Privacy policy
1. INTRODUCTION
Welcome to Stathe. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at www.stathe.com (the "Site") or make a purchase from us.
Who We Are:
Stathe is a women's luxury fashion brand creating timeless foundation pieces with responsible craftsmanship. We are based in Key Biscayne, Florida and sell exclusively direct-to-consumer online.
What This Policy Covers:
This Privacy Policy applies to all information collected through our Site, as well as any related services, sales, marketing, or events (collectively, "Services").
Your Consent:
By using our Site, you consent to the collection and use of your information as described in this Privacy Policy. If you do not agree with our policies and practices, please do not use our Site.
2. CONTACT INFORMATION
If you have questions or concerns about this Privacy Policy or our privacy practices, please contact us:
Stathe
7 Turtle Walk
Key Biscayne, FL 33149
United States
Email: privacy@stathe.com
General Inquiries: orders@stathe.com
Phone: 305-793-6013
For California Residents (CCPA Requests):
Email: privacy@stathe.com
Subject Line: "CCPA Request"
Or visit: www.stathe.com/pages/ccpa-opt-out
For European Residents (GDPR Requests):
Email: privacy@stathe.com
Subject Line: "GDPR Request"
3. INFORMATION WE COLLECT
We collect information about you in various ways when you use our Services.
3.1 INFORMATION YOU PROVIDE TO US
Account and Order Information: Full name, email address, phone number, billing address, shipping address, payment information, order history
Newsletter and Marketing: Email address when you sign up for our newsletter (to receive 10% off your first order), communication preferences
Customer Support: Information you provide in emails, messages, or other communications, order numbers and details related to support requests
Account Creation: Username and password, account preferences and settings, wishlist items
3.2 INFORMATION COLLECTED AUTOMATICALLY
Device Information: IP address and general location, browser type and version, device type, operating system, screen resolution, time zone setting, referring website/source, unique device identifiers
Browsing Activity: Pages visited and time spent on pages, products viewed and searched, items added to cart, links clicked, search queries, date and time of visits, session duration
Technical Information: Cookie data, web beacons, pixels, and tags, log files and server data
3.3 INFORMATION FROM THIRD PARTIES
We may receive information from social media platforms, advertising platforms, fraud prevention services, and analytics providers.
4. HOW WE USE YOUR INFORMATION
4.1 TO PROVIDE OUR SERVICES
Process and fulfill orders, send order communications, provide customer support, manage your account
4.2 TO IMPROVE YOUR EXPERIENCE
Personalize your experience, analyze website usage, optimize performance, conduct research
4.3 FOR MARKETING AND COMMUNICATIONS
Send promotional emails, newsletter delivery, abandoned cart reminders, product recommendations, social media marketing
4.4 FOR SECURITY AND LEGAL COMPLIANCE
Fraud prevention, protect our rights, legal obligations, tax and accounting
4.5 LEGAL BASIS FOR PROCESSING (GDPR)
Consent, Contract Performance, Legitimate Interests, Legal Obligation
5. HOW WE SHARE YOUR INFORMATION
5.1 SERVICE PROVIDERS
E-COMMERCE PLATFORM: Shopify Inc. - https://www.shopify.com/legal/privacy
PAYMENT PROCESSING: Shopify Payments, PayPal, Shop Pay, Amazon Pay, Apple Pay, Venmo (PCI-DSS compliant)
SHIPPING: USPS, FedEx, UPS
EMAIL MARKETING: Klaviyo - https://www.klaviyo.com/legal/privacy
ANALYTICS: Google Analytics - https://policies.google.com/privacy, Shopify Analytics
ADVERTISING: Meta/Facebook/Instagram - https://www.facebook.com/privacy/policy,
Google Ads - https://policies.google.com/privacy
FRAUD PREVENTION: Shopify's Fraud Analysis Tools
TAX COMPLIANCE: Shopify's built-in tax calculation
5.2 OTHER SHARING
Business Transfers, Legal Requirements, With Your Consent, Aggregate Information
6. YOUR PRIVACY RIGHTS
6.1 ALL CUSTOMERS
Right to Access, Right to Correct, Right to Delete, Right to Opt-Out, Right to Object, Right to Non-Discrimination
6.2 HOW TO EXERCISE YOUR RIGHTS
Email: privacy@stathe.com
Response Time: Acknowledgment within 5 business days, Full response within 30-45 days
7. CALIFORNIA RESIDENTS (CCPA/CPRA)
7.1 YOUR CALIFORNIA RIGHTS
Right to Know, Right to Access, Right to Delete, Right to Correct, Right to Opt-Out, Right to Limit, Right to Non-Discrimination
7.2 CATEGORIES OF PERSONAL INFORMATION COLLECTED
Identifiers, California Customer Records, Commercial Information, Internet/Network Activity, Geolocation Data, Inferences
7.3 SOURCES
Directly from you, Automatically through cookies and tracking, Third parties (social media, advertising partners)
7.4 BUSINESS PURPOSES
Order fulfillment, Customer service, Website improvement, Marketing and advertising, Fraud prevention, Analytics, Legal compliance
7.5 DO WE "SELL" OR "SHARE" PERSONAL INFORMATION?
YES, we may "sell" or "share" personal information as defined by the CCPA.
We share: Identifiers (hashed email addresses), Internet activity (browsing, products viewed, cart data), Commercial information (purchases), Inferences (shopping preferences)
Third Parties: Meta/Facebook, Google, Klaviyo
Your Right to Opt-Out:
- Visit: www.stathe.com/pages/ccpa-opt-out
- Click "Do Not Sell or Share My Personal Information" in footer
- Email: privacy@stathe.com with "Do Not Sell" subject line
Global Privacy Control: We recognize and honor GPC signals
7.6 RETENTION PERIODS
Order information: 7 years, Marketing data: Until unsubscribe, Account data: Until deletion + 30 days, Analytics: 26 months
7.7 HOW TO EXERCISE RIGHTS
Email: privacy@stathe.com, Subject: "CCPA Request - [Access/Delete/Correct/Opt-Out]", Online: www.stathe.com/pages/ccpa-opt-out
Response: Acknowledgment within 10 days, Response within 45 days (may extend to 90)
7.8 FINANCIAL INCENTIVES
Newsletter signup: 10% off first order in exchange for email address. Opt-out anytime by unsubscribing.
8. EUROPEAN RESIDENTS (GDPR)
8.1 LEGAL BASIS FOR PROCESSING
Consent, Contract Performance, Legitimate Interests, Legal Obligation
8.2 YOUR GDPR RIGHTS
Right to Access, Right to Rectification, Right to Erasure, Right to Restrict Processing, Right to Data Portability, Right to Object, Right to Withdraw Consent, Right to Lodge a Complaint
8.3 HOW TO EXERCISE GDPR RIGHTS
Email: privacy@stathe.com, Subject: "GDPR Request - [specify]", Response Time: 30 days (may extend to 60-90 days)
Supervisory Authority: Irish Data Protection Commission - https://www.dataprotection.ie, EU Directory: https://edpb.europa.eu/about-edpb/board/members_en
8.4 INTERNATIONAL DATA TRANSFERS
Data transferred to United States. Safeguards: Standard Contractual Clauses (SCCs), Shopify's Data Processing Agreement
8.5 AUTOMATED DECISION-MAKING
Limited automated fraud screening through Shopify. No profiling with legal effects.
9. COOKIES AND TRACKING TECHNOLOGIES
9.1 WHAT ARE COOKIES?
Small text files stored on your device to remember preferences, enable features, and understand Site usage.
9.2 TYPES OF COOKIES
ESSENTIAL COOKIES (Always Active): _secure_session_id, cart, cart_currency, checkout_token, _shopify_country, _tracking_consent, secure_customer_sig
FUNCTIONAL COOKIES: _shopify_tm, _shopify_tw, _shopify_m, keep_alive, storefront_digest
ANALYTICS COOKIES: _landing_page, _orig_referrer, _shopify_y, _shopify_s, _ga, _gid, _gat (Google Analytics)
ADVERTISING COOKIES: _fbp, fr (Facebook Pixel), _gcl_au (Google Ads), __kla_id (Klaviyo)
9.3 YOUR COOKIE CHOICES
Cookie Consent Banner: Accept all, accept essential only, customize preferences (Pandectes GDPR tool)
Browser Settings: Manage cookies in Chrome, Firefox, Safari, Edge settings
Third-Party Opt-Outs:
- Google Analytics: https://tools.google.com/dlpage/gaoptout
- Facebook Ads: https://www.facebook.com/settings/?tab=ads
- Google Ads: https://www.google.com/settings/ads
- General: https://optout.aboutads.info/
9.4 DO NOT TRACK
We don't alter practices for DNT signals. California residents: We honor Global Privacy Control (GPC).
10. DATA SECURITY
10.1 SECURITY MEASURES
Encryption: SSL/TLS, HTTPS, encrypted data storage
Payment Security: PCI-DSS Level 1 compliance through all payment processors, tokenization (no full card numbers stored), secure encrypted processing
Access Controls: Limited access, authentication, activity monitoring, regular audits
Infrastructure: Shopify's secure hosting, firewalls, DDoS protection, regular updates, backup systems
Employee/Vendor: Training, confidentiality agreements, vendor assessment, data processing agreements
10.2 LIMITATIONS
No method is 100% secure. We cannot guarantee absolute security.
10.3 YOUR RESPONSIBILITIES
Keep passwords secure, secure your devices, log out on shared devices, monitor activity, report suspicious access to privacy@stathe.com
10.4 DATA BREACH RESPONSE
Notification: GDPR (72 hours to authorities), CCPA (without unreasonable delay), customers (prompt email notification)
Information Provided: Nature of breach, data affected, consequences, measures taken, recommendations, contact information
11. DATA RETENTION
Order Information: 7 years (tax/accounting requirements)
Marketing Communications: Until unsubscribe (email retained on suppression list)
Account Information: Until deletion + 30 days
Customer Support: 3 years
Analytics: 26 months (Google Analytics default)
Fraud Prevention: Up to 7 years
Cookie Data: Varies by type (see Cookie section)
Abandoned Cart: 90 days
Wishlist: Until removed or account deleted
Legal Retention: May retain longer for tax laws, accounting standards, legal holds, fraud prevention
Deletion Exceptions: Active transactions, legal obligations, legal claims, fraud prevention, security, compliance
Request Early Deletion: Email privacy@stathe.com, subject "Request for Data Deletion"
12. INTERNATIONAL DATA TRANSFERS
Primary Location: United States (Key Biscayne, Florida)
Shopify Infrastructure: Canada, United States, Ireland (for EU customers)
For EU Customers: Standard Contractual Clauses (SCCs), Shopify's Data Processing Agreement, technical and organizational safeguards
Data Transfer Path: You visit Site → Initial processing Ireland (Shopify EU) → Transfer to U.S. (Stathe, service providers) → Storage U.S. servers
Your Rights: Right to be informed, right to object, right to obtain copy of safeguards, right to lodge complaint
Other International Customers: By using our Site, you consent to transfer and processing in United States
13. EMAIL MARKETING
13.1 NEWSLETTER SIGNUP
Sign up for 10% off your first order. Receive: New collections, sales, exclusive offers, styling tips, trend updates, early access
13.2 TYPES OF EMAILS
Transactional (cannot opt-out): Order confirmations, shipping notifications, delivery confirmations, return updates, password resets, account security alerts
Marketing (can opt-out): New collections, sales, seasonal lookbooks, styling tips, exclusive offers, abandoned cart reminders
13.3 FREQUENCY
2-4 emails per month (may increase during holidays/launches)
13.4 KLAVIYO
Data shared: Email, name, purchase history, browsing behavior, email engagement. Privacy: https://www.klaviyo.com/legal/privacy
13.5 CAN-SPAM COMPLIANCE
Clear "From" line, accurate subject lines, identified as ads, physical address included, easy unsubscribe, quick processing (10 days)
13.6 HOW TO UNSUBSCRIBE
- Click "Unsubscribe" in any marketing email
- Update preferences in account
- Email privacy@stathe.com with "Unsubscribe" subject
Takes effect within 10 business days. You'll still receive transactional emails.
13.7 EMAIL SECURITY
We never ask for passwords via email. Verify sender addresses. Report suspicious emails to privacy@stathe.com.
14. SOCIAL MEDIA
14.1 OUR PRESENCE
Instagram: @statheofficial - New collections, styling inspiration, customer features, community engagement
14.2 INTERACTIONS
When you follow, like, comment, DM, or tag us, your interaction is subject to platform's privacy policy.
Meta Privacy: https://www.facebook.com/privacy/policy, Instagram: https://help.instagram.com/519522125107875
14.3 USER-GENERATED CONTENT
When you tag us, we may request permission to repost. We'll credit you and only use with explicit permission. Request removal anytime: orders@stathe.com
14.4 INSTAGRAM SHOPPING
Shopping through Instagram uses Meta Pixel. Data shared: Product views, clicks, purchases (for ad measurement)
14.5 SOCIAL MEDIA ADVERTISING
We run ads on Facebook/Instagram targeting website visitors, custom audiences, lookalike audiences, interest-based targeting
Your Choices: Opt-out via CCPA request (www.stathe.com/pages/ccpa-opt-out), adjust Facebook/Instagram ad settings
15. PAYMENT INFORMATION
15.1 PAYMENT PROCESSORS
Shopify Payments, PayPal, Shop Pay, Amazon Pay, Apple Pay, Venmo (all PCI-DSS Level 1 compliant)
15.2 WHAT WE COLLECT
Billing name, billing address, billing email, billing phone, payment method type
15.3 WHAT WE DO NOT STORE
Full credit card numbers, CVV/CVC codes, card expiration dates, PayPal passwords, bank account numbers
What We See: Last 4 digits, card brand, billing info, transaction status
15.4 PROTECTION
Tokenization: Card data encrypted, sent to processor, token created, we receive only token
PCI-DSS Compliance: Encrypted transmission, secure storage, regular audits, network segmentation, access controls
SSL/TLS: 256-bit encryption, HTTPS throughout checkout
15.5 PAYMENT DISPUTES
Fraud prevention through risk scoring, address verification, CVV verification, unusual activity monitoring
Billing Questions: Email orders@stathe.com or call 305-793-6013
15.6 REFUNDS
Refunds to original payment method, 5-10 business days processing time
16. CHILDREN'S PRIVACY
16.1 AGE REQUIREMENT
Our Services are intended for adults aged 18+. We do not knowingly collect information from anyone under 18.
16.2 IF YOU ARE A PARENT/GUARDIAN
If your child under 18 provided information, contact us immediately at privacy@stathe.com. We will promptly delete all information.
16.3 COPPA COMPLIANCE
We do not knowingly collect information from children under 13. If discovered, we delete it immediately.
17. CHANGES TO THIS PRIVACY POLICY
17.1 OUR RIGHT TO MODIFY
We may update this policy to reflect changes in practices, services, laws, or improvements.
17.2 NOTIFICATION
Material Changes: Email notification, homepage notice for 30 days, may require re-consent
Non-Material Changes: Update policy and "Last Updated" date only
17.3 YOUR CONTINUED USE
By continuing to use our Site after changes, you accept the revised policy. If you disagree, stop using our Site and request deletion.
17.4 REVISION HISTORY
- January 13, 2026: Complete policy rewrite and update (current version)
- April 24, 2023: Previous version (superseded)
18. CONTACT US
18.1 PRIVACY INQUIRIES
Email: privacy@stathe.com
Phone: 305-793-6013
Mail: Stathe, 7 Turtle Walk, Key Biscayne, FL 33149, United States
18.2 GENERAL CUSTOMER SERVICE
Email: orders@stathe.com
Phone: 305-793-6013
Instagram: @statheofficial
18.3 RESPONSE TIMES
Acknowledgment: Within 5 business days
GDPR Requests: Within 30 days (may extend to 60-90 days)
CCPA Requests: Within 45 days (may extend to 90 days)
General Inquiries: Within 10 business days
18.4 DATA PROTECTION AUTHORITIES
California Residents: California Attorney General - https://oag.ca.gov/privacy
European Residents: Local Data Protection Authority - https://edpb.europa.eu/about-edpb/board/members_en, Irish DPC - https://www.dataprotection.ie
UK Residents: Information Commissioner's Office - https://ico.org.uk/make-a-complaint/
APPENDIX
GOVERNING LAW
This Privacy Policy is governed by the laws of the State of Florida, United States. Disputes subject to exclusive jurisdiction of Miami-Dade County, Florida courts. This does not affect your rights under local data protection laws.
SEVERABILITY
If any provision is invalid, remaining provisions continue in full force.
EFFECTIVE DATE
Effective Date: January 13, 2026
Last Updated: January 13, 2026
Previous Version: April 24, 2023 (superseded)
ACKNOWLEDGMENT
By using www.stathe.com, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.
Thank you for trusting Stathe with your personal information. We are committed to protecting your privacy and providing you with exceptional luxury fashion experiences.
For immediate assistance: privacy@stathe.com | 305-793-6013