Privacy policy

Privacy Policy

Theo’s Haberdashery
Last updated: January 20, 2026

Theo’s Haberdashery (“we,” “us,” or “our”) operates this store and website (the “Services”) to provide customers with a curated shopping experience, including the sale of premium cigars and tobacco products, vintage watches, and vintage clothing. Our store is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you visit, use, or make a purchase through the Services, or otherwise communicate with us. If there is a conflict between this Privacy Policy and our Terms of Service, this Privacy Policy governs with respect to the collection, processing, and disclosure of personal information.

By accessing or using the Services, you acknowledge that you have read and understand this Privacy Policy.

Personal Information We Collect

When we use the term “personal information,” we mean information that identifies, relates to, describes, or can reasonably be linked to you. This does not include information that has been anonymized or de-identified.

Depending on how you interact with the Services and as permitted by law, we may collect the following categories of personal information:

Contact Information: name, billing address, shipping address, phone number, and email address
Financial Information: payment card information, transaction details, form of payment, and payment confirmations (payment information is processed securely by third-party processors; we do not store full card numbers)
Account Information: username, password, preferences, and account settings
Transaction Information: items viewed, added to cart, purchased, returned, exchanged, or canceled
Communications: information provided when contacting customer support or communicating with us
Device & Technical Information: IP address, browser type, device identifiers, and network information
Usage Information: how and when you interact with or navigate the Services
Age-Verification Information: confirmation of legal age for tobacco purchases, where required by law

Sources of Personal Information

We collect personal information from the following sources:

Directly from you, when you create an account, place an order, contact us, or otherwise provide information
Automatically, through cookies and similar technologies when you use the Services
From service providers, including payment processors, shipping carriers, age-verification services, and analytics providers
From partners or third parties, where permitted by law

How We Use Personal Information

We may use personal information for the following purposes:

Providing and Improving the Services

To process payments, fulfill orders, manage accounts, arrange shipping, handle returns or exchanges, provide customer support, personalize your experience, and improve the functionality and performance of the Services.

Marketing and Advertising

To send promotional communications and display advertisements related to our products, including based on prior interactions with the Services. You may opt out of marketing communications at any time.

Security and Fraud Prevention

To authenticate accounts, verify identity and age where required, detect and prevent fraud or unauthorized activity, and protect the integrity of our Services. You are responsible for maintaining the confidentiality of your account credentials.

Legal and Compliance Purposes

To comply with applicable laws and regulations, respond to lawful requests, enforce our policies, and protect our rights and the rights of others.

Disclosure of Personal Information

We may disclose personal information in the following circumstances:

To Shopify, payment processors, shipping carriers, age-verification providers, and other service providers that perform services on our behalf
To marketing and advertising partners, in accordance with their privacy policies and applicable law
When you direct or consent to disclosure, such as for shipping or third-party integrations
To affiliates within our corporate group
In connection with business transactions such as mergers or asset sales
To comply with legal obligations or protect the rights, safety, and property of Theo’s Haberdashery and others

We do not knowingly sell personal information.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information to provide and improve the Services. Information submitted through the Services is shared with Shopify and may be processed in countries outside your jurisdiction.

We also use certain Shopify features that help protect, grow, and improve our business. In those cases, Shopify is responsible for processing personal information for those purposes. More information is available in the Shopify Consumer Privacy Policy at https://privacy.shopify.com.

Third-Party Links

The Services may contain links to third-party websites or platforms. We are not responsible for the privacy practices, content, or security of those third-party sites. Your interactions with them are governed by their own policies.

Children’s Data

The Services are not intended for children, and we do not knowingly collect personal information from individuals under the age of majority. We do not knowingly sell or share personal information of individuals under 16 years of age.

Data Security and Retention

We implement reasonable administrative, technical, and physical safeguards to protect personal information. However, no security system is completely secure.

We retain personal information only for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce our policies.

Your Rights and Choices

Depending on your location, you may have rights to:

Access or request information about personal data we hold
Request correction or deletion of personal data
Request portability of your personal data
Opt out of the sale or sharing of personal data for targeted advertising

We honor Global Privacy Control signals where required by law. We do not respond to other “Do Not Track” signals.

You may exercise your rights by contacting us as described below. We may verify your identity before processing requests.

International Transfers

Your personal information may be transferred, stored, and processed outside your country of residence. Where required, we rely on lawful transfer mechanisms such as Standard Contractual Clauses.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

Contact Information

Theo’s Haberdashery
13 East 7th Street
New York, NY 10003
United States
Email: theoshaberdash@gmail.com