Privacy policy

Last updated: October 15, 2026

This policy explains how Proudly Woven uses personal information at proudlywoven.com. For privacy questions or requests, use our contact form.

Information we collect and why

• Orders and accounts: your name, contact details, billing and delivery addresses, account details, order history, and payment and transaction information. We use these to process payments, fulfill orders, send order updates and manage your account. Payment providers process payment credentials.
• Customer support: messages, photos and other information you send us, used to answer questions and resolve order issues.
• Website activity: IP address, device and browser information, cookie identifiers, pages viewed, and shopping interactions. We use these to operate and secure the store, understand its use, and measure and personalize advertising.

We receive information directly from you, automatically through cookies and similar technologies, and from service providers such as Shopify, payment providers and analytics or advertising partners.

Our legal bases are performing our contract with you for orders and requested services; complying with legal obligations; legitimate interests in customer support, fraud prevention and maintaining the store; and consent for optional tracking or marketing where required. Information needed for payment and delivery is required to fulfill an order. Marketing choices are optional.

Who receives information

We share relevant information with Shopify for hosting and commerce services, payment providers, Prodigi for production and fulfillment, delivery carriers, and providers supporting our store. Google Analytics helps measure website use; Pinterest helps measure and deliver advertising. These services may collect activity across websites. See Google's information-use notice and Pinterest's privacy policy. We may also disclose information when required by law or necessary to establish or defend legal claims.

Shopify hosts our store and processes information when you visit or buy. We use Shopify Network Intelligence, which combines activity from our store, other merchants and Shopify to support security, service improvements, personalization and advertising. Information is shared with Shopify and other third parties, including in other countries. Shopify is responsible for its processing for these enhanced services. Read the Shopify Consumer Privacy Policy and use the Shopify Privacy Portal to exercise rights concerning that processing, including withdrawal of consent or objection.

Cookies and advertising choices

Cookies support checkout, security and preferences, as well as analytics and advertising. Sharing for advertising can count as a “sale”, “sharing” or “targeted advertising” under US privacy laws.

Use Your Privacy Choices to opt out of applicable data sharing. Where available, cookie preferences let you manage optional cookies. You can also contact us to withdraw consent or object to processing. Withdrawing consent does not affect processing that was lawful before withdrawal.

Where applicable, Shopify's privacy tools treat Global Privacy Control as an opt-out for your browser and device. Other “Do Not Track” signals are not recognized. Advertising partners may still process information for permitted non-advertising purposes. You can unsubscribe from marketing emails using their unsubscribe link; essential order messages continue.

Retention and international processing

Order and payment information needed for accounting must be retained for at least seven years under applicable record-keeping law. Other order, support and account information is retained according to the duration of the customer relationship, unresolved inquiries or disputes, and applicable legal claim periods. Marketing choices are retained until changed or withdrawn, with suppression records kept to honor opt-outs.

Google Analytics is configured to retain event data for 2 months and user data for 14 months, with the user period resetting on new activity. These limits do not apply to aggregated reports. Shopify, Pinterest and other providers' own processing follows the retention terms in their linked notices.

Service providers may process information outside your country, including in the United States. Shopify documents its transfer safeguards, including Binding Corporate Rules and Standard Contractual Clauses where applicable, in its Data Processing Addendum. Prodigi describes its transfer and retention arrangements in its Data Processing Addendum. Contact us for information about safeguards applicable to your data.

Your rights

Subject to applicable law and its exceptions, you can request access, correction, deletion or a portable copy of your information, restrict or object to processing, withdraw consent, and opt out of covered advertising-related sharing. Submit a request through our contact form. We may verify your identity for access, correction or deletion requests. An authorized agent may submit a request with proof of authority. We will respond within the applicable legal deadline and will not discriminate against you for exercising your rights.

You can contact us to appeal a decision where that right applies or lodge a complaint with a competent data protection authority.

Policy changes

We will post updates here, change the date above and provide any additional notice required by law.