Privacy Policy

1. Our Commitment

We are responsible for the processing of personal data collected through www.stitchedupkits.com (the "Site").

This Privacy Policy explains how and why we may collect, use, store, and/or share (all of which separately or collectively refers to "process") your personal information when you access or use the Site, including when you browse the Site, make a purchase, or communicate with us through any available channel(s).

It also outlines your privacy rights under applicable laws within the United States of America.

This Privacy Policy applies to all individuals who interact with the Site, including, but not limited to:

Visitors
Customers
All other individuals who contact us via various forms, email, or other means accessible via our Site or authorized by us

2. Contact Us

To access, update, or remove your personal information or ask more about exercising your privacy rights, please email us at customerservice@stitchedupkits.com

We will confirm receipt of your request within 10 (ten) business days of receiving it. We will then provide a substantive response within 45 (forty-five) calendar days from the date we received your request. If we deny your request, you may have the right to appeal our decision. To submit an appeal, please email us at customerservice@stitchedupkits.com with "Appeal Request" in the subject line. We will review your appeal in accordance with applicable privacy laws and respond within the time frame required by applicable law.

If you are not satisfied with the outcome of the appeal, you may contact your state's privacy authority (such as the California Privacy Protection Agency) or the attorney general's office for further assistance.

If you have any general questions about this Privacy Policy or our data practices, you may contact us at customerservice@stitchedupkits.com.

If you would at any time like to review or change the information in your account or terminate your account, you can:

Upon your request to terminate your user account, we will deactivate or delete your user account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our legal terms, and/or comply with applicable legal requirements.

3. What Is Personal Information

"Personal information" means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.

We may collect the following categories of personal information:

Identifiers, such as your name, postal address, email address, phone number, or other contact details
Commercial information, such as records of products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies
Internet or other electronic network activity, such as your interactions with our website
Preferences and interests related to our products, services, or events
Any other information you voluntarily provide that is relevant to your interactions with us or our offerings

Summary of Our Data Practices

Category of Personal Information	Examples	Purpose of Collection	Disclosed to Third Parties?	Retention Period
Identifiers	Name, email address, postal address, phone number	To process orders, provide customer support, communicate with you	Yes (e.g., shipping providers)	As long as necessary for business/legal purposes
Commercial Information	Purchase history, products viewed or considered	To fulfill orders, improve our products/services, marketing strategy	Yes (e.g., order amount and billing info shared with payment processors)	As long as necessary for compliance with legal purposes or business purposes
Internet or Other Electronic Network Activity	IP address, browser type, interactions with our Site	To analyze usage, enhance user experience, site optimization	Yes (e.g., analytics providers)	Up to 2 (two) years
Preferences and Interests	Information related to your interests in our products, services, or events	To personalize offerings, provide relevant content	No	Up to 2 (two) years

If you provide Personal Information about someone else, for example, to arrange delivery of our kit to a friend, please ensure you have their permission and inform them about this Privacy Policy and our Privacy Practices.

4. How We Collect Your Information

We collect Personal Information when you interact with our Site, such as when you:

Place an order
Log in or Sign in to place an order
Subscribe to our newsletter
Complete any of our online form(s)
Communicate with us by email

Additionally, we automatically collect browsing and device information, including IP address(es) and Site activity, for site optimization, analytics, and security purposes.

5. Use of Personal Information

We use your Personal Information to:

Provide, manage, and improve our products and services
Manage our relationship with you
Fulfill orders
Process payments
Communicate with you regarding our products, services, and promotions

We may also send you marketing communications about third-party services or products we believe may interest you. These communications may include offers, updates, or promotions. You can opt out of receiving such communications at any time by contacting us at customerservice@stitchedupkits.com or by following the unsubscribe link provided in the emails (where applicable).

We do not collect or have access to your payment card details, account credentials, or government-issued identification documents. Any such information is collected and processed directly by our third-party payment service providers in accordance with their respective privacy policies.

We may collect limited data necessary to initiate the payment process, such as the type of payment method selected. However, we do not store full payment details ourselves. We only receive confirmation of payment and the limited transactional information necessary to fulfill your order.

Currently, we use the following payment processors:

Shopify – see Shopify Privacy Policy
PayPal – see PayPal Privacy Policy
Clearpay – see Clearpay Privacy Policy
Afterpay – see Afterpay Privacy Policy

6. Sharing of Your Personal Information

We do not collect or use any Sensitive Personal Information (for example, information about a consumer's social security, driver's license, state identification card, or passport number; account log-in, financial account, debit or credit card numbers in combination with any required security codes or passwords; precise geolocation; health or genetic data, racial or ethnic origin, religious or philosophical beliefs, or union membership; contents of a consumer's mail, email, or text messages; or criminal offense data).

We may use your Personal Information to provide you with personalized advertisements or marketing communications that may be of interest to you based on your browsing activity.

We may use third-party marketing, advertising, and business analytics partners to deliver personalized advertising and to help us understand how people use or interact with us. These partners may receive information about your use of or interactions with the Site, including through third-party cookies or other technologies. Providing information to third parties for personalized advertising services may be considered "sharing" for cross-context behavioral advertising or "targeted advertising," as defined by applicable law.

You may opt-out of our sharing of your Personal Data for cross-context behavioral advertising or targeted advertising by:

Clicking the "Do Not Sell or Share My Personal Information" link on our homepage, or
Emailing us at customerservice@stitchedupkits.com

Third-Party Services:

Google Analytics: We use Google Analytics to better understand how customers interact with our Site.

Facebook Ads:

Manage your ad preferences

Microsoft Bing Ads:

Manage your ad preferences

Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance's opt-out portal at https://optout.aboutads.info/.

For more information about how targeted advertising works, you can visit the Network Advertising Initiative's (NAI) educational page.

7. Information Security

We take reasonable and appropriate measures to protect your Personal Information against unauthorized access, disclosure, or misuse. This includes physical, technical, and administrative safeguards to secure your information both electronically and physically. However, please be aware that no security measures are completely foolproof, and we cannot guarantee the absolute security of your personal information.

In the event of a security breach involving your Personal Information, and if we determine that such breach poses a risk to your rights or freedoms, we will notify you without undue delay in accordance with applicable data breach notification laws. Such notice may be provided by email, postal mail, or other lawful means. Where required by law, we will also notify relevant regulatory authorities.

8. Retention

We retain your Personal Information only for as long as necessary to fulfill the purposes for which it was collected, including to provide services, respond to inquiries, comply with legal and accounting obligations, resolve disputes, and enforce our agreements. This includes information provided through order placements, contact forms, subscriptions, or automatically collected data (e.g., site usage analytics).

If you would like your Personal Information deleted, please contact us (see "Contact Us" section). For more details about your rights, see the "Your Rights" section of this Privacy Policy.

9. How Email is Handled

By sending us an electronic mail message, you may be sending us personally-identifying information. In these cases, we may retain the information as long as necessary to respond to your request or otherwise resolve the subject matter of your email. Please be aware that email is not necessarily secure from interception or misdirection. For your protection, you may wish to communicate sensitive information using a method other than email.

10. Automatic Decision-Making

We do not engage in fully automated decision-making (including profiling) that produces legal or similarly significant effects on you. This means we do not make decisions that affect your access to services, your legal rights, or other significant matters without meaningful human review.

However, we may use automated technologies, such as analytics and personalized advertising tools (e.g., Google Analytics, Facebook Ads), to better understand customer behavior, preferences, and improve your experience on the Site. These technologies may involve limited profiling, but not for purposes that would trigger enhanced protections under U.S. or international privacy laws.

In addition, our e-commerce platform provider, Shopify, may use machine learning or automated techniques as part of its fraud prevention systems and service optimization. For example:

Temporary blacklisting of IP addresses associated with repeated failed transactions
Temporary blacklisting of payment methods associated with flagged activity

These processes are either subject to human oversight or are not used in ways that have legal or similarly significant effects on individuals. You can learn more about Shopify's approach to automated decision-making in Shopify's Privacy Policy.

If you reside in a U.S. state that provides specific rights related to automated decision-making (such as the right to opt out of profiling in furtherance of decisions with legal or similarly significant effects), you may exercise such rights by contacting us at customerservice@stitchedupkits.com.

11. Your Rights

Depending on your state of residence, you may have certain rights regarding your Personal Information.

11.1. CCPA Privacy Notice (California Residents)

This section applies only to California residents. Under the California Consumer Privacy Act (CCPA), you have the following rights:

11.1.1. Right to request deletion of the data You can ask for the deletion of your personal information. If you ask us to delete your personal information, we will respect your request and delete your personal information, subject to certain exceptions provided by law.

11.1.2. Right to be informed Depending on the circumstances, you have a right to know:

Whether we collect and use your personal information
The categories of personal information that we collect
The purposes for which the collected personal information is used
Whether we sell or share personal information to third parties
The categories of personal information that we sold, shared, or disclosed for a business purpose
The categories of third parties to whom the personal information was sold, shared, or disclosed for a business purpose
The business or commercial purpose for collecting, selling, or sharing personal information
The specific pieces of personal information we collected about you

11.1.3. Right to Non-Discrimination We will not discriminate against you if you exercise your privacy rights.

11.1.4. Right to Limit Use and Disclosure of Sensitive Personal Information We do not collect or process sensitive personal information.

11.1.5. Verification process Upon receiving your request, we may need to verify your identity to determine you are the same person about whom we have the information in our system. We will respond within 45 (forty-five) calendar days of receipt. If reasonably necessary, the response period may be extended once for an additional 45 (forty-five) calendar days, provided we notify you of the extension and the reason for it within the initial 45-day period.

11.1.6. Other privacy rights:

You may object to the processing of your personal information
You may request the correction of your personal data if it is incorrect or no longer relevant
You can designate an authorized agent to make a request under the CCPA on your behalf

We do not sell your personal data in exchange for money or other valuable consideration. However, under the CCPA, certain disclosures of personal information to third parties (such as advertising or analytics providers) may be considered a "sale" or "sharing" for purposes of cross-context behavioral advertising.

You have the right to opt out of such use of your personal information. You may do so by:

Clicking the "Do Not Sell or Share My Personal Information" link on our homepage, or
Emailing us at customerservice@stitchedupkits.com

11.2. Virginia Residents

Under the Virginia Consumer Data Protection Act (VCDPA), Virginia residents have the following rights:

Right to be informed whether or not we are processing your personal data
Right to access your personal data
Right to correct inaccuracies in your personal data
Right to request deletion of your personal data
Right to obtain a copy of the personal data you previously shared with us
Right to opt out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling

To exercise your rights, email us at customerservice@stitchedupkits.com.

11.3. Colorado Residents

Under the Colorado Privacy Act (CPA), Colorado residents have the following rights:

Right to be informed whether or not we are processing your personal data
Right to access your personal data
Right to correct inaccuracies in your personal data
Right to request deletion of your personal data
Right to obtain a copy of the personal data you previously shared with us
Right to opt out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling

To exercise your rights, email us at customerservice@stitchedupkits.com.

11.4. Connecticut Residents

Under the Connecticut Data Privacy Act (CTDPA), Connecticut residents have the following rights:

Right to be informed whether or not we are processing your personal data
Right to access your personal data
Right to correct inaccuracies in your personal data
Right to request deletion of your personal data
Right to obtain a copy of the personal data you previously shared with us
Right to opt out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling

To exercise your rights, email us at customerservice@stitchedupkits.com.

11.5. Utah Residents

Under the Utah Consumer Privacy Act (UCPA), Utah residents have the following rights:

Right to be informed whether or not we are processing your personal data
Right to access your personal data
Right to request deletion of your personal data
Right to obtain a copy of the personal data you previously shared with us
Right to opt out of the processing of your personal data if it is used for targeted advertising or the sale of personal data

To exercise your rights, email us at customerservice@stitchedupkits.com.

11.6. Other U.S. States

If you reside in a U.S. state that has enacted comprehensive privacy legislation not specifically listed in this Policy, we are committed to respecting your privacy rights. We aim to adhere to the principles set out in the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), which are currently among the most comprehensive privacy laws in the United States.

To exercise any privacy rights or to inquire about how your state's privacy laws may apply to you, please contact us at customerservice@stitchedupkits.com.

12. Changes to this Privacy Policy

We reserve the right to update this Privacy Policy at any time. Changes will be posted on this page along with a new "Effective Date" at the top. We recommend periodically reviewing this Privacy Policy to stay informed about how we manage and protect your Personal Information. If we make material changes to this Privacy Policy, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification.

13. Access to Your Information

You may request access to the Personal Information we hold about you at any time by contacting us at customerservice@stitchedupkits.com.

We will respond to your request in accordance with applicable privacy laws. In some cases, we may require you to verify your identity before processing the request. To the extent permitted by applicable law, we may charge a reasonable fee to comply with your verifiable consumer request if it is excessive, repetitive, or manifestly unfounded.

14. Cookies

When you visit our Site, we and select third-party partners (e.g., Google, Facebook) may use cookies. Cookies are small data files stored on your browser or device. They help us make the Site function properly, analyze usage, and provide a personalized experience.

The information collected through cookies may include your device type, browser details, preferences, and how you interact with our Site. Typically, this information does not directly identify you personally.

We use cookies for:

Necessary site functionality
Analytics and performance monitoring (e.g., Google Analytics)
Targeted marketing and advertising

Cookies can be either "session" or "persistent":

Session cookies are temporary and are deleted once you close your browser
Persistent cookies remain on your device until they expire or are manually deleted

Most of the cookies we use are persistent and may remain active for 30 minutes to 2 years from the time they are set.

You can manage or disable cookies through your browser settings. Please note that doing so may affect the functionality of certain features of the Site. For detailed instructions on managing cookies, please refer to your browser's help section or visit www.allaboutcookies.org.

Our store is hosted on Shopify Inc., which provides us with the e-commerce platform that allows us to sell our products and services to you. Your data may be stored through Shopify's data storage, databases, and the general Shopify application. Shopify stores your data on secure servers behind a firewall and applies appropriate technical and organizational measures to protect it.

Shopify may also use its cookies and similar tracking technologies when you visit our store. For more information about how Shopify collects and uses cookies, please review their Cookie Policy and Privacy Policy.

15. Do Not Track

Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online.

16. Links to Third-Party Websites

The Site may contain links to third-party websites, services, or online resources that are not operated or controlled by Stitched Up Kits.

We are not responsible for the privacy practices, content, accuracy, or availability of such third-party platforms. By accessing these websites or using third-party features embedded or accessible through the Site, you acknowledge and agree that any personal data you choose to share with those third parties is subject to their own privacy policies and practices.

We do not monitor or control how such third parties collect, use, or protect your personal information, and we disclaim any liability arising from your interactions with them.

17. Children's Privacy

Our Site is not intended for children under the age of 18, and we do not knowingly collect Personal Information from anyone under the age of 18. If you are a parent or guardian and believe that your child has provided us with Personal Information, please contact us at customerservice@stitchedupkits.com, and we will take appropriate steps to remove the information.