Your information, handled with care.

When you place an order: your name, shipping and billing address, email, phone (if provided), and the items you bought. Payment card details go directly to Shopify and the payment processors Shopify partners with — we never see or store your full card number.

When you write to us through the contact form: your name, email, and the message you send. When you sign up for the newsletter (if enabled): just your email.

Automatically when you visit: standard server logs (IP address, browser type, pages visited) and a small set of cookies that keep the cart working and let us see traffic patterns.

To process and ship your order, send order confirmations, reply to your messages, prevent fraud, comply with the law, and improve the site. We don't sell your information to anyone.

Only the providers we need to actually run the studio:

• Shopify — storefront, checkout, payment processing, and order management.
• Resend — sending transactional and contact-form emails.
• Vercel — hosting the website.
• Shipping carriers — USPS, UPS, FedEx, etc., to deliver your order.

We may also share information when required by law (subpoena, court order) or to protect our rights, our customers, or the public.

We use cookies that are strictly necessary (cart persistence, theme preference) and basic analytics cookies. You can disable cookies in your browser, but the cart will not persist between visits.

Order records: as long as required for accounting and tax purposes (typically seven years in the US). Email correspondence: as long as we may need it to support you. Newsletter subscribers: until you unsubscribe. Server logs: a short rolling window for debugging.

Depending on where you live, you may have the right to access, correct, delete, or export the information we hold about you, and to object to certain uses of it. California residents have specific rights under the CCPA. Email khaasstorey@gmail.comto make a request and we'll respond within a reasonable time.

We never sell personal information, so there is nothing to opt out of in that regard.

The site isn't directed at children under 13, and we don't knowingly collect their information. If you're a parent or guardian and believe your child has shared information with us, email us and we'll delete it.

We use industry-standard providers (Shopify, Vercel, Resend) and their security infrastructure. No system is perfectly secure, but we take reasonable steps to protect your information.

If we materially change how we handle information, we'll update this page and bump the “last updated” date at the top. Significant changes may be announced by email if we have your address.

Questions or requests about your information? Write to the studio or email khaasstorey@gmail.com.