Privacy policy
Last updated: November 5, 2026
Whitethorn & Willow (“we”) runs this shop. The site is hosted by Shopify. This policy explains what we collect when you visit, buy, or email us.
What we collect
- Name, email, shipping and billing address, and phone when you order or contact us
- Payment details, handled by Shopify and the payment provider — we do not store full card numbers
- Order history, cart activity, and messages you send us
- Device and usage data (such as IP address, browser, and pages viewed), including cookies
Where it comes from
You, your device, Shopify, and the services that help us take payment, ship orders, send email, and run the site.
How we use it
To take and fulfil orders, handle returns, reply to you, keep the shop secure, improve the site, and — only if you have opted in — send newsletter or restock emails. You can unsubscribe at any time.
Site analytics
We use Microsoft Clarity to understand how visitors use our site, through anonymised session recordings and heatmaps (for example, how far people scroll and what they tap). Anything typed into forms is masked and not recorded, and Clarity cannot see payment details. Microsoft processes this data under its own privacy statement at privacy.microsoft.com.
Who we share it with
Shopify and companies that work for us (payments, shipping, email, hosting, site analytics). We do not sell your information. Shopify may process data in Canada, the United States, the United Kingdom, or other countries. See Shopify’s consumer privacy policy.
Canada
We sell to customers in Canada. You can ask what we hold about you, or ask us to correct it, by emailing info@whitethornandwillow.com. You may also contact the Office of the Privacy Commissioner of Canada.
Marketing
We only send promotional email if you opted in (for example the newsletter). Order emails still go out when needed.
Children
This shop is not aimed at children. We do not knowingly collect information from children.
How long we keep it
For as long as we need it to fulfil orders, keep records, or meet the law, then we delete or anonymise it.
Your choices
Depending on where you live, you may ask for access, correction, deletion, or a copy of your information. Email us. We may need to confirm it’s you.
Security
We and Shopify use standard safeguards. No website is perfectly secure.
Changes
We may update this page and will change the date above.
Contact
info@whitethornandwillow.com