Privacy policy

Last updated: August 25, 2026

Hudson Sutler is the brand name of Hudson Sutler Corp. (“Hudson Sutler,” the “Company,” “we,” “us,” or “our”), a business registered in the State of New Jersey. Our website hudsonsutler.com is our sole point of sale. You can reach our customer support team at support@hudsonsutler.com or by calling 1.855.256.6631 during business hours, Monday through Friday, 10:00 AM to 5:00 PM EST.

By accessing or using the Site or interacting with us, you acknowledge that you have read and understood this Privacy Policy. This Policy is incorporated into and subject to our Terms and Conditions.

Scope

This Privacy Policy (“Policy”) describes how Hudson Sutler collects, uses, discloses, and protects personal information when you visit hudsonsutler.com (the “Site”), make a purchase, or otherwise interact with us, and explains your rights under applicable privacy laws. Read it alongside our Terms and Conditions and Text Messaging Terms.

Hudson Sutler operates exclusively online and maintains no physical retail locations. Our e-commerce platform is powered by Shopify. Our Site and services are directed to customers in the United States; we do not actively market to or target customers outside the United States. The international protections described near the end of this Policy are provided as a courtesy.

Your information is stored through Shopify’s data storage, databases, and application on a secure server behind a firewall, and payment data is handled according to the Payment Card Industry Data Security Standard (PCI-DSS). For more, see Shopify’s Privacy Policy and Terms of Service.

“Personal information” means any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to an identifiable individual or household. Under California law this includes “personal information” as defined in Cal. Civ. Code § 1798.140(v).

Children’s privacy

Hudson Sutler does not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will promptly delete it. If you believe we have collected information from a child, contact us at support@hudsonsutler.com.

As of the effective date of this Policy, we do not have actual knowledge that we “sell” or “share” (as those terms are defined in applicable law) the personal information of individuals under 16 years of age.

Information we collect

A. Device and usage information

When you visit our Site we automatically collect information about your device and how you interact with the Site, including browser type and version, operating system, IP address, pages visited, time spent on pages, referring website, device type, and approximate location derived from your IP address. Under California law this may constitute personal information.

This information is collected through Shopify’s analytics and shared with Google Analytics and Google Ads for analytics and advertising purposes. We may also use it to detect and prevent fraud.

B. Session replay and behavioral analytics

We use Microsoft Clarity to record how visitors interact with our Site. Clarity captures session replays, heatmaps, click patterns, and scroll behavior so we can find confusing or broken parts of the Site. Clarity is configured to mask form fields and does not capture passwords or payment details, but it does record the pages you visit and how you move through them. That information is processed by Microsoft under its own privacy practices.

C. Order and transaction information

When you make a purchase we collect your full name, billing address, shipping address, email address, phone number, payment information (processed securely through Shopify Payments), order history, and product preferences. This information is shared with Shopify, payment processors, shipping carriers, and our email and SMS marketing platform in order to fulfill your order, process payment, and send transactional messages. Payment credentials are used only to process transactions and prevent fraud and are not stored long-term on our servers.

D. Customer support communications

If you contact customer support we retain a record of the communication, including your message, email address, and phone number, and share it with the platforms that help us provide support and improve service quality.

E. Marketing and engagement data

If you consent to marketing communications, we collect data about your engagement with our emails, SMS messages, and advertisements — including open rates, click-through rates, SMS responses, and interactions with our ads on Google and YouTube. We use this to refine campaigns and tailor content.

How we use your information

Fulfilling and managing your orders, including payment processing, shipping, and delivery notifications
Communicating with you about orders, updates, and customer service inquiries
Sending marketing communications by email and SMS, only if you have opted in
Analyzing website usage, user behavior, and traffic patterns to improve the Site
Recording and analyzing session replays and heatmaps to improve design and usability
Detecting, preventing, and addressing fraud, security incidents, and other malicious activity
Complying with legal obligations and enforcing our Terms and Conditions
Creating aggregated, de-identified data for business intelligence and trend analysis

We use your personal information only for the purposes described in this Policy or otherwise disclosed to you at the time of collection.

Cookies and tracking technologies

We and our partners use cookies, pixels, web beacons, local storage, and similar technologies for essential store functions, analytics, and advertising. We group them as follows:

Strictly necessary — session management, account sign-in, cart and checkout, security and fraud prevention. These cannot be switched off.
Analytics and performance — understanding how visitors find and use the Site, including Shopify’s own analytics and Google Analytics.
Session replay and usability — Microsoft Clarity, as described above.
Advertising and marketing — Google Ads and YouTube advertising, Google Merchant Center product listings, affiliate attribution, and our own email and SMS marketing.
Functional — remembering preferences such as region, recently viewed products, and product personalization choices.

Advertising, affiliate, and analytics technologies may share online identifiers, pages viewed, and purchase information with the partners listed under “Sharing your personal information” below. That sharing may be considered a “sale” or “sharing” under US state privacy laws, and you can opt out at any time — see Your Privacy Choices.

Because our store runs on Shopify, Shopify also sets cookies for security, platform functionality, checkout, customer accounts, analytics, and marketing attribution. Shopify maintains and updates these directly, and publishes the current list at shopify.com/legal/cookies.

You can control cookies through your browser’s privacy settings, through private or incognito browsing, or with tracker-blocking extensions. Blocking cookies may affect how parts of the Site work. You can also opt out of interest-based advertising across many companies at once through the Digital Advertising Alliance.

Sensitive personal information

Under California law, “sensitive personal information” includes payment credentials. Hudson Sutler collects this data only to complete transactions and prevent fraud, and does not use or disclose it to infer characteristics about you. Payment processing is handled through Shopify Payments and PCI-DSS compliant processors. Because we use sensitive personal information solely for these permitted business purposes, the right to limit its use and disclosure does not apply. If that ever changes, we will update this Policy and provide a “Limit the Use of My Sensitive Personal Information” option.

Anonymous and aggregated data

We may create aggregated, de-identified, or otherwise anonymous records from personal information we collect, and may use and share that data for lawful business purposes, including analyzing and improving the Site and promoting our business.

Sharing your personal information

Depending on your state of residence, sharing your data with partners for targeted advertising may be classified as a “sale,” “sharing,” or “disclosure” under privacy laws, and we treat it that way. We share personal information with:

Shopify — our e-commerce platform, which processes and stores order and account information
Payment processors — to process your payment securely
Shipping carriers (such as USPS and UPS) — to deliver your order
Klaviyo — our email and SMS marketing platform
Google — Google Analytics, Google Ads, YouTube, and Google Merchant Center, for analytics, product listings, and advertising
Microsoft Clarity — session replay and usability analytics
ShareASale — affiliate program attribution and commission tracking
Loox — collecting and displaying product reviews and photos
Product feed and personalization apps — to publish our catalog to shopping platforms and to support customized and monogrammed products
Law enforcement and legal authorities — if required by law or court order, or to protect our legal rights and safety

Our service providers are contractually obligated to maintain appropriate security measures and to use personal information only as directed by us and consistently with this Policy. We remain responsible under California law for the personal information we share with them.

Categories of personal information collected, and who receives it

Category of personal information	Categories of recipients
Identifiers — name, email address, phone number, billing and shipping address, device and online identifiers	E-commerce platform, payment processors, shipping carriers, marketing platforms, advertising and analytics partners, affiliate network
California Customer Records — contact and order details	E-commerce platform, payment processors, shipping carriers, marketing platforms
Commercial information — purchase history, order details, product preferences	E-commerce platform, marketing platforms, advertising and analytics partners, affiliate network, product feed apps
Internet or other electronic network activity — pages visited, browsing behavior, ad interactions, session replays	Analytics providers, session replay provider, advertising partners, affiliate network
Geolocation data — approximate location derived from IP address	Analytics providers, advertising partners
Sensitive personal information — payment credentials	Payment processors only, for transaction processing and fraud prevention

Personal information “sold” or “shared” in the preceding 12 months

Category	Categories of recipients
Identifiers, including email addresses and device identifiers	Advertising and marketing partners, affiliate network
Commercial information, such as records of products purchased	Advertising and marketing partners, affiliate network
Internet or other electronic network activity	Advertising and marketing partners, affiliate network

We have not sold or shared sensitive personal information, and we have no actual knowledge of selling or sharing the personal information of anyone under 16.

Residents of states with comprehensive privacy laws have the right to opt out of this sharing. You can do so through Your Privacy Choices or by enabling Global Privacy Control in your browser. We act on opt-out requests as soon as we receive them and in every case within 15 business days, and we maintain your preference on a suppression list for at least 12 months.

Behavioral advertising and matched audiences

We use Google Analytics to understand behavior on our Site, and Google Ads and YouTube to display advertisements based on your browsing activity. This is accomplished using cookies and tracking pixels, and through matched audience campaigns.

For matched audiences, we may share limited customer information such as email addresses in hashed form with advertising platforms in order to build custom audiences, deliver relevant advertisements, or exclude existing customers from certain campaigns. Those platforms compare the hashed information against their own user records to look for a match. We do not share plaintext personal information for this purpose, and we do not receive information about individuals who are not matched.

You can opt out through Your Privacy Choices, by enabling Global Privacy Control, through the Digital Advertising Alliance, or directly with Google.

Global Privacy Control and Do Not Track

Our Site recognizes the Global Privacy Control (GPC) signal. If you notify us of your preference through GPC, we treat it as a valid request to opt out of sharing and targeted advertising for that browser or device, and where we can associate the device with an account we apply the opt-out to the account as well. You do not need to create an account or contact us. Learn more at globalprivacycontrol.org.

Other than Global Privacy Control, we do not recognize “Do Not Track” signals, because there is still no agreed standard for how websites should respond to them.

Marketing communications

We use Klaviyo to send promotional email and SMS messages about new products, sales, and events. Marketing communications are opt-in — you will not be enrolled automatically. For full details on our SMS program see our Text Messaging Terms.

To opt out of email marketing, click the unsubscribe link in any email or manage preferences in your account. To opt out of SMS marketing, reply STOP to any message. Message and data rates may apply. Even if you opt out of marketing, you may still receive transactional messages such as order confirmations and shipping updates. See Klaviyo’s Privacy Policy for more.

User-generated content

Customers may tag us on social media or use our branded hashtags when posting content featuring our products. By tagging us or using our hashtags, you consent to our sharing, reposting, or featuring your content on our social channels or website. If you would prefer we not, contact us at support@hudsonsutler.com.

Data retention

We retain personal information only as long as necessary for the purpose it was collected for, or as required by law, and we do not retain personal information for any disclosed purpose longer than reasonably necessary for that purpose. In practice:

Order and transactional data — 7 years, for accounting and legal compliance, after which records are deleted or de-identified
Account information — while your account is active, and for 24 months after your last order
Marketing data — until you unsubscribe or request deletion
Customer support communications — up to 3 years after your last interaction; records tied to an order or legal matter may be kept for up to 7 years
Website analytics data — up to 26 months at the user level in Google Analytics, then retained only in aggregate
Session replay data — in accordance with Microsoft’s retention policies for Clarity
Advertising and audience data — for the life of the relevant campaign or audience, subject to each platform’s own retention limits
Opt-out suppression records — at least 12 months, so we can continue to honor your choice

Automated decision-making

We do not engage in fully automated decision-making that produces legal or similarly significant effects using customer data.

Our processor Shopify uses limited automated decision-making to prevent fraud that does not have a legal or similarly significant effect on you, including temporary blocking of IP addresses associated with repeated failed transactions and of payment cards associated with those addresses. If you believe you have been incorrectly flagged, contact Shopify directly or reach us at support@hudsonsutler.com.

Your privacy rights

California (CCPA/CPRA)

If you are a California resident you have the following rights:

Right to know — what categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of third parties we share it with
Right to access — a copy of your personal information in a portable, readily usable format
Right to correct — inaccurate personal information we maintain about you
Right to delete — subject to the exceptions described below
Right to opt out of sale or sharing — through Your Privacy Choices or Global Privacy Control
Right to non-discrimination — we will not give you different pricing, different quality of service, or deny you goods or services for exercising these rights
Authorized agent — you may designate an agent to submit requests on your behalf; we may require proof of authorization and may ask you to verify your identity directly with us

The business and commercial purposes for our collection are order fulfillment and customer service, payment processing and fraud prevention, marketing and advertising, website analytics and improvement, and legal compliance.

Response timeline. We will confirm receipt of your request within 10 business days and provide a substantive response within 45 calendar days. If we need more time we will notify you of the extension, up to an additional 45 calendar days, and the reason for it. Opt-out requests are processed within 15 business days and do not require an account.

Deletion requests

To request deletion you must provide enough information for us to verify your identity, at minimum your full name and email address, which we use only to verify you and process the request.

On a verified request we will delete your personal information and direct our service providers to do the same, except where it is necessary to: complete a transaction or perform a contract with you; detect security incidents or protect against malicious, deceptive, fraudulent, or illegal activity and prosecute those responsible; debug and repair errors; exercise free speech or other rights provided by law; comply with the California Electronic Communications Privacy Act; engage in public or peer-reviewed research in the public interest; enable internal uses reasonably aligned with your expectations based on your relationship with us; comply with a legal obligation; or otherwise use the information internally in a lawful manner compatible with the context in which you provided it.

If an exception applies we will tell you which one and the basis for it. Note that deleting your information may disrupt services that depend on it.

Notice of financial incentive

We offer a discount on your first order in exchange for joining our email and SMS marketing list. The material terms are:

What we offer: a discount on your first order, currently $15.
What we collect: your email address, and your phone number if you join our SMS program — identifiers under California law — together with the engagement data described under “Marketing and engagement data” above.
How to opt in: submit your email address, and your phone number if applicable, through the signup form on our Site.
How to withdraw: unsubscribe from any email, reply STOP to any SMS, or contact us at support@hudsonsutler.com. Withdrawing costs you nothing, though any unused discount is forfeited.
Good-faith estimate of value: we estimate the value of the personal information involved to be equal to the value of the discount offered, currently $15 per subscriber. We calculate it using the expense of the incentive itself — the discount we extend in exchange for the information — which is the cost to us of obtaining it.
Why the difference is permitted: the incentive is reasonably related to the value of the personal information to our business, because the discount we give is the consideration we exchange for it.

Other US states

Residents of other states with comprehensive privacy laws — including Colorado, Connecticut, New Jersey, Oregon, Texas, and Virginia — have comparable rights to know, access, correct, delete, and opt out of the sale of personal data and targeted advertising, and may have the right to appeal a denied request. We extend the choices described in this Policy to all US visitors, and we honor Global Privacy Control everywhere.

Some states grant additional rights. Oregon residents, for example, may request a list of the specific third parties to which we have disclosed personal data. If we deny a request, you may appeal by replying to our decision, and we will respond to the appeal within the time your state’s law allows.

How to exercise your rights

Visit Your Privacy Choices, email support@hudsonsutler.com, or call 1.855.256.6631. We may request additional information to verify your identity before fulfilling a request.

International visitors

Hudson Sutler is based in the United States and our Site and services are directed to US customers. We do not actively market to, target, or ship to customers in the European Union, the United Kingdom, or other international jurisdictions. If you visit from outside the United States, your data will be transferred to, stored in, and processed in the United States.

As a courtesy: if you are located in the EEA or the UK, you may request access to, correction of, or deletion of your personal data by contacting us — these rights are offered as a courtesy and not as an acknowledgment that the GDPR or UK GDPR applies to our business. If you are a Canadian resident, you may contact us to access and correct your personal information and to understand how it is used.

Data security

We take the security of your personal information seriously and use HTTPS/TLS encryption for data transmitted between your browser and our Site, PCI-DSS Level 1 compliant payment processing through Shopify Payments, and access controls limiting sensitive information to authorized personnel. No security system is impenetrable, and we cannot guarantee absolute security.

In the event of a data breach involving your personal information, we will notify affected individuals as required by applicable federal and state law — for California residents, in the most expedient time possible and without unreasonable delay — and will notify regulatory authorities where required.

Changes to this Policy

We may update this Policy to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes we will update the “Last updated” date above and take any other steps required by applicable law. We encourage you to review this Policy periodically.

Related policies

Complaints and contact

If you have questions or complaints about this Policy or our privacy practices, contact us using the details below. You may also lodge a complaint with your local data protection authority where applicable.

Hudson Sutler Customer Service
Orders, returns, and general inquiries: support@hudsonsutler.com
Custom, wholesale, and corporate inquiries: customs@hudsonsutler.com
Phone: 1.855.256.6631

Hours of operation: Monday through Friday, 10:00 AM to 5:00 PM EST. Inquiries received outside these hours will be answered the following business day.