Privacy policy

Abbey Row — last updated 2026-09-23.

This privacy notice explains how Abbey Row (United States) collects, uses, and protects your personal information. It complies with US privacy standards (CCPA/CPRA where applicable).

What We Collect

When you place an order or contact us, we collect only what we need to fulfill your order and provide support:

Order data: your name, shipping address, billing address, email, and phone number (optional).
Payment data: we do NOT store card details. Card processing is handled by our PCI-DSS compliant payment processor (Stripe).
Analytics data: anonymized page views, referrer, and general device type via first-party cookies. No personally identifying data is shared with third parties for advertising.
Support correspondence: the emails you send us and our replies.

How We Use Your Data

To process and ship your order and communicate about it.
To provide customer support when you contact us.
To detect and prevent fraud or misuse.
To comply with tax, accounting, and consumer-protection law.

We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

Who We Share Data With

Payment processor (Stripe) — to process your payment.
Shipping carrier (USPS Ground Advantage) — to deliver your order.
Email & hosting provider — encrypted at rest and in transit.
Tax authority where legally required.

All processors are contractually bound to protect your data and use it only for the purposes we specify.

Data Retention

Order records are retained for the legal accounting period (typically 6–10 years depending on jurisdiction). Support correspondence is retained for 2 years. Analytics data is retained for 26 months.

Cookies

We use only strictly necessary cookies (session, cart, checkout) and optional analytics cookies. You can accept or decline analytics cookies at any time via the banner shown on your first visit.

Your Rights

Under US privacy standards (CCPA/CPRA where applicable), you have the right to:

Access the personal data we hold about you.
Correct inaccurate data.
Request deletion of your data (where legal retention periods allow).
Object to processing or restrict it.
Data portability (receive your data in a structured format).
Withdraw consent to marketing at any time.

To exercise any of these rights, email privacy@abbeyhub.shop or support@abbeyhub.shop. We respond within 30 days.

Security

All data is transmitted over TLS/SSL and stored encrypted at rest. Payment card data never touches our servers — it is tokenized by our payment processor.

International Transfers

Some of our processors (payment, email, hosting) may transfer data outside the United States. All such transfers are protected by standard contractual clauses or equivalent safeguards.

Complaints

If you have a complaint about how we handle your data, contact us first at privacy@abbeyhub.shop. You also have the right to lodge a complaint with your national data-protection authority.

Contact & Data Controller

Data controller: Abbey Row (individual sole trader, Morocco — operating this store as trading name).
Contact: privacy@abbeyhub.shop