Privacy policy

Text version

Last updated September 24, 2026

What personal data we collect, why, how long we keep it, and the rights you have over it.

1. Who is responsible for your data

For any privacy request, write to contact@sorrelhouse.com.

2. What we collect and why

Category	Examples	Why	How long
Identity and contact	Name, email, phone	Fulfil and deliver your order	7 years, accounting
Delivery	Shipping and billing address	Ship your order, calculate tax	7 years, accounting
Order	Items, amount, date	History, returns, support	7 years, accounting
Payment	Card brand, last four digits	Match a payment to an order	7 years; we never see the full number
Technical	IP, browser, device, pages viewed	Security, fraud, performance	13 months
Marketing	Email, consent, opens and clicks	Send what you asked for	Until you unsubscribe
Support	Emails and messages	Answer your request	3 years after last contact

3. What we never collect

Card numbers go directly to our payment processor and never touch our systems. We do not collect health data, and we do not knowingly collect data from anyone under 13.

4. Who we share it with

We share only what a partner needs to do its job, and we never sell your personal information.

Shopify Inc., 151 O'Connor Street, Ground floor, Ottawa, ON K2P 2L8, Canada, our store platform, and the payment processors offered at checkout.
Our suppliers, fulfillment partners and carriers, to prepare and deliver your parcel. Some of them process data outside the United States and receive only your name and shipping address.
Our email tools, for order notifications and, with your consent, marketing.
Analytics and advertising partners such as Google and Meta, to measure visits and ads, unless you opt out.
Authorities, when the law requires it.

5. Cookies

The store uses strictly necessary cookies for the cart, checkout and security, and, with your choice where the law requires it, analytics and marketing cookies. You can refuse the ones that are not essential from the cookie banner or the Your privacy choices link in the footer. We honor the Global Privacy Control signal as an opt out of sale and sharing.

6. Your rights

Wherever you live, you can ask for a copy of your data, its correction or deletion, or object to its processing. We answer within thirty days and never treat you differently for exercising a right.

7. California and other US states

California residents have the rights to know, delete, correct, limit the use of sensitive information and opt out of sale or sharing under the CCPA and CPRA. We do not sell personal information for money; some advertising tools can count as "sharing", and you can opt out at any time from Your privacy choices. Residents of Virginia, Colorado, Connecticut, Utah, Texas and other states with privacy laws have comparable rights, including an appeal. Email contact@sorrelhouse.com and tell us your state.

8. Security and marketing

The site runs over HTTPS and access to customer data is limited to those who need it. If a breach affects your data, we notify you as the law requires. Marketing emails are sent only if you asked for them, and each carries a one-click unsubscribe that we honor immediately.