Privacy

Privacy policy.

Last updated: 2026-04-17. We collect the minimum data needed to operate the store and answer your support questions, and we never sell your information.

What we collect

• Order information: name, shipping address, email, phone (if provided), order history, payment status. Payment card details are processed by Shopify and never stored on our servers.
• Account data: email and password (hashed) if you create an account, plus saved addresses and preferences.
• Email subscribers: email address and subscription preferences. Powered by Shopify Email.
• Usage data: aggregate analytics about which pages are visited, referrer, browser type, and approximate location. We use a privacy-respecting analytics provider that does not set tracking cookies for ad networks.
• Support correspondence: emails and chat transcripts you send to our support team.

What we don't collect

• We do not run third-party advertising trackers.
• We do not sell or rent personal information to anyone, ever.
• We do not use AI training datasets built from your personal data.

Cookies

We use a small number of cookies for shopping cart state, accessibility preferences, and aggregate analytics. See our cookie policy for the full list and how to manage them.

Who we share data with

• Shopify: our commerce backend and payment processor.
• Shipping carriers (USPS, UPS, FedEx, DHL): name and shipping address only, to fulfill orders.
• Shopify Email: for newsletter delivery, if you've subscribed.
• Law enforcement: only when legally compelled and only the specific information requested.

Your rights

If you're in the EU, UK, California, Colorado, Connecticut, Virginia, Utah, or one of the other jurisdictions with comprehensive privacy laws, you have the right to:

• Request a copy of the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to record-keeping obligations for completed orders)
• Opt out of any "sale" or "sharing" of your data — we don't do either, but the opt-out is on offer regardless
• Withdraw consent for marketing communications at any time (every email has an unsubscribe link)

To exercise any of these rights, email privacy@poplarandmain.com. We respond within 30 days.

Data retention

Order records are retained for seven years to meet tax and consumer-protection obligations. Account data is retained until you delete the account. Email subscriber data is retained until you unsubscribe. Support correspondence is retained for two years.

Children's privacy

Poplar&Main is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have, contact us immediately and we will delete it.

Changes to this policy

We will post material changes to this page and, where required by law, notify you by email. Continued use of the site after a change indicates acceptance.

Contact

Privacy questions: privacy@poplarandmain.com. General contact: contact form.