This Privacy Policy describes how SARTORO LLC (“Sartoro,” “we,” “our,” or “us”) collects, uses, discloses, and protects personal information when you visit or use our website at www.sartoro.co, shop in our online store, receive our texts or emails, interact with our ads, contact us, or otherwise use our services (collectively, the “Services”). By using the Services, you acknowledge this Privacy Policy. If you do not agree, please discontinue use.

1. PERSONAL INFORMATION WE COLLECT
We collect personal information directly from you, automatically when you use the Services, and from service providers and partners, as permitted by law.
We may collect identifiers (name, email, phone, billing and shipping addresses, account credentials), commercial information (items viewed, cart and wishlist details, order and return history, preferences), payment information (payment method and transaction data processed by payment providers; we do not store full card numbers), device and internet activity (IP address, device and browser type, cookies, pixels, log data), approximate geolocation (inferred from IP or shipping address), communications (messages to customer support or feedback), marketing preferences (email or SMS opt-ins and engagement), and sensitive personal information such as body measurements used only for garment customization. We do not use sensitive information to infer unrelated characteristics.

2. SOURCES OF PERSONAL INFORMATION
We collect personal information directly from you (such as when placing an order or creating an account), automatically through cookies and analytics, from our service providers (e-commerce, payments, shipping, marketing), and from promotions or referrals you participate in.

3. HOW WE USE PERSONAL INFORMATION
We use personal information to provide and improve the Services, process payments and orders, ship products, handle returns, provide customer support, tailor your experience, send transactional and marketing messages (with consent where required), detect and prevent fraud, and comply with legal obligations.

4. COOKIES AND TRACKING
We use cookies, pixels, and similar technologies to operate the site, remember preferences, understand usage, and personalize or measure ads. These include essential, performance, functional, and advertising cookies. You can adjust browser settings to manage non-essential cookies. If you are in the EEA or UK, you will be shown a cookie consent banner for non-essential cookies. We honor Global Privacy Control (GPC) browser signals as opt-outs of sale or sharing where legally required. Learn more about GPC at https://globalprivacycontrol.org.

5. WHEN WE DISCLOSE PERSONAL INFORMATION
We disclose personal information only as necessary to provide and improve our Services or comply with law. This includes sharing with service providers (Shopify, payment processors, shipping, analytics, marketing, and ad networks), with business partners for marketing and measurement (subject to your opt-out rights), for legal compliance and safety, during business transfers such as mergers or sales, or with your consent or direction.
We do not sell personal information for money. However, some state laws consider sharing identifiers or device data for targeted advertising as “selling” or “sharing.” You may opt out as described in Section 13.

6. RELATIONSHIP WITH SHOPIFY
Our online store is hosted by Shopify, which collects and processes certain personal information about your access to and use of the store to operate and improve its platform. Shopify may also use aggregated insights to power features used by all merchants. Shopify is a separate controller for that processing and is responsible for responding to any privacy rights requests related to it.
Shopify Consumer Privacy Policy: https://www.shopify.com/legal/privacy
Shopify Privacy Portal (for data rights requests): https://privacy.shopify.com

7. RETENTION
We retain personal information only as long as necessary for the purposes described or as required by law. Typical periods include seven years for orders and transactions, at least three years for customer service records, and until account deletion for tailoring measurements. Marketing preferences are retained until you unsubscribe or withdraw consent.

8. SECURITY
We use reasonable administrative, technical, and physical safeguards to protect personal information. However, no system is 100% secure. In the event of a data breach that compromises your information, we will notify you and any required authorities in accordance with applicable law.

9. YOUR RIGHTS AND CHOICES
Depending on your location, you may have rights to access, correct, delete, or receive a copy of your personal information, to opt out of sale or sharing, and to limit use of sensitive personal information. You may also opt out of marketing emails or texts at any time. If we deny a rights request, you may appeal within 30 days by emailing privacy@sartoro.co with “Appeal” in the subject.
To make a request, email privacy@sartoro.co. We may need to verify your identity using details such as your email or order information. Authorized agents may submit requests on your behalf once verified.

10. U.S. STATE PRIVACY NOTICES
Residents of states such as California, Virginia, Colorado, Connecticut, Utah, Texas, and Oregon may exercise the rights described above. We do not discriminate against users for exercising these rights.
California “Shine the Light”: California residents may request once per year whether we shared personal information with third parties for their direct marketing. To request, email privacy@sartoro.co with “Shine the Light Request.”
Notice of Financial Incentive (California CPRA): We may offer discounts or perks if you provide personal information (such as your email or phone number). The categories collected include identifiers and marketing preferences. The value of any incentive is reasonably related to the value of your data to Sartoro, based on marketing and engagement metrics. Participation is voluntary, and you may withdraw by unsubscribing, texting STOP, or contacting privacy@sartoro.co.

11. INTERNATIONAL USERS (EEA AND UK)
Legal bases for processing include contract performance, legitimate interests (security, analytics, marketing where permitted), consent (email or SMS marketing, non-essential cookies), and compliance with legal obligations. Your data may be processed in the United States or other countries. When required, we rely on Standard Contractual Clauses or UK-approved equivalents to safeguard international transfers. You may lodge a complaint with your local data protection authority. Sartoro does not target EU or UK customers and has not appointed an EU or UK representative.

12. CHILDREN’S PRIVACY
The Services are not directed to individuals under 16 years old (or the minimum digital consent age in your country). We do not knowingly collect personal information from children. If we learn we have done so, we will delete it.

13. DO NOT SELL OR SHARE MY PERSONAL INFORMATION
California residents and others under similar state laws may opt out of sale, sharing, or targeted advertising by emailing privacy@sartoro.co or using our “Do Not Sell or Share My Personal Information” link available in the footer of our website. We also honor GPC browser signals as applicable opt-outs. We do not knowingly sell or share data of users under 16.

14. CHANGES TO THIS POLICY
We may update this Privacy Policy periodically. Updated versions will be posted on this page with a new “Last Updated” date. Material changes will be communicated as required by law. Continued use of the Services after updates means you accept the revised policy.

15. CONTACT US
SARTORO LLC
7901 4th St N, Ste 300
St. Petersburg, FL 33702, United States
Email: privacy@sartoro.co

For data protection purposes, SARTORO LLC is the data controller of your personal information.