Privacy Policy

Effective September 23, 2026

This policy explains what information Vestments and Embroidery LLC ("we", "us") collects when you visit churchembroidery.net or order from us, how we use it, and the choices you have. We are a small workshop that makes Orthodox liturgical vestments to order. We collect only what we need to make, ship and support your order, and we do not sell your personal information.

Information we collect

Information you give us:

• Order and contact details — your name, email address, phone number, and shipping and billing addresses.
• Account details — if you create an account: your login email, a securely hashed password, saved addresses, wishlist and order history.
• Measurements and customization — body measurements, sizes, colors, embroidery text, designs and reference photos you send so we can make a garment or item that fits.
• Messages — what you write to us by email, through the contact form, or in the on-site chat, including any photos you attach; design-proof replies and approvals.
• Reviews — the name, text, country and photos you choose to publish with a product review.
• Newsletter — your email address, if you subscribe.

Information collected automatically:

• Basic visit logs — our own server records the pages requested, IP address, browser type and referring page. We use this to keep the site secure, spot errors and broken links, and filter out bots. It stays on our systems.
• Cookies — described in the next section. Analytics and advertising cookies are used only if you accept them.

Payment card details. Card payments are processed by Square, and PayPal payments by PayPal. Your card number is entered into their secure payment forms and goes directly to them — we never see or store your card number. We receive a payment confirmation from them, which we match to your order.

Cookies and your choices

Strictly necessary cookies are always on, because the site cannot work without them: they keep you signed in, hold your shopping cart, protect forms against forgery (CSRF), remember your language, and remember your cookie choice itself. They are not used for tracking.

Optional cookies are loaded only after you click Accept in the cookie banner. Until then — and at all if you click Decline — these services are not loaded and receive nothing from your visit:

• Google Analytics 4 (Google LLC) — tells us, in aggregate, how visitors find and use the site: pages viewed, products looked at, items added to the cart, and completed purchases with their value. Google may process your IP address and a device identifier to do this.
• Meta Pixel (Meta Platforms, Inc.) — measures whether our Facebook and Instagram posts or ads lead to visits and orders, and may let Meta show our ads to people who visited the site. It reports page views, products viewed, add-to-cart, checkout and purchase events.

Browser privacy signals. If your browser sends a Global Privacy Control (GPC) or Do Not Track signal, we treat it as a Decline: no banner is shown and the optional services are not loaded unless you turn them on yourself.

Changing your choice. Your choice is saved in a cookie for 12 months. You can change it at any time with the button below or the "Cookie settings" link at the bottom of every page. Withdrawing consent stops the optional services from loading and deletes the analytics cookies they set on this site. You can also clear or block cookies in your browser settings.

Cookie settings

How we use your information

• To make, ship and deliver your order, and to send order confirmations, design proofs, production updates and tracking information.
• To answer your questions and provide customer support, including through the on-site chat.
• To take payment, issue invoices and refunds, and prevent fraud.
• To keep records we are required to keep, such as for sales tax and accounting.
• To send our newsletter, if you subscribed. Every newsletter has an unsubscribe link.
• To keep the site secure and working, and — with your consent — to understand how it is used so we can improve it.

Who we share it with

We share information only with service providers that help us run the shop, and only what each one needs:

• Payment processors — Square and PayPal, to take and refund payments.
• Shipping carriers — your name, address and phone number, to deliver your order and provide tracking. International shipments include the customs details the destination country requires.
• Hosting, email and media storage — the providers that host the website and database, deliver our email (Brevo), and store product and uploaded images and videos.
• AI assistance — to help us answer faster, chat messages and email drafts may be processed by an AI service provider (Anthropic) to suggest a reply. The provider processes this content on our behalf and does not use it to train its models.
• Our workshop team — order details and measurements are shared with the people making your item, sometimes through a private messaging app.
• Analytics and advertising — only if you accepted optional cookies, as described above.

We may also disclose information if the law requires it, to protect our rights or our customers, or as part of a sale or transfer of the business.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising unless you accept optional cookies. You can refuse or withdraw that at any time, as described above.

How long we keep it

We keep order records, including measurements, for as long as needed to support your order, make repeat or matching pieces, and meet our tax and accounting obligations (generally up to seven years). Account information is kept until you ask us to delete your account. Newsletter addresses are kept until you unsubscribe. Server visit logs are used only for security, troubleshooting and overall traffic counts — never to build a profile of you.

Your rights

Wherever you live, you can ask us to tell you what personal information we hold about you, give you a copy, correct it, or delete it (except what we must keep by law, such as records of a completed sale). You can also opt out of analytics and advertising cookies at any time. Depending on where you live — for example California and other US states with privacy laws, or the European Economic Area and the UK — you may have additional rights, including the right to object to or restrict certain uses, and to complain to your local data-protection authority. We will not treat you differently for exercising any of these rights.

To make a request, email order@churchembroidery.net. We may need to confirm your identity (for example, from the email address on your order) before acting on it, and will reply within 30 days — 45 at most where the law allows. An authorized agent may make a request on your behalf with your written permission.

Visitors outside the United States. We are based in the US, and your information is stored and processed here. We rely on the need to perform your order, our legitimate interest in running the shop, and — for optional cookies and the newsletter — your consent.

Security

The whole site uses encrypted HTTPS connections, passwords are stored only in hashed form, and access to order information is limited to the people who need it. No system is perfectly secure, but we take reasonable care to protect your information.

Children

This site is intended for adults and is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has sent us information, please contact us and we will delete it.

Changes to this policy

If we change how we handle your information, we will update this page and the effective date at the top. Significant changes will be highlighted on the site.