Privacy Policy

Effective September 1, 2026

This policy covers collectednorth.com, operated by Collected North LLC (“Collected North,” “we,” “us”). It explains what we collect, why, who we share it with, and what you can ask us to do about it.

1. What we collect

When you buy something. Name, billing and shipping address, email address, phone number, and the contents of your order. Your card details go directly to our payment processor — we never see or store a full card number.

When you visit. IP address, browser and device type, pages viewed, referring site, and how you moved through the store. This comes from cookies and similar technologies. See Section 6.

When you contact us or sign up. Whatever you send us: email address, message contents, and, if you subscribe, your marketing preferences.

When you sell or consign to us, if that ever applies: contact details and any information you provide about the piece and its provenance.

Nothing about your health, beliefs, or background. We sell secondhand objects. Ring sizes and shipping addresses are as personal as it gets here.

We don’t collect Social Security numbers, government ID numbers, or financial account numbers, and we don’t ask for information about children. The store isn’t directed at anyone under 16 and we don’t knowingly collect their data.

2. Why we use it

• To take payment, fulfill your order, and ship it
• To email you about that order — confirmations, tracking, delays
• To answer your questions
• To send marketing email, if you’ve opted in. Every one of those has an unsubscribe link
• To remind you about a cart or a checkout you started and didn’t finish, if you gave us your email along the way. These are occasional, and every one has an unsubscribe link
• To detect and prevent fraud and chargeback abuse
• To understand which pieces get attention, so we source better
• To meet tax, accounting, and other legal obligations

We don’t sell your personal information for money, and we have no plans to.

Where you’ve consented, we use advertising and analytics tools from companies like Meta and Google. Those tools pass limited information about your visit to the platform that provides them: pages you looked at, whether you bought something, and a device identifier. We use it to measure whether our advertising works and to reach people likely to care about what we sell. Those companies also use that information for their own purposes, which is why several US state laws treat this as sharing for targeted advertising rather than a sale. You can turn it off. Decline advertising cookies in the banner, use the Your Privacy Choices link in our footer, or send a Global Privacy Control signal, and we’ll honor it.

3. Who we share it with

Only the companies that make the store run, and only what they need:

Who	What for
Shopify	Hosting the store and processing orders
Payment processors (Shopify Payments, PayPal, and similar)	Taking and verifying payment
Shipping carriers and freight brokers	Delivering your order
Email platform	Order notifications and marketing, if you’ve subscribed
Analytics providers	Understanding site traffic
Advertising platforms (Meta, Google, and similar)	Measuring our advertising and reaching people likely to be interested, where you’ve consented
Sales venues (Chairish, 1stDibs, Etsy, eBay)	Only for orders you placed on those platforms, under their own policies

We’ll also disclose information where the law requires it, to enforce our terms, or to protect our rights, and to a buyer in the event the business is sold — in which case this policy continues to apply to information transferred.

4. How long we keep it

Order records for 7 years, because tax and accounting rules require it. Marketing contacts until you unsubscribe. Abandoned cart and checkout details for 90 days. Website analytics for 26 months. Advertising audience data for 180 days, or until you opt out if that comes first. Support email for 3 years. After that we delete or anonymize.

5. How we protect it

The site runs over TLS. Payment data is handled by PCI-DSS compliant processors and never touches our own systems. Access to customer records is limited to the people who need it to fill orders. No system is perfectly secure, and we won’t claim otherwise — but if a breach affects your data and the law requires notice, you’ll get it.

6. Cookies

We use cookies for three things: keeping your cart and session working (these are essential and can’t be switched off), measuring traffic, and — where you’ve consented — advertising.

Browser settings let you block or delete cookies. Blocking the essential ones will break checkout. If you’re in the EU, UK, or a US state that requires it, you’ll see a consent banner and non-essential cookies stay off until you say otherwise.

We honor Global Privacy Control signals as an opt-out of sale or sharing where state law requires it.

7. Your rights — United States

Depending on your state, you may have the right to know what we’ve collected, get a copy, correct it, delete it, opt out of sale or sharing or targeted advertising, and not be discriminated against for asking. California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and a growing list of other states provide some or all of these.

We extend these rights to every US customer regardless of state, because maintaining separate rules by state isn’t worth it at our size.

To make a request, email legal@collectednorth.com. We’ll verify who you are — usually by confirming details of a past order — and respond within 45 days. If we need longer we’ll tell you why.

8. Your rights — EU, EEA, and UK

We sell and ship within the United States. We don’t market to, price for, or target buyers in the EU, EEA, or UK, and the store isn’t offered in those markets.

People from those places visit the site anyway, and occasionally one of them buys something shipped to a US address. If that’s you, we extend the core GDPR and UK GDPR rights as a matter of practice: access, correction, erasure, restriction, portability, objection to processing, and withdrawal of consent at any time. Email legal@collectednorth.com and we’ll handle it the same way we handle a US request.

When we process personal data, we do it on these bases:

• Contract — processing your order and delivering it
• Legitimate interests — fraud prevention, site security, and understanding how the store is used
• Consent — marketing email and non-essential cookies
• Legal obligation — tax and accounting records

Your data is processed in the United States. Where personal data moves out of the EEA or UK, the Standard Contractual Clauses and UK Addendum our processors have in place — including Shopify’s — govern the transfer.

You can complain to your national supervisory authority, or to the ICO in the UK, if you think we’ve handled your data badly. We’d rather you told us first: legal@collectednorth.com.

9. Changes

If we change this policy we’ll update the effective date at the top. Material changes get an email to anyone on our list.

10. Contact

Collected North LLC
2692 Madison Rd, Ste N1 #361
Cincinnati, OH 45208-1320
legal@collectednorth.com