Privacy policy
Stoke Outlets Privacy Policy
Last Updated: August 15, 2025
Stoke Outlets operates this store and website, including all related information, content, features, tools, products, and services (collectively, the “Services”) to provide you with a curated shopping experience. The Services are powered by Shopify, which enables us to provide ecommerce functionality.
This Privacy Policy explains how we collect, use, disclose, and protect Personal Information when you visit, use, or make a purchase through the Services, or otherwise communicate with us. If there is a conflict between this Privacy Policy and our Terms of Service concerning the collection, processing, and disclosure of your Personal Information, this Privacy Policy controls.
By using the Services, you acknowledge that you have read and understood this Privacy Policy.
Quick Summary & Your Choices
- Do Not Sell or Share My Personal Information: https://stokeoutlets.com/pages/data-sharing-opt-out
- Limit the Use of My Sensitive Personal Information: [Insert link or page path]
- Manage Cookies / Consent Preferences: [Insert link to consent manager]
- Global Privacy Control (GPC): We honor GPC signals where required. When your browser sends a GPC signal, we treat it as a request to opt-out of sale/share for that browser and, where technically feasible, your account.
- Contact for Privacy Requests: care@stokeoutlets.com
- Mailing Address: 16902 Von Karman Ave, Building B, Irvine, CA 92606, USA
Notice at Collection (California): We collect the categories of Personal Information identified below for the business and commercial purposes described. We may sell or share certain online identifiers for cross-context behavioral advertising as defined by California law. You can opt out at any time via the links above or by enabling GPC.
Definitions
- “Personal Information” means information that identifies, relates to, describes, or could reasonably be linked with you or your household. De-identified or aggregated data are not Personal Information.
- “Sensitive Personal Information” (SPI) includes account log-in and password, precise geolocation, financial account credentials, and other data defined by law.
- “Sell” / “Share” are as defined under applicable state privacy laws (e.g., California). “Share” generally refers to cross-context behavioral advertising.
Categories of Personal Information We Collect (Notice at Collection)
|
Category |
Examples |
Sources |
Purposes (see below) |
Disclosed to |
Sold/Shared? |
Retention |
|
Identifiers |
Name, email, postal address, phone, IP address, device ID |
You; your device; service providers |
A–F |
Service providers (hosting, payments, fulfillment, support); marketing/advertising partners |
Shared for advertising (online identifiers); not sold for money |
Account lifecycle + up to 3 years; IP/logs up to 24 months |
|
Customer Records |
Billing/shipping address; order history |
You; your device |
A–F |
Service providers (payments, tax, shipping); anti-fraud |
Not sold; not shared beyond service providers |
Order life + 7 years (tax/records) |
|
Commercial Information |
Viewed items, cart, wishlist, purchases/returns |
You; your device |
A–F |
Analytics/optimization vendors; service providers |
May be shared for advertising (pseudonymous) |
24 months for analytics; orders 7 years |
|
Internet/Network Activity |
Browsing, clicks, page views, referral URLs |
Your device; cookies/pixels |
A–D, F |
Analytics, anti-fraud, security vendors; ad partners |
May be shared for advertising |
24 months |
|
Geolocation (general) |
City/region inferred from IP |
Your device |
A–D |
Analytics, fraud prevention, shipping estimation |
Not sold; may be shared for advertising |
24 months |
|
Inferences |
Preferences derived from activity |
Derived by us/partners |
B, C |
Service providers; marketing partners |
May be shared for advertising |
24 months |
|
Payment Info (tokenized) |
Card token/last4 (processors only) |
You → payment processor |
A, C |
Payment processors only |
Not sold/shared by us; processors handle per their policies |
7 years (processor policy/finance law) |
|
Account Credentials (SPI) |
Account log-in, password (hashed) |
You |
A, C, E |
Hosting and auth providers |
Not sold/shared; used only for essential purposes |
While account active + 2 years |
Purposes Legend:
A = Provide and personalize the Services (fulfillment, returns, account management)
B = Marketing/advertising (including product recommendations)
C = Payments and transaction processing
D = Analytics, personalization, and improvement
E = Security, anti-fraud, and legal compliance
F = Communications and customer support
We do not intentionally collect precise geolocation, government IDs, or highly sensitive health data. If you believe we collected such data in error, please contact us.
How We Use Personal Information
We use Personal Information to:
- Provide, personalize, and improve the Services; process payments; fulfill orders; facilitate returns and exchanges; manage accounts; remember preferences; and recommend products.
- Market and advertise, including showing ads on our Services and elsewhere. Where required by law, we do this only with consent, and you may opt-out of sale/share at any time.
- Secure the Services and prevent fraud, including authentication, anomaly detection, and investigating suspected malicious or illegal activity.
- Communicate with you, including support, service messages, and transactional notices.
- Comply with law, respond to legal process, and enforce policies and terms.
We do not use or disclose Sensitive Personal Information for purposes other than those permitted by law (e.g., to provide the Services, prevent fraud and security incidents, or for legal compliance), and we do not use SPI to infer characteristics about you.
How We Disclose Personal Information
We disclose Personal Information to:
- Service Providers / Processors (e.g., Shopify hosting, payment processing, shipping/fulfillment, customer support, analytics, cloud storage, security). These parties may only use Personal Information to provide services to us under contract.
- Marketing/Advertising Partners to help deliver or measure ads and personalize content. This may constitute “sharing” (and sometimes “selling”) of online identifiers under California law. You can opt out at any time.
- Affiliates within our corporate group for the purposes described in this Policy.
- Parties to Business Transactions (e.g., mergers, acquisitions) subject to appropriate safeguards.
- Legal/Compliance recipients as required by law or to protect rights, safety, or property.
We do not disclose full payment card numbers; payments are handled by our processors.
Relationship with Shopify
The Services are hosted by Shopify. Shopify collects and processes certain Personal Information about your use of the Services to provide and improve ecommerce functionality, including enhanced features that use information across merchants. In these contexts, Shopify may act as a separate controller/“business” for some processing and is responsible for requests related to that processing. For details and to exercise rights regarding Shopify’s processing, please see the Shopify Consumer Privacy Policy and Shopify’s privacy portal. [Insert links]
Your Rights and How to Exercise Them
Depending on where you live, you may have the right to:
- Access / Know the categories and specific pieces of Personal Information we hold about you;
- Delete Personal Information;
- Correct inaccurate Personal Information;
- Opt-out of Sale/Share of Personal Information for cross-context behavioral advertising;
- Limit use/disclosure of Sensitive Personal Information (if used beyond permitted purposes);
- Portability (receive a copy of certain information);
- Appeal (for certain states) if we deny a rights request.
How to submit a request:
- Web: https://stokeoutlets.com/pages/data-sharing-opt-out — opt-out of sale/share (California and where applicable)
- Email: care@stokeoutlets.com
- Mail: Privacy Team, 16902 Von Karman Ave, Building B, Irvine, CA 92606, USA
We may need to verify your identity before processing. You may authorize an agent; we will require proof of authorization and may ask you to verify your identity directly. We will not discriminate against you for exercising your rights.
Global Privacy Control (GPC): When a GPC signal is detected, we treat it as a request to opt-out of sale/share for the browser sending the signal and, where feasible, we associate it with your account.
Minors: We do not knowingly sell or share Personal Information of consumers under 16 years of age. If we discover such activity, we will cease and delete it as required by law.
Cookies, Tracking, and Advertising
We and our partners use cookies, SDKs, pixels, and similar technologies to operate the site, measure performance, secure the Services, and show relevant ads. You can manage preferences via our Consent Manager and the “Do Not Sell or Share” link. For legally required consent, we withhold non-essential trackers until you opt in.
Security
No security program is perfect, but we use administrative, technical, and physical safeguards appropriate to the nature of the Personal Information we handle. Protect your account by keeping credentials confidential.
Retention
We retain Personal Information for as long as reasonably necessary to provide the Services, comply with our legal obligations, resolve disputes, and enforce agreements. See the Retention column in the table above for typical periods and criteria. Actual retention may vary based on orders, legal holds, tax, and accounting rules.
International Transfers
We may transfer, store, and process Personal Information outside your country. Where required, we rely on appropriate safeguards (e.g., Standard Contractual Clauses) for transfers from the EEA/UK.
Children’s Data
The Services are not intended for children. We do not knowingly collect Personal Information from children under the age of majority in your jurisdiction. Parents/guardians may contact us to request deletion of a child’s data.
Financial Incentives (California)
We may from time to time offer discounts, promotions, or other benefits (e.g., email sign-up offers) that could be considered a financial incentive related to the collection or retention of Personal Information. Participation is optional and you can withdraw at any time. We estimate the value of these programs based on the average value of consumer data and the costs of administering the program.
- How to Opt In/Out: Follow the instructions presented at the time of the offer or contact us at care@stokeoutlets.com.
Third-Party Links & Social Features
The Services may link to third-party websites or include social media features. We are not responsible for those sites or their privacy practices. Review their policies before providing information.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory changes. We will post updates on this page, adjust the “Last Updated” date, and provide additional notice where required.
Contact Us
Email: care@stokeoutlets.com
Mail: Privacy Team, 16902 Von Karman Ave, Building B, Irvine, CA 92606, USA