Hotpot Queen Privacy Policy

Last updated: 2026-04-19 Version: 2.1

Hotpot Queen (a DBA of Nifty Napkin Inc, a Washington corporation) (“Hotpot Queen,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit our website, place an order, sign up for marketing, interact with our ads, or otherwise engage with us.

1. Personal information we collect

We may collect the following categories of personal information:

• Identifiers and contact information, such as your name, email address, phone number, shipping address, and billing address
• Order and transaction information, such as products purchased, order history, payment status, and customer support history
• Account or profile information, if you create an account or participate in loyalty, promotional, or referral programs
• Device and usage information, such as browser type, IP address, device identifiers, pages viewed, links clicked, referring URLs, and interactions with our website
• Marketing and communications information, such as whether you opened an email, clicked a message, subscribed to SMS, responded to a campaign, or entered a promotion
• Customer service information, such as messages you send to us, support requests, and photos or other materials you provide when reporting an order issue

We do not intentionally collect sensitive personal information for the purpose of inferring characteristics about you, except as needed to provide services you request, comply with law, prevent fraud, or support our business operations.

Under California law, “sensitive personal information” includes Social Security numbers, driver’s license or state ID numbers, financial account information, precise geolocation, racial or ethnic origin, religious or philosophical beliefs, private communications content, genetic data, biometric data, health information, and information about sex life or sexual orientation. We do not collect or use sensitive personal information for the purpose of inferring characteristics about you. To the extent we process any sensitive personal information (for example, payment card data processed by our payment providers for transaction fulfillment), we do not use it beyond the purposes disclosed here. California residents may request to limit our use via privacy@hotpotqueen.com or our Do Not Sell or Share My Personal Information page at https://hotpotqueen.com/pages/privacy-choices.

2. How we collect personal information

We collect personal information:

• directly from you, such as when you place an order, contact us, sign up for email or SMS, or submit a form
• automatically, through cookies, pixels, tags, analytics tools, and similar technologies when you browse or interact with our site
• from service providers and partners, such as Shopify, payment processors, email/SMS platforms, fraud-prevention vendors, and other business partners that help us operate our store

3. How we use personal information

We may use personal information to:

• process and fulfill orders
• provide shipping, order updates, and customer support
• process payments and prevent fraud
• communicate with you about your account, order, or support request
• send marketing emails, SMS, and promotions where permitted by law and consistent with your preferences
• personalize your shopping experience
• measure site performance and marketing effectiveness
• improve our website, products, services, and customer experience
• comply with legal obligations, enforce our terms, and protect our rights

4. Cookies, analytics, and advertising

We and our partners may use cookies, pixels, tags, SDKs, and similar technologies to:

• keep the website functioning properly
• remember preferences and shopping activity
• understand site traffic and customer behavior
• measure campaign performance
• support advertising, retargeting, and audience measurement, if and when we deploy such technologies (as described in our Cookie Policy)

These technologies may collect information about your browser, device, site activity, and interactions over time.

Depending on your jurisdiction, some of this activity may be considered targeted advertising, sharing, or sale of personal information under applicable privacy laws.

For more information, see our Cookie Policy at https://hotpotqueen.com/pages/cookie-policy and our Do Not Sell or Share My Personal Information page at https://hotpotqueen.com/pages/privacy-choices.

5. How we disclose personal information

We may disclose personal information to:

• ecommerce and infrastructure providers, including Shopify and hosting/service providers that power our store
• payment processors and transaction-related service providers
• shipping, logistics, and fulfillment providers
• email, SMS, and customer engagement platforms
• advertising partners (if/when deployed)
• fraud prevention, security, and IT vendors
• professional advisors, such as lawyers, accountants, insurers, and auditors
• government authorities or law enforcement when required by law or necessary to protect rights, safety, or property

In the preceding twelve (12) months, we have not sold personal information as that term is defined under California law. We do not currently share personal information for cross-context behavioral advertising; no advertising or retargeting pixels are active on hotpotqueen.com as of the “Last updated” date of this Privacy Policy. If and when we activate advertising or retargeting pixels in the future, we will update our Cookie Policy to reflect that change and honor applicable opt-out rights at that time. You have the right to opt out of any such future sharing. To exercise that right, visit our Do Not Sell or Share My Personal Information page at https://hotpotqueen.com/pages/privacy-choices or email privacy@hotpotqueen.com.

6. The Fortune Flow Program

When you participate in the Fortune Flow experience, we collect the following:

• Phone number, if you opt in to SMS messages — via express written consent obtained through Klaviyo’s double opt-in flow. Message and data rates may apply. Reply STOP to cancel or HELP for assistance.
• Email address, for verification and delivery of your discount code
• Optional birthdate (month/day/year), if you choose to receive a zodiac reading — this step is entirely voluntary

Processors. Fortune Flow data flows through:

• Klaviyo — email and SMS delivery
• Cloudflare — edge infrastructure hosting the Fortune service
• Shopify — customer binding and discount code creation

Opt-in model. SMS marketing is opt-in only. You will receive 2–4 promotional messages per month. You can opt out of marketing SMS at any time by replying STOP to any promotional message, or use the unsubscribe link in marketing emails.

Retention. Session state stored at Cloudflare expires after 24 hours. Klaviyo profiles are retained until you opt out and request deletion by emailing privacy@hotpotqueen.com.

Discount codes. Codes are personalized to the email address that claims them (non-transferable) and require a minimum subtotal of $20 before they can be applied.

7. Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services for you. Information you submit to the Services will be transmitted to and shared with Shopify as well as third parties that may be located in countries other than where you reside, in order to provide and improve the Services for you. In addition, Shopify may make use of personal information collected about your interactions with our store, along with other merchants, and with Shopify. In these circumstances, Shopify is responsible for the processing of your personal information, including for responding to your requests to exercise your rights over use of your personal information for these purposes. To learn more about how Shopify uses your personal information and any rights you may have, visit the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

8. Your marketing choices

You can opt out of marketing emails by using the unsubscribe link in the email. We will honor opt-out requests for marketing emails within ten (10) business days of receipt. You can opt out of marketing SMS at any time by replying STOP to any promotional message.

Even if you opt out of marketing, we may still send you non-marketing communications such as order confirmations, shipping notices, service announcements, or responses to support requests.

9. Privacy rights and privacy choices

Depending on where you live, you may have rights to request:

• access to personal information we hold about you
• correction of inaccurate personal information
• deletion of personal information, subject to exceptions
• information about categories of personal information collected, disclosed, sold, or shared
• opt-out of targeted advertising, sharing, or sale as defined by applicable law
• limitation of certain uses of sensitive personal information, where applicable
• data portability — to receive a copy of your personal information in a portable and, to the extent technically feasible, readily usable format

We will not discriminate against you for exercising any of these rights.

We may need to verify your identity before we can process your requests, as permitted or required under applicable law. We will respond to verified requests within forty-five (45) days of receipt. If we need additional time, we will notify you in writing of the reason and extension period (up to an additional forty-five (45) days). In accordance with applicable laws, you may designate an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require that the agent provide proof you have authorized them to act on your behalf, and we may need you to verify your identity directly with us.

If your browser sends a Global Privacy Control (GPC) signal, we will treat that signal as an opt-out request for the browser and device.

To exercise applicable privacy rights or manage advertising-related preferences, please visit our Do Not Sell or Share My Personal Information page at https://hotpotqueen.com/pages/privacy-choices or contact us at privacy@hotpotqueen.com.

10. Complaints

If you have complaints about how we process your personal information, please contact us using the contact details provided below. Depending on where you live, you may have the right to appeal our decision or lodge a complaint with your local consumer protection or data protection authority.

If we deny your privacy request, you may appeal our decision within 30 days by emailing privacy@hotpotqueen.com with “APPEAL” in the subject line. We will respond to appeals within forty-five (45) days.

11. Children

Our website is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us at privacy@hotpotqueen.com.

As of the Effective Date, we do not have actual knowledge that we “share” or “sell” (as those terms are defined under California law) personal information of consumers under 16 years of age.

If we obtain actual knowledge that we have collected personal information from a consumer between 13 and 16 years of age, we will obtain affirmative authorization before any sale or sharing of that information, as required by California law. A parent or guardian may contact us at privacy@hotpotqueen.com to review or request deletion of any personal information we may have collected from a child, and to direct us to stop collecting it.

12. Data retention

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including fulfilling orders, maintaining business records, resolving disputes, preventing fraud, complying with legal obligations, and enforcing our agreements. Order and transaction records, including payment information, are retained for a minimum of seven (7) years to satisfy tax, audit, and legal compliance obligations.

13. Data security

We use reasonable administrative, technical, and organizational measures designed to protect personal information. No method of transmission over the internet or method of storage is completely secure, so we cannot guarantee absolute security.

14. Third party websites and links

The Services may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on these sites.

15. International visitors

Our store is operated from and intended for customers in the United States and Canada. If you access the site from outside those markets, your information may be processed in the United States or other jurisdictions where our service providers operate.

For Canadian residents: We process personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws. Canadian residents have rights of access and correction to their personal information. To exercise these rights or raise a privacy concern, contact privacy@hotpotqueen.com. For Quebec residents, additional rights under Quebec Law 25 may apply; contact us for more information.

16. Washington State Consumer Health Data

Hotpot Queen is operated by Nifty Napkin Inc, a Washington corporation. We are aware of Washington’s My Health My Data Act (MHMDA, RCW 70.372). We do not knowingly collect, use, or disclose “consumer health data” as defined under MHMDA. Our Fortune Flow program is a personalized intuitive-reading feature for entertainment only; it does not collect, derive, or identify consumer health conditions, treatments, symptoms, diagnoses, or health-related data. If you believe we have collected consumer health data inadvertently, contact us at privacy@hotpotqueen.com and we will delete it promptly.

17. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, business operations, or legal requirements. When we do, we will update the “Last updated” date above. For material changes that affect how we use personal information already collected, we will provide notice by email to the address associated with your account or by a prominent notice on our website prior to the change taking effect.

18. Contact us

For privacy questions or requests, contact:

Hotpot Queen / Nifty Napkin Inc

Email: privacy@hotpotqueen.com

Mailing address: 522 W Riverside Ave Ste 8149, Spokane, WA 99201

For accessibility-related requests or to receive this policy in an alternative format, contact privacy@hotpotqueen.com.