What we collect.
What we never sell.

This explains what we collect when you use hearthlyn.com, why we collect it, and what you can ask us to do about it.

What do you collect?

When you order:

• Name, email address, phone number
• Shipping and billing address
• What you ordered and what you paid

When you just browse:

• Pages you visit and how long you stay
• Rough location based on IP address, at city level
• Browser and device type
• Where you came from, such as a search engine or an ad

We never see your card number. Payment runs through PayPal. We get back a confirmation and the last four digits, nothing more — no card number, no PayPal password, no full payment account details.

Why do you need it?

• To weave your blanket and ship it to the right address
• To email you order confirmations and tracking
• To answer you when you contact us
• To handle returns and refunds
• To spot fraudulent orders
• To understand which pages people actually use, so we can fix the ones they don’t

Who else sees my information?

Your details are shared only with the companies needed to complete your order:

• Our production partner, who receives your name and shipping address to weave and label the parcel
• The carrier — USPS, UPS, or similar US carriers — who needs your address and phone number to deliver
• PayPal, who processes the payment; we never receive your card number
• Our email provider, who sends order notifications
• Analytics providers, who receive usage data

We don’t sell your personal information. We don’t rent it, and we don’t hand it to advertisers as a list.

We will disclose information if a court order or a law requires it.

How long do you keep it?

Order records are kept for 7 years, because tax law requires it. Email correspondence is kept for 2 years. Analytics data is kept for 26 months.

If you ask us to delete your data, we’ll delete everything we’re not legally required to hold.

What are my rights?

You can ask us to:

• Show you what we hold about you
• Correct anything wrong
• Delete your data
• Stop sending you marketing email
• Send you a copy of your data in a portable format

Email ⟨EMAIL — SET BEFORE GO-LIVE⟩ and we’ll respond within 30 days. We may ask you to confirm your identity first, so someone else can’t request your data.

If you live in California

The CCPA gives you the right to know what personal information we collect, to have it deleted, and to opt out of its sale. We don’t sell personal information, so there’s nothing to opt out of, but the other rights apply and you can exercise them at the address above. We won’t treat you differently for asking.

Marketing email

We only email you about orders unless you sign up for our list. If you do sign up, every email has an unsubscribe link and it works immediately. Unsubscribing doesn’t stop order and shipping notifications, which you’ll still receive.

Children

This store isn’t intended for children under 13, and we don’t knowingly collect their information. If you think a child has given us data, email us and we’ll remove it.

Security

Traffic runs over HTTPS. Access to order data is limited to people who need it. No system is perfect, so if a breach ever affects your data, we’ll email you about it rather than hope you don’t notice.

Changes

If we change this policy we’ll update the date at the top. Substantial changes get an email to anyone on our list.

Contact

Questions about privacy, or a request about your data:

Email: ⟨EMAIL — SET BEFORE GO-LIVE⟩ Phone: ⟨PHONE — SET BEFORE GO-LIVE⟩ Mail: Hearthlyn, ⟨BUSINESS ADDRESS — SET BEFORE GO-LIVE⟩ Monday to Friday, 10:00 AM to 6:00 PM Eastern Time.