Privacy Policy

This Privacy Policy explains how CustomStitch House("we", "us"), a small embroidery business based in Vietnam, collects, uses and protects personal information when you visit this website, create an account, place an order, or interact with us on social media.

1. Information we collect

• Account and order information: your name, email address, phone number, shipping address, order details, and any personalization text or notes you provide.
• Reviews and messages: content you submit in product reviews or through our contact form, including optional photos.
• Technical information: a session cookie that keeps your cart and sign-in working, and basic server logs (IP address, browser type, pages requested) used for security and troubleshooting.
• Social media data: if you interact with us through Facebook, Instagram, TikTok, Google/YouTube or Pinterest, or if an account is connected to our publishing tools, we may receive the information that platform shares with us (such as your public profile name, account ID, and permissions you grant). We only use it for the purpose you authorized.

2. How we use your information

• To process, personalize, ship and support your orders.
• To communicate with you about your order or your questions.
• To publish and manage our own product posts on connected social media accounts.
• To keep the website secure and to comply with legal obligations.

We do not sell your personal information, and we do not use it for third-party advertising.

3. Pinterest and other social media integrations

CustomStitch House uses an app connected to the Pinterest API (and similar official APIs from Meta, TikTok and Google/YouTube) only to publish and manage content on our own business accounts. The app is used by our team; it is not offered to the public and does not access other people's Pinterest accounts.

• What the app does: when we add or update a product in our store, it creates a Pin on one of our own boards with the product photo, title, description and a link back to the product page on this website.
• Permissions requested from Pinterest: boards:read (to choose which of our boards to post to), pins:read and pins:write (to create and check our own Pins), and user_accounts:read (to show which of our accounts is connected).
• What we store: the OAuth access and refresh tokens for our own account (encrypted with AES-256), the account name and ID, our board names and IDs, and the IDs and links of the Pins we create. We do not store data about other Pinterest users, their Pins, followers or messages.
• Sharing: Pinterest data is not sold, shared with third parties, or used for advertising or profiling.
• Revoking access and deletion: the connection can be removed at any time from our admin panel or from Pinterest (Settings → Security and logins → Apps). When it is removed we delete the stored tokens. To ask us to delete any data, email us or use our Data Deletion page.

4. Sharing

We share information only with service providers needed to run the shop — for example shipping carriers (to deliver your package), hosting providers, and payment or banking partners — and only as much as they need. We may also disclose information if required by law.

5. International transfers

CustomStitch House operates from Vietnam and ships to the United States. Your information may be stored and processed in Vietnam and in the countries where our service providers operate.

6. Retention

We keep order records for as long as needed for accounting, tax and warranty purposes (generally up to 5 years). Account information is kept until you delete your account or ask us to delete it. Tokens for connected social accounts are deleted when the connection is removed.

7. Your rights and choices

You can view and update your profile in Your Account. You may ask us to access, correct or delete your personal information at any time — see our Data Deletion page. California residents may request the categories of personal information we hold; we do not sell or share personal information for cross-context behavioral advertising.

8. Children

Our website is not directed to children under 13, and we do not knowingly collect their personal information.

9. Security

Passwords are stored as one-way hashes, and access to customer data is limited to the people who need it to fulfil orders.

10. Changes

We may update this policy from time to time. The "Last updated" date above shows when it last changed.

11. Contact

Questions about privacy? Email us at [email protected].