Privacy policy

Privacy Policy

Last updated: November 4, 2026.

Good To Growth, LLC, doing business as Poppy Monk Needlepoint (“Poppy Monk,” “we,” “us,” or “our”), operates poppymonkneedlepointkits.com (the “Site”).

This Privacy Policy explains how we collect, use, disclose, and retain personal information when you visit our Site, make a purchase, communicate with us, or otherwise interact with our business. It also explains the privacy choices and rights that may be available to you.

“Personal information” means information that identifies, relates to, describes, or can reasonably be associated with you or your household, as defined by applicable law.

1. Personal Information We Collect

The information we collect depends on how you interact with us.

Information you provide

We collect information you provide when you place an order, create or use a customer account, subscribe to marketing, contact us, or otherwise interact with the Site. This may include:

Contact information, such as your name, email address, phone number, and billing and shipping addresses.
Order and transaction information, such as products purchased, purchase amounts, payment status, shipping details, returns, and exchanges.
Account information, if you create or use an account, including information associated with your account and order history.
Communications, such as questions, customer-service requests, feedback, and other information you choose to send us.
Marketing preferences, such as your subscription status and communication choices.

Payment information is processed by Shopify and the payment providers used at checkout. The payment information available to us depends on the payment method and provider.

If you provide another person’s information, such as a gift recipient’s name and shipping address, please provide only information you are authorized to share.

Information collected automatically

When you use the Site or interact with our digital marketing, we and our service providers may collect:

Device and browser information, including IP address, browser type, operating system, language, and device identifiers.
Usage information, including pages and products viewed, searches, referring websites, shopping-cart activity, and interactions with the Site.
Cookie identifiers, advertising identifiers, and similar technical information.
Approximate location inferred from your IP address.
Information about interactions with our advertisements and marketing communications, where the relevant technologies are enabled.

We collect this information through cookies, pixels, tags, log files, and similar technologies, subject to applicable consent requirements and privacy choices.

Information from service providers and partners

We may receive information from Shopify, payment providers, shipping and fulfillment providers, analytics providers, and advertising partners. This may include payment and delivery updates, fraud-prevention information, and reports about Site activity and advertising performance.

2. How We Use Personal Information

We use personal information to:

Process payments, fulfill orders, arrange delivery, and handle returns and exchanges.
Provide customer support and communicate about orders, accounts, and requests.
Operate, maintain, troubleshoot, and improve the Site.
Understand how visitors use the Site and evaluate product and service performance.
Send marketing communications consistent with your preferences and applicable law.
Deliver relevant advertising, create advertising audiences, and measure advertising effectiveness, subject to applicable consent and opt-out requirements.
Detect and prevent fraud, unauthorized activity, and security incidents.
Maintain business records, comply with legal obligations, resolve disputes, and enforce our agreements.

3. How We Disclose Personal Information

We disclose personal information as reasonably necessary for the purposes described in this Privacy Policy, including to:

Store and technology providers, including Shopify and providers that host or support the Site.
Payment providers that process transactions and help prevent payment fraud.
Shipping and fulfillment providers that help deliver orders.
Customer-service and communications providers that help us respond to requests and send messages.
Analytics and advertising partners, including Google and Meta, that help us understand Site activity, deliver advertising, and measure results.
Professional advisers, such as accountants, attorneys, and insurers, where necessary for their services.

We may also disclose information:

To comply with applicable law, legal process, or lawful government requests.
To protect the rights, property, or safety of our business, customers, or others.
In connection with a proposed or completed merger, acquisition, financing, reorganization, or sale of all or part of our business.
At your direction or with your consent.

The categories of information disclosed depend on the recipient’s role. For example, a shipping provider receives delivery information, while an advertising partner may receive online identifiers, activity information, or customer matching information as described below.

4. Shopify and Other Third-Party Services

Our store is hosted on Shopify, which provides the ecommerce platform that enables us to sell products and process orders.

Shopify processes personal information to provide services to us. Shopify may also process information for its own purposes in connection with features and services you use, as described in its privacy policies.

For more information, see Shopify’s Privacy Policy. You can also visit Shopify’s Privacy Controls to learn about choices available directly through Shopify.

We use Shopify Network Intelligence. With this feature enabled, Shopify uses personal information about your interactions with our store, together with information about your interactions with other merchants and Shopify, to provide enhanced features, including personalized services and advertising. Shopify is responsible for processing personal information for these purposes and for responding to requests concerning that processing. You can learn more through Shopify’s privacy policies and privacy controls linked above.

Other third-party services you choose to use, including payment services, may process information under their own privacy policies.

5. Advertising, Customer Matching, and Analytics

We use analytics and advertising services, including Google Analytics and Google Ads, Meta (Facebook, Instagram), Pinterest, and Tiktok to understand Site activity, promote our products, and measure advertising performance.

We and our partners may use cookies, pixels, and similar technologies to collect information about your visits, purchases, and interactions with advertisements. This information may help us show you relevant advertising on other websites and services.

We may also share customer email addresses and phone numbers with advertising partners, including Google, for customer matching, relevant advertising, and advertising measurement. For supported integrations, these details are converted into hashed values—a process that transforms them into coded values—to enable matching with information held by the partner. Hashing is a security measure; it does not necessarily make the information anonymous.

These activities are subject to applicable consent requirements and your privacy choices.

Some disclosures to advertising partners may be considered a “sale” or “sharing” of personal information, or processing for “targeted advertising,” under applicable U.S. state privacy laws, even when we do not receive money in exchange.

Information involved in these advertising activities may include contact identifiers, cookie and device identifiers, browsing activity, purchase activity, and inferred interests.

You can learn more about Google’s practices in Google’s Privacy Policy.

6. Cookies and Similar Technologies

We use cookies and similar technologies for several purposes:

Essential functions, such as shopping-cart operation, checkout, security, and remembering privacy choices.
Preferences and functionality, such as remembering selections and improving convenience.
Analytics, such as understanding visits and Site performance.
Advertising and measurement, such as delivering relevant ads and evaluating campaigns.

Some technologies are provided by Shopify; others may be provided by apps or other service providers used on the Site. Their duration varies: some expire when you close your browser, while others remain until they expire or are deleted.

Where available, use the Site’s cookie banner or privacy-preference controls to manage nonessential technologies. You can also adjust your browser settings to block or delete cookies. Blocking certain cookies may affect how the Site functions.

Cookie settings do not necessarily control every form of information sharing, including customer-list matching. Please also review the advertising choices below.

7. Your Marketing and Advertising Choices

Email marketing

You can unsubscribe from marketing emails using the unsubscribe link in an email or by contacting us. Unsubscribing from marketing does not stop necessary transactional communications, such as order confirmations and customer-service responses.

To learn about or exercise available choices concerning the sale or sharing of personal information and targeted advertising, visit our Do Not Sell or Share My Personal Information page.

You may also contact us at info@poppymonkneedlepointkits.com to request that we stop using your email address or phone number for customer-list advertising matching, subject to applicable law and available rights.

Where required by applicable law, we recognize supported opt-out preference signals, including Global Privacy Control, as requests to opt out of sale, sharing, or targeted advertising. A browser-based signal generally applies to the browser or device used. Where required and where we can associate the signal with you, we will also apply it more broadly.

You may need to make choices separately on different browsers or devices.

We do not respond to older “Do Not Track” browser signals as a separate privacy mechanism. This does not affect our handling of Global Privacy Control or other legally recognized opt-out signals.

Opting out of targeted advertising does not eliminate advertising; ads may simply be less relevant to you.

8. U.S. State Privacy Rights

Depending on your state of residence, whether a particular privacy law applies to our business, and applicable exceptions, you may have the right to:

Confirm whether we process personal information about you and request access to it.
Obtain information about the categories of personal information collected, the sources of that information, the purposes for processing, and the categories of recipients.
Request correction of inaccurate personal information.
Request deletion of personal information.
Obtain a portable copy of certain personal information.
Opt out of the sale or sharing of personal information or its use for targeted advertising.
Opt out of certain profiling that produces legal or similarly significant effects, where applicable.
Exercise additional rights concerning sensitive personal information, where applicable.
Appeal a decision about a privacy request, where applicable.

We will not unlawfully discriminate against you for exercising your privacy rights.

Submitting requests

Contact info@poppymonkneedlepointkits.com to submit a privacy request. For advertising-related opt-outs, you may also use the privacy choices described above.

We may need to verify your identity before fulfilling an access, correction, or deletion request. We will request information reasonably necessary for verification. Opt-out requests do not require account creation or the same identity-verification process as access or deletion requests.

Where permitted by law, you may designate an authorized agent to submit a request on your behalf. We may request proof of authorization and, where appropriate, verification of your identity.

We will respond within the time required by applicable law. Some information may be retained or withheld where an exception applies, such as when needed to complete a transaction, maintain legally required records, or protect against fraud.

If we deny a request and you have a right to appeal, email us with “Privacy Request Appeal” in the subject line. We will review the appeal and explain the outcome and any further options required by applicable law.

9. How Long We Retain Information

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Retention periods depend on the type of information and why it is needed. For example:

Order and transaction records may be retained for accounting, tax, warranty, fraud-prevention, and legal purposes.
Customer-service communications may be retained to resolve requests and maintain appropriate business records.
Marketing information may be retained while needed for permitted marketing activities. We may retain limited suppression information to honor unsubscribe and opt-out requests.
Technical and analytics information is retained according to the purposes and settings of the relevant systems.

When information is no longer needed, we take steps to delete it, deidentify it, or otherwise handle it as required by applicable law.

10. Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information.

No method of internet transmission or electronic storage is completely secure, and we cannot guarantee absolute security.

11. Children’s Privacy

The Site is intended for a general adult audience and is not directed to children under 13. We do not knowingly collect personal information from children under 13.

If you believe a child has provided us with personal information, please contact us so we can investigate and take appropriate action.

We do not knowingly sell or share the personal information of individuals under 16.

12. International Visitors

We are based in the United States. Personal information may be processed in the United States, Canada, and other countries where Shopify and our other service providers operate. Privacy laws in these countries may differ from those in your location.

Where applicable law requires safeguards for international transfers, those transfers must be made using an appropriate legal mechanism.

If the laws of the European Economic Area, United Kingdom, or Switzerland apply to our processing of your information, you may have rights to access, correct, delete, or obtain a copy of your information; restrict or object to certain processing; and withdraw consent where processing is based on consent.

Where those laws apply, our legal bases for processing include:

Performance of a contract, for processing orders, arranging delivery, and handling related requests.
Legitimate interests, where appropriate, for operating and improving the business, maintaining security, and preventing fraud, subject to your rights.
Compliance with legal obligations, including applicable accounting and tax requirements.
Consent, where required for marketing, nonessential cookies, or advertising activities.

You may contact us to exercise applicable rights. You may also lodge a complaint with the relevant data protection authority.

13. Third-Party Websites

The Site may link to websites or services operated by others. Their privacy practices are governed by their own policies, not this Privacy Policy.

14. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, services, or legal obligations. We will update the date above when we make changes and provide additional notice or obtain consent where required by law.

15. Contact Us

For privacy questions, requests, or complaints, contact:

Good To Growth, LLC
Doing business as Poppy Monk Needlepoint
Email: info@poppymonkneedlepointkits.com
Mail: 152 Mine Lake Ct, Ste 100, Raleigh, NC 27615