privacy policy.

setritual (“we,” “us,” or “our”) respects your privacy. this policy explains what information we collect when you use setritual.com (the “site”) or buy from us, how we use it, who we share it with, and the choices you have.

by using the site, you agree to this policy.

what we collect.

when you visit the site or place an order, we may collect:

• contact information — name, email, phone number, shipping and billing address.
• order information — items purchased, order history, payment method (processed by our payment providers; we don’t store full card numbers).
• account information — if you create an account, your login credentials and preferences.
• communication — emails, support messages, notes sent to hello@setritual.com.
• technical information — ip address, device type, browser, pages viewed, referral source, and similar data collected automatically through cookies and analytics tools.

we do not intentionally collect information from anyone under 18.

how we use it.

we use your information to:

• process, fulfill, and ship your orders.
• communicate about orders, returns, and customer service questions.
• send marketing and drop announcements, if you’ve opted in.
• improve the site and the fit of what we make.
• prevent fraud and protect the security of the site.
• comply with legal obligations.

who we share it with.

we don’t sell your personal information. we share it only with the partners that help us operate:

• shopify — our e-commerce platform.
• payment processors (shopify payments, paypal, apple pay, shop pay) — to process your purchase.
• shipping carriers — to deliver your order.
• email and sms providers (klaviyo, or similar) — to send notes you’ve opted into.
• analytics providers (google analytics, meta, tiktok) — to understand how the site is used.
• review platforms (yotpo, judge.me) — to collect and display customer reviews.
• customer support tools — to respond to your questions.

each of these partners has their own privacy practices. we select partners who meet our standards for data security.

we may also disclose information if required by law, subpoena, or court order, or to protect the rights, property, or safety of setritual, our customers, or others.

cookies and tracking.

we use cookies and similar technologies to keep the site functioning, remember your preferences, analyze traffic, and personalize what you see. you can disable cookies in your browser settings, though parts of the site may not work as intended without them.

we honor “do not track” signals where required by law.

your choices.

you can:

• opt out of marketing emails — click “unsubscribe” at the bottom of any note we send.
• opt out of marketing texts — reply stop to any message.
• request access to your personal information.
• request correction of inaccurate information.
• request deletion of your information, subject to legal retention requirements.
• opt out of the sale or sharing of personal information for targeted advertising (we don’t sell, but some states treat certain ad-partner data sharing as a “sale”).

to make any of these requests, email hello@setritual.com with your name and the email associated with your account.

your rights under state and international law.

if you’re a resident of california, virginia, colorado, connecticut, utah, or another state with a consumer privacy law, you may have additional rights, including the right to know, delete, correct, and opt out of certain data sharing. we honor these rights for all customers, regardless of location.

if you’re in the european economic area, united kingdom, or another jurisdiction with data protection laws, you have rights under gdpr or equivalent law, including the right to access, rectify, erase, restrict, or object to processing of your data.

to exercise any of these rights, email hello@setritual.com.

how long we keep it.

we keep your information as long as your account is active, as needed to provide services, or as required by law (typically seven years for tax and accounting records). when it’s no longer needed, we delete or anonymize it.

how we protect it.

we use industry-standard security measures to protect your information — encryption in transit, secure servers, and access controls. no system is perfectly secure, but we treat your data the way we’d want ours treated.

if a breach affects your data, we’ll notify you as required by law.

changes to this policy.

we may update this policy from time to time. the “last updated” date at the top reflects the most recent change. if the update is significant, we’ll notify customers who have opted into our communications.