Privacy policy

PRIVACY POLICY
Effective / last updated: September 23, 2026

His Threads Co. LLC (“His Threads Co.,” “the Store,” “we,” “us,” or “our”) operates histhreadsco.com and related shopping, checkout, account, and customer-support services (the “Services”). This Privacy Policy describes how the Store collects, uses, discloses, and protects personal information.

The Store—not any individual owner, member, employee, or contractor personally—is the operator of the Services and the party responsible for the practices described here. This Policy is for the Store only. It does not cover Shopify, Printful, Meta Platforms, Klaviyo, our size-guide app (Kiwi Size Chart), payment networks, carriers, or other independent companies, each of which has its own policy.

By visiting the Site, creating an account, placing an order, contacting us, or otherwise using the Services, you acknowledge this Policy. If you do not agree, do not use the Services.

This Policy is not a contract that expands your rights beyond applicable law. We honor the rights the law actually gives you based on where you live and whether a statute applies to this Store. Naming a practice here does not mean every U.S. comprehensive privacy law applies to us.

1. Who we are

Operator: His Threads Co. LLC
Website: https://histhreadsco.com
Privacy contact: hello@histhreadsco.com

We sell made-to-order Christian apparel and related products. Production and shipping are fulfilled by Printful, LLC and its affiliated print facilities and logistics partners (“Printful”). The storefront, checkout, payments infrastructure, and many store features are provided by Shopify. We advertise on Meta platforms (Facebook and Instagram) and use the Meta Pixel on the Site. We use Klaviyo to send marketing email and SMS, including a store popup that may offer a discount (currently 15%) if you submit your email and/or mobile number. We may use a size-guide app (for example Kiwi Size Chart) so shoppers can view garment measurements on a product page.

We do not publish a residential address in this Policy. For privacy requests, use the email above.

2. Information we collect

We collect only what is needed to run the Store, fulfill orders, meet legal duties, protect the business, and measure ads.

Information you provide

  • Identifiers and contact details: name, email address, phone number (if you give one), billing address, shipping address
  • Order and commercial information: products, sizes, design/sku details, price, discounts, gift notes, returns, refunds, cancellations
  • Account information: login credentials managed through Shopify customer accounts, preferences, saved addresses
  • Communications: support messages, reviews, form submissions, email/SMS opt-in details
  • Marketing preferences: email/SMS signup through a popup or form, unsubscribe, STOP, and the discount or offer tied to that signup

Do not send us Social Security numbers, government ID images, bank account numbers, or other highly sensitive data by email. We do not need them to sell apparel.

Information collected automatically

When you visit or use the Services, Shopify, Meta, our size-guide app, and other providers may collect:

  • Device and browser type, operating system, language
  • IP address and approximate location derived from IP
  • Referring URL, pages viewed, clicks, time on site, checkout events
  • Cookie, pixel, and similar identifiers (including the Meta Pixel)
  • Fraud- and security-related signals

Payment information

Card and wallet payments are processed by Shopify Payments and/or other payment processors. We do not store complete card numbers, CVV codes, or full payment credentials on Store-owned systems.

Information from service providers

We may receive order status, shipment tracking, payment confirmation, fraud scores, deliverability data, and similar records from Shopify, Printful, Klaviyo, carriers, and payment processors.

Information we do not intentionally collect

We do not intentionally collect biometric identifiers, precise GPS location, health data, or government identifiers. Product titles and designs may reflect faith-based themes. We treat that content as order data for fulfillment—not as a profile of your religion, beliefs, or sensitive characteristics.

3. How we use information

We use personal information to:

  • Create and manage accounts and checkout
  • Process payments and prevent fraud, chargebacks, and abuse
  • Transmit orders to Printful and carriers so products can be printed, packed, and delivered
  • Send transactional messages (order, shipping, delay, return, and support notices)
  • Provide customer service and resolve disputes
  • Maintain security, debug, and improve the Store
  • Keep tax, accounting, and legal records
  • Comply with law, lawful requests, and platform rules
  • Send marketing email or SMS only where you have opted in or the law otherwise allows
  • Run and measure Meta (Facebook and Instagram) ads, including through the Meta Pixel and related Conversions tools
  • Send marketing email and SMS through Klaviyo, including welcome/discount messages, abandoned-cart reminders, and similar campaigns if you opted in
  • Show a size guide on product pages

We do not require marketing consent as a condition of purchase.

Legal bases that may apply, depending on your location: performance of a contract (your order), legitimate interests in operating and securing a small retail store and measuring ads, compliance with legal obligations, and consent where we ask for it (for example, optional marketing or non-essential cookies).

4. How we disclose information

We do not sell personal information for money. We disclose information only as needed to operate the Store, as required by law, or as described below.

Printful (fulfillment)

To produce and deliver made-to-order items, we share with Printful and its affiliated facilities the information required to print, pack, and ship, which typically includes name, shipping address, contact details as needed for delivery, and order/product specifications. Printful acts as a service provider / processor for that fulfillment purpose. Printful’s practices are described in Printful’s own privacy policy.

Shopify and store infrastructure

Shopify hosts the Store and processes store, checkout, account, and related data as described in Shopify’s privacy policy and merchant terms. Shopify may also match or use certain data to provide Shopify services you or we enable (checkout, Shop, payments, fraud tools, analytics).

Meta ads and the Meta Pixel

We run advertising on Meta platforms (including Facebook and Instagram) and use the Meta Pixel and related Meta events/Conversions tools on the Site.

Those tools can send Meta identifiers and event data such as pages viewed and items viewed; add-to-cart and checkout steps; purchase confirmation and order value; cookie, device, and IP-derived data; and hashed contact details if a matching tool is enabled.

Meta uses that information under Meta’s own privacy policy to deliver, measure, and improve ads, including ads on other websites and apps. Under some U.S. state laws, this is “sharing” or a “sale,” even though we are not paid cash for a customer list.

Meta is an independent company. We do not control Meta’s systems. See: https://www.facebook.com/privacy/policy

Other advertising or analytics tools may be added later; they will be treated the same way unless we update this Policy.

Klaviyo (email and SMS)

If you enter your email or mobile number in a Store popup or form—including one that offers a discount such as 15% off—we send that information to Klaviyo, Inc. so we can deliver the offer and later marketing messages. Klaviyo may also receive Shopify store events tied to that profile (for example viewed products, checkout started, or purchase) so messages can be timed.

The discount is an optional incentive for joining the list. You can buy without joining. Joining is not required to complete a purchase at the regular price.

Klaviyo is an independent company. We do not control Klaviyo’s systems. See: https://www.klaviyo.com/legal/privacy/privacy-notice

Size-guide app (Kiwi Size Chart)

If we enable a size-guide app, it may receive device type, IP, approximate location, browser information, and product data so it can show the correct chart and units (inches vs. cm). It may also receive limited order or catalog data needed to attach a chart to a product. We do not use that app to sell your information.

Kiwi is an independent company. We do not control Kiwi’s systems. See the developer’s privacy policy linked from the Shopify App Store listing for Kiwi Size Chart.

Other service providers

We may use providers for payments and fraud screening; shipping and delivery; email and SMS (including Klaviyo); size guides; customer support; analytics and security; and accounting, legal, insurance, and professional advisers bound to confidentiality.

These parties may process personal information only to provide their services to us, except where they are independent controllers of their own platforms (for example, Meta, Klaviyo, a carrier’s tracking portal, or a payment network).

Legal, safety, and business transfers

We may disclose information if we believe in good faith it is necessary to comply with law, legal process, payment-network rules, or government request; enforce our Terms, investigate fraud, or protect the Store, customers, or others; or transfer information as part of a merger, financing, LLC interest transfer, asset sale, or similar transaction involving the Store—subject to this Policy or a successor policy.

We do not authorize fulfillment or support providers to use Store customer data to market their own products to our customers, except as needed to provide the contracted service.

5. Cookies, pixels, and similar technologies

We and our providers use cookies and similar technologies for essential store and checkout functions; preferences and account session; security and fraud prevention; analytics; Meta Pixel / Meta ads measurement and targeting; and size-guide display.

Essential cookies are needed for checkout and security. The Meta Pixel is not essential. You can control cookies in your browser. Blocking essential cookies may break checkout. Blocking the Meta Pixel may not stop all Meta ads.

Where a cookie or privacy banner is shown on the Site, non-essential tools (including the Meta Pixel) are intended to follow that choice. If you visit from the EU, UK, or EEA, use the banner if displayed, or email us to object to non-essential cookies. We do not claim this Policy alone is a GDPR cookie-consent mechanism.

We recognize a legally valid Global Privacy Control (GPC) signal as a request to opt out of “sale” / “sharing” / targeted advertising for that browser or device. If we can reliably tie that device to a Shopify customer account, we will apply the request to the account as well. We do not respond to unstructured “Do Not Track” signals.

Shopify cookies: https://www.shopify.com/legal/cookies
Meta cookies / ads: https://www.facebook.com/privacy/policies/cookies

6. U.S. state privacy disclosures (sale / share)

Some state laws (for example California’s CCPA/CPRA and similar laws in other states) define “sale” and “share” broadly to include certain advertising and cross-context behavioral advertising disclosures, even when we are not paid cash for a list of names. Those laws apply only if their thresholds and other conditions are met. We provide the choices below so customers can opt out of targeted advertising whether or not a particular statute applies.

  • We do not sell personal information for money.
  • We share the following with Meta for advertising, measurement, and ad delivery. We may also share the same categories with other advertising or analytics partners if those tools are added.

Categories shared with Meta (and other ad/analytics partners if used):

  • Identifiers — cookie/device ID, IP, and email or other contact details if an ad-matching tool is enabled; not your SMS opt-in list
  • Commercial information — products viewed or purchased, order value
  • Internet / usage data — site events, pages, checkout and purchase events
  • Approximate geolocation — location derived from IP

Categories we may disclose to service providers (not for their independent marketing): identifiers, commercial/order information, internet/usage data, approximate geolocation, and customer-support content. Klaviyo receives email, phone, signup source, and related store events as a service provider to send our messages—not to sell your list as its own product.

If we use a size-guide app, it may see device type, IP, approximate location, browser information, and product data so it can show the chart and units (inches vs. cm). We do not use that app to sell your information.

We do not have actual knowledge that we sell or share personal information of consumers under 16.

We do not use or disclose sensitive personal information to infer characteristics about you. Faith-themed product names exist only to describe the item you ordered.

7. Sensitive information and Christian product data

Orders may include Christian or Scripture-themed product names. That is transactional merchandise data. We do not build belief, denomination, or political profiles from purchases; sell religious inferences; or send Scripture or belief profiles to Meta as a separate sensitive-data category.

If a law treats purchase of faith-themed goods as sensitive, we process that data to fulfill your order, prevent fraud, keep required records, and handle returns. Meta may still receive product or purchase events through the Pixel as described in Section 4.

8. Your choices and rights

Depending on where you live and whether a privacy statute applies to this Store, you may have some or all of the following rights, subject to legal exceptions: access / know; correct; delete; portability; opt out of sale, sharing, or targeted advertising; limit use of sensitive personal information; appeal a denied request where the law requires an appeal; and withdraw marketing consent.

Do Not Sell or Share / Your Privacy Choices: Use the “Your Privacy Choices,” “Do Not Sell or Share My Personal Information,” or similar link in the Site footer when Shopify displays it. You may also use a browser GPC signal (Section 5) or email hello@histhreadsco.com with the subject “Do Not Share / Opt Out of Targeted Ads.” Email is a backup. The on-site link and GPC are the primary opt-out methods for targeted ads.

Marketing email (Klaviyo): If you submit your email for a discount or newsletter, we send welcome/offer mail and later marketing through Klaviyo. Use the unsubscribe link in any email. Transactional order and shipping messages may still be sent.

SMS (only if you opted in): If you submit your mobile number—including in a popup that offers a discount—you agree to receive recurring automated marketing texts from His Threads Co. Consent is optional and is not a condition of purchase at the regular price. Message frequency varies. Message and data rates may apply. Reply STOP to end and HELP for help. The popup or form at signup is the consent record; this Policy only describes that program.

Mobile information and SMS consent (carrier requirement): We will not share your mobile information or opt-in consent with third parties or affiliates for their marketing or promotional purposes. Text-messaging originator opt-in data and consent will not be shared with third parties for those purposes. We use a text platform only to send His Threads Co. messages you signed up for. Carriers and that platform may process numbers as needed to deliver texts, stop requests, and comply with law. Mobile numbers collected for SMS are not sold. We do not send Meta or other advertisers a list that identifies who opted into SMS. A phone number given at checkout or used by an ad-matching tool may still be hashed for ad measurement as described in Section 6. That is not a transfer of SMS consent.

Meta ads / targeted advertising (additional controls):

Opting out of Meta targeting does not stop all ads. You may still see generic or contextual ads. Meta may continue to process data under its own policy for its own purposes.

Other privacy requests: Email hello@histhreadsco.com with the subject “Privacy Request.” Tell us which right you want to exercise and the email used on the order or account.

We may require reasonable identity verification (for example matching the request to an order email or account). If an authorized agent writes on your behalf, we may require signed permission and may still verify you directly. We may deny requests that are unfounded, excessive, legally exempt, or that we cannot verify. We will not discriminate against you for exercising rights the law gives you.

Deletion does not apply to information we must keep for orders already sent to Printful, tax and accounting records, chargebacks, fraud prevention, security, or other legal duties. Printful, Meta, and carriers may retain records under their own policies.

9. Retention

We keep information while it is needed for the purposes in this Policy, then delete or de-identify it when reasonably practicable. That includes open orders and accounts, returns and chargebacks, tax and accounting, security, and legal holds. U.S. tax and order records are commonly kept about 7 years. Klaviyo marketing contacts are kept until you unsubscribe, reply STOP, or we close the list. Klaviyo may retain its own logs under its policy.

We do not run a separate automatic deletion clock on Shopify’s or Printful’s systems. Those providers may retain order and fulfillment records under their own policies. Meta Pixel events are retained by Meta under Meta’s policy. Backups may take additional time to cycle.

10. Security

We use reasonable administrative, technical, and organizational safeguards appropriate for a small online apparel store, including relying on Shopify, Printful, and Meta security for systems they control.

No method of transmission or storage is fully secure. We do not guarantee perfect security. Do not send payment card numbers or other highly sensitive data to hello@histhreadsco.com. Information sent over email or SMS may not be encrypted end-to-end.

You are responsible for keeping account credentials confidential.

11. Children

Two different age rules apply:

  • COPPA: The Services are not directed to children under 13. We do not knowingly collect personal information from children under 13. Parents or guardians who believe we received a child’s information should email hello@histhreadsco.com. We will delete it as required, except where law requires retention.
  • State “sale/share” rules: We do not have actual knowledge of selling or sharing personal information of anyone under 16.

You must be 13 or older to use the Store on your own behalf. If you are under 18, a parent or guardian must be involved. The Services are not a kids’ store.

12. International visitors

The Store is operated from the United States and is aimed primarily at U.S. customers. If you order from outside the United States, your information will be processed in the United States and in other countries where Shopify, Printful, Meta, Klaviyo, carriers, or other providers operate.

Those countries may not provide the same legal protections as your home country. By ordering, you understand that transfer. Where a provider offers Standard Contractual Clauses or another approved transfer tool, that provider—not the Store—administers it for systems the provider controls.

If you are in the EU, UK, or EEA and believe we must treat a request under GDPR or UK GDPR, email hello@histhreadsco.com. We will consider the request in light of whether those laws apply to this Store.

13. Third-party websites and apps

The Services may link to Shopify, Printful, Meta (Facebook/Instagram), Klaviyo, our size-guide app, carriers, or other sites we do not control. Their privacy practices are their own. This Policy does not apply to them.

14. Changes

We may update this Policy by posting a revised version with a new “Last updated” date whenever our practices, providers, or legal duties change. Material changes take effect when posted, or later if the law requires notice. Continued use of the Services after an update means you accept the revised Policy to the extent permitted by law. Check this page when you shop; the posted date is the official version.

15. Contact and complaints

His Threads Co. LLC
Email: hello@histhreadsco.com
Web: https://histhreadsco.com

Send privacy questions and requests to the email above. We will handle them as the Store. Do not send legal process or privacy requests to any individual personally unless a court requires it.

If your law gives you a right to complain to a data protection authority, you may do so after contacting us first so we can try to resolve the issue.

16. Additional limits

To the maximum extent permitted by law:

  • This Policy describes practices; it does not create extra warranties or duties beyond applicable privacy statutes and our Terms of Service.
  • Shopify, Printful, Meta, Klaviyo, our size-guide app (Kiwi Size Chart), payment processors, and carriers are separate organizations. We are not responsible for their independent systems, outages, or policy changes.
  • Our aggregate responsibility arising out of privacy or data practices is limited as stated in our Terms of Service, except where a statute forbids that limit.
  • Members, managers, and owners of His Threads Co. LLC are not personally responsible for Store data practices except where the law expressly imposes personal liability that cannot be waived.

If any part of this Policy is unenforceable, the rest remains in effect.