Scope
This Privacy Policy explains how Strands & Beds collects, uses, discloses, and protects personal information when you visit strandsandbeds.com, create a My Crown account, place an order, contact Customer Care, or otherwise interact with our services.
Information we collect
Depending on how you interact with us, we may collect identifiers and contact details; account credentials and profile information; shipping and billing details; order, cart, loyalty, and transaction history; communications with Customer Care; device, browser, IP address, cookie, and website-usage data; and inferences necessary to operate or improve the service.
Payment-card details are processed by Stripe. We do not intentionally store complete payment-card numbers on our own website database.
How we use information
- Provide accounts, saved bags, checkout, order history, and Crown Rewards.
- Process, fulfill, ship, support, refund, and secure orders.
- Send service communications such as account verification, password resets, order information, and customer-care responses.
- Prevent fraud, abuse, security incidents, and unauthorized access.
- Comply with tax, accounting, legal, regulatory, and recordkeeping obligations.
- Improve products, website performance, accessibility, and customer experience.
- Send marketing communications where permitted and subject to available consent or opt-out rights.
Service providers and disclosures
We may disclose information to vendors that help operate the business, including Stripe for payments and tax-related checkout functionality, Supabase for authentication and customer data infrastructure, Netlify for hosting and serverless functions, shipping and fulfillment providers, professional advisers, and other vendors acting on our behalf. We may also disclose information when required by law, to protect rights or safety, or in connection with a business transaction such as a merger, financing, or sale.
As of the effective date, we do not sell personal information for money. If future advertising or analytics practices constitute a “sale,” “sharing,” or targeted advertising under applicable privacy law, we will provide the legally required notices and choices.
Cookies and local storage
We use browser storage and similar technologies to keep shopping-bag contents, authentication sessions, preferences, and essential site functionality working. Future analytics or marketing technologies may use additional cookies or identifiers; where consent or opt-out controls are legally required, we will provide them.
Retention and security
We retain personal information for as long as reasonably necessary for the purposes described here, including providing accounts and orders, resolving disputes, enforcing agreements, preventing fraud, and meeting legal, tax, accounting, and regulatory requirements. Retention periods vary by data type and context.
We use administrative, technical, and organizational safeguards designed to protect information, including HTTPS, access controls, managed authentication, and restricted server-side credentials. No security measure can guarantee absolute security.
Privacy rights
Depending on where you live, you may have rights to request access to, correction of, deletion of, or portability of certain personal information, and rights to opt out of certain uses such as sale, sharing, targeted advertising, or some profiling. You may also have a right to appeal certain decisions or to withdraw consent where processing is based on consent.
Canadian residents may request access to and correction of personal information and may raise questions or complaints regarding our privacy practices, subject to applicable Canadian privacy law and lawful exceptions.
To submit a privacy request, use the Customer Care page and select “Privacy request.” We may need to verify your identity before completing a request.
Children
Our services are not directed to children under 13, and we do not knowingly collect personal information from children under 13 through the storefront. If you believe a child has provided personal information improperly, contact us.
International and cross-border processing
We are based in the United States. Information may be processed in the United States or other jurisdictions where our service providers operate. Privacy laws in those locations may differ from those in your jurisdiction.
Changes and contact
We may update this Privacy Policy to reflect changes in law, technology, vendors, or business practices. The effective date above identifies the current version. Questions or requests can be submitted through our Customer Care page.