1. Information we collect
We collect information you provide when you create an account, place an order, join a membership, download a design, contact support, submit a review, or use a website tool. This may include your name, email address, country, account credentials, order details, download history, support messages, and files or artwork you intentionally upload.
We may also receive technical information such as IP address, browser type, device information, referring page, session identifiers, security events, and website activity needed to operate, protect, and troubleshoot the store.
2. Payment information
Payments may be processed by Stripe, PayPal, or another payment provider shown at checkout. Card and payment-account credentials are entered into the payment provider’s secure interface. Embroidery Family does not store complete card numbers, card security codes, or PayPal passwords. We may receive payment status, transaction identifiers, payer email, billing country, limited payment-method details, and fraud-prevention signals.
3. How we use information
- Provide accounts, carts, orders, memberships, digital downloads, receipts, and customer support.
- Confirm payments, prevent fraud, secure accounts, and enforce download or licensing limits.
- Respond to technical questions about embroidery formats, sizes, hoops, and purchased files.
- Maintain and improve the website, catalog, search, product tools, and customer experience.
- Send service messages and, where permitted, marketing communications that you can opt out of.
- Meet accounting, tax, legal, dispute, and payment-network obligations.
4. Email verification and marketing consent
We may send one-time verification codes, password resets, order receipts, download links, account security notices, and membership messages because they are necessary to operate your account and purchases. Marketing emails are optional, require consent, and include an unsubscribe method. We record subscription status, confirmation time, source, and a privacy-preserving network identifier to document consent and prevent abuse.
5. Social sign-in
If you choose Continue with Google or Continue with Facebook, the selected provider authenticates you and may share a provider-specific account identifier, your name, email address, profile picture, and related login information that you authorize. We use that information to create or connect your store account, keep you signed in, prevent duplicate accounts, and protect account access. We do not receive or store your Google or Facebook password. Social-login accounts are treated as verified because the identity provider authenticated the sign-in. You can request deletion of the store account and linked social-login identifiers through our Data Deletion page.
6. Cookies and similar technologies
Essential cookies and server sessions keep your cart, login, security token, checkout state, preferences, and downloads working. Optional analytics or advertising technologies should only be enabled where the required notice or consent has been provided. Blocking essential cookies may prevent parts of the store from working.
7. When information is shared
We may share only the information reasonably necessary with service providers that support the store, including hosting, email, security, analytics, cloud storage, Stripe, PayPal, and other payment or technical providers. We may also disclose information when required by law, to protect customers or the website, to investigate fraud or infringement, or as part of a legitimate business transfer.
8. Data retention
We retain information for as long as reasonably necessary to provide the service, maintain download and licensing records, handle support and disputes, prevent abuse, and satisfy accounting or legal requirements. Retention periods vary by record type. Eligible information may be deleted or anonymized when it is no longer needed.
9. Security
We use reasonable administrative and technical safeguards, including encrypted HTTPS connections where configured, password hashing, access controls, secure payment providers, and monitoring. No online service can guarantee absolute security, so customers should use a unique password and notify us promptly of suspected unauthorized access.
10. Your privacy choices
Depending on applicable law, you may request access, correction, deletion, restriction, or a copy of eligible personal information. You may also object to certain processing or withdraw marketing consent. Some transaction, licensing, fraud-prevention, and legal records may need to be retained.
11. International processing
Our customers and service providers may be located in different countries. Information may therefore be processed outside your country, subject to the safeguards and legal requirements applicable to the service provider and transaction.
12. Children
The store is not intended for children who cannot legally enter into online purchases in their jurisdiction. We do not knowingly request personal information from children for independent commercial use.
13. Updates and contact
We may update this policy when the store, providers, or legal requirements change. The updated date will be shown above. Questions or privacy requests can be sent through the contact page or by email.