material changes take effect.

Your continued use of our website after an updated policy is posted means the updated policy applies to your future use of our website, to the extent permitted by applicable law.

15. Contact Us

If you have questions about this Privacy Policy, want to exercise your privacy rights, or need help with a privacy-related request, please contact us:

Brand: Hat Noble
Operating Entity: Yiwu Bapai Trading Co., Ltd
Registered in: China
Email: hello@hatnoble.com
Website: https://www.hatnoble.com

For privacy requests, please use the subject line:

Privacy Request

If your question concerns a payment processed through Stripe, PayPal, Shopify Payments, or another payment provider, please include your Hat Noble order number and transaction date. Do not send us your full payment card number, card security code, password, or complete banking credentials by email.

We may need to ask for limited information to verify your identity and locate the relevant order or transaction.

For information controlled independently by Stripe, you may review Stripe’s Privacy Policy, visit the Stripe Privacy Center, or review the Stripe Cookie Policy. For information controlled by another payment provider, you may need to contact that provider or submit a request through its official privacy process.

Last updated: August 8, 2026