Privacy Policy

Last Revised May 9, 2025

Welcome to whobreythreads.com ("Website"). Medora James LLC ("Company") owns the Website. Company and its officers, directors, licensors, vendors, website hosts, and employees are referred to as "We" or "Us"; "You" or "Your" refers to you as a user of the Website and/or as a subscriber, member, or user of the Website or any other offerings of Company that are available through the Website.

This Privacy Policy ("Policy") addresses the kinds of information we collect from you on our Website and our practices for collecting, using, maintaining, protecting, and disclosing that information. We respect your privacy, and we are committed to protecting it through our compliance with the Policy.

The Policy applies to information we collect on the Website when you visit the Website, log in to use the Website, or place an order. It also applies to any information contained in emails, texts, or other communication you may send to us. Except as otherwise described herein, this policy does not apply to other information such as information we may collect through other websites or third parties. Except as otherwise described herein, it also does not apply to information we collected offline or through other websites we operate or through any third party such as affiliate marketers.

Please read the Policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is to not use this Website. By accessing or using the Website, you agree to this Policy. This policy may change from time to time and changes shall be noted at the top of the Policy when made. Continued use of this Website after we make changes is deemed to be acceptance of those changes, so please check the Policy periodically for updates. You must be eighteen (18) years of age or older to use the Website.

What We Collect and How We Collect It.

We may collect your name, physical address, email, phone number, IP address, and other similar personal information ("Personal Identifiable Information"), which you provide in order to sign up for an account or place an order.

We may also collect information about your internet connection, the equipment you use to access our Website, and other usage details directly from you when you provide it to us or automatically as you navigate through the Website. The information we collect on or through our Website such as during registration, correspondence to us, or in a transaction to purchase our products or services.

We may also collect information related to your purchases and payment methods including your billing address, card or other payment method information, and other similar information ("Payment Information"). While we need to collect your card's security code in order to process the payment, we will not store your card's security code. The security code will need to be re-entered each time you place an order. Payments on our Website are processed by Shopify. For more information on data collected by Shopify, please see "Information Collected by Third Parties" below.

With the exception of IP addresses and Payment information as described above, the Website does not knowingly collect information commonly defined as Sensitive Personal Information, including government-issued identifiers, account access credentials combined with access codes or passwords, precise geolocations, or information relating to your racial or ethnic origin, or sexual orientation. We will never ask for your social security number. Do not send us your social security number for any reason.

Cookies.

As you navigate through and interact with our Website, we may use automatic data collection technologies to collect certain information about your equipment, browsing actions, and patterns, including details of your visits to our Website, information about your computer and internet connection, including your operating system, and browser type. ("Non-Personal Information"). In addition to Non-Personal Information described above, Cookies may also collect your IP address. This information is statistical data which we use to improve our Website and deliver better services.

Additionally, our Website is powered by Shopify, which places its own cookies on our Website. Certain cookies are essential in order for the Website to function properly and for you to be able to use the Website. For more information on cookies placed on our Website by Shopify, please review Shopify's cookie policy found here: https://www.whopify.com/legal/cookies#merchant-storefronts

While some cookies are essential for the Website to function properly, other cookies are considered non-essential and will only be used if you opt-in to the use of these cookies. The option to set your cookie preferences will appear as a banner on the bottom of the page when you first access the Website. To update your cookie settings, clear your browser data and then revisit the Website. After clearing your browser data, you will be prompted to make a new cookie preference selection upon your next visit to the Website.

How We Use Your Information.

We use information we collect about you, or that you provide to us, including Personal Identifiable Information to present our Website and its contents to you, to provide you with information, products, or services that you request from us, and to fulfill any other purpose for which you provide it. We also use Personal Identifiable Information to contact you regarding billing, notify you of any changes to our Website or this Policy, and for other purposes to which you consent, which may include but not be limited to email marketing.

How We Store Your Data.

As our website is powered by Shopify, data that is collected will be stored on Shopify servers in accordance with their terms and privacy policies. Data collected by our Website is stored in the United States. Shopify will retain all store-related information, including information about customers, as long as the Website is operational. This information will be deleted by Shopify two years after the closing of the Website. For more information on data collected by Shopify, please see "Information Collected by Third Parties" below.

How We Disclose Your Information.

We may disclose Non-Personal Information about our users without restriction. We may disclose Personal Identifiable Information that we collect or you provide as described in this Policy: to contractors, service providers, and other third parties we use to support our business (and who are bound by their own privacy policies and obligations or who are contractually bound to keep the information confidential); to a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets; to fulfill the purpose for which you provide it; and with your consent.

We may also disclose such Personal Identifiable Information if we are required to comply with any court order, law, or legal process, including to respond to any government or regularly request, to enforce our policies, or if we believe such disclosure is necessary to protect the rights, property, or safety of us, our customers, or others.

Your information may be transferred outside the country, state, province, or jurisdiction in which you reside. Our Company is located in the United States, so any information you provide us will be transferred to and processed in the United States. Additionally, other Third Parties we use to run the Website may be located outside of the United States. For example, Shopify, which powers our Website, is located in Canada. Consequently, information provided to us that will be shared with Shopify may also be transferred to Canada. By using the Website, you consent to the transfer of your data as described herein. For more information on data collected by Shopify, please see "Information Collected by Third Parties" below.

Information Collected by Third Parties.

By using our Website, you agree to have your information collected and processed by the Third Parties listed below. These Third Parties may update their privacy policies from time to time. By continuing to use our Website, you agree to updates or changes made to the privacy policies of these companies.

Shopify: Our Website is powered by Shopify. Therefore, Shopify will also collect certain Personal Identifiable Information and other information about you through your use of the Website. This may include your name, email address, phone number, address, geolocation, IP address, and information relating to the device you use to access the Website, such as your browser and operating system. By using the Website, you consent to this collection and disclosure of the data described in this provision. Any data collected by Shopify is subject to Shopify's privacy policy, which can be found here: https://www.shopify.com/legal/privacy

Meta: Our Website also has imbedded apps from Facebook and Instagram, which are Meta companies. By using these apps in connection with our Website, the following data will be shared with Meta: your name, email address, phone number, physical address, geolocation, and IP address. Meta will also receive data relating to the device you use to access the Website and your browsing session, including your browser, operating system, browsing behavior, and client ID cookie. Information collected by Meta will be subject to Meta's privacy policy, which can be found here: https://www.facebook.com/privacy/policy

Pinterest: Our Website also uses Pinterst as an embedded app. By using Pinterest in connect with our Website, your Personal Identifiable Information may be shared with Pinterest. Information collected by Pinterest will be subject to Pinterest's privacy policy, which can be found here: https://policy.pinterest.com/en/privacy-policy

Flodesk: We use Flodesk primarily for email marketing. By using our Website and entering your information on our Website, certain information may also be collected by Flodesk. This includes your name, email address, phone number, and physical address. Information collected by Flodesk will be subject to Flodesk's privacy policy, which can be found here : https://flodesk.com/legal/privacy-policy

Google Workspace: We use Google Workspace primarily for custom email purposes. Since Google Workspace is integrated with our Website, your information, including Personal Identifiable Information may be shared with Google Workspace. Information collected by Google Workspace will be subject to Google Workspace's privacy policy, which can be found here: https://workspace.google.com/learn-more/security/security-whitepaper/page-6/

hCaptcha: Our Website also uses hCaptcha as an embedded service to enhance our Website's security and your safety. By using hCaptcha in connect with our Website, your Personal Identifiable Information may be shared with hCaptcha. Information collected by hCaptcha will be subject to hCaptcha's privacy policy, which can be found here: https://www.hcaptcha.com/privacy

Accessing and Correcting Your Information.

You can review, change, edit, or delete your Personal Identifiable Information by emailing us at whobrey@whobreythreads.com to request access to, correct, or delete any Personal Identifiable Information that you have provided to us.

Security.

We have implemented measures, such as the use of a certificate issued by Google Trust Services, designed to secure your personal information from accidential loss and from unauthorized access, use, alteration, and disclosure. The safety and security of your information also depends on you. Unfortunately, the transmission of information via the Internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to our Website. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Website. We reserve the right to update, change, or amend our security measures at any time.

Children's Privacy.

This Website is not intended to be used by anyone under the age of eighteen (18). We do not knowingly collect Personal Identifiable Information of anyone under the age of 18. If we become aware that we have received Personal Identifiable Information of anyone under the age of 18, we will take steps to remove the information. If you are a parent or guardian who believes your child has provided us with Personal Identifiable Information, please contact us at whobrey@whobreythreads.com to request the removal of such information.

Do Not Track Signals.

Certain web browsers offer Do Not Track (DNT) features that send signals to websites directing the website not to track user data or information. Please note that there is not a common understanding of the interpretation of the receipt of DNT signals. Therefore, our Website is not equipped to respond or react to these features in any particular way. If you wish to limit the data shared with our Website, please limit the cookies when first visiting our Website or email us at whobrey@whobreythreads.com to request to manually review, change, edit, or delete your information.

Regional Notices.

Residents of certain states, countries, and jurisdictions may be entitled to enhanced data and information protections.

For residents of California. Under the California Consumer Privacy Act (CCPA), California residents have enhanced rights to privacy. At this time, Medora James LLC is claiming an exemption from CCPA compliance as it currently does not meet the criteria as described here: https://oag.ca.gov/privacy/ccpa (under Section A,5). For your convenience, we may still offer features that align with CCPA requirements. The following notice to California residents applies only in the event that we, the Website, or Medora James LLC is found to qualify as a "business," as defined by the CCPA, that must comply with the CCPA.

Under the CCPA, California residents have the following rights:

To opt-out of sales and sharing of personal information and the right to limit certain uses and disclosures of sensitive personal information. To exercise this right, please visit our opt-out page here: https://www.whobreythreads.com/pages/data-sale-opt-out
The right to know what personal information the Website has collected about the individual, including the categories of personal information, the categories of sources from which the information was collected, the business or commercial purpose for collecting, selling, or sharing personal information, the categories of third parties to whom we disclose personal information, and the specific pieces of personal information we have collected about them.
The right to correct inaccurate personal information collected about the individual and maintained by the Website.
The right to request the deletion of personal information collected about the individual, free of charge.
The right to not be subject to discriminatory treatment for exercising the individual's rights under the CCPA.

More detailed information on the data collected can be found above in this policy under "What We Collect and How We Collect It," "How We Use Your Information," "How We Disclose Your Information," and "Information Collected by Third Parties."

To exercise any of these rights, please use the features available on the homepage of the Website, or if not available there, please email us at whobrey@whobreythreads.com and use the subject line CCPA Customer Data Request. You may exercise these rights yourself, or you may designate an authorized agent to make a request on your behalf. If you designate an authorized to make such a request, please provide a valid power of attorney document.

To protect your privacy, we will verify your identity before processing any data access, correction, or deletion requests. In certain cases, we may need to collect additional information to verify your identity, such as your email address, purchase history, or account details.

For residents of Virginia and other states. Other states have enacted laws that similarly provide enhanced protections, including the right to access, correct, or delete data stored about the individual. Individuals may also have the right to opt out of the sale or personal information, targeting advertising, or other similar practices.

To exercise any of these rights, please use the features available on the homepage or the footer of the Website, or if not available there, please email us at whobrey@whobreythreads.com and use the subject line Customer Data Request.

For residents of the European Economic Area. Please note that at this time, we only offer shipping within the United States. Therefore, this Website is intended to be used by individuals located within the United States. However, we acknowledge that the accessibility of the Internet makes it possible for those outside the United States to access this Website. The following applies only to the extent that we are required to comply with the General Data Protection Regulation.

We are the data controller of your information, and the data we collect is stored in the United States. Third parties such as Shopify and Meta are separate and independent controllers of your information collected through their embedded services. However, our Website is powered by Shopify, and consequently, international data transfers may occur between the European Economic Area (EEA) and other jurisdictions where Shopify and its affiliates are located. Transfers are made under Standard Contractual Clauses, as defined in the Shopify privacy policy, approved by the European Commission. For more information on how Shopify processes data, please visit: https://www.shopify.com/legal/privacy and https://www.shopify.com/legal/dpa

If you are a resident of the European Economic Area (EEA), Switzerland, or the United Kingdom, under the General Data Protection Regulation (GDPR), Medora James LLC's legal basis for processing and using personal information as described in this privacy policy derives from the following:

To provide goods and services to you as described in this policy
Any consent or permission you have given to us
To extent to which processing is necessary to make our Website safe and to improve its functionality
For the purpose of processing payments
To comply with applicable laws

Subject to certain limitations and your country of residence, you may have the following rights:

Right to be information. This includes being informed about the purposes for processing your information, the legal basis for such processing, the identity of the controller, the contact details of the controller, the contact details of the data protection officer (if applicable), the recipients or categories of recipients of the data, information as to where data will be transferred outside the EEA, the categories of personal data processed, or other information.
Right of access. You are able to access the information the Website has about you free of charge.
Right of rectification. You can request to rectify information about you that is inaccurate, incomplete, or not up to date.
Right to erasure. You can request that your data be deleted from our Website, subject to the limitations provided by the GDPR and the Website's on-going legal obligations.
Right to restriction of processing. Request that we restrict the processing of your Personal Information.
Right to data portability. You can request a copy of information we have relating to you in a machine-readable and commonly used format, free of charge.
Right to object. You can object to our processing of your Personal Information.
Right to not be subject to a decision based solely on automated processing. If you submit a request to exercise any of rights described herein, you will receive a response from an actual human, not an automated response.

You can access or update your information at any time from your account settings. To request to update or access of any information not found in your account settings, or to delete your information, please email us at whobrey@whobreythreads.com, and please use the subject line GDPR Customer Data Request.

Changes to Our Privacy Policy.

It is our policy to post any changes we make to our Privacy Policy on this page with a notice that the privacy policy has been updated on the Website home page. If we make material changes to how we treat our users' personal information, we will notify you by email to the email address specified in your account or through a notice on the Website home page. The date the privacy policy was last revised is identified at the top of the page. You are responsible for ensuring we have an up-to-date, active, and deliverable email address for you, and for periodically visiting our Website and this Policy to check for any changes.

Contact Information:

To ask questions or comment about this Privacy Policy or our privacy practices, contact us at: whobrey@whobreythreads.com.