Privacy policy

Last Updated: December 19, 2025

Overview

Ciao! Our team here at St. Agrestis values your trust and makes it a high priority to ensure the security and confidentiality of the personal information you provide to us. This Privacy Policy explains our practices regarding the collection, use, disclosure, and protection of your personal information when you visit our website, use our services, or purchase our products (collectively, the "Services").

We encourage you to read this entire policy to understand our privacy practices. By visiting our website, using our Services, or making a purchase, you are accepting the practices described in this Privacy Policy. If you have questions about our privacy practices, please contact us at orders@stagrestis.com.

1. When This Privacy Policy Applies

This Privacy Policy applies to personal information we collect about you through:

  1. Our website and related online platforms (collectively, the "Sites")

  2. Direct interactions with us (email, phone, in-person events)

  3. Our Shopify-based e-commerce store

  4. Our mobile marketing programs (SMS/text messages)

  5. Third-party services we control or that link to this Privacy Policy

This Privacy Policy does not apply to third-party websites, platforms, or services that we do not control, even if they are linked from our Sites. When you visit those third-party sites, you are subject to their privacy policies. We encourage you to review their privacy practices before providing your information.

Age Restriction: St. Agrestis products are sold exclusively to individuals age 21 and older. By using our Services, you represent and warrant that you are at least 21 years of age.


2. What Personal Information We Collect

We collect various categories of personal information about you, depending on how you interact with us. In the twelve (12) months before this Policy was last updated, we have collected the following categories of personal information:

Category

Examples

Identifiers and contact information

Name, email address, phone number, shipping address, billing address

Account information

Username, password, account preferences, communication preferences

Payment and transaction information

Order history, purchase details, payment method type, billing and shipping addresses, transaction amounts and dates

Demographic information

Age (to verify 21+ requirement), geographic location based on shipping address

Marketing and communication preferences

Email opt-in/opt-out status, SMS/text message opt-in/opt-out status, content preferences, product interests

Internet and online activity information

IP address, device type and ID, browser type and version, operating system, pages visited, links clicked, referring website/URL, date and time of visit, time spent on pages, search queries, cookies and similar tracking identifiers

Location information

General geographic location (inferred from IP address or shipping address); precise location only if you consent to share it through your device settings

Inferences about you

Preferences, interests, purchasing behavior, product recommendations based on your activity and purchase history

Communications

Messages you submit via our website, email inquiries, customer service requests, feedback, survey responses

We collect this information from various sources, including:

  1. Information you provide directly (checkout forms, account creation, customer service requests, surveys)

  2. Automatic data collection technologies (cookies, web beacons, pixels, log files)

  3. Third-party service providers (Shopify, payment processors, shipping carriers, marketing platforms)

  4. Third-party data providers and marketing companies

  5. Publicly available sources

  6. Your interactions with our social media pages

3. How We Use Your Information

We use your personal information for the following purposes. We have identified the legal basis we rely on for each use:

Purpose

Legal Basis

Fulfill your orders and process payments

Contract performance; Legitimate interest (to ensure accurate order processing)

Create and maintain your account

Contract performance; Legitimate interest

Provide customer service and respond to inquiries

Contract performance; Legitimate interest (to address your questions and feedback)

Send transactional emails (order confirmations, shipment tracking, delivery notifications, password resets)

Contract performance; Legal obligation (as needed for consumer protection)

Send marketing emails and promotional offers

Consent (where required by law); Legitimate interest (to inform you of products and offers you may be interested in)

Send SMS/text messages (order updates, promotions, if you opt in)

Consent (explicit opt-in required for SMS)

Conduct surveys and gather feedback

Consent; Legitimate interest (to improve our Services)

Analyze trends and improve our Services

Legitimate interest (to understand how customers use our Services and enhance user experience)

Personalize your experience

Legitimate interest (to show you content and products tailored to your interests)

Comply with legal obligations (tax reporting, regulatory compliance, age verification)

Legal obligation; Legitimate interest

Prevent fraud and protect security

Legitimate interest; Legal obligation (to protect our business and customers)

Enforce our Terms of Service and other agreements

Legitimate interest; Legal obligation

Manage business operations (inventory, fulfillment, customer records, financial reporting)

Contract performance; Legitimate interest; Legal obligation

In the event of a merger, acquisition, or asset sale

Legitimate interest (to transfer your information to the acquiring entity)


4. Use of Cookies and Tracking Technologies

Our Sites use cookies, pixels, web beacons, and similar tracking technologies (collectively, "cookies") to collect information about your interactions with our Services. These technologies help us improve your experience and analyze how you use our Sites.

Types of Cookies We Use:

Required/Strictly Necessary Cookies

These cookies are essential for the basic functioning of our Sites. They enable secure login, shopping cart functionality, checkout processing, and security features. If you disable these cookies, you will not be able to use certain features of the Sites.

Functional Cookies

These cookies remember your preferences and improve your user experience. Examples include remembering your login details, saving items in your shopping cart, and recording your preferred language or currency.

Advertising and Analytics Cookies

These cookies help us understand how you interact with our Sites and how visitors navigate our pages. We use this information to optimize our Services, measure the effectiveness of marketing campaigns, and show you ads that may be of interest to you. This category includes cookies from:

  1. Google Analytics (web traffic and behavior analysis)

  2. Google Ads / other advertising platforms (retargeting and ad performance)

  3. Facebook Pixel (audience tracking and conversion measurement)

  4. Klaviyo (email marketing analytics)

These third-party cookies may allow advertisers and marketing partners to recognize you across websites and show you targeted ads.

Controlling Cookies:

  1. Cookie Preferences: When you first visit our Sites, a cookie banner will appear. You can adjust your cookie preferences by clicking "Cookie Settings" or "Cookie Preferences." You may reject non-essential cookies, but this may limit your ability to use certain features.

  2. Browser Settings: You can configure your browser to refuse cookies or notify you before a cookie is placed. Visit www.aboutcookies.org for instructions specific to your browser.

  3. Global Privacy Control (GPC): If your browser or browser extension supports the Global Privacy Control ("GPC") signal, we honor that signal to opt you out of the "sale" or "sharing" of your personal information.

  4. Opt-Out of Targeted Advertising: You can opt out of targeted advertising through the Digital Advertising Alliance (DAA) at www.aboutads.info/choices, the Network Advertising Initiative (NAI) at www.networkadvertising.org/choices, or Your Ad Choices at youradchoices.com.

Please note that even if you opt out of cookies or targeted advertising, you may still see non-targeted ads, and certain cookies necessary for the operation of our Sites will continue to function.

5. How We Disclose Your Information

Disclosures to Service Providers and Business Partners

We share personal information with third parties who help us operate our business and provide Services to you. These include:

  1. Shopify (e-commerce platform, order processing, customer data storage)

  2. Stripe and other payment processors (payment processing and fraud prevention)

  3. Shipping and logistics providers (ShipStation, UPS, FedEx, DHL, and other carriers; delivery and tracking)

  4. Klaviyo (email marketing, customer segmentation, marketing automation)

  5. Google (Google Ads, Google Analytics, analytics and advertising)

  6. Customer service platforms (support ticket management and communication)

  7. Accounting and bookkeeping services (financial reporting and tax compliance)

  8. Marketing and analytics partners (audience analysis, campaign performance measurement)

  9. Affiliated Partners (co-branded promotions, partnership programs)

We require these service providers to maintain the confidentiality of your information and to use it only for the purposes for which we disclose it. However, we are not responsible for their privacy practices beyond what is specified in our contracts with them.

Disclosures for Legal Reasons

We may disclose your personal information without your consent when:

  1. Required by law (legal process, government requests, subpoenas, court orders)

  2. Necessary to protect our legal rights, property, or safety

  3. Necessary to protect your safety or the safety of others

  4. Required to prevent or investigate suspected fraud, security issues, or violations of our Terms of Service

Disclosures in Connection with Business Transactions

If St. Agrestis is involved in a merger, acquisition, asset sale, bankruptcy, or other business transaction, your personal information may be transferred as part of that transaction. We will provide notice of any such change in ownership or control of your information.

Data We Do Not Sell

We do not sell or share personal information with third parties for their independent marketing purposes without your explicit consent. However, our use of cookies and tracking technologies (such as Google Ads and Facebook Pixel) for retargeting and audience building may constitute "sale" or "sharing" under certain state privacy laws (such as California's CCPA/CPRA). You have the right to opt out of this practice (see Section 7 below).

6. Data Security and Storage

We implement industry-standard technical, administrative, and organizational safeguards to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These safeguards include:

  1. Encryption: We use SSL (Secure Socket Layer) encryption to protect payment information and other sensitive data transmitted over the Internet

  2. Secure servers: Personal information is stored in secure, access-controlled databases

  3. Access controls: Only authorized employees and service providers who need access to your information can access it

  4. Regular security assessments: We monitor our security practices and update them as threats evolve

However, please understand that no security system is 100% secure. We cannot guarantee the absolute security of information transmitted over the Internet or stored in our systems. You use our Services at your own risk. We recommend:

  1. Not sharing your password with anyone

  2. Logging out of your account when you are done

  3. Using a secure, private Internet connection when transmitting sensitive information

If you believe your information has been compromised or misused, please contact us immediately at orders@stagrestis.com.


7. Your Privacy Rights and Choices

Depending on where you live, you may have certain rights regarding your personal information. This section describes your rights and how to exercise them.

7.1 Email and Marketing Communications

Marketing Emails: We may send you promotional emails about new products, offers, and updates. You can opt out of receiving marketing emails at any time by:

  1. Clicking the "Unsubscribe" link in any marketing email we send you

  2. Contacting us at orders@stagrestis.com with a request to unsubscribe

  3. Updating your communication preferences in your account

We will process your unsubscribe request within 10 business days. Please note that even if you opt out of marketing emails, we will continue to send you transactional messages (such as order confirmations and shipment notifications).

SMS/Text Messages: If you have opted in to receive SMS/text messages from us, you can opt out at any time by:

  1. Texting "STOP" to the phone number from which you received the message

  2. Replying to any message with "STOP"

  3. Contacting us at orders@stagrestis.com

We will process your SMS opt-out request as soon as possible. Message and data rates may apply; check your wireless plan for details.

7.2 Cookies and Tracking

See Section 4 above for detailed instructions on controlling cookies, using cookie preferences, configuring your browser, and opting out of targeted advertising through GPC, DAA, NAI, and other opt-out tools.

7.3 Consumer Privacy Rights (California, Virginia, Colorado, Connecticut, Utah, and Other States)

If you are a resident of California, Virginia, Colorado, Connecticut, Utah, or another state with a comprehensive privacy law, you may have the following rights, subject to certain limitations and exceptions:

Right to Know/Access: You have the right to request that we disclose:

  1. The categories of personal information we have collected about you

  2. The sources from which we collected your personal information

  3. Our business purpose for collecting that information

  4. The categories of third parties with whom we share that information

  5. A copy of the specific personal information we have about you

Right to Delete: You have the right to request that we delete personal information we have collected from you, subject to certain exceptions:

  1. Information needed to complete your transaction or fulfill your request

  2. Information required by law or for legal compliance

  3. Information necessary to detect and prevent fraud

  4. Information needed to exercise other legal rights

Right to Opt-Out of "Sale" or "Sharing": Under California law (CCPA/CPRA), you have the right to opt out of the "sale" or "sharing" of your personal information for targeted advertising purposes. In the past 12 months, we may have shared or sold the following categories of information:

  1. Internet activity (browsing data, cookies, pixels)

  2. Identifiers (name, email, IP address)

  3. Inferences about you (interests, purchasing behavior, product recommendations)

To exercise this right:

  1. Click the "Do Not Sell or Share My Personal Information" link on our website (located in the footer)

  2. Submit a request via our Data Subject Request form

  3. Enable Global Privacy Control (GPC) in your browser or browser extension

Right to Correct: You have the right to request that we correct inaccurate personal information.

Right to Data Portability: You have the right to request that we provide you with a copy of your personal information in a portable, machine-readable format that you can transfer to another business.

Right to Limit Use of Sensitive Information: If we collect sensitive personal information (such as age, financial account information, or precise location), you have the right to limit our use of that information to the purposes necessary to provide the Services you requested.

Right to Opt-Out of Automated Decision-Making: You have the right to opt out of automated decision-making if we use technology to make decisions that have a material effect on you. To date, we do not use such automated decision-making.

Non-Discrimination: We will not discriminate against you for exercising your privacy rights. We will not:

  1. Deny you goods or services

  2. Charge you different prices or rates

  3. Provide you a different quality of service

  4. Suggest that you would receive a different price or service

We may, however, offer you financial incentives (such as loyalty rewards) for providing or allowing us to collect personal information.

7.4 How to Exercise Your Rights

To submit a request to access, delete, correct, or port your personal information:

  1. Email us: orders@stagrestis.com with the subject line "Data Privacy Request – [Your Name]"

  2. Include the following:

  3. Your full name

  4. Your email address associated with your account (if applicable)

  5. Your shipping/billing address

  6. The specific right you are exercising (access, deletion, correction, portability)

  7. Any additional details that help us identify you

  8. If you are authorized to act on behalf of a minor or another person, provide documentation of your authorization

Verification of Identity: To protect your privacy and prevent unauthorized access to your information, we will verify your identity before processing your request. We may ask you to provide up to three pieces of personal information (such as your email, last four digits of your payment method, or order number) to confirm your identity.

Response Timeline: We will respond to your request within forty-five (45) days of receipt. If we need more time (up to 90 days), we will notify you in writing and explain the reason for the delay.

Response Method: We will deliver our response by email to the address you provide on your request form. If you prefer a different method, please specify in your request, and we will accommodate if feasible.

Limitations: We may not be able to fulfill your request if:

  1. We cannot verify your identity

  2. You do not provide sufficient information for us to locate your data

  3. An exception applies (such as legal requirements to retain data)

  4. Your request is fraudulent or abusive

8. Data Retention

We retain personal information for as long as necessary to provide Services to you, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods vary depending on the type of information and our business need:

Type of Information

Retention Period

Account information and customer profile

As long as your account is active, plus 3 years after account closure or final purchase

Transaction and payment information

For the duration of the transaction plus 7 years (for tax and accounting compliance)

Email marketing list data

Until you unsubscribe or request deletion

SMS/text message opt-in data

Until you unsubscribe or request deletion

Cookies and tracking data

Duration of your session (session cookies) or as set in our cookie preferences (persistent cookies); typically 1-2 years

Customer service and support records

3 years after your final inquiry

Log files and IP addresses

12 months

Age verification records

7 years (for legal compliance)

When information reaches the end of its retention period, we will securely delete or anonymize it so that it can no longer be associated with you. However, we may retain aggregated, anonymized data indefinitely for analytics and business purposes.

Note on Legal Holds: If we become involved in litigation or receive a legal hold notice, we will retain relevant personal information until the matter is resolved, even if the retention period has expired.

9. Third-Party Links and Services

Our Sites may contain links to third-party websites, social media pages, and external services that we do not control. This Privacy Policy applies only to our Services. We are not responsible for the privacy practices, content, or security of third-party websites or services.

When you visit third-party sites (such as our social media pages on Instagram, Facebook, or TikTok), you are subject to their privacy policies. We encourage you to review their privacy practices before providing your information.

If you choose to interact with our brand on social media or post reviews on third-party platforms, any personal information you share may be publicly visible and subject to the privacy policies of those platforms.

10. International Transfers

If you are visiting our Sites from outside the United States, please be aware that your personal information may be transferred to, stored, and processed in the United States. Data protection laws in the United States may be different from those in your country of residence.

By using our Services and providing your information to us, you consent to the transfer of your personal information to the United States and to the use of your information in accordance with this Privacy Policy.

11. Children's Privacy

St. Agrestis' Services are intended for individuals age 21 and older. We do not knowingly collect personal information from anyone under the age of 21. If we become aware that we have collected personal information from a child under 21 without parental/guardian consent, we will delete that information immediately.

If you believe that St. Agrestis has collected personal information from a child under 21, please notify us immediately at orders@stagrestis.com.

12. Payment Processing

Payment processing services for St. Agrestis are provided by Stripe and are subject to Stripe's Terms of Service and Privacy Policy. By providing payment information to us, you agree to the terms and conditions of Stripe's services. We do not store complete credit card or payment information; Stripe handles this data securely on our behalf.

For Stripe's privacy practices, visit: https://stripe.com/privacy

13. Mobile SMS/Text Message Terms

If you have opted in to our SMS/text message service, the following terms apply:

  1. You consent to receive recurring SMS/text messages from St. Agrestis to the mobile number you provided

  2. Service-related messages include order updates, shipment tracking, and account alerts

  3. Promotional messages include discounts, special offers, and marketing messages

  4. You understand that participation is voluntary and not a condition of purchase

  5. Message and data rates apply; check your wireless carrier plan for details

  6. You are responsible for all charges imposed by your wireless provider

  7. You can opt out at any time by texting "STOP" to the number from which you received the message or by contacting us at orders@stagrestis.com

  8. For support or assistance, text "HELP" to our SMS shortcode or email orders@stagrestis.com


14. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes to this Privacy Policy, we will notify you by:

  1. Posting the updated policy on our website with a new "Last Updated" date

  2. Sending you an email notification if you have an account with us

  3. Providing a prominent notice on our homepage

Your continued use of our Services after any updates indicates your acceptance of the updated Privacy Policy. We encourage you to review this policy regularly to stay informed about how we protect your information.

15. California "Shine the Light" Privacy Notice

If you are a California resident, California Civil Code Section 1798.83 provides you with the right to request information about the categories of personal information that St. Agrestis shares with third parties for their direct marketing purposes.

To make such a request, please send an email to orders@stagrestis.com with the subject line "California Shine the Light Request" and include:

  1. Your full name

  2. Your California address

  3. A description of the information you are requesting

We will respond within 30 days with the requested information.


16. Privacy Inquiries and Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Email: orders@stagrestis.com

Subject Line: "Privacy Policy Inquiry" or "Data Privacy Request"

Mailing Address:

St. Agrestis

233 Eagle Street

Brooklyn, NY 11222

United States

SMS/Text Support:

Text "HELP" to our SMS number (for SMS-related issues only)

Or email: orders@stagrestis.com

We will respond to your inquiry within thirty (30) days. If you are unsatisfied with our response, you may have the right to lodge a complaint with your state's Attorney General or, if you are an EU/EEA resident, your local data protection authority.

17. Your Consent

By visiting our website, using our Services, or making a purchase, you consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy. If you do not agree with our practices, please do not use our Services.

Grazie for your trust in St. Agrestis.

This Privacy Policy was last updated on December 19, 2025, and is effective immediately. We are committed to protecting your privacy and will continue to refine these policies as our business and the regulatory landscape evolve.