Privacy Policy
Privacy Policy
1. Our Commitment
We are responsible for the processing of personal data collected through www.stitchedupkits.com (the "Site").
This Privacy Policy explains how and why we may collect, use, store, and/or share (all of which separately or collectively refers to "process") your personal information when you access or use the Site, including when you browse the Site, make a purchase, or communicate with us through any available channel(s).
It also outlines your privacy rights under applicable laws within the United States of America.
This Privacy Policy applies to all individuals who interact with the Site, including, but not limited to:
- Visitors
- Customers
- All other individuals who contact us via various forms, email, or other means accessible via our Site or authorized by us
2. Contact Us
To access, update, or remove your personal information or ask more about exercising your privacy rights, please email us at customerservice@stitchedupkits.com
We will confirm receipt of your request within 10 (ten) business days of receiving it. We will then provide a substantive response within 45 (forty-five) calendar days from the date we received your request. If we deny your request, you may have the right to appeal our decision. To submit an appeal, please email us at customerservice@stitchedupkits.com with "Appeal Request" in the subject line. We will review your appeal in accordance with applicable privacy laws and respond within the time frame required by applicable law.
If you are not satisfied with the outcome of the appeal, you may contact your state's privacy authority (such as the California Privacy Protection Agency) or the attorney general's office for further assistance.
If you have any general questions about this Privacy Policy or our data practices, you may contact us at customerservice@stitchedupkits.com.
If you would at any time like to review or change the information in your account or terminate your account, you can:
- Log in to your account settings and update your user account information, or
- Contact us using the contact information provided so we can assist you.
Upon your request to terminate your user account, we will deactivate or delete your user account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our legal terms, and/or comply with applicable legal requirements.
3. What Is Personal Information
"Personal information" means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.
We may collect the following categories of personal information:
- Identifiers, such as your name, postal address, email address, phone number, or other contact details
- Commercial information, such as records of products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies
- Internet or other electronic network activity, such as your interactions with our website
- Preferences and interests related to our products, services, or events
- Any other information you voluntarily provide that is relevant to your interactions with us or our offerings
Summary of Our Data Practices
Category of Personal Information | Examples | Purpose of Collection | Disclosed to Third Parties? | Retention Period |
---|---|---|---|---|
Identifiers | Name, email address, postal address, phone number | To process orders, provide customer support, communicate with you | Yes (e.g., shipping providers) | As long as necessary for business/legal purposes |
Commercial Information | Purchase history, products viewed or considered | To fulfill orders, improve our products/services, marketing strategy | Yes (e.g., order amount and billing info shared with payment processors) | As long as necessary for compliance with legal purposes or business purposes |
Internet or Other Electronic Network Activity | IP address, browser type, interactions with our Site | To analyze usage, enhance user experience, site optimization | Yes (e.g., analytics providers) | Up to 2 (two) years |
Preferences and Interests | Information related to your interests in our products, services, or events | To personalize offerings, provide relevant content | No | Up to 2 (two) years |
If you provide Personal Information about someone else, for example, to arrange delivery of our kit to a friend, please ensure you have their permission and inform them about this Privacy Policy and our Privacy Practices.
4. How We Collect Your Information
We collect Personal Information when you interact with our Site, such as when you:
- Place an order
- Log in or Sign in to place an order
- Subscribe to our newsletter
- Complete any of our online form(s)
- Communicate with us by email
Additionally, we automatically collect browsing and device information, including IP address(es) and Site activity, for site optimization, analytics, and security purposes.
5. Use of Personal Information
We use your Personal Information to:
- Provide, manage, and improve our products and services
- Manage our relationship with you
- Fulfill orders
- Process payments
- Communicate with you regarding our products, services, and promotions
We may also send you marketing communications about third-party services or products we believe may interest you. These communications may include offers, updates, or promotions. You can opt out of receiving such communications at any time by contacting us at customerservice@stitchedupkits.com or by following the unsubscribe link provided in the emails (where applicable).
We do not collect or have access to your payment card details, account credentials, or government-issued identification documents. Any such information is collected and processed directly by our third-party payment service providers in accordance with their respective privacy policies.
We may collect limited data necessary to initiate the payment process, such as the type of payment method selected. However, we do not store full payment details ourselves. We only receive confirmation of payment and the limited transactional information necessary to fulfill your order.
Currently, we use the following payment processors:
- Shopify – see Shopify Privacy Policy
- PayPal – see PayPal Privacy Policy
- Clearpay – see Clearpay Privacy Policy
- Afterpay – see Afterpay Privacy Policy
6. Sharing of Your Personal Information
We do not collect or use any Sensitive Personal Information (for example, information about a consumer's social security, driver's license, state identification card, or passport number; account log-in, financial account, debit or credit card numbers in combination with any required security codes or passwords; precise geolocation; health or genetic data, racial or ethnic origin, religious or philosophical beliefs, or union membership; contents of a consumer's mail, email, or text messages; or criminal offense data).
We may use your Personal Information to provide you with personalized advertisements or marketing communications that may be of interest to you based on your browsing activity.
We may use third-party marketing, advertising, and business analytics partners to deliver personalized advertising and to help us understand how people use or interact with us. These partners may receive information about your use of or interactions with the Site, including through third-party cookies or other technologies. Providing information to third parties for personalized advertising services may be considered "sharing" for cross-context behavioral advertising or "targeted advertising," as defined by applicable law.
You may opt-out of our sharing of your Personal Data for cross-context behavioral advertising or targeted advertising by:
- Clicking the "Do Not Sell or Share My Personal Information" link on our homepage, or
- Emailing us at customerservice@stitchedupkits.com
Third-Party Services:
Google Analytics: We use Google Analytics to better understand how customers interact with our Site.
Facebook Ads:
Microsoft Bing Ads:
Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance's opt-out portal at https://optout.aboutads.info/.
For more information about how targeted advertising works, you can visit the Network Advertising Initiative's (NAI) educational page.
7. Information Security
We take reasonable and appropriate measures to protect your Personal Information against unauthorized access, disclosure, or misuse. This includes physical, technical, and administrative safeguards to secure your information both electronically and physically. However, please be aware that no security measures are completely foolproof, and we cannot guarantee the absolute security of your personal information.
In the event of a security breach involving your Personal Information, and if we determine that such breach poses a risk to your rights or freedoms, we will notify you without undue delay in accordance with applicable data breach notification laws. Such notice may be provided by email, postal mail, or other lawful means. Where required by law, we will also notify relevant regulatory authorities.
8. Retention
We retain your Personal Information only for as long as necessary to fulfill the purposes for which it was collected, including to provide services, respond to inquiries, comply with legal and accounting obligations, resolve disputes, and enforce our agreements. This includes information provided through order placements, contact forms, subscriptions, or automatically collected data (e.g., site usage analytics).
If you would like your Personal Information deleted, please contact us (see "Contact Us" section). For more details about your rights, see the "Your Rights" section of this Privacy Policy.
9. How Email is Handled
By sending us an electronic mail message, you may be sending us personally-identifying information. In these cases, we may retain the information as long as necessary to respond to your request or otherwise resolve the subject matter of your email. Please be aware that email is not necessarily secure from interception or misdirection. For your protection, you may wish to communicate sensitive information using a method other than email.
10. Automatic Decision-Making
We do not engage in fully automated decision-making (including profiling) that produces legal or similarly significant effects on you. This means we do not make decisions that affect your access to services, your legal rights, or other significant matters without meaningful human review.
However, we may use automated technologies, such as analytics and personalized advertising tools (e.g., Google Analytics, Facebook Ads), to better understand customer behavior, preferences, and improve your experience on the Site. These technologies may involve limited profiling, but not for purposes that would trigger enhanced protections under U.S. or international privacy laws.
In addition, our e-commerce platform provider, Shopify, may use machine learning or automated techniques as part of its fraud prevention systems and service optimization. For example:
- Temporary blacklisting of IP addresses associated with repeated failed transactions
- Temporary blacklisting of payment methods associated with flagged activity
These processes are either subject to human oversight or are not used in ways that have legal or similarly significant effects on individuals. You can learn more about Shopify's approach to automated decision-making in Shopify's Privacy Policy.
If you reside in a U.S. state that provides specific rights related to automated decision-making (such as the right to opt out of profiling in furtherance of decisions with legal or similarly significant effects), you may exercise such rights by contacting us at customerservice@stitchedupkits.com.
11. Your Rights
Depending on your state of residence, you may have certain rights regarding your Personal Information.
11.1. CCPA Privacy Notice (California Residents)
This section applies only to California residents. Under the California Consumer Privacy Act (CCPA), you have the following rights:
11.1.1. Right to request deletion of the data You can ask for the deletion of your personal information. If you ask us to delete your personal information, we will respect your request and delete your personal information, subject to certain exceptions provided by law.
11.1.2. Right to be informed Depending on the circumstances, you have a right to know:
- Whether we collect and use your personal information
- The categories of personal information that we collect
- The purposes for which the collected personal information is used
- Whether we sell or share personal information to third parties
- The categories of personal information that we sold, shared, or disclosed for a business purpose
- The categories of third parties to whom the personal information was sold, shared, or disclosed for a business purpose
- The business or commercial purpose for collecting, selling, or sharing personal information
- The specific pieces of personal information we collected about you
11.1.3. Right to Non-Discrimination We will not discriminate against you if you exercise your privacy rights.
11.1.4. Right to Limit Use and Disclosure of Sensitive Personal Information We do not collect or process sensitive personal information.
11.1.5. Verification process Upon receiving your request, we may need to verify your identity to determine you are the same person about whom we have the information in our system. We will respond within 45 (forty-five) calendar days of receipt. If reasonably necessary, the response period may be extended once for an additional 45 (forty-five) calendar days, provided we notify you of the extension and the reason for it within the initial 45-day period.
11.1.6. Other privacy rights:
- You may object to the processing of your personal information
- You may request the correction of your personal data if it is incorrect or no longer relevant
- You can designate an authorized agent to make a request under the CCPA on your behalf
We do not sell your personal data in exchange for money or other valuable consideration. However, under the CCPA, certain disclosures of personal information to third parties (such as advertising or analytics providers) may be considered a "sale" or "sharing" for purposes of cross-context behavioral advertising.
You have the right to opt out of such use of your personal information. You may do so by:
- Clicking the "Do Not Sell or Share My Personal Information" link on our homepage, or
- Emailing us at customerservice@stitchedupkits.com
11.2. Virginia Residents
Under the Virginia Consumer Data Protection Act (VCDPA), Virginia residents have the following rights:
- Right to be informed whether or not we are processing your personal data
- Right to access your personal data
- Right to correct inaccuracies in your personal data
- Right to request deletion of your personal data
- Right to obtain a copy of the personal data you previously shared with us
- Right to opt out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling
To exercise your rights, email us at customerservice@stitchedupkits.com.
11.3. Colorado Residents
Under the Colorado Privacy Act (CPA), Colorado residents have the following rights:
- Right to be informed whether or not we are processing your personal data
- Right to access your personal data
- Right to correct inaccuracies in your personal data
- Right to request deletion of your personal data
- Right to obtain a copy of the personal data you previously shared with us
- Right to opt out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling
To exercise your rights, email us at customerservice@stitchedupkits.com.
11.4. Connecticut Residents
Under the Connecticut Data Privacy Act (CTDPA), Connecticut residents have the following rights:
- Right to be informed whether or not we are processing your personal data
- Right to access your personal data
- Right to correct inaccuracies in your personal data
- Right to request deletion of your personal data
- Right to obtain a copy of the personal data you previously shared with us
- Right to opt out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling
To exercise your rights, email us at customerservice@stitchedupkits.com.
11.5. Utah Residents
Under the Utah Consumer Privacy Act (UCPA), Utah residents have the following rights:
- Right to be informed whether or not we are processing your personal data
- Right to access your personal data
- Right to request deletion of your personal data
- Right to obtain a copy of the personal data you previously shared with us
- Right to opt out of the processing of your personal data if it is used for targeted advertising or the sale of personal data
To exercise your rights, email us at customerservice@stitchedupkits.com.
11.6. Other U.S. States
If you reside in a U.S. state that has enacted comprehensive privacy legislation not specifically listed in this Policy, we are committed to respecting your privacy rights. We aim to adhere to the principles set out in the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), which are currently among the most comprehensive privacy laws in the United States.
To exercise any privacy rights or to inquire about how your state's privacy laws may apply to you, please contact us at customerservice@stitchedupkits.com.
12. Changes to this Privacy Policy
We reserve the right to update this Privacy Policy at any time. Changes will be posted on this page along with a new "Effective Date" at the top. We recommend periodically reviewing this Privacy Policy to stay informed about how we manage and protect your Personal Information. If we make material changes to this Privacy Policy, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification.
13. Access to Your Information
You may request access to the Personal Information we hold about you at any time by contacting us at customerservice@stitchedupkits.com.
We will respond to your request in accordance with applicable privacy laws. In some cases, we may require you to verify your identity before processing the request. To the extent permitted by applicable law, we may charge a reasonable fee to comply with your verifiable consumer request if it is excessive, repetitive, or manifestly unfounded.
14. Cookies
When you visit our Site, we and select third-party partners (e.g., Google, Facebook) may use cookies. Cookies are small data files stored on your browser or device. They help us make the Site function properly, analyze usage, and provide a personalized experience.
The information collected through cookies may include your device type, browser details, preferences, and how you interact with our Site. Typically, this information does not directly identify you personally.
We use cookies for:
- Necessary site functionality
- Analytics and performance monitoring (e.g., Google Analytics)
- Targeted marketing and advertising
Cookies can be either "session" or "persistent":
- Session cookies are temporary and are deleted once you close your browser
- Persistent cookies remain on your device until they expire or are manually deleted
Most of the cookies we use are persistent and may remain active for 30 minutes to 2 years from the time they are set.
You can manage or disable cookies through your browser settings. Please note that doing so may affect the functionality of certain features of the Site. For detailed instructions on managing cookies, please refer to your browser's help section or visit www.allaboutcookies.org.
Our store is hosted on Shopify Inc., which provides us with the e-commerce platform that allows us to sell our products and services to you. Your data may be stored through Shopify's data storage, databases, and the general Shopify application. Shopify stores your data on secure servers behind a firewall and applies appropriate technical and organizational measures to protect it.
Shopify may also use its cookies and similar tracking technologies when you visit our store. For more information about how Shopify collects and uses cookies, please review their Cookie Policy and Privacy Policy.
15. Do Not Track
Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online.
16. Links to Third-Party Websites
The Site may contain links to third-party websites, services, or online resources that are not operated or controlled by Stitched Up Kits.
We are not responsible for the privacy practices, content, accuracy, or availability of such third-party platforms. By accessing these websites or using third-party features embedded or accessible through the Site, you acknowledge and agree that any personal data you choose to share with those third parties is subject to their own privacy policies and practices.
We do not monitor or control how such third parties collect, use, or protect your personal information, and we disclaim any liability arising from your interactions with them.
17. Children's Privacy
Our Site is not intended for children under the age of 18, and we do not knowingly collect Personal Information from anyone under the age of 18. If you are a parent or guardian and believe that your child has provided us with Personal Information, please contact us at customerservice@stitchedupkits.com, and we will take appropriate steps to remove the information.