U.S. State Privacy Notice
U.S. State Privacy Notice
If you live in a state with a consumer privacy law you have specific rights over your information. Here is what we collect, what we do with it, and how to exercise those rights.
Who this covers
Residents of states with comprehensive consumer privacy legislation, including California, Colorado, Connecticut, Delaware, Indiana, Iowa, Montana, Oregon, Tennessee, Texas, Utah and Virginia. It adds to our Privacy Policy rather than replacing it.
Categories we collect
- Identifiers
- Name, address, email, phone, IP address
- Commercial
- Items bought, amounts paid, return history
- Internet activity
- Pages viewed, referrer, device and browser
- Payment confirmation
- Held by our processor, not by us
- Inferences
- General preferences from what you browse and buy
These are used for the business purposes listed in the Privacy Policy: orders, support, fraud prevention, legal obligations and store improvement.
No sale of personal information
We do not sell personal information for money, and we do not share it for cross-context behavioural advertising without consent. Consent can be withdrawn at any time via our Do Not Sell or Share page.
Sensitive information
We do not collect government identifiers, precise geolocation, health information, or data about race, religion or sexual orientation.
Your rights
- Know the categories we hold and why
- Access a copy of the specific information
- Correct anything inaccurate
- Delete information we no longer need for a legal purpose
- Opt out of sale or sharing for advertising
- Limit use of sensitive information, which we do not collect
- Non-discrimination — no higher price, worse service or refusal because you asked
Making a request
Email support@threadandsuch.us stating the right you want to use, plus the email address or order number we can match you against. We may ask for one or two confirming details so that we do not release your information to someone else.
We respond within 45 days. Where a request is complex we may extend once by a further 45 days, and we will tell you before the first period expires.
Authorised agents
An agent can submit a request for you. We will ask for written permission signed by you and may still contact you directly to confirm.
Global Privacy Control
A GPC signal from your browser is treated as a valid opt-out for that browser, with no further action needed from you.
Appeals
If we decline a request we will say why in writing and explain how to appeal. Appeals are reviewed by someone other than the person who made the original decision.
Last updated: 12 November 2026
Contact
threadandsuch
2989 Todds Lane, San Antonio, TX 78205, United States
Email: support@threadandsuch.us · Monday to Friday, 9:00 a.m. to 5:00 p.m. CT