Effective date: October 11, 2026
Last updated: October 11, 2026

This Privacy Policy explains how Emboro Stitch (“Emboro Stitch,” “we,” “us,” or “our”) collects, uses, shares, and protects personal information when you visit emborostitch.com (the “Site”), request a quote, send us artwork, place an order, or otherwise communicate with us. Emboro Stitch makes custom patches and provides embroidery digitizing and vector art services. We are a US-based patch company with our own production houses in Karachi and Sialkot, Pakistan, and most of our customers are in the United States.

We’ve written this policy in plain English. If anything is unclear, contact us using the details in the Contact Us section.

Quick summary

  • We collect the information you give us (like your name, email, phone, and artwork) plus basic technical and analytics data when you browse the Site.
  • We use it to quote, produce, and deliver your order, to communicate with you, and to improve the Site.
  • We do not sell your personal information, and we do not share it for cross-context behavioral (targeted) advertising.
  • We use Google Analytics 4 through Google Tag Manager, plus a small number of cookies needed for the Site and cart to work.
  • You can ask us to access, correct, or delete your information at any time by emailing emborostitch@gmail.com.

1. Information we collect

Information you give us

  • Quote and contact requests: when you use our contact or quote form, we collect your name, email address, and message, plus your phone number and company name if you choose to provide them.
  • Artwork and design files: files you upload or email to us (for example JPG, PNG, PDF, AI, EPS, or SVG files, or a phone photo), along with project details such as patch type, size, quantity, colors, and deadline.
  • Order information: billing and shipping name, shipping address, email, phone number, order details, and order history.
  • Payment information: we accept credit/debit card, PayPal, Payoneer, bank transfer/ACH, and payment by invoice. Payments are handled by the payment provider you use (for example, PayPal or Payoneer). We do not store full card numbers or bank login credentials on our Site. We receive limited payment details from the provider, such as payment confirmation, amount, and date.
  • Communications: emails, phone calls, texts, or messages you exchange with us, including proof approvals and revision requests.

Information collected automatically

  • Device and usage data: IP address, browser type, device type, operating system, pages viewed, time on page, and the website or search engine that referred you. Google Analytics collects this on our behalf (see Section 4).
  • Form source data: when you submit our contact or quote form, the form also records the first page you landed on, the page you submitted from, and the site that referred you. This helps us understand how customers find us.
  • Server and security logs: our hosting and security tools record IP addresses and request details to keep the Site running, block spam and bots, and prevent abuse.

Information from other sources

If you represent a business, such as an embroidery shop, apparel brand, school, team, or organization, we may get your business contact details (name, job title, business email, phone, company website) from publicly available sources, such as your company’s website or business directories. We use these to contact you about services relevant to your business (see Section 5).

2. How we use your information

  • To respond to your questions and prepare quotes and digital proofs.
  • To digitize, produce, and ship your patches, embroidery files, or vector art, and to handle revisions and reorders.
  • To process payments, prevent fraud, and keep records for accounting and tax purposes.
  • To send service messages, such as proof notifications, order updates, shipping confirmations, and replies to your requests.
  • To send marketing emails about our products and services, where allowed by law (see Section 5).
  • To measure Site traffic and improve our Site, content, and services.
  • To protect the security of our Site, our customers, and our business, and to comply with legal obligations.

Your artwork: we use the files you send us only to quote, produce, and support your order, including keeping them on file so reorders are faster. We do not claim ownership of your designs. We will not display your artwork or finished patches in our portfolio or marketing without your permission.

3. How we share your information

We share personal information only with service providers that help us run our business, and only as needed for them to do their job:

WhoWhyExamples of data
Website hosting, caching, and security providersHost and operate the Site, block spam and malicious trafficIP address, request logs, form submissions
Google (Google Analytics 4, Google Tag Manager, Google Fonts)Site analytics and loading web fontsDevice and usage data, IP address
Google (Gmail)Our business email, which receives quote requests and customer correspondenceName, email, messages, attachments
Payment providers (such as PayPal and Payoneer) and our bankProcess payments and refundsPayment confirmation, amount, billing details
Shipping carriers and couriersDeliver your orderName, shipping address, phone, package details
Professional advisorsAccounting, tax, and legal adviceOrder and payment records

We may also disclose information if required by law, to respond to valid legal requests, to protect our rights or the safety of others, or as part of a merger, sale, or transfer of our business (in which case this policy would continue to apply to your information).

We do not sell personal information, and we do not “share” it for cross-context behavioral advertising as those terms are defined under California law.

4. Cookies and analytics

Cookies are small text files stored on your device. We use the following categories:

TypeWhat it doesExamples
Essential (WordPress / WooCommerce / theme)Keep the Site, shopping cart, and checkout working, and remember on-site choicesCart and session cookies (e.g., woocommerce_cart_hash, woocommerce_items_in_cart, wp_woocommerce_session_*), WordPress test cookies
Analytics (Google Analytics 4 via Google Tag Manager)Measure visits, traffic sources, and how pages are used_ga, _ga_* (typically up to 2 years)
Form attribution (first-party)Remember the first page you visited and the referring site, so our quote form can tell us how you found uses_first_page, es_first_referrer (90 days)

We do not currently use advertising cookies, retargeting pixels, or session-replay tools. If that changes, we’ll update this policy first.

Your choices:

  • You can block or delete cookies in your browser settings. If you block essential cookies, the cart and checkout may not work.
  • You can opt out of Google Analytics with the Google Analytics Opt-out Browser Add-on.
  • Learn how Google uses data from sites that use its services: https://policies.google.com/technologies/partner-sites.
  • We honor Global Privacy Control (GPC) browser signals as a request to opt out of any sale or sharing of personal information. As noted above, we don’t sell or share it.

5. Email marketing and business outreach

We may send you emails about our products, services, and offers if you’re a customer, if you’ve asked to hear from us, or, for businesses, if we believe our services are relevant to your work (for example, an embroidery shop that may need digitizing). These emails follow the U.S. CAN-SPAM Act. They will clearly identify Emboro Stitch, will not use misleading subject lines, and will include a way to opt out.

To unsubscribe, click the unsubscribe link in any marketing email, reply with “unsubscribe,” or email emborostitch@gmail.com. We’ll process opt-outs promptly, and within 10 business days at the latest. Even after you unsubscribe, we may still send messages related to an active quote or order.

We do not send marketing text messages. If you text or call us, we’ll only use your number to respond and support your order.

6. International data transfers

EmboroStitch is a US-based patch company. Our production houses and order-handling team are in Karachi and Sialkot, Pakistan, so quote requests, artwork and order details may be processed in Pakistan. Our service providers, including Google, our hosting provider, and payment providers, may store and process data in the United States and other countries. By using our Site or services, you understand that your information may be transferred to, stored in, and processed in Pakistan, the United States, and other countries whose data protection laws may differ from those where you live. We take reasonable steps to protect your information wherever it is processed.

7. How long we keep your information

  • Quote requests and inquiries that don’t become orders: generally up to 24 months, so we can follow up or re-quote, unless you ask us to delete them sooner.
  • Orders, invoices, and payment records: as long as needed for accounting, tax, and legal purposes, generally up to 7 years.
  • Artwork, stitch files, and vector files: kept on file to support reorders, generally for up to 3 years after your last order, or deleted sooner if you ask.
  • Marketing contact data: until you unsubscribe or ask us to delete it. We keep a minimal suppression record so we don’t email you again.
  • Analytics data: according to our Google Analytics retention settings.

8. How we protect your information

We use reasonable administrative, technical, and physical safeguards. These include an encrypted (HTTPS) connection, access limited to staff who need it, reputable service providers, and security tools that block malicious traffic. No website, email, or storage system is 100% secure, so we can’t guarantee absolute security. Please avoid sending sensitive information, like full card numbers, by email.

9. Children’s privacy

Our Site and services are meant for businesses and adults. They are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If a school, team, or youth organization orders from us, an adult representative should place the order. If you believe a child has given us personal information, contact us and we’ll delete it.

10. Your privacy rights

Wherever you live, you can contact us to:

  • Know and access the personal information we have about you, including the categories, sources, purposes, and the types of service providers we share it with.
  • Correct inaccurate information.
  • Delete your personal information, subject to records we must keep (for example, for tax or to complete an order).
  • Opt out of marketing emails at any time.
  • Opt out of the sale or sharing of personal information. We don’t sell or share it, but you can still submit this request.

U.S. state privacy rights (including California)

Residents of California and several other U.S. states (such as Virginia, Colorado, Connecticut, Utah, Texas, and Oregon) have rights under their state privacy laws. These include the rights to know, access, correct, and delete personal information, and to opt out of the sale of personal information, “sharing” for targeted advertising, and certain profiling. Some states also let you appeal our decision on your request. We offer these rights to all U.S. customers, and we will not discriminate against you, for example by charging different prices, for exercising them.

In the last 12 months, we have collected these categories of personal information: identifiers (name, email, phone, IP address), commercial information (quotes and orders), internet activity (analytics data), geolocation approximated from IP address, and the content of your communications and uploaded files. We collected them from you, your device, and public business sources, for the purposes described in Section 2, and disclosed them to the service providers listed in Section 3. We do not collect sensitive personal information for the purpose of inferring characteristics about you.

How to make a request: email emborostitch@gmail.com with the subject line “Privacy Request,” or call +1 (346) 458-2451. We’ll need to verify your identity, usually by confirming details from your order or email address. You can also use an authorized agent, who must provide proof that you authorized them. We aim to respond within 45 days, as required by most state laws, and will tell you if we need more time. If we deny your request, you can appeal by replying to our decision. We’ll respond to appeals within the time required by your state’s law.

11. Third-party links

Our Site may link to other websites or services, like social media or payment pages. We aren’t responsible for their privacy practices, so please review their policies.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we’ll change the “Last updated” date at the top. If the changes are significant, we’ll post a notice on the Site or email active customers. Your continued use of the Site after an update means the updated policy applies.

13. Contact us

If you have questions about this Privacy Policy or want to make a privacy request, contact us:

This Privacy Policy is provided for general information about our practices and is not legal advice.