Your privacy, in plain language.

This Privacy Policy describes how Sunway Embroidery Supplies (“we,” “us,” or “our”) collects, uses, and protects your personal information when you visit www.sunwayembroidery.com or purchase our products.

1. Who We Are

Sunway Embroidery Supplies is an e-commerce business based in Toronto, Canada, with a warehouse in Buffalo, New York. We provide embroidery supplies to commercial businesses and individual crafters across North America and internationally.

For privacy-related inquiries, please contact us at info@sunwayembroidery.com.

2. Information We Collect

Information You Provide Directly

When you place an order or create an account:

• Name (first and last)
• Email address
• Phone number
• Shipping address
• Billing address
• Company name (for business customers)

When you contact us:

• Email content
• Phone messages or call records
• Customer service inquiries

When you sign up for our newsletter or marketing emails:

• Email address
• Name (optional)
• Marketing preferences

Information Collected Automatically

When you visit our website, we automatically collect:

• IP address (anonymized for compliance)
• Browser type and version
• Device type and operating system
• Pages viewed and time spent
• Referring website
• Geographic region (country/state level)
• Cookies and similar tracking technologies

Information We Do NOT Collect or Store

We do not store your credit card or bank account details. All payment processing is handled by our payment partners (PayPal, Stripe) under their own PCI-DSS compliant security standards.

3. How We Use Your Information

We use the information we collect to:

• Fulfill your orders — process payments, ship products, and provide order updates
• Provide customer service — answer questions, resolve issues, process returns
• Send marketing communications — only if you’ve opted in, such as product updates, promotions, and newsletters
• Improve our website and services — analyze usage patterns to enhance user experience
• Comply with legal obligations — tax records, fraud prevention, and regulatory requirements
• Personalize your experience — recommend products based on your interests
• Send transactional emails — order confirmations, shipping notifications, and invoices (these are not marketing emails)

4. Marketing Communications

Email Marketing

We will only send you marketing emails if you have explicitly opted in by subscribing to our newsletter, checking the marketing opt-in box at checkout, or confirming your subscription via our double opt-in process.

You can unsubscribe at any time by clicking the “unsubscribe” link in any marketing email, replying with “UNSUBSCRIBE,” or emailing us at info@sunwayembroidery.com.

We comply with Canada’s Anti-Spam Legislation (CASL) and the U.S. CAN-SPAM Act. Unsubscribe requests are processed within 10 business days.

SMS / Text Messaging

We may collect your phone number for order-related communications. We will not send marketing SMS messages without your explicit, separate consent. You may opt in or opt out of SMS marketing at any time.

5. How We Share Your Information

We do not sell, rent, or trade your personal information. We share information only with trusted service providers who help us operate our business:

Service Provider	Purpose	Location
WP Engine	Website hosting and security	USA
PayPal & Stripe	Payment processing	USA
Brevo (Sendinblue)	Email delivery	EU
FluentCRM	Customer relationship management	Stored on our website
Google Analytics	Website analytics	USA
Shipping carriers (UPS, USPS, Canada Post, etc.)	Order delivery	Various

Each of these service providers has its own privacy policy and is contractually required to protect your data and use it only for the purposes we’ve authorized. We may also share information when legally required, such as in response to a court order, subpoena, or law enforcement request.

6. Cookies and Tracking Technologies

Our website uses cookies and similar technologies:

• Essential cookies — required for the shopping cart, checkout, and site functionality
• Analytics cookies — help us understand how visitors use our site
• Marketing cookies — track engagement with our emails and promotions (only if you’ve opted in)

You can disable cookies through your browser settings, though this may affect some site functionality.

7. Your Rights

For All Customers

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate or outdated information
• Delete your personal information (subject to legal/business retention obligations)
• Opt out of marketing communications at any time
• Receive a copy of your data in a portable format

To exercise these rights, contact us at info@sunwayembroidery.com with the subject line “Privacy Request.”

Canadian Residents (PIPEDA)

Under the Personal Information Protection and Electronic Documents Act, you have the right to access and correct your personal information. Contact us with any questions about how we handle your data.

California Residents (CCPA)

If you reside in California, you have the right to know what personal information we collect, use, and share; the right to delete personal information; the right to opt out of the sale of personal information (we do not sell your data); and the right to non-discrimination for exercising these rights.

European Residents (GDPR)

If you reside in the European Economic Area, you have the rights described above plus the right to withdraw consent and the right to lodge a complaint with a supervisory authority.

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this policy, comply with legal/accounting/tax obligations (typically 7 years for financial records), and resolve disputes or enforce our agreements. When we no longer need your information, we securely delete or anonymize it.

9. Data Security

We use industry-standard security measures to protect your information:

• SSL/TLS encryption for data transmission
• Secure password storage (hashed, not plaintext)
• Limited employee access on a need-to-know basis
• Regular security updates and monitoring
• Anonymized IP addresses in our marketing platform

While we take reasonable precautions, no system is 100% secure. If a data breach occurs that affects your information, we will notify you in accordance with applicable laws.

10. International Data Transfers

We are based in Canada with a warehouse in the USA. Our service providers may be located in other countries (USA, Europe). When your data is transferred internationally, we ensure appropriate safeguards are in place to protect your privacy in accordance with applicable laws.

11. Children’s Privacy

Our services are not directed at children under 13 (or under 16 in the EU). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately and we will delete it.

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies before providing any personal information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last Updated” date at the top of this policy, notify you via email if the changes are material (and you’ve opted into our communications), and post a notice on our website. Your continued use of our website after changes are posted constitutes your acceptance of the updated policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: