Privacy policy

Last Updated: October 22, 2026

Cove & Thread respects your privacy and is committed to handling your personal information responsibly and transparently.

This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you visit coveandthread.com, place an order, contact our customer support team, or otherwise interact with our online store.

It also explains the privacy choices and rights that may be available to you under applicable United States privacy laws.

By using our website, you acknowledge the information provided in this Privacy Policy. Where applicable law requires consent for a particular use of personal information, we will seek that consent separately.

1. Who We Are

Cove & Thread is an online retail store operated by:

Worldwide Apparel Group LLC

Registered Business Address:

2106 House Ave, Suite 614
Cheyenne, WY 82001
United States

Website: coveandthread.com

Email: support@coveandthread.com

Worldwide Apparel Group LLC is responsible for determining how personal information is collected and used in connection with the operation of Cove & Thread, except where another provider acts independently under applicable law.

For questions about this Privacy Policy or requests concerning your personal information, please contact us using the details above.

2. Personal Information We Collect

The categories of personal information we collect depend on how you interact with our website and services.

A. Contact and Identification Information

When you place an order, contact customer support, or provide information directly to us, we may collect:

• Full name.
• Email address.
• Billing address.
• Shipping address.
• Telephone number, if provided for order or delivery purposes.
• Other information voluntarily supplied in communications with us.

We use this information to communicate with you, process orders, arrange delivery, and provide customer support.

B. Order and Transaction Information

When you make a purchase, we may collect:

• Order number.
• Products purchased.
• Product variations and quantities.
• Purchase date.
• Order value.
• Payment status.
• Shipping and delivery information.
• Tracking information.
• Return, exchange, or refund information.
• Relevant transaction records.

This information is necessary for managing purchases, fulfilling orders, maintaining business records, and resolving order-related issues.

C. Payment Information

Payments are processed using Shopify Payments and the payment services available at checkout.

Payment-related information may include:

• Payment method.
• Transaction amount.
• Payment authorization status.
• Transaction identifiers.
• Limited payment-card details, such as the card brand and last four digits, where made available by the payment processor.
• Billing information required for payment verification.

Complete payment-card information is handled through the applicable secure payment-processing infrastructure.

We do not require customers to send complete payment-card numbers or security codes to our customer support email.

Payment processors may process additional information for payment authorization, fraud prevention, security, and compliance with legal obligations.

D. Technical and Device Information

When you browse our website, certain information may be collected automatically through Shopify, cookies, analytics services, and other enabled technologies.

This may include:

• IP address.
• Browser type and version.
• Device type.
• Operating system.
• Cookie identifiers.
• Device and advertising identifiers where available.
• Referring website or advertising source.
• Approximate location derived from technical information.
• Website pages visited.
• Date and time of visits.
• Shopping cart activity.
• Product views.
• Website interactions.
• Technical performance and error information.

This information helps us operate our website, understand visitor behavior, improve functionality, measure advertising performance, and identify potential security issues.

E. Customer Support Information

When you contact us, we may collect and retain information relevant to your inquiry, including:

• Your name and contact details.
• Order information.
• Email correspondence.
• Support requests and replies.
• Details of complaints, returns, or product concerns.
• Attachments or photographs voluntarily provided.
• Information needed to resolve your request.

We use this information to provide assistance, maintain accurate support records, and address customer concerns.

F. Marketing Information

Where you subscribe to marketing communications or otherwise qualify to receive them under applicable law, we may collect:

• Email address.
• Subscription status.
• Marketing preferences.
• Subscription and unsubscribe records.
• Email engagement information.
• Relevant purchase or browsing activity used for permitted marketing purposes.

We use this information to communicate promotional offers, product updates, and other marketing content where permitted.

We do not treat an ordinary order-related email as automatic consent to receive marketing messages where separate consent is required.

3. Sources of Personal Information

We collect personal information from several sources, including:

Directly from you: When you place an order, submit information at checkout, subscribe to emails, or contact our support team.

Automatically through our website: Through cookies, browser information, Shopify functionality, analytics technologies, and enabled tracking tools.

From payment and transaction providers: When payment processors provide transaction status, verification results, or information necessary to manage payments.

From shipping and fulfillment providers: When we receive tracking events, shipment updates, or delivery information.

From advertising and analytics services: When relevant advertising interactions, campaign attribution information, or website activity data are made available to us.

From service providers: When providers supporting our store share information necessary to perform their contracted services.

We use personal information only for purposes that are relevant to operating our business or otherwise permitted by applicable law.

4. How We Use Personal Information

We may use personal information for the following purposes.

Order Processing and Fulfillment

To:

• Process purchases.
• Confirm orders.
• Verify payments.
• Arrange shipping and delivery.
• Provide tracking information.
• Manage returns and refunds.
• Communicate about transactions.

Customer Support

To:

• Respond to inquiries.
• Investigate delivery issues.
• Resolve complaints.
• Assist with returns or refunds.
• Maintain customer-service records.

Website Operation and Improvement

To:

• Operate our online store.
• Maintain shopping cart and checkout functions.
• Monitor website performance.
• Diagnose technical problems.
• Understand how visitors use the website.
• Improve navigation and the shopping experience.

Analytics and Advertising

To:

• Measure website traffic.
• Understand customer interactions.
• Evaluate advertising campaigns.
• Attribute purchases to marketing activity.
• Measure conversions.
• Improve marketing effectiveness.
• Provide advertising based on customer interests where permitted and enabled.

Email Marketing

To send promotional emails and product-related marketing communications when permitted by applicable law and customer preferences.

Security and Fraud Prevention

To:

• Detect suspicious activity.
• Protect transactions.
• Prevent unauthorized access.
• Investigate fraud.
• Protect our customers, business, and service providers.

Legal and Business Obligations

To:

• Maintain necessary transaction records.
• Meet applicable tax and accounting requirements.
• Respond to lawful requests.
• Resolve disputes.
• Enforce applicable contractual terms.
• Comply with legal obligations.

5. Ecommerce Platform and Service Providers

Cove & Thread uses Shopify and selected third-party services to operate its online store.

These providers may process personal information as necessary for their services.

The following services are included in our store's confirmed technology setup.

Shopify

Shopify hosts and supports our online store.

It provides ecommerce infrastructure, checkout functionality, order administration, customer information management, and other services necessary to operate the website.

When you visit or purchase from Cove & Thread, Shopify may receive and process personal information associated with your browsing activity, purchases, transactions, and interactions with our store.

Depending on the Shopify services and features enabled, Shopify may also use information about customer interactions with our store, other merchants, and Shopify services to provide enhanced shopping features, personalization, analytics, and advertising-related services.

Information may be processed by Shopify and relevant service providers in other countries.

For additional information about Shopify's handling of consumer personal information, please review:

https://www.shopify.com/legal/privacy/consumers

You can also review or exercise privacy choices directly with Shopify through:

https://privacy.shopify.com/

Shopify Payments

We use Shopify Payments to process eligible transactions.

Shopify Payments and its associated payment-processing partners may collect and process payment information, billing details, transaction data, and information necessary for fraud detection and payment security.

Payment information is handled under the applicable provider's security and privacy practices.

Google Analytics

We use Google Analytics to understand how visitors interact with our website.

Google Analytics may process technical identifiers and information about browsing behavior, page interactions, website traffic, and conversions.

We use this information to analyze website performance and improve our online shopping experience.

Google Analytics may use cookies and similar technologies, subject to applicable privacy requirements and user choices.

Google Ads

We use Google Ads to advertise our products and measure the effectiveness of advertising campaigns.

Depending on the advertising features enabled, Google Ads may process information concerning advertising interactions, website visits, conversion events, and related technical identifiers.

Certain advertising technologies may support audience measurement, attribution, or personalized advertising where enabled and legally permitted.

Information disclosed to advertising providers may constitute the sale or sharing of personal information or targeted advertising under certain United States state privacy laws.

Applicable privacy rights and opt-out choices are described later in this policy.

Omnisend

We use Omnisend for email marketing and related customer communication functions.

Omnisend may process information such as:

• Customer names.
• Email addresses.
• Email subscription preferences.
• Relevant purchase information.
• Marketing engagement data.
• Information used to manage permitted email campaigns.

Marketing communications are sent in accordance with applicable law and customer preferences.

Customers may unsubscribe from promotional emails using the unsubscribe instructions included in those messages.

Omnisend's inclusion in our service-provider list does not mean that SMS marketing is enabled.

Wetracked.io

We use Wetracked.io to support advertising attribution and conversion measurement.

Depending on the integration and settings, Wetracked.io may process technical identifiers, website events, advertising interaction data, and relevant purchase or conversion information.

This information helps us understand which marketing activities contribute to website visits and purchases.

Relevant event information may be transferred to connected advertising platforms, including Google Ads, subject to applicable law, the integration configuration, and customer privacy choices.

Help Scout

We use Help Scout to manage customer support communications.

Help Scout may process customer names, email addresses, correspondence, relevant order information, and other information provided during a customer-service inquiry.

This allows our support team to organize requests, respond to questions, and resolve customer concerns.

CWILL Order Tracking

We use CWILL Order Tracking to support order and shipment tracking.

CWILL Order Tracking may process information required to identify shipments and display available delivery updates, including:

• Order identifiers.
• Tracking numbers.
• Shipment status.
• Carrier information.
• Relevant order or delivery details.

This information is used to help customers access available shipping updates and manage delivery-related inquiries.

Shopify Customer Privacy

We use Shopify Customer Privacy to manage privacy-related storefront settings and customer choices.

Depending on the configured features and the visitor's location, these tools can include:

• Cookie consent notices.
• Cookie preference management.
• Data-sharing opt-out controls.
• Privacy preference signals.

These controls are intended to help manage personal information processing in accordance with applicable privacy laws.

The availability of individual controls may depend on the relevant state, device, and configured privacy settings.

6. Cookies and Similar Technologies

Our website uses cookies and related technologies to operate essential ecommerce features and, where enabled, support analytics, marketing, and website improvements.

Cookies are small data files placed on your device when you visit a website.

We may use the following categories.

Essential Cookies

Essential cookies support functions such as:

• Shopping cart operation.
• Checkout.
• Session management.
• Security.
• Fraud prevention.
• Maintaining necessary website functionality.

These technologies are necessary for the normal operation of our store.

Analytics Cookies

Analytics cookies and similar technologies help us understand:

• Website traffic.
• Visitor interactions.
• Page performance.
• Shopping activity.
• Conversion statistics.

Analytics providers may include Shopify and Google Analytics.

Advertising and Marketing Cookies

Advertising cookies and similar technologies may be used to:

• Measure advertising performance.
• Attribute conversions.
• Understand marketing interactions.
• Support targeted advertising where enabled and legally permitted.

Relevant providers may include Google Ads and Wetracked.io.

Preference Cookies

Preference cookies may be used to remember information such as:

• Selected website preferences.
• Privacy choices.
• Session preferences.
• Other settings intended to improve usability.

Managing Cookies

You can control certain cookies through your browser settings.

You may also be able to manage non-essential tracking through the cookie preference controls displayed on our website.

Where applicable law requires consent for particular cookies or technologies, we will seek consent before using those technologies.

Where applicable law provides a right to opt out of certain data processing, we will honor valid requests and legally required preference signals.

Disabling certain cookies may affect some website features.

7. How We Disclose Personal Information

We may disclose personal information to third parties when necessary for legitimate business operations or otherwise permitted by law.

Categories of recipients include:

Ecommerce and Hosting Providers

Shopify receives information needed to provide our website, shopping cart, checkout, and order-management services.

Payment Processors

Shopify Payments and its associated financial or payment-processing providers receive information necessary to process transactions and manage payment security.

Shipping and Fulfillment Providers

Shipping providers, carriers, and fulfillment partners may receive names, delivery addresses, order identifiers, and shipment information necessary to deliver purchases.

Customer Support Providers

Help Scout processes information relevant to managing and responding to support inquiries.

Order Tracking Providers

CWILL Order Tracking processes relevant order and shipment information to provide tracking functionality.

Marketing and Email Providers

Omnisend processes relevant customer and subscription information for permitted marketing activities.

Analytics and Advertising Providers

Google Analytics, Google Ads, and Wetracked.io may process browsing information, technical identifiers, conversion events, and related information for measurement and advertising purposes.

Professional and Legal Service Providers

We may disclose information to professional advisers, auditors, financial service providers, or other appropriate parties where reasonably necessary for legal, accounting, security, or business purposes.

Authorities and Legal Requests

We may disclose information when legally required, including in response to valid court orders, lawful government requests, or other applicable legal processes.

Business Transactions

If our business is involved in a merger, acquisition, restructuring, sale of assets, or similar transaction, personal information may be disclosed as reasonably necessary, subject to applicable legal safeguards.

We do not authorize service providers to use personal information for unrelated purposes beyond those permitted under their applicable agreements and legal obligations.

8. Sale, Sharing, and Targeted Advertising

We do not operate as a data broker or offer customer contact lists for sale.

However, the terms "sale," "sharing," and "targeted advertising" have specific meanings under certain United States privacy laws.

Some transfers of information to advertising and analytics partners may qualify as a sale or sharing of personal information, even when no money is exchanged.

Our use of Google Ads, Wetracked.io, and applicable Shopify advertising-related services may involve the disclosure of:

• Online identifiers.
• Cookie or device identifiers.
• IP addresses.
• Internet or website activity information.
• Approximate location information.
• Advertising interactions.
• Purchase or conversion events.

These disclosures may support advertising measurement, attribution, or targeted advertising, depending on the configuration of the services.

Where applicable privacy law gives consumers the right to opt out of the sale or sharing of their personal information or its use for targeted advertising, we will provide and honor that right.

We do not knowingly sell or share the personal information of children under 16 years of age for targeted advertising.

9. Email Marketing and Communication Preferences

We may send promotional emails concerning Cove & Thread products, collections, offers, or store updates where permitted by law.

Marketing communications may be managed through Omnisend.

You can unsubscribe from promotional emails at any time by using the unsubscribe link included in those messages.

You may also contact support@coveandthread.com to request removal from promotional email communications.

We will process unsubscribe requests in accordance with applicable law.

Unsubscribing from marketing does not prevent us from sending necessary transactional communications relating to:

• Order confirmations.
• Payment or delivery updates.
• Refunds.
• Customer support.
• Security matters.
• Important service or legal notices.

We do not use your purchase of a product as permission to disregard applicable marketing laws or your communication preferences.

10. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, subject to applicable legal requirements.

Retention periods depend on the category of information and why it is collected.

Order and transaction records: Retained as needed for order administration, accounting, taxes, disputes, returns, and legal obligations.

Customer support records: Retained as necessary to manage inquiries, resolve complaints, maintain service history, and address potential disputes.

Marketing information: Retained while relevant to permitted marketing activities, until an applicable deletion request, or as otherwise required or permitted by law. Limited suppression records may be kept to honor unsubscribe requests.

Technical and analytics information: Retained according to the purposes of collection, relevant provider configurations, and applicable retention settings.

Security and fraud prevention information: Retained as reasonably necessary to investigate incidents, protect transactions, and satisfy applicable legal requirements.

When information is no longer required, we will take reasonable steps to delete, anonymize, or otherwise securely dispose of it, subject to legitimate retention requirements.

Backup systems and third-party providers may retain certain information for additional limited periods consistent with their applicable obligations.

11. Data Security

We take reasonable administrative, technical, and organizational measures intended to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

These measures may include:

• Access controls.
• Secure website connections.
• Payment-processing safeguards.
• Account and administrative security.
• Restricted access to customer information.
• Appropriate use of service-provider security features.
• Monitoring and responding to potential security incidents.

Shopify and other providers maintain their own security measures for the information they process.

Although we take reasonable precautions, no website, electronic transmission, or data-storage system can be guaranteed completely secure.

If a data security incident occurs, we will take appropriate steps and provide legally required notifications where applicable.

12. International Processing and Transfers

Although Cove & Thread serves customers in the United States, some of our service providers and operational partners may process or store personal information outside the United States.

This may occur through ecommerce hosting, customer support, analytics, marketing, payment processing, shipment tracking, or fulfillment services.

Personal information may therefore be transferred to or accessed from jurisdictions with privacy laws different from those in your state or country.

Where applicable, we take reasonable steps to work with service providers that maintain appropriate contractual, organizational, and technical safeguards.

International processing does not remove our obligations under applicable United States privacy laws.

13. Your Privacy Rights

Depending on your state of residence and the applicability of relevant privacy laws to our business, you may have certain rights relating to your personal information.

These may include:

Right to Know or Access

You may have the right to request information about the categories or specific pieces of personal information we maintain about you, and how that information is collected, used, or disclosed.

Right to Correction

You may have the right to request correction of inaccurate personal information.

Right to Deletion

You may have the right to request deletion of personal information we maintain, subject to applicable exceptions.

Right to Data Portability

You may have the right to receive certain personal information in a reasonably accessible format.

Right to Opt Out

You may have the right to opt out of certain sales or sharing of personal information, targeted advertising, or qualifying profiling activities.

Right to Limit Certain Uses of Sensitive Personal Information

Where applicable law provides this right, you may request limitations on certain uses or disclosures of sensitive personal information.

Right to Non-Discrimination

Where required by law, we will not discriminate against you for exercising your privacy rights.

Right to Appeal

Where applicable state law provides an appeal right, you may challenge a decision we make concerning your privacy request.

The rights available to you and applicable exceptions depend on your state of residence and the relevant law.

14. Additional Information for California Residents

California residents may have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, where that law applies to our business and the relevant processing.

For California privacy disclosure purposes, the categories of personal information described in this policy may include:

• Identifiers, including names, email addresses, postal addresses, IP addresses, and account or transaction identifiers.
• Customer records and purchasing information.
• Commercial information, including products purchased, orders, returns, and transaction history.
• Internet or electronic network activity, including browsing interactions and shopping activity.
• Approximate geolocation derived from technical information.
• Inferences about shopping interests where advertising or personalization features generate them.
• Payment-related information processed for transactions and security.

The sources of this information include customers, website interactions, Shopify, payment providers, marketing and analytics services, and other operational providers described in this policy.

Our purposes for using this information are explained in Sections 4 through 9.

We may disclose these categories to ecommerce service providers, payment processors, shipping partners, customer support providers, and analytics or advertising partners, as relevant to their services.

Disclosures of online identifiers, browsing activity, approximate location, and conversion information to advertising partners may qualify as "sharing" or "sale" under California law.

We do not knowingly sell or share the personal information of consumers under 16 years of age.

Where the California privacy law applies, eligible consumers may request access, correction, deletion, information about our relevant data practices, and opt-out of the sale or sharing of personal information, subject to applicable requirements and exceptions.

Consumers may also have the right to limit certain uses or disclosures of sensitive personal information, where applicable.

We will respect legally applicable rights and will not unlawfully discriminate against consumers for exercising them.

15. Privacy Rights in Other U.S. States

Residents of certain other U.S. states may also have privacy rights under applicable state laws.

These states may include, among others, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia.

Depending on the relevant law and whether it applies to our business, eligible residents may have rights to:

• Access personal information.
• Correct inaccurate information.
• Request deletion.
• Obtain a portable copy of certain information.
• Opt out of targeted advertising or qualifying data sales.
• Opt out of certain profiling activities.
• Appeal a denied privacy request.

Some states also provide additional rights or requirements regarding sensitive information, disclosure of third-party recipients, or recognized opt-out preference signals.

We will process valid requests in accordance with the requirements and limitations of the applicable law.

16. Exercising Your Privacy Rights

To submit a privacy-related request, you can contact:

support@coveandthread.com

Please clearly describe the privacy right you wish to exercise.

To protect your information, we may need to verify your identity before processing certain requests.

Verification may involve confirming information already associated with your account, order, or previous communications.

We will not request more personal information than reasonably necessary to verify and process your request.

Where legally permitted, we may decline or limit a request if an applicable exception applies, such as a requirement to retain transaction records, prevent fraud, comply with legal obligations, or protect the rights of others.

We will respond within the period required by applicable law and explain any available appeal procedure where relevant.

Where applicable law allows an authorized agent to submit a request on your behalf, we may require appropriate evidence of that authorization.

17. Data Sharing Opt-Out and Global Privacy Control

Certain U.S. state privacy laws allow consumers to opt out of personal information sales, sharing, or targeted advertising.

Where available, you may use the privacy preference or data-sharing opt-out controls provided on our website.

You may also contact support@coveandthread.com for assistance with an applicable privacy opt-out request.

We recognize legally required opt-out preference signals, including Global Privacy Control (GPC), in jurisdictions where such recognition is required.

Global Privacy Control is a browser-based privacy signal that can communicate a preference to opt out of certain data-sharing practices.

Applicable opt-out choices will be honored in accordance with relevant law, including through properly configured supported services and tracking integrations.

You may also manage certain Shopify-specific data-sharing preferences directly through:

https://privacy.shopify.com/

An advertising opt-out does not necessarily stop all data processing. Information may still be processed for necessary store operation, security, payment processing, order fulfillment, or other purposes permitted by law.

18. Children's Privacy

Our website is intended for a general shopping audience and is not directed toward children under the age of 13.

We do not knowingly collect personal information directly from children under 13 in circumstances requiring parental consent under applicable law.

If we become aware that personal information has been collected from a child in violation of applicable children's privacy requirements, we will take appropriate steps to delete or otherwise handle that information as required by law.

We do not knowingly sell or share personal information belonging to children under 16 for targeted advertising.

Parents or legal guardians who believe their child has provided personal information to us may contact support@coveandthread.com.

19. Third-Party Websites

Our website may include links to external websites or services operated by third parties.

These websites may have separate privacy practices that are not controlled by Cove & Thread.

We encourage you to review the privacy notices of third-party websites before providing personal information.

This section does not eliminate any responsibility we may have under applicable law concerning third-party integrations used on our own website.

20. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in:

• Our business operations.
• The personal information we process.
• Our service providers.
• Our website functionality.
• Applicable privacy laws.
• Customer privacy choices and rights.

When we make changes, we will publish the revised Privacy Policy on coveandthread.com and update the "Last Updated" date.

Where applicable law requires additional notice or consent for material changes, we will provide it.

We encourage customers to review this policy periodically.

21. Contact Us

If you have questions about this Privacy Policy, your personal information, or your privacy rights, please contact:

Cove & Thread
Website: coveandthread.com
Email: support@coveandthread.com