Privacy Policy
Last updated:
Clover Stitch embroiders family titles, years and names onto sweatshirts, hoodies, tees, hats and totes. To do that we need some personal information: who is ordering, where the parcel goes and, on custom pieces, the names and years you want stitched. This Privacy Policy explains what we collect, why, who it is shared with, how long we keep it and the choices you have. It applies to cloverstitch.shop and to emails you exchange with us.
Privacy at a glance
- Who we are: Clover Stitch, 2314 Chand Road, Joppa, MD 21085, US. Contact: [email protected].
- What we collect: order, contact and delivery details, personalisation text, messages you send us and basic technical data.
- Why: to make and deliver your order, answer you, prevent fraud and meet legal duties.
- Selling data: we do not sell your personal information.
- Photos you send us: deleted 30 days after delivery of the related order.
- Your choices: access, correction, deletion and objection — email us.
1. Information we collect
1.1 Information you give us when ordering
- Contact details: your name and email address, used for the order confirmation, shipping email and any questions about the order.
- Billing and shipping details: billing name and address, and the recipient’s name and delivery address, which may be someone else’s if you are sending a gift.
- Personalisation text: the title, year, names and thread colour you enter on custom products, for example “Grandma, est. 2015, Ava, Leo, Mia”. These names often belong to family members, including children. We use them only to embroider your order and to answer questions about it.
- Order details: products, sizes, colours, prices, add-ons, order notes and the order history in your account if you create one.
- Account details: if you create an account, your email address and a password that is stored in hashed form; we cannot read it.
1.2 Information you give us when you contact us
When you email us or use the Submit a Ticket page, we receive your email address, the content of your message and anything you attach, such as a photo of an item that arrived damaged. Please do not send card numbers, passwords or identity documents; we never need them.
1.3 Payment information
Payments are processed by a third-party payment provider. You enter card or account details in the provider’s secure fields or on its own page. We receive confirmation that the payment succeeded, the amount, and limited information the provider shares for the order (for example the last digits of a card or the payer’s email), but we never receive or store full card numbers.
1.4 Information collected automatically
Like most websites, ours records technical information when you visit: IP address, browser type, device type, pages viewed and the time of the visit, in server logs that help us keep the site secure and working. We use cookies that are needed for the shop to function, such as keeping items in your cart, remembering that you are logged in and protecting the checkout. Section 6 explains cookies in more detail.
1.5 The homepage preview
Our homepage has a small “try her title” preview where you can type a year and names to see them on a sweatshirt picture. That preview runs only in your browser. What you type there is not saved, not sent to us and disappears when you leave the page.
2. How we use your information
| Purpose | Information used | Why we may do it |
|---|---|---|
| Make, pack and ship your order | Order, personalisation, shipping details | Needed to perform our contract with you |
| Send order and shipping emails | Name, email, order details | Needed to perform the contract |
| Answer questions, handle changes, returns and refunds | Messages, order details, photos you send | Contract and our legitimate interest in helping customers |
| Process payments and prevent fraud | Payment confirmation, IP address, order details | Contract, legal obligations and legitimate interest in security |
| Keep the website secure and working | Technical data, essential cookies | Legitimate interest |
| Keep business and tax records | Order and payment records | Legal obligation |
We do not send marketing emails unless you have asked to receive them, and every marketing email would include a way to unsubscribe. We do not use the names you type for personalisation for anything other than your order.
3. Who we share information with
We share personal information only with the service providers who help us run the shop, and only what each one needs:
- Production and fulfilment partners who embroider and pack orders receive the items, sizes, personalisation text and the shipping name and address.
- Carriers and postal services receive the recipient’s name, address and, where required for delivery, contact details.
- Payment providers process your payment under their own privacy terms.
- Hosting, email and website service providers store and transmit data on our behalf so the site and email work.
- Authorities, where the law requires us to share information, for example with customs for international parcels or in response to a valid legal request.
We do not sell personal information, and we do not share it with third parties for their own advertising.
4. How long we keep information
| Information | How long |
|---|---|
| Photos you send us (for example of a damaged item) | Deleted 30 days after delivery of the related order |
| Order and payment records | As long as tax and accounting law requires |
| Support emails | As long as needed to resolve the request and handle any follow-up |
| Account details | Until you ask us to delete the account, subject to the order records above |
| Server logs | For a limited period for security, then deleted or overwritten |
5. Children’s information
Our shop is for adults. We do not knowingly collect information directly from children. Many of our products carry children’s first names because parents and grandparents order them; those names are entered by the adult buyer, used only to embroider the order and kept as part of the order record. If you believe a child has given us personal information directly, email us and we will delete it.
6. Cookies
We use essential cookies that the shop needs to work: the cart, checkout security, your login session and similar functions. Without them, items would disappear from your cart between pages. We do not use advertising cookies. If we add analytics or other optional cookies in the future, we will update this policy first and, where the law requires, ask for your consent. You can delete or block cookies in your browser settings, though the cart and checkout may then stop working.
7. Security
The site uses encrypted HTTPS connections. Access to order information is limited to the people and services who need it to fulfil orders and support customers. Passwords are stored in hashed form. No system is perfectly secure, so please use a unique password for your account and tell us straight away if you notice anything unusual. We will never ask for your password or card details by email.
8. Your rights and choices
Depending on where you live — for example in a US state with a consumer privacy law, in Canada, in Australia or in New Zealand — you may have the right to:
- ask what personal information we hold about you and receive a copy;
- ask us to correct information that is wrong, such as a misspelled name on an account;
- ask us to delete your information, unless we must keep it, for example for tax records;
- object to or limit certain uses;
- withdraw consent you gave, such as to marketing emails;
- complain to the privacy authority in your country or state.
To use any of these rights, email [email protected] from the address linked to your order or account. We may ask for an order number to confirm it is you. We reply within 24 hours on business days and complete requests within the time the law gives us. We will not treat you differently for using your rights.
8.1 Gift recipients
If someone sent you a Clover Stitch gift, we hold your name and address because the buyer gave them to us for delivery. You can contact us to ask what we hold about you or to have it deleted once the order and any return are complete. We will not contact you for marketing because you received a gift.
8.2 Family names in personalisation
The names and years stitched on custom pieces are part of the order record. If you would like them removed from our systems after the order is complete — for example the names of grandchildren — email us with the order number. We will remove or anonymise the personalisation text where we do not need to keep it for legal or accounting reasons.
8.3 Marketing choices
We do not add you to a mailing list because you placed an order. If we ever start a newsletter, it will be opt-in only, and every email will contain a one-click unsubscribe link.
9. International transfers
Clover Stitch is based in the United States and orders ship from the USA. If you order from Canada, Australia or New Zealand, your information is processed in the United States and possibly in other countries where our service providers operate. We take reasonable steps so that your information is protected wherever it is processed.
10. If something goes wrong
If we ever learn that personal information we hold has been accessed without authorisation in a way that could harm you, we will investigate, take steps to limit the harm and notify you and the relevant authorities where the law requires it. If you think your information has been misused in connection with our shop, email us straight away.
11. Links to other sites
Carrier tracking pages and payment provider pages are run by those companies under their own privacy policies. We are not responsible for their practices; please read their policies when you use them.
12. Changes to this policy
If we change how we handle personal information, we will update this page and the date at the top. For significant changes we will make them clear on the site before they take effect.
13. Contact
Questions about privacy: [email protected], or by post to Clover Stitch, 2314 Chand Road, Joppa, MD 21085, US. Related pages: Terms of Service, Payment Methods, Contact Us.