Privacy policy

Introduction

Salt Flat Stitches (“we,” “us,” “our”) operates https://www.saltflatstitches.com (the “Site”), built on Shopify. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit the Site, create an account, place an order, or otherwise interact with us. By using the Site or providing information, you agree to the practices described in this policy.

Information We Collect

• Information you provide directly: name, email address, billing and shipping address, phone number, account username and password, order details, product reviews, photos or other content you submit, and customer service communications.

• Payment information: payment confirmation and transaction details processed by our third-party processors (Stripe and PayPal). We do not store full payment card numbers on our servers; payment information is handled by the payment processors.

• Automatically collected information: IP address, device and browser type, operating system, pages visited, referral/exit pages, date/time stamps, cookies and similar tracking data, and other log data.

• Information from third parties: analytics providers, advertising partners, shipping partners, social login providers (if used), and other service providers.

How We Use Your Information

We use personal information to:

• Process and fulfill orders, payments, shipping, returns, and exchanges.

• Create and manage your account and provide customer support.

• Communicate about orders, account activity, promotions, and policy updates.

• Personalize content, recommendations, and improve the Site and our services.

• Run analytics, advertising, and marketing; detect, prevent, and address fraud and security issues.

• Comply with legal obligations and enforce our Terms of Use.

Legal Bases for Processing (where applicable)

For residents of the EU/EEA/UK, we process personal data on the bases of performance of a contract (e.g., to fulfill orders), legitimate interests (e.g., site security, fraud prevention, analytics, and marketing where appropriate), consent (e.g., marketing emails, non-essential cookies), and compliance with legal obligations.

Cookies and Tracking Technologies

We use cookies, web beacons, pixels, and similar technologies to operate and improve the Site, remember preferences, run analytics, and support marketing. You can manage cookies through your browser settings or via available cookie controls. Blocking cookies may affect Site functionality. We recognize and will honor valid Global Privacy Control (GPC) signals where applicable.

Third-Party Services and Links

We use third-party service providers to operate the Site and provide services, including Shopify (platform/hosting), Stripe and PayPal (payment processing), third-party analytics, email delivery, advertising, and fulfillment/shipping partners. These providers may collect or receive personal data necessary to perform their services. We recommend reviewing those providers’ privacy notices. The Site may include links to third-party websites; we are not responsible for their practices.

Payment Processing

Payments are processed by Stripe and PayPal. Payment card data is transmitted directly to these processors and handled in accordance with their security practices (e.g., PCI-DSS). We do not retain full card numbers on our servers.

Disclosure of Personal Information

We may disclose personal information:

• To service providers and vendors who perform services on our behalf (e.g., payment processors, hosting, fulfillment, shipping carriers, analytics, email providers, and marketing partners).

• To comply with legal obligations, respond to lawful requests, and to protect rights, property, or safety.

• In connection with a business transaction (e.g., merger, acquisition, sale of assets), with notice where required.

• With your consent or at your direction.

Categories of Personal Information Disclosed

Examples of categories disclosed to service providers include identifiers, contact information, transactional information, payment details (to processors), and internet/network activity.

Security and Data Retention

We implement reasonable administrative, technical, and physical safeguards to protect personal data. No security system is perfect; we cannot guarantee absolute security. We retain personal information only as long as necessary to provide services, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary by data type and legal requirements.

Your Rights and Choices

Depending on your location, you may have rights including:

• Access, correct, update, or request deletion of personal information.

• Object to or restrict certain processing, and request portability of certain data.

• Opt out of marketing communications (via unsubscribe links or contacting us).

• California residents: Under the CCPA/CPRA, you may request disclosure of categories of personal information collected, categories sold/shared, and request access or deletion. To exercise rights, see contact details below. We will not discriminate for exercising privacy rights.

• EU/EEA/UK residents: You may have rights under GDPR to access, rectify, erase, restrict processing, object to processing, and data portability. To exercise rights, contact us; we may need to verify your identity and may limit requests that are excessive or unfounded.

Children’s Privacy

The Site is not intended for children under 16. We do not knowingly collect personal information from children under 16. If we learn we have collected such information, we will take steps to delete it.

International Transfers

Data may be processed and stored in the United States, Oman, or other countries. Where required, we use appropriate safeguards to protect personal data when transferred across borders.

Third-Party Links

The Site may contain links to third-party websites or services with separate privacy practices. We are not responsible for their content or policies; review their privacy policies before providing personal information.

Updates to This Policy

We may update this Privacy Policy periodically. We will post the revised policy on the Site with an updated effective date. Material changes will be communicated as required by law.

Contact Us

To ask questions, exercise your rights, or make privacy requests, contact:

Salt Flat Stitches

Email: neha@saltflatstitches.com

Mailing address: P.O. Box 258, PC 117, Muscat, Oman

If you are an EU/EEA/UK resident with unresolved concerns, you may lodge a complaint with your local data protection authority.