Supra Sewing Online, LLC Last updated: April 11, 2026 Effective: [EFFECTIVE DATE]
This Privacy Policy explains how Supra Sewing Online, LLC ("Supra Sewing", "we", "us", "our"), a Florida limited liability company with its principal place of business at 7630 NW 25th St, Unit 4, Miami, FL 33122, collects, uses, shares, and protects personal information of visitors and customers of https://suprasewing.com (the "Site"). This Policy applies to the United States market (we do not currently target customers in the European Union, United Kingdom, or Canada).
By using the Site, you agree to the practices described in this Policy. If you do not agree, please do not use the Site.
1. Who We Are — Data Controller
Supra Sewing Online, LLC is the entity responsible for personal information collected through the Site. For any privacy question, complaint, or request, contact us at:
Supra Sewing Online, LLC Attn: Privacy 7630 NW 25th St, Unit 4, Miami, FL 33122 Email: contact@suprasewing.com (for DSARs, use subject line "Privacy Request")
2. Personal Information We Collect
2.1 Information you provide directly
- Identity & contact: name, email, phone number, billing address, shipping address.
- Account: username, password (encrypted), purchase history, preferences.
- Transaction: payment information (processed by PCI-compliant processors — we do not store full card numbers), order details, shipping instructions.
- Communications: messages to customer support, courtesy-support session content, product reviews, survey responses.
- Business information (B2B customers): company name, business tax ID (if provided), resale certificate, estimated volume.
2.2 Information collected automatically ("Device Information")
- Technical data: IP address, browser type and version, operating system, device identifiers, time zone, referring URLs, session IDs.
- Usage data: pages viewed, products searched/clicked, session duration, navigation paths, interaction with ads, add-to-cart events, completed purchases.
- Approximate location inferred from IP address.
Collected via cookies, log files, web beacons, pixels, tags, and similar technologies.
2.3 Information from third parties
We may receive information from social media platforms (if you interact with our accounts), analytics and advertising partners, payment processors, and shipping carriers.
3. How We Use Your Information
| Purpose | Description |
|---|---|
| Order fulfillment | Processing orders, payment, shipping, customer service, courtesy technical support |
| Account management | Creating and maintaining your account, order history, preferences |
| Fraud prevention | Screening suspicious orders, verifying payment legitimacy, chargeback defense |
| Marketing | Sending promotional emails (with your consent/opt-in) and SMS (with prior express written consent as required by TCPA) |
| Analytics & Site improvement | Understanding how visitors use the Site, optimizing product mix, improving UX |
| Personalized advertising | Displaying relevant products and ads across Meta, Google, TikTok, and other ad networks (subject to cookie consent where applicable) |
| Legal compliance | Tax reporting, FTC Mail Order Rule compliance, CAN-SPAM, TCPA, responding to legal process |
We do not sell personal information for monetary consideration. However, our use of advertising cookies may constitute "sharing" under California law — see Section 8.
4. Cookies and Tracking Technologies
We use the following categories of cookies and similar technologies:
| Category | Purpose | Examples |
|---|---|---|
| Strictly necessary | Site functionality (cart, checkout, login, security) | Shopify session cookies |
| Functional | Remember preferences (language, currency, region) |
_locale, _currency
|
| Analytics | Understand Site usage and performance | Google Analytics (GA4), Shopify Analytics |
| Advertising | Targeted advertising on Meta, Google, TikTok | Meta Pixel, Google Ads tag, TikTok Pixel |
Managing cookies. You can manage cookies through our cookie banner (when available on the Site), via browser settings, or by opting out via industry choice tools:
- Meta / Facebook: https://www.facebook.com/settings?tab=ads
- Google Ads: https://adssettings.google.com
- TikTok: https://www.tiktok.com/legal/page/us/privacy-policy
- Digital Advertising Alliance: https://optout.aboutads.info
- Network Advertising Initiative: https://optout.networkadvertising.org
Disabling certain cookies may affect Site functionality. Our Site does not currently respond to "Do Not Track" browser signals.
5. Third Parties We Share Information With
We share personal information with the following categories of service providers, strictly as needed for business purposes and under confidentiality obligations:
| Third Party | Purpose |
|---|---|
| Shopify Inc. | E-commerce platform and hosting |
| Shopify Payments / Stripe / PayPal | Payment processing |
| Google LLC | Analytics (GA4), advertising (Google Ads) |
| Meta Platforms, Inc. | Advertising (Meta Pixel, Facebook, Instagram) |
| TikTok Ltd. | Advertising (TikTok Pixel) |
| [Email marketing provider — e.g., Klaviyo, Mailchimp] | Transactional and promotional email |
| Shipping carriers | USPS, UPS, FedEx, LTL freight providers (R+L, Estes, etc.) |
| Professional advisors | Legal, accounting, tax, and insurance advisors |
| Fraud and risk services | Chargeback and fraud-screening tools |
We may also share information (a) to comply with legal obligations, subpoenas, court orders, or law-enforcement requests; (b) to protect our rights, property, or safety; or (c) in connection with a merger, acquisition, financing, or sale of assets.
6. Data Retention
We retain personal information only as long as necessary for the purposes described in this Policy:
| Data Type | Retention Period |
|---|---|
| Order and transaction records | 7 years (required for Florida tax and commercial law) |
| Account information | Until account deletion requested OR 3 years of inactivity, whichever comes first |
| Marketing consent data | Until you unsubscribe or withdraw consent + 2 years for compliance records |
| Analytics data (pseudonymous) | Up to 26 months |
| Support communications | 3 years from last contact |
| Fraud/security logs | 2 years |
After the retention period, data is deleted or anonymized.
7. Data Security
We implement reasonable administrative, technical, and physical safeguards to protect personal information, including:
- Encryption in transit (TLS/HTTPS for all Site pages);
- PCI-compliant payment processing (we do not store full card numbers);
- Access controls on customer data internally;
- Shopify platform security (SOC 2 Type II, PCI DSS Level 1).
However, no method of transmission or storage is 100% secure. You use the Site at your own risk.
8. Your Privacy Rights
8.1 General rights (all users)
You may contact us at contact@suprasewing.com to:
- Access the personal information we hold about you;
- Correct inaccurate information;
- Request deletion (subject to legal retention obligations under Section 6);
- Withdraw consent for marketing at any time;
- Opt out of targeted advertising.
We will respond to verified requests within 45 days (extendable by 45 days for complex requests).
8.2 California residents — "Shine the Light" and CCPA/CPRA courtesy rights
Although we may not formally be subject to the California Consumer Privacy Act ("CCPA") / California Privacy Rights Act ("CPRA") based on our business size and volume, we voluntarily extend the following rights to California residents as a matter of good practice:
- Right to Know what personal information we collect, use, disclose, and "share" for cross-context behavioral advertising;
- Right to Access your personal information in a portable format;
- Right to Delete your personal information (subject to legal exceptions);
- Right to Correct inaccurate information;
- Right to Opt Out of "Sharing" for cross-context behavioral advertising — click the "Do Not Sell or Share My Personal Information" link in the Site footer or email us with subject line "Opt-Out Request";
- Right to Non-Discrimination for exercising any of the above.
Categories of personal information collected in the last 12 months: identifiers, commercial information, internet/network activity, geolocation (approximate), inferences drawn from the above. We do not knowingly collect "sensitive personal information" as defined by CPRA.
Shine the Light (California Civil Code § 1798.83): California residents may request information about our disclosure of personal information to third parties for direct marketing purposes. Submit requests to contact@suprasewing.com.
Spanish-language privacy notice. A Spanish-language version of this Privacy Policy is available at https://suprasewing.com/es/policies/privacy-policy consistent with California Civil Code § 1632 where applicable.
8.3 Residents of other U.S. states
Residents of Virginia, Colorado, Connecticut, Utah, Texas, and other states with comprehensive privacy laws have similar rights — contact us to exercise them.
8.4 Verification
We will verify your identity before responding to requests by matching data you provide against records we hold. We may decline requests that cannot be verified or that are fraudulent or manifestly excessive.
9. Email Marketing (CAN-SPAM Compliance)
We comply with the federal CAN-SPAM Act. All marketing emails:
- Identify Supra Sewing as the sender;
- Include our physical postal address at 7630 NW 25th St, Unit 4, Miami, FL 33122;
- Include a working unsubscribe link;
- Honor unsubscribe requests within 10 business days;
- Do not contain deceptive subject lines or false headers.
To unsubscribe, click the unsubscribe link in any email or email contact@suprasewing.com with subject "Unsubscribe."
10. Children's Privacy (COPPA)
The Site is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, email contact@suprasewing.com and we will delete it promptly.
11. Data Breach Notification
In the event of a personal data breach, we will comply with applicable notification laws, including the Florida Information Protection Act (FIPA) and other state breach-notification statutes. We will notify affected individuals and regulators as required, typically without unreasonable delay.
12. Third-Party Links
The Site may contain links to third-party websites. We are not responsible for their privacy practices. Review their policies before providing any information.
13. Changes to This Policy
We may update this Policy from time to time. Material changes will be announced via the Site (and, where appropriate, email). The "Last updated" date shows when the Policy was last revised.
14. Contact
Supra Sewing Online, LLC Attn: Privacy 7630 NW 25th St, Unit 4, Miami, FL 33122 Email: contact@suprasewing.com
For DSAR / privacy rights requests, use subject line "Privacy Request".