隐私政策

Privacy Policy

Last updated: 19 September 2026

This Privacy Policy explains how Thimblelark ("we", "us", "our") collects, uses, and shares your personal information when you visit or buy from thimblelark.com (the "Site"), or when you contact us for support.

We are a small independent studio based in Chongqing, China. We sell craft kits and ship them directly to customers in the United States and Canada. Because we are a small business, we keep the data we hold to a minimum.

By using the Site or placing an order, you agree to this Privacy Policy. If you do not agree, please do not use the Site.

1. Information we collect

Information you give us directly

• Contact details: your name, email address, shipping address, and billing address.
• Order details: what you ordered, order value, currency, and order date.
• Support messages: anything you send us by email, including photographs you choose to attach to a damaged or defective claim.
• Optional marketing consent: whether you have agreed to receive marketing emails.

Information collected automatically

• Device and browsing data: IP address, browser type and version, device type, operating system, referring URL, pages viewed, and time on page.
• Cookies and similar technologies: small files placed on your device that keep your cart working, remember your preferences, and help us understand how the Site is used. See Section 5.

Payment information

We do not receive or store your full card number. Payments are processed by third-party payment providers. They send us only limited information needed to confirm and settle your order, such as the result of the transaction and the last four digits of the card. Their handling of your card data is governed by their own privacy policies and by card-network security standards (PCI DSS).

2. How we use your information

• To process and deliver your order — taking payment, packing and dispatching your parcel, and passing your address and phone number to the carrier so it can be delivered and tracked.
• To provide customer support — answering your questions and resolving claims about damaged, defective, or missing items.
• To handle returns and refunds — deciding and processing a return or refund request under our Returns & Refunds Policy.
• To prevent fraud and abuse — detecting suspicious orders, chargeback abuse, and repeated claims.
• To meet our legal obligations — keeping records we are required to keep for tax, customs, and accounting purposes.
• To improve the Site — understanding which pages and products people use, so we can fix problems and improve what we offer.
• To send marketing emails — only if you have opted in. You can unsubscribe from any marketing email using the link at the bottom of it, or by emailing us. Unsubscribing does not stop order and delivery emails, which we must send to fulfil your order.

We do not sell your personal information, and we do not share it with third parties for their own advertising purposes.

3. Who we share your information with

We share personal information only with service providers who need it to do a specific job for us, and only to the extent needed:

• Shopify — hosts and operates this store, including checkout, order management, and the Site itself.
• Payment providers — process your payment and handle refunds.
• Shipping carriers and international couriers — carry your parcel and provide tracking. Your name, delivery address, phone number, and the contents description required for customs are shared with them.
• Customs and border authorities — may inspect shipments and require a declaration of contents and value, as required by law.
• Email and marketing providers — deliver transactional and (where you have opted in) marketing emails.
• Analytics providers — help us understand Site usage in aggregate.
• Professional advisers and authorities — where we are legally required to disclose information, or where it is necessary to establish, exercise, or defend legal claims.

We may also transfer personal information as part of a sale or reorganization of our business, in which case we will tell affected customers.

4. International transfers

We are based in China, and this store is operated on infrastructure provided by Shopify, which processes data in a number of countries. This means that when you order from us, your personal information will be transferred to and processed outside your country of residence, including outside the United States.

We take reasonable steps to ensure that any transfer is protected by appropriate safeguards, and we share only the minimum information needed to fulfil your order and support you afterwards.

5. Cookies

We use cookies and similar technologies for the following purposes:

• Strictly necessary cookies — these keep your cart and checkout working and cannot be switched off. Without them the Site cannot function.
• Functionality cookies — these remember choices such as your currency or language.
• Analytics cookies — these help us understand how visitors use the Site, in aggregate.
• Marketing cookies — where used, these help us measure whether our advertising is working.

You can block or delete cookies through your browser settings. If you block strictly necessary cookies, parts of the Site — including checkout — may not work.

6. How long we keep your information

• Order and transaction records: retained for as long as we are required to keep them for tax, customs, and accounting purposes.
• Support correspondence: retained while your claim is open and for a reasonable period afterwards, so we can handle follow-ups and detect repeated or fraudulent claims.
• Marketing consent records: retained until you unsubscribe, plus a short record of the fact that you unsubscribed.
• Analytics data: retained in aggregate or de-identified form.

7. Your rights

Depending on where you live, you may have some or all of the following rights:

• Access — to ask what personal information we hold about you.
• Correction — to ask us to correct information that is inaccurate.
• Deletion — to ask us to delete your personal information, subject to our legal record-keeping obligations.
• Portability — to receive a copy of certain information in a portable format.
• Opt out of marketing — at any time, using the unsubscribe link in any marketing email or by emailing us.

If you live in California, you have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, including the right to know what personal information we collect, the right to request deletion, the right to correct inaccurate information, and the right to opt out of the "sale" or "sharing" of personal information. We do not sell your personal information and we do not share it for cross-context behavioral advertising. We will not discriminate against you for exercising any of these rights.

If you live in another US state with a comprehensive privacy law (for example Virginia, Colorado, Connecticut, Utah, or Texas), you may have similar rights, including the right to appeal a decision we make about your request.

To exercise any of these rights, email us at support@thimblelark.com. We may need to verify your identity before we act — usually by confirming details of an order you placed. You may use an authorized agent to make a request on your behalf; we may ask for proof of that authorization. We aim to respond within the timeframe required by the law that applies to you.

If you are not satisfied with our response, you may have the right to complain to your local data protection authority or state attorney general.

8. Security

We use reasonable technical and organizational measures to protect your personal information, including encrypted connections (HTTPS) across the Site and restricting access to order data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Children

Our kits are designed for adults and for supervised craft use. The Site is not directed to children, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

10. Do Not Track

Some browsers can send a "Do Not Track" signal. Because there is no common industry standard for how to respond to it, the Site does not currently respond to these signals. You can still control cookies through your browser settings.

11. Changes to this policy

We may update this Privacy Policy from time to time, for example if we change our providers or if the law changes. The "Last updated" date at the top of this page shows when it last changed. Material changes will be announced on this page.

12. Contact us

For any privacy question, request, or complaint, email support@thimblelark.com. We reply to all enquiries within 2 business days.

Thimblelark
No. 1 Yunshan Road, Yubei District
Chongqing 401120, China

See also our Terms of Service, Returns & Refunds Policy, and Shipping Policy.