Last updated: August 31, 2026
This is a thorough, standard-practice draft covering how Sovereign Weft actually operates today — real photography vendor sourcing, DM/email contact, and Stripe for payment once checkout goes live. It is not a substitute for review by a licensed attorney in your state before this is genuinely relied on as a binding legal document — especially once real card payments are flowing through it. Fields marked like this need your real business details filled in before this page goes live; nothing has been invented in their place.
1. Who We Are
Sovereign Weft ("we," "us," "our") operates this website to showcase and sell human hair extensions and wigs. This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and the choices you have.
Legal business name: [insert registered business name]. Business address: [insert address]. If you have questions about this policy, contact us at [insert business email once set up] or by DM on Instagram.
2. Information We Collect
Information you give us directly
- Order & contact information — name, shipping address, email address, and phone number, collected at checkout or when you DM/email us about a custom order.
- Order details — the products, textures, colors, lengths, and other options you select.
- Communications — messages you send us via Instagram DM, email, or any contact form on this site, including any photos you choose to share for length or color matching.
Information collected automatically
- Device & usage data — browser type, pages visited, and general technical logs collected automatically when you visit the site, of the kind any standard web server or analytics tool records.
- Cookies — small files that may be used to keep the site functioning correctly and, if analytics are ever added, to understand aggregate traffic patterns. This site does not currently run third-party advertising trackers.
Information we do not collect
We never see or store your full payment card number. Card and payment details are collected and processed directly by Stripe, our payment processor — see Section 4.
3. How We Use Your Information
- To process, fulfill, and ship your order.
- To communicate with you about your order, including confirmations and shipping updates.
- To respond to custom-order requests and customer service questions.
- To improve our products, catalog, and this website.
- To detect and prevent fraud or abuse.
- To send you marketing communications, but only if you've opted in (e.g., by following and engaging with our Instagram, or explicitly signing up); you can opt out at any time.
4. Payment Processing
All card payments on this site are processed by Stripe, Inc., a PCI-DSS Level 1 certified payment processor. When you check out, your payment details are sent directly to Stripe and are never transmitted to or stored on our servers. Stripe's use of your information is governed by Stripe's own privacy policy. Custom orders arranged by email or DM that fall outside standard checkout will be invoiced through Stripe directly as well, once that flow is set up.
5. How We Share Information
We do not sell your personal information. We share it only with:
- Stripe, to process payment.
- Shipping carriers (e.g., USPS, UPS), to deliver your order.
- Service providers who help us run this business (e.g., hosting), bound to use your data only to provide that service.
- Law enforcement or regulators, only if required by law, subpoena, or to protect our legal rights.
6. Data Retention
We keep order and customer information for as long as needed to fulfill orders, handle returns or disputes, meet our tax and accounting obligations, and resolve any legal claims. You can request deletion of your personal data at any time, subject to what we're legally required to retain (e.g., transaction records for tax purposes).
7. Your Rights
Depending on where you live, you may have the right to:
- Request a copy of the personal information we hold about you.
- Request correction of inaccurate information.
- Request deletion of your information.
- Opt out of marketing communications at any time.
- (California residents) Rights under the CCPA/CPRA, including the right to know, delete, and opt out of sale of personal information — noting again that we do not sell personal information.
To exercise any of these rights, contact us at [insert business email].
8. Children's Privacy
This site is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.
9. Security
We take reasonable technical and organizational measures to protect your information. No method of transmission or storage is 100% secure, but sensitive payment data is handled entirely by Stripe's PCI-compliant infrastructure rather than by us directly, which meaningfully limits our exposure and yours.
10. Changes to This Policy
We may update this policy from time to time. The "Last updated" date at the top will reflect the most recent revision. Material changes will be reflected here before they take effect.
11. Contact Us
Questions about this policy? Reach us at [insert business email] or by Instagram DM.