CHROME HEARTS ONLINE PRIVACY POLICY

Last Revised on October 27, 2026

This Privacy Policy for Chrome Hearts LLC (“Company”, “we”, “us” “our”) describes how we collect, use and disclose information about users of the Company’s website (www.chromehearts.com), applications, services, tools and features (collectively, the “Services”) as well as any pay by link services operated on behalf of Chrome Hearts LLC, Chrome Hearts UK Ltd, Chrome Hearts Paris LLC, Chrome Hearts Saint Barth SAS, Chrome Hearts Taipei, Chrome Hearts Hong Kong Ltd, or Chrome Hearts Beijing Trading Co. For the purposes of this Privacy Policy, “you” and “your” means you as the user of the Services. We are committed to protecting and respecting your privacy. We are a limited liability company established in the United States of America with a registered office at 915 N Mansfield Avenue, Hollywood, CA 90038, United States and for the purpose of the General Data Protection Regulation (the “GDPR”), we are the data controller.

PLEASE READ THIS PRIVACY POLICY CAREFULLY. BY USING, ACCESSING, OR DOWNLOADING ANY OF THE SERVICES, YOU AGREE TO THE USE OF INFORMATION ABOUT YOU IT DESCRIBES AND TO THE OTHER TERMS OF THIS PRIVACY POLICY. IF YOU DO NOT AGREE TO THIS PRIVACY POLICY, PLEASE DO NOT ACCESS AND USE THE SERVICES.

1. UPDATING THIS PRIVACY POLICY

We may modify this Privacy Policy from time to time in which case we will update the “Last Revised” date at the top of this Privacy Policy. If we make changes, such changes will be posted on this page. Please check back frequently to see any updates or changes to this Privacy Policy. In addition, we will comply with all requirements under applicable law, which may include providing notice to you or obtaining your consent. Notice may be by email to you at the last email address you provided us, by posting notice of such changes on the Services, or by other means, consistent with applicable law. However, it is your sole responsibility to review the Privacy Policy from time to time to view any such changes. The updated Privacy Policy will be effective as of the time of posting, or such later date as may be specified in the updated Privacy Policy or as required under applicable law. IF YOU DO NOT AGREE TO THE UPDATED PRIVACY POLICY, PLEASE DO NOT CONTINUE TO ACCESS OR USE THE SERVICES.

2. COMPANY’S COLLECTION AND USE OF INFORMATION

A. Information you give to us or we infer

In order to provide you with particular services, we may ask you to provide us with certain details or information about you and we may also infer information about you, including in the context of you being a customer in one of our stores. This information may include:

Some features on the Services may require you to enter certain information in order to submit a form (e.g., making a purchase). You may elect not to provide this information, but doing so may prevent you from using or accessing these features.

B. Technical information we collect about you and your interaction with the Services

When you use our Services, we may also automatically collect certain information about your interaction with the Services (“Usage Data”). To do this, we may use cookies, web beacons/clear gifs, and other geolocation tracking technologies (“Tracking Technologies”). Usage Data may include:

We use the information we collect automatically to tailor features and content to you, to market to you, to provide you with offers or promotions, to run analytics and better understand user interaction with the Services, and to monitor and/or resolve fraud and security incidents.

We process information about you in order to perform our contract with you, such as to:

We obtain your consent to process information about you for the following reasons:

In order to be responsive to you and maintain our business relationship, as a matter of our legitimate interests, we will use information about you to:

In addition, we may use all of the above information to comply with any applicable legal obligations, to enforce any applicable terms of service, and to protect or defend the Services, our rights, the rights of our users, or others.

3. HOW THE COMPANY SHARES INFORMATION ABOUT YOU

In certain circumstances, the Company may share information about you with third parties in compliance with applicable laws. The sharing described in this Section 3 is subject to the restrictions on Mobile Information described below. Specifically, we may share information about you:

Mobile Information and Text Messaging

Notwithstanding anything to the contrary in this Privacy Policy, we will not share, sell, rent, or otherwise disclose your mobile phone number, phone number, SMS/text messaging opt-in data, or text messaging consent (collectively, “Mobile Information”) to or with any third parties or affiliates for their marketing, promotional, or other commercial purposes. All of the categories of sharing described above exclude text messaging originator opt-in data and consent; this information will not be shared with or sold to any third parties. We may share Mobile Information only with service providers (such as our text messaging platform provider and wireless carriers) that process it on our behalf for the sole purpose of delivering the text messages you have requested, or where required by law.

If you opt in to receive text messages from us, message frequency varies and message and data rates may apply. You may opt out at any time by replying STOP to any message, or reply HELP for assistance.

You acknowledge that such sharing of information may occur in all of the aforementioned circumstances and is permitted by and subject to this Privacy Policy.

4. HOW LONG DO WE STORE INFORMATION ABOUT YOU?

Alongside the commitment to offering the highest standards of service and products, we believe that our products should entitle you to personalized client treatment and incomparable after-sales services (e.g., product warranties) that may last a lifetime for some products. For this purpose, and to ensure such services, we may need to keep your name, phone number, e-mail address, mailing address, and/or other information about you for as long as it is needed for the provision of such services.

When you purchase products from us, we keep information about you as long as is necessary to comply with applicable legislation regarding product guarantee and safety and in order to allow up with you regarding your experience with the product and offer you continuous advice.

Cookies managed by us are stored for up to 12 months.

We respect the retention periods imposed by applicable laws and regulations. To the extent your data is no longer necessary for the provision of a service (including the after sales service referred to above) or if you no longer wish to be part of our distribution list for our e-mail updates and newsletters, information about you will be deleted or archived in an anonymized or de-identified format in order to comply with applicable regulation.

5. WHERE DO WE STORE INFORMATION ABOUT YOU?

We are headquartered in the United States of America, and as such, information about you will be transferred to, and stored at/processed in the United States of America. Information about you may also be processed by staff operating outside the EEA who work for us or for one of our service providers or partners. We will take all steps reasonably necessary to ensure that information about you is treated securely and in accordance with this Privacy Policy.

Where we transfer personal data from the European Economic Area, the United Kingdom, or Switzerland to countries that have not been deemed to provide an adequate level of protection, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses (and the UK International Data Transfer Addendum where applicable), or other transfer mechanisms permitted under applicable data protection law. You may request a copy of the relevant safeguards by contacting us as described below.

6. COOKIES AND OTHER TRACKING TECHNOLOGIES

Do Not Track Signals

Your browser settings may also allow you to transmit a “Do Not Track” signal when you visit various websites. Like many websites, our website is not designed to respond to “Do Not Track” signals received from browsers. To learn more about “Do Not Track” signals, you can visit www.allaboutdnt.com.

Cookies and Other Tracking Technologies

We use cookies to collect information about your browsing activities over time and across different websites following your use of our Services. Cookies allow us to recognize and count the number of users and to see how users move around our website when they are using it. This helps us to improve our Services and the way our website works. You can find more information about cookies and how to manage them at http://www.allaboutcookies.org/.

You may control the way in which your devices permit the use of Tracking Technologies. If you so choose, you may block or delete our cookies from your browser; however, blocking or deleting cookies may cause some of the Services, including any portal features and general functionality, to work incorrectly.

Most browsers accept cookies automatically. However, you may be able to configure your browser settings to use the Services without some cookie functionality. You can delete cookies manually or set your browser to automatically delete cookies on a pre-determined schedule. You can typically view, block, and delete cookies through your browser’s settings or preferences menu; consult your browser’s help documentation for instructions.

Google Analytics

We use Google Analytics, which is a web analytics tool that uses cookies to help us understand how users engage with the Services. You can opt out of Google Analytics without affecting how you visit our site – for more information on opting out of being tracked by Google Analytics across all websites you use, visit this Google page: here.

7. SOCIAL FEATURES

Certain features of the Services may permit you to initiate interactions between the Services and third-party services or platforms, such as social networks (“Social Features”). Social Features include features that allow you to click and access the Company’s pages on certain third-party platforms, such as Facebook and X (formerly Twitter), and from there to “like” or “share” our content on those platforms. Use of Social Features may entail a third party’s collection and/or use of information about you. If you use Social Features or similar third-party services, information you post or otherwise make accessible may be publicly displayed by the third-party service you are using. Both the Company and the third party may have access to information about you and your use of both the Services and the third-party service. For more information on third-party websites and platforms, see Section 8.

Our Services may contain links to other online platforms operated by third parties. We do not control such other online platforms and are not responsible for their content, their privacy policies, or their use of information about you. Information you provide on public or semi-public venues, including information you share on third-party social networking platforms (such as Facebook or X) may also be viewable by other users of the Services and/or users of those third-party online platforms without limitation as to its use by us or by a third party. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators except as disclosed on the Services. We expressly disclaim any and all liability for the actions of third parties, including but without limitation to actions relating to the use and/or disclosure of personal information by third parties. Any information submitted by you directly to these third parties is subject to that third party’s privacy policy.

9. CHILDREN’S PRIVACY

We do not seek or knowingly collect any information about children under 13 years of age. If we become aware that we have unknowingly collected information about a child under 13 years of age, we will make commercially reasonable efforts to delete such information from our database.

If you are the parent or guardian of a child under 13 years of age who has provided us with information about them, you may contact us using the below information to request that it be deleted.

10. DATA SECURITY

Although we do our best to protect information about you, we cannot guarantee that any information you send to us electronically, while using the Services or otherwise interacting with us, will be secure when it is transmitted to us. We recommend that you do not use unsecure channels to communicate sensitive or confidential information to us. Please be aware though that, despite our best efforts, no security measures are perfect or impenetrable, and we cannot guarantee “perfect security.” Any information you send us through any means is transmitted at your own risk.

Once we receive information about you, we take appropriate technical and organizational measures, reasonable precautions and follow industry best practices to safeguard information about you against loss, theft and unauthorized use, access or modification. These safeguards help us prevent fraud and unauthorized access and maintain data accuracy. We also take reasonable precautions to limit access to information about you within our internal systems.

11. CALIFORNIA

This Section 11 applies to California residents in certain situations. Terms used in this section and not otherwise defined have the meaning given to such terms under the California Consumer Privacy Act of 2018 (CCPA).

A. Disclosure of Collected Categories of Personal Information

Below we have listed the enumerated categories of personal information under the CCPA’s definition of “personal information” and whether in the preceding twelve (12) months we have: (1) collected such categories of personal information (for more details regarding information collected, please see Section 2 above) ; and (2) disclosed such categories of personal information for a business purpose (for a list of third parties with whom we may disclose personal information, please see Section 3 above):

Category Examples Collected? Disclosed for Business Purpose?
A. Identifiers Name, postal address, e-mail address, IP address Yes Yes
B. Personal information categories listed in the California Customer Records statute Name, telephone number, credit card and debit card information Yes Yes
C. Protected classification characteristics under California or federal law Gender, age range Yes No
D. Commercial information Records of products purchased, obtained, or considered Yes Yes
E. Biometric information None No No
F. Internet or other similar network activity Information on a consumer’s interaction with the website Yes Yes
G. Geolocation data Physical location Yes Yes
H. Sensory data None No No
I. Professional or employment-related information None No No
J. Non-public education information collected by certain federally funded institutions None No No
K. Inferences drawn from other personal information Profile reflecting a person’s preferences, characteristics, behavior and attitudes Yes No

A description of the specific purposes for which categories of personal information are disclosed can be found in Section 2 above.

We do not and have not in the last twelve (12) months sold personal information about you. We may share your information in the future with advertisers, but we will not “sell” your information as defined in the CCPA. In no event will we share Mobile Information with advertisers or any other third parties for their marketing or commercial purposes, as described in Section 3.

B. California Privacy Rights

The CCPA provides California residents with the additional rights listed below in certain circumstances.

Right to Know. You may have the right to know and see what certain details regarding what information you submit or we have collected about you over the past twelve months, including:

Right to Delete. You may have the right to request deletion of the personal information we have collected from you (and direct our service providers to do the same).

Right Not to be Discriminated Against. You may also have the right not to be discriminated against for exercising any of the rights listed above.

Rights Relating to Direct Marketing. You may be able to request certain details about our disclosure of personal information to third parties for their own direct marketing purposes during the preceding calendar year. This request is free and may be made once a year.

Exercising Your California Privacy Rights. To submit a request, please contact us using the contact information below.

12. EUROPEAN ECONOMIC AREA

A. Privacy Rights

This Section 12 applies to you if are located in the European Economic Area (“EEA”) in certain situations. If you are located in the EEA, you have certain rights in relation to the personal data (as defined by the GDPR) we hold about you. Some of these only apply in certain circumstances. We will respond to requests to exercise those rights without undue delay and at least within one month (though this may be extended by a further two months in certain circumstances). To exercise any of your rights, please contact us as set out below.

Please note that these rights are in many cases limited by law. For example, where fulfilling your request would adversely affect other individuals or our trade secrets or intellectual property, or where there are overriding public interest reasons or where we are required by law to retain your personal data.

B. Complaints

If you have complaints about how we process your personal data, please contact us at using the below information and we will respond to your request as soon as possible.

If you are a resident of the EEA and you think we have infringed data protection laws, you can file a claim with the data protection supervisory authority in the EU country in which you live or work.

13. CONTACT US

If you would like to exercise any of the above rights, or if you have any questions about this Privacy Policy, please contact us using any of the below methods:

For international orders managed by our global e-commerce partner, eShopWorld, please refer to their Privacy Policy for additional information.

For customers of Chrome Hearts retail locations in Japan, please refer to the Japan Privacy Policy.