Privacy Policy

Last updated: August 27th, 2025.

This Privacy Policy explains how House of Thavy LLC (“House of Thavy,” “we,” “us,” “our”) collects, uses, discloses, and safeguards personal information when you visit or make a purchase from our website, interact with our social channels, join our email/SMS list, or shop at our storefront in Philadelphia, Pennsylvania (collectively, the “Services”). We currently serve the United States only.

Company: House of Thavy LLC, 2215 S 7th St, Philadelphia, PA 19148, USA
Contact: support@houseofthavy.com


1) Scope & who this applies to

This Policy covers personal information we collect about customers, site visitors, and subscribers in the U.S. It does not cover employees or job applicants. By using our Services, you agree to the practices described here.

We use Shopify to power our online store and various third-party providers (payments, shipping, analytics, advertising). Those vendors process your data consistent with their own policies.


2) Personal information we collect

A. Information you provide

  • Identity & contact: name, email, phone number, shipping/billing address.

  • Account details: login, saved addresses, order history, wishlist.

  • Order & payment: items purchased, prices, payment method details (processed by our payment providers; we do not store full card numbers).

  • Fittings & custom sizing: measurements, fit notes, appointment details.

  • Communications: messages to support (including English/Khmer), survey responses, UGC (reviews, photos/video).

  • In-person purchases: when you pay by Cash or Zelle at our Philadelphia storefront.

B. Information collected automatically

  • Device & usage: IP address, cookie IDs, device type, browser, pages viewed, time on page, referring URLs.

  • Approximate location (derived from IP), not precise GPS.

  • Cookies, pixels, SDKs: for essential site functions, analytics, and advertising.

C. Information from third parties

  • Payment & BNPL providers: e.g., Afterpay, Klarna (status, limited identifiers).

  • Shipping & fulfilment: Pirate Ship, USPS/UPS labels and tracking updates.

  • Marketing/ads partners: analytics, attribution, and ad performance signals.

  • Fraud prevention & security vendors.

We do not knowingly collect data from children under 13. If you believe a child provided data, contact us to delete it.


3) How we use your information

  • Provide Services: process orders, payments, fulfilment, returns, store pickup.

  • Customer support: respond to messages (English & Khmer), manage accounts.

  • Custom sizing & fittings: create/alter made-to-measure garments you request.

  • Communications: transactional emails/SMS (order, shipping, service notices).

  • Marketing (with consent/opt-out): emails/SMS about drops, events, offers.

  • Analytics & improvement: diagnose issues, test features, improve UX and sizing charts.

  • Fraud & security: detect and prevent fraudulent or abusive activities.

  • Legal compliance: tax, accounting, and responding to lawful requests.


4) Cookies & similar technologies

We use first-party and third-party cookies/pixels for:

  • Essential operations (cart, checkout, authentication).

  • Analytics (e.g., Shopify/Google Analytics).

  • Advertising/retargeting (e.g., social and search platforms).

You can manage cookies via your browser and our Cookie Settings tool. Blocking cookies may affect site functionality

5) How we disclose information

We do not sell your personal information for money. We share information as follows:

  • Service providers / processors: Shopify (store platform), payment processors (Shop Pay, PayPal, Apple/Google Pay), BNPL (Afterpay/Klarna), shipping & fulfilment (Pirate Ship, carriers), email/SMS platforms, analytics and anti-fraud vendors.

  • Advertising/analytics partners: to measure and improve campaigns (this may be considered “sharing” for cross-context behavioral advertising in some states).

  • Legal & compliance: to comply with law, enforce our Terms, or protect rights/safety.

  • Business transfers: if we explore or complete a merger, acquisition, or asset transfer.

We do not knowingly “sell” or “share” the personal information of consumers under 16.


6) State privacy disclosures (CA/VA/CO/CT/UT and similar laws)

A. Notice at collection (categories, purposes, retention)

We may collect the following categories (examples in parentheses):

  • Identifiers: name, email, phone, address, IP, device IDs.

  • Customer records: order history, payment tokens (via providers).

  • Commercial information: products viewed/purchased, promo usage.

  • Internet/technical info: browsing history, interactions with pages/ads.

  • Geolocation: coarse IP-based location (city/region).

  • Audio/visual/UGC: reviews, photos you submit.

  • Inferences: preferences derived from interactions.

  • Sensitive info (limited): payment card tokens via processors; measurement data you voluntarily provide for custom sizing.

Purposes: see Section 3. Sources: you, your devices, service providers, partners. Retention: see Section 9.

Disclosure: to service providers/processors and partners as in Section 5. Sale/Share: We do not sell for money. Some states deem certain ad/analytics disclosures a “share”; you may opt out (Section 6C).

B. Your state privacy rights

Subject to verification, you may have rights to:

  • Access/Know the categories/specific pieces we collected.

  • Delete personal information.

  • Correct inaccuracies.

  • Opt out of “sale”/“sharing”/targeted advertising.

  • Limit use/disclosure of sensitive personal information (where applicable).

  • Non-discrimination for exercising your rights.

C. How to exercise rights

  • Use our Privacy Request Form or email privacy@houseofthavy.com.

  • For opt out of sale/share/targeted ads, use our Do Not Sell or Share link and/or adjust Cookie Settings.

  • Authorized agents: we may require proof of authority and your verification.

D. Notice of Financial Incentive (email/SMS sign-ups)

We may offer discounts, early access, or perks in exchange for your email/SMS. Participation is voluntary, and you can withdraw anytime (email Unsubscribe link; SMS reply STOP). We estimate the value of data collected for these programs based on the related offer and anticipated revenue impact


7) Email & SMS marketing

  • Email: You can unsubscribe via the footer link in any marketing email.

  • SMS: By opting in, you agree to receive marketing texts. Message/data rates may apply. Reply STOP to opt out; HELP for help. Consent is not a condition of purchase.
    For both, you may still receive transactional messages (order, shipping, service).


8) Payments, BNPL, fulfilment & third parties

When you choose Shop Pay, PayPal, Apple Pay, Google Pay, Afterpay, or Klarna, those providers process your payment and may collect data under their own policies and terms. For shipping, we use Pirate Ship to generate labels and tracking. We share only what is necessary to complete your order and reduce fraud.


9) Data retention

We keep personal information only as long as necessary for the purposes described, including:

  • Orders & tax records: typically 7 years.

  • Account & marketing preferences: until you delete your account or opt out, or after reasonable inactivity.

  • Custom sizing & fitting notes: while the order and alterations are active, then as required for customer service, warranty, or legal obligations.

  • Analytics logs: per vendor defaults or as needed for security and improvement.

We then delete, anonymize, or aggregate information per our data schedule.


10) Security

We implement reasonable physical, technical, and administrative safeguards to protect personal information. No method of transmission or storage is 100% secure. Please use strong, unique passwords and keep account details confidential.


11) Your choices

  • Account: update your info in your account dashboard.

  • Email/SMS: unsubscribe or reply STOP as described above.

  • Cookies/Ads: use Cookie Settings, browser controls, or platform ad settings (e.g., Google Ad Settings, Facebook Ad Preferences).

  • Privacy rights: see Section 6C.


12) Do Not Track & global privacy controls

Our Services do not currently respond to Do Not Track signals. Where required by state law, we honor Global Privacy Control (GPC) to treat it as an opt-out of sale/share for that browser.


13) International data transfers

We serve U.S. customers and host data primarily in the United States. Some providers may process data in other countries subject to contractual and security safeguards.


14) Third-party links & social features

Our Services may link to third-party sites or include social widgets. We are not responsible for their privacy practices. Review their policies before sharing information.


15) Changes to this Policy

We may update this Policy from time to time. The “Last updated” date reflects the latest version. Material changes will be posted on this page and, where required, we will notify you.


16) California “Shine the Light”

California Civil Code §1798.83 permits customers to request information about our disclosures of certain categories of personal information to third parties for their direct marketing. We do not share such information for this purpose without your consent. You may still request details at privacy@houseofthavy.com.


17) Nevada residents

We do not sell covered information as defined by Nevada law. You may still submit a verified request to privacy@houseofthavy.com.


18) Contact us

Questions or requests about privacy:
Email: privacy@houseofthavy.com
Mail: House of Thavy LLC, 2215 S 7th St, Philadelphia, PA 19148, USA


19) Summary of U.S. state privacy rights (reference table)

Right

What it means

How to exercise

Access/Know

Request the categories/specific pieces we hold

Privacy Request Form / email

Delete

Ask us to delete personal information

Privacy Request Form / email

Correct

Fix inaccuracies

Privacy Request Form / email

Opt-out of sale/share/targeted ads

Stop certain data disclosures to ad partners

Do Not Sell or Share + Cookie Settings

Limit use of sensitive info

Restrict certain sensitive data uses (where applicable)

Privacy Request Form

Non-discrimination

We won’t deny goods/services or charge different prices for exercising rights

Automatic

 

 

20) Category disclosures at a glance (CPRA)

Category (examples)

Collected

Purpose

Disclosed to

Identifiers (name, email, phone, IP)

Yes

Orders, support, marketing (opt-in), security

Service providers; analytics/ads (opt-out available)

Customer records (addresses)

Yes

Shipping, returns, store pickup

Carriers, fulfilment

Commercial info (orders, cart)

Yes

Fulfilment, analytics, personalization

Service providers

Internet/technical (cookies, device)

Yes

Site performance, analytics, ads

Analytics/ads partners (opt-out available)

Geolocation (coarse)

Yes

Fraud prevention, shipping rules

Service providers

UGC (reviews/photos)

Optional

Community, marketing (with your consent)

Public site display; marketing tools

Sensitive data (payment tokens, measurements you provide)

Limited

Payment processing; custom sizing

Payment processors; production team (need-to-know)

We do not knowingly sell or share personal information of consumers under 16.

SMS disclosure (required short terms)

By subscribing to House of Thavy SMS, you agree to receive marketing texts. Consent not required for purchase. Message/data rates may apply. Reply STOP to cancel, HELP for help. Frequency varies. Review SMS terms.

 

This Policy is intended to be transparent and comprehensive but is not legal advice. For guidance specific to your situation, consult counsel licensed in Pennsylvania.