Privacy Policy

Sarah Express (“Sarah Express”, “we”, “us”, or “our”) operates this website, our Shopify-powered commerce services, customer account experiences, and related products, features, support channels, and tools (collectively, the “Services”). This Privacy Policy explains how we collect, use, disclose, and protect personal information when you interact with our Services.

1. Personal Information We Collect

Depending on how you interact with us, we may collect:

• Contact information: name, email address, phone number, billing address, and shipping address.
• Order and commerce information: cart contents, products purchased, order history, shipping and tracking information, returns, claims, cancellations, discounts, and Store Credit activity.
• Payment-related information: payment method type, transaction confirmations, billing-related details, and fraud-risk signals. Full card details are processed by payment providers rather than stored on our WordPress storefront servers.
• Account and authentication information: account identifiers, sign-in information, preferences, and settings.
• Customer support information: messages, emails, photos, attachments, and information you provide when requesting assistance.
• Device and technical information: IP address, browser and device information, operating system, approximate location derived from network information, referral source, and similar technical data.
• Usage and marketing information: pages and products viewed, search and browsing activity, interactions with emails or advertisements, and campaign attribution information.

2. How We Collect Information

• Directly from you when you place an order, create or access an account, contact us, submit a form, join marketing, or exercise a privacy right.
• Automatically through cookies, pixels, logs, analytics, and similar technologies, subject to applicable consent requirements.
• From service providers and partners such as Shopify, payment providers, fraud-prevention providers, advertising and analytics platforms, fulfillment and logistics providers, and shipping carriers.

3. How We Use Personal Information

We may use personal information to:

• Process payments, orders, fulfillment, shipping, tracking, claims, refunds, and Store Credit.
• Authenticate customer accounts and maintain account functionality.
• Provide customer support and respond to requests.
• Operate, secure, troubleshoot, personalize, and improve our Services.
• Prevent and investigate fraud, abuse, chargebacks, unauthorized activity, or security incidents.
• Send transactional messages such as order confirmations, shipping updates, account notices, and support communications.
• Send marketing communications where permitted by law and according to your preferences.
• Measure website use, advertising performance, and campaign effectiveness.
• Comply with legal obligations and enforce our agreements and policies.

4. How We Disclose Personal Information

We may disclose personal information to categories of recipients that help us operate the Services, including:

• Commerce platform providers, including Shopify.
• Payment and fraud-prevention providers.
• Fulfillment, logistics, and shipping partners that prepare, route, track, and deliver orders.
• Analytics and advertising partners such as Google, Meta, Pinterest, TikTok, or similar services when used by us.
• Technology and support vendors such as hosting, email, security, customer-service, and cloud providers.
• Legal or regulatory authorities when disclosure is required or reasonably necessary to protect rights, safety, customers, or the business.
• Business transaction parties in connection with a merger, financing, restructuring, acquisition, or sale of assets.

We do not sell personal information for money. However, some advertising, analytics, or cross-context behavioral advertising activities can be treated as a “sale” or “sharing” under certain privacy laws.

5. Fulfillment & International Processing

To fulfill and deliver orders, we may share the information reasonably needed for fulfillment—such as your name, shipping address, phone number, email address, and order details—with fulfillment, logistics, and shipping providers. These providers may process information in countries other than your own.

6. Cookies & Similar Technologies

We use cookies, pixels, tags, local storage, and similar technologies for essential site functions, security, preferences, analytics, and advertising.

Where consent is required by law, non-essential analytics, advertising, or preference technologies should be used only after the required consent choice is obtained through the available privacy or cookie controls.

For more information, see our Cookie Policy.

7. Legal Bases for Processing

Where applicable, we rely on one or more lawful bases, including consent, performance of a contract, compliance with legal obligations, and legitimate interests that are not overridden by your rights and freedoms.

8. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including providing Services, maintaining business and tax records, resolving disputes, preventing fraud, and complying with legal obligations.

• Order and transaction records: may typically be retained for up to 7 years where reasonably needed for tax, accounting, legal, or dispute purposes.
• Customer support records: retained as reasonably needed to resolve issues and maintain service history.
• Marketing information: retained until you unsubscribe, opt out, or the information is no longer reasonably needed, subject to legal exceptions.
• Account information: retained while the account is active and for a reasonable period afterward, subject to applicable deletion rights and legal requirements.

9. Your Privacy Rights

Depending on where you live, you may have rights to access, know, correct, delete, or obtain a portable copy of certain personal information; withdraw consent; object to or restrict certain processing; and opt out of targeted advertising or certain data sharing.

To exercise a privacy right, email support@sarahexpress.com, use our Contact Page, or review our Your Privacy Choices page. We may need to verify your identity before completing a request.

10. California & U.S. State Privacy Rights

Residents of California and certain other U.S. states may have additional rights under applicable privacy laws, including rights to know, access, correct, delete, and opt out of certain sale, sharing, targeted advertising, or profiling activities.

We do not discriminate against you for exercising an applicable privacy right. Where our privacy tooling receives a legally recognized browser-based opt-out preference signal, such as Global Privacy Control (GPC), we treat it in accordance with applicable law and the capabilities of the technology receiving that signal.

See Your Privacy Choices — Do Not Sell or Share My Personal Information for available request methods.

11. EEA & UK Privacy Rights

If you are in the European Economic Area or United Kingdom, you may have additional rights under applicable data-protection law, including rights to access, correction, deletion, portability, restriction, objection, withdrawal of consent, and to lodge a complaint with an applicable supervisory authority.

12. International Data Transfers

Your information may be processed in countries other than the country where you live. Where required, appropriate safeguards may be used for international transfers, including contractual or other lawful transfer mechanisms.

13. Third-Party Sign-In

Sarah Express may offer third-party sign-in methods, such as Google or Facebook, as optional ways to authenticate a customer account.

When you use a supported sign-in provider, we may receive basic account information made available for authentication, such as your name, email address, profile identifier, and other information necessary to create or link your Sarah Express account.

We use this information for authentication and account operation. We do not request access to unrelated Google or Facebook content such as private messages, friends, Gmail, Google Drive, or Google Calendar solely through these sign-in features.

If you used Facebook Login and want information associated with that sign-in removed, see our Facebook Sign-In Data Deletion page.

14. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. No internet transmission or storage system can be guaranteed to be completely secure.

15. Children’s Privacy

Our Services are not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided personal information to us, contact us so we can review the request.

16. Third-Party Services & Links

Our Services may link to or integrate with third-party websites, platforms, payment providers, social networks, or applications. Their privacy practices are governed by their own policies.

17. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our Services, technology, business practices, or legal requirements. The current version will be posted on this page, and our website may display the date it was last updated.

18. Contact Us

Email: support@sarahexpress.com
Phone: +1 234-345-0067
Mailing Address: Sarah Express, 1200 E Market Street, Suite 1243, Akron, OH 44305, United States

For purposes of applicable data-protection laws, Sarah Express acts as controller of personal information where the law assigns that role to us, except where another party independently acts as controller.