Privacy policy

Last updated: October 27, 2026

Thread Wallets LLC Privacy Policy

---

SUMMARY (the full policy follows below)

What we collect	Why	Who receives it	Where it is stored	How long we keep it
Order information: name, billing and shipping address, email, phone number, order details (payment card details are handled by our payment processor)	To process, ship and support your order; fraud screening; tax and accounting records	Shopify, our payment processor, our fulfillment partner NLS (Mississauga, Ontario), shipping carriers	Canada and the United States	Up to 7 years (tax and accounting)
Device and browsing information: IP address, browser, pages viewed, cookie identifiers	To run and secure the site; analytics; advertising only if you accept it in the cookie banner	Shopify; analytics and advertising providers (only for cookies you accept)	United States and other countries	For the life of each cookie; analytics data up to 26 months
Email and phone number for marketing (if you sign up)	To send you offers and updates by email or text; abandoned-cart reminders	Our email and SMS marketing providers (including Attentive for SMS)	United States and other countries	Until you unsubscribe; then a suppression record so we honour your choice
Messages you send us	To answer your questions and handle returns	Our customer support and email tools	United States	3 years after our last contact

We do not sell your personal information. Your information is processed in the United States and other countries outside Canada (see “Storage and Transfer of PII Outside Canada” below). Questions or complaints: contact@threadwallets.com.

---

This privacy policy (“Privacy Policy”) is intended to act as a Notice at Collection (where required by applicable law) and describes how your personally identifiable information as defined under applicable law(s) (also known as “personal data” or “personal information” and hereinafter referred to as “PII”) is collected, used, and shared when you visit or make a purchase from www.threadwallets.ca (the “Site”). By using this Site, you acknowledge the practices described in this Privacy Policy and our Terms of Service, incorporated here by reference. Where the law requires your consent (for example, for non-essential cookies or marketing messages), we ask for it separately and you can withdraw it at any time.

WHAT PII DO WE COLLECT?

When you make a purchase or attempt to make a purchase through the Site, we may collect certain information from you, including your name, billing address, shipping address, payment information, email address, and phone number. We refer to this information as “Order Information”.

When you visit the Site, we may automatically collect certain PII about your device, including information about your web browser, IP address, time zone, and some of the cookies and/or related technologies that are installed on your device. Additionally, as you browse the Site, we may collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically-collected information as “Device Information”. More information about Device Information can be read below under the “Cookies” section.

When you choose to participate in other services such as programs, contests, sweepstakes and/or promotions, you may also provide us or third parties we work with information such as an email or physical address, phone number, and/or any other information that we request or collect in order to effectively administer those services and programs. We may also process any information you choose to provide us with in connection with those services and programs.

We may process your contact information or any information you choose to provide us with if you contact us with questions. We may also identify or process your general geolocation information to help you locate a store, or your email or other contact information for marketing purposes.

If you choose to participate in our SMS messaging program (“SMS Messaging Program”), we may also process information such as contact information, the content of any text message responses to us, any user or screen name you may provide, and/or your opt-out preferences. We may also process information such as device availability for messaging, messaging history, your carrier, the country associated with the phone, message delivery status, and/or message error codes as part of the SMS Messaging Program. Please see the SMS Messaging Privacy Policy, the SMS Messaging Terms & Conditions, and our general Terms of Service for further details regarding use of the SMS Messaging Program. PII obtained through the SMS Messaging Program will not be shared, sold, or rented to any third parties for their marketing purposes.

If you apply for a job with us (where applicable) you may be asked to provide more detailed PII which will be specified at the point of collection and that we will use to evaluate your qualifications for employment positions. If you as an individual reach out to us in a business capacity, we may also process any information you choose to provide us with (such as your name and contact information).

Thread Wallets does not process sensitive PII, as defined by applicable law(s).

Email marketing (if applicable): Where we have a legal basis, we may send emails about our store, new products, and other updates (see our “Marketing Preferences” section for more information).

Text marketing (if applicable): We may send text messages about our store, new products, and other updates. Updates include Checkout Reminders. The website uses webhooks and cookies (with your consent) to help keep track of items you put into your shopping cart including when you have abandoned your cart and this information is used to determine when to send cart reminder messages via SMS (see our “Marketing Preferences” section for more information).

Marketing Preferences

We would like to send you information about products and services of ours that we think you might like. We may send you direct marketing communications, product information and promotional offers:

If you have consented to receiving such communications from us

If we have an existing business relationship with you and can rely on your implied consent

Where permitted by Canada’s Anti-Spam Legislation (CASL), on the basis of implied consent arising from a purchase within the past two years, unless you have unsubscribed

If you are from a country where the laws permit us to send you such communications

The marketing communications we send will be in relation to our own products or services, your personal data will not be used for third-party direct marketing unless separate explicit consent has been collected for that or you are from a country where the laws permit such processing.

You will always have full control of your marketing preferences. If you do not wish to continue receiving marketing information from us at any time:

You can unsubscribe by using the unsubscribe directions or link included in marketing communication from us; or

You may withdraw your consent by contacting us by e-mail at contact@threadwallets.com

Customers located in certain regions, such as the EEA and UK, also have the right to object to their personal data being processed for direct marketing purposes at any time. If you would like to object you can contact us by e-mail at contact@threadwallets.com

We will process all requests as soon as possible, but please note that due to the nature of our IT systems and servers it may take a few days for any opt-out request to be implemented.

HOW DO WE USE YOUR PII?

We or third parties we work with may use PII for the purposes set out above, including to provide and improve our services to you and others. For example, we may use the Order Information and/or Device Information that we collect generally to fulfill any orders placed through the Site (including processing your payment information, arranging for shipping, and providing you with invoices and/or order confirmations). Additionally, we may use PII to:

· Communicate with you (including through our SMS Messaging Program);

· Screen our orders for potential risk or fraud; and

· When in line with the preferences you have shared with us (where applicable), personalize our services and/or provide you with information or advertising relating to our products or services.

We or third parties we work with may use the Device Information that we collect to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimize our Site (for example, by generating analytics about how our customers browse and interact with the Site, and to assess the success of our marketing and advertising campaigns).

We or third parties we work with may also use Device Information to help run online advertisements including retargeting ads or to identify your email address for marketing purposes. As discussed below in the “SHARING YOUR PII” section, you may have the right to opt-out of this. Additional details regarding these uses are also included in the “COOKIES” section below.

SHARING YOUR PII We share your PII with third parties to help us use your PII as described above. More specifically, we may share PII with third parties for reasons such as the following:

· To process orders and facilitate our services, including customer or warranty services;

· To better facilitate and improve our business functions, including the operation and security of the Site, data analytics, and/or data management and storage;

· For assistance with marketing purposes, communications, and/or product reviews;

· To any other third party with your prior consent to do so;

· If Thread Wallets is involved in a merger, acquisition, or sale of all or a portion of its assets, which change you will be notified of as necessary under applicable law(s); or

· As otherwise required by or appropriate under applicable law.

For example, we use Shopify to power our online store--you can read more about how Shopify uses your PII here: https://www.shopify.com/legal/privacy. Shopify may use automated decision-making to conduct risk and fraud screening. We also use tools and technologies such as Google Analytics to help us understand how our customers use the Site (you can read more about how Google uses your PII at https://www.google.com/intl/en/policies/privacy, and you can also opt-out of Google Analytics at https://tools.google.com/dlpage/gaoptout). Thread is not responsible for third-party sites or the PII they collect.

Some of the sharing we do may be through the use of cookies or related technologies, which are discussed in more detail below.

Finally, we may also share your PII to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, to investigate fraud, to protect your safety or the safety of others, or to otherwise protect our rights.

We do not sell PII. Where we share PII with advertising partners for targeted advertising, we do so only with your consent (for example, through our cookie banner), and you may withdraw that consent at any time through the cookie preferences on our Site or by contacting us.

PII obtained through the SMS Messaging Program will not be shared, sold, or rented to any third parties for their marketing purposes. For more information on how to opt out of our SMS Messaging Program, see the SMS Messaging Terms & Conditions and our Terms of Service.

COOKIES

We and/or third parties may collect Device Information using the following technologies or others similar to them:

· “Cookies” are data files that are placed on your device and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org.

· “Log files” track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.

· “Web beacons”, “tags”, and “pixels” are electronic files that may be used to record information about how you browse the Site and/or interact with related advertising, whether you’ve opened applicable communications, etc.

These technologies and others like them are hereinafter collectively referred to as “cookies”. Essential cookies are always on because the Site cannot work without them. We use non-essential cookies (for analytics, advertising and marketing) only if you accept them through the cookie banner shown on the Site. Browsing the Site does not mean you have accepted non-essential cookies. You can change your choice or withdraw your consent at any time through the cookie preferences on our Site or your browser settings.

While the exact cookies can change from time to time, the applicable categories of cookies we or those we work in connection with (collectively “we” or “us” for the purpose of this list) may use include cookies that:

· Are essential to the operation, functionality, legal compliance, and/or security of our Site;

· Facilitate our business functions, including order fulfillment and related services, data management, diagnostics, and/or analytics;

· Help to improve the performance and/or security of our Site;

· Allow us to communicate with you, including for product reviews, surveys, or to let you know a product is back in stock;

· Allow us to facilitate advertising, to provide you with advertising relevant to you, and/or to measure the efficacy of our advertising or communications;

· Remind us who you are and help us to better understand, track, and save your preferences and/or purchase history;

· Help us better understand your visits to the Site, including how you interact with the Site and/or what websites or search terms referred you to the Site; or

· Help us better understand how you access our Site, your general location, and/or to distinguish between different visitors to the Site.

As noted above, our Site is hosted by Shopify, and Shopify may choose to use its own cookies (as defined above) to collect data. We are not responsible for these cookies, but they may be viewed at https://www.shopify.com/legal/cookies.

As also described above, we may use your PII to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work. You can opt out of some targeted advertising by using the links below:

· Facebook: https://www.facebook.com/settings/?tab=ads

· Google: https://www.google.com/settings/ads/anonymous

· Bing: https://advertise https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads

· The Digital Advertising Alliance’s opt-out portal: http://optout.aboutads.info

We note that these and other third-party links included herein are not in Thread Wallets’ control. Thread is not responsible for third-party sites.

You may also withdraw your consent to advertising cookies at any time through the cookie preferences on our Site.

Thread is not responsible for any PII collected by third parties’ cookies (as defined above) from sites other than Thread’s own. In addition, your browser may already contain cookies placed by third-party sites, including various social media platforms. Thread is not responsible for the PII such cookies may collect or what they may do with it.

YOUR PRIVACY RIGHTS

We strive to process your PII in accordance with applicable data privacy laws, many of which create a variety of privacy rights for covered consumers. These rights may include the following:

PII We Collect

You may have the right to know what kinds of PII we collect and our business purposes for that collection. We make this information available to you herein, including in the “What PII Do We Collect?” section of the Privacy Policy. You also have the right to know how PII is obtained, how it is used, and our business purposes for that use. We also make this information available to you herein, including in the section titled “How Do We Use Your PII?”.

You may have the right to know if we share your PII with any third parties. We may share PII with our providers that perform services on our behalf. In addition, we may share PII with third parties for other notified purposes, as permitted by applicable law. For example, we share your personal data with your consent or to complete any transaction or provide any product you have requested or authorized. For more information on how we share your PII, refer to the “Sharing Your PII” section of the Privacy Policy.

Rights to PII

You may have the right to request access to certain information about our collection, use and disclosure of your PII. Once we receive and confirm your verifiable consumer request (discussed more below), we may disclose to you:

· The categories of PII we collected about you;

· The categories of sources for the PII we collected about you;

· Our business or commercial purpose for collecting that PII;

· The categories of third parties with whom we share that PII; and

· The specific pieces of PII we collected about you.

You may have the right to request that we delete any of your PII that we collected from you and retained. Once we receive and confirm your verifiable consumer request (discussed more below), we may delete your PII from our records, unless we need the PII for exceptions provided under applicable law, such as to:

· Provide a good or service requested by you;

· Provide a good or service reasonably anticipated within the context of our ongoing business relationship with you;

· Detect security incidents or malicious or illegal activity;

· Debug or repair existing intended functionality;

· Exercise, or allow you to exercise, free speech or another legal right:

· Enable internal uses that are reasonably aligned with your expectations based on your business relationship with us;

· Engage in certain scientific research;

· Comply with a legal obligation; or

· Use the PII internally in a lawful manner compatible with the context in which you provided the PII to us.

You may also have the right to have your PII rectified or corrected (if inaccurate), the right to restrict use of your PII (including to limit use and disclosure of sensitive personal data where applicable), the right to opt out of certain processing, including the sale and/or sharing of your information as discussed in the section on “Sharing Your PII” above, the right to data portability, the right to withdraw consent (where applicable), and the right to opt out of automated decision-making and profiling.

Non-Discrimination and Financial Incentives

You may have the right to non-discrimination for exercise of your data privacy rights. We will not discriminate against you for exercising any of your data privacy rights. Unless permitted by applicable law, we will not:

· Deny you goods or services.

· Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.

· Provide you a different level or quality of goods or services.

· Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

Applicable law may permit businesses to provide differing levels of quality or different prices where the business can demonstrate that the difference is reasonably related to the value to the business of the consumer’s PII.

Applicable law may allow businesses to offer consumers financial incentives for sharing PII. For example, a business may be able to offer a rewards program or provide a premium service to consumers as compensation for their PII. Where we offer such programs, your participation is optional, your participation is subject to any applicable terms, and you may withdraw at any time.

Requests to Exercise Your Rights

You (or your authorized agent) may request to exercise the foregoing rights, where applicable, by submitting a request to us by writing or emailing us at:

Thread Wallets LLC 241 W Center St., Provo, UT 84601, United States

Attention: Privacy Officer, contact@threadwallets.com, +1 (801) 698-8826

Once a request is received, your identity will need to be verified. This may be done, for example, by asking you to confirm information that you have already provided to us. This information will be used to verify your identity and process your request. We will confirm request received by email to the account provided.

Where applicable, you may only be able to make a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must:

· Provide sufficient information that allows us to reasonably verify you are the person about whom we collected PII or an authorized representative.

· Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot substantively respond to your request or provide you with PII if we cannot verify your identity or authority to make the request and confirm the PII relates to you. Making a verifiable consumer request does not require you to create an account with us. We will only use PII provided in a verifiable consumer request to verify the requestor's identity or authority to make the request.

We will endeavor to respond to a verifiable consumer request within 30 days of its receipt, or as otherwise required by applicable law. If we require more time, then we will inform you of the reason and extension period in writing. We will deliver our written response electronically. The response we provide will also explain the reasons we cannot comply with a request, if applicable. We will select a format to provide your PII that is readily useable.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

If a request of yours is denied or if you feel that your PII has not been handled appropriately according to applicable law(s), you may ask us to reconsider by including “APPEAL” in the subject line of your written communication. You also have the right to file a complaint with the Office of the Privacy Commissioner of Canada (www.priv.gc.ca) or, where applicable, your provincial privacy regulator (for example, the Commission d’accès à l’information du Québec, the Information and Privacy Commissioner of Alberta, or the Office of the Information and Privacy Commissioner for British Columbia).

DO NOT TRACK AND BROWSER SIGNALS

Some web browsers incorporate a “Do Not Track” or similar feature (such as Global Privacy Control signals, see https://globalprivacycontrol.org/) that signals to websites that you visit that you do not want to have your online activity tracked. Our Site does not recognize Do Not Track signals but works to recognize Global Privacy Control signals where required to do so by applicable law(s).

Please note that third parties outside of Thread Wallets’ control may collect PII about your online activities over time and across different websites when you visit our Site or other online websites and services. Thread is not responsible for third-party sites or cookies, nor for the PII they collect.

CHILDREN’S PRIVACY

Our services are not directed to or intended for use by minors. Consistent with the requirements of applicable law, if we learn that we have received any information directly from a minor without his or her parent’s verified consent, we will use that information only to respond directly to that child (or his or her parent or legal guardian) to inform the minor that he or she cannot use our services and subsequently will delete that information.

SECURITY

We maintain appropriate safeguards that are intended to protect the PII we process from accidental or unlawful destruction, accidental loss, unauthorized alteration, unauthorized disclosure or access, misuse and/or any other unlawful form of processing. However, no security measure or method of data transmission over the Internet is completely secure. Although we strive to use acceptable means to protect your PII, we cannot guarantee absolute security. By accessing or using our services, you agree to release us from any and all claims arising out of unauthorized use of your information (where allowed by applicable law).

STORAGE AND TRANSFER OF PII OUTSIDE CANADA

Thread Wallets LLC is located in the United States (Provo, Utah). Your PII is processed and stored by us and by our service providers (including Shopify, our payment, analytics, marketing and messaging providers) in the United States and other countries outside Canada. Our fulfillment partner, NLS, handles your name, address, phone number and order details in Ontario, Canada to ship and receive your order.

When your PII is located outside Canada, it is subject to the laws of that country and may be accessible to courts, law enforcement and national security authorities there. We use contractual and other measures to give your PII a comparable level of protection while it is processed by our service providers. To ask about our practices or our service providers outside Canada, contact our Privacy Officer at contact@threadwallets.com.

PRIVACY OFFICER

We have designated a Privacy Officer who is responsible for our compliance with Canadian privacy law: Privacy Officer, Thread Wallets LLC, 241 W Center St., Provo, UT 84601, United States. Email: contact@threadwallets.com. Phone: +1 (801) 698-8826.

CONSENT

By providing PII to us for the purposes described in this Privacy Policy (for example, to place an order), you consent to its collection, use and disclosure as described here. For non-essential cookies and for marketing messages, we rely on your separate consent (through the cookie banner or our sign-up forms) or on the implied consent permitted by Canada’s Anti-Spam Legislation. Where we rely on your consent, you may withdraw it at any time, subject to legal or contractual restrictions and reasonable notice; withdrawing consent may affect our ability to provide certain services (for example, fulfilling an order).

DATA RETENTION

We keep PII only for as long as we need it for the purposes described in this Privacy Policy or as the law requires, and then we delete it or anonymize it. Our usual retention periods are:

· Order and transaction records: up to 7 years after the order, to meet tax and accounting requirements.

· Customer support messages and return records: 3 years after our last contact with you.

· Marketing email and text data: until you unsubscribe or withdraw your consent. We then keep a minimal suppression record (your email address or phone number and the date) so that we continue to honour your choice. If we are relying on implied consent from a purchase, we stop marketing to you 2 years after your last purchase unless you have subscribed.

· Cookie and device data: for the life of each cookie (see the cookie banner for details). Analytics data is kept for up to 26 months.

· Records we are required to keep for legal reasons (for example, to respond to a legal claim) may be kept longer.

DATA BREACHES

We use safeguards that are appropriate to the sensitivity of the PII we hold. If a breach of our security safeguards involves your PII and creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada (and any provincial regulator where required) as soon as feasible, as required by law. We keep a record of every breach of security safeguards for at least 24 months.

CHANGES We may update this Privacy Policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.

CONTACT US For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at contact@threadwallets.com or by mail using the details provided below:

Thread Wallets LLC 241 W Center St., Provo, UT 84601, United States Phone: +1 (801) 698-8826