Privacy policy

Last updated: September 30, 2026

This policy explains what personal information Flag Folks collects, why we collect it, who we share it with, and the choices you have. "We" means Flag Folks, the business behind this store. You can reach us through the form on our Contact page.

What we collect

What you give us: your name, email, shipping and billing address, your phone number if you add one, what you order, and the messages you send us.
Automatically, when you visit: your device and browser type, IP address, the pages you look at, the page that sent you to us, and cookies and similar tools (see "Cookies").
From others: payment confirmations from our payment processors (we never see your full card number) and delivery updates from our fulfillment partner and carriers.

How we use it

To take, ship and deliver your orders, and to help when something goes wrong.
To send you emails about our products, if you sign up. At checkout, the box for our emails starts ticked; untick it if you'd rather not get them. Every marketing email has an unsubscribe link.
To run and improve our site.
To show our ads, as described under "Who we share it with".
To prevent fraud and to meet our legal duties.

What we never do

We never sell or rent your personal information for money.
We never sell, rent or give our customer list to anyone, including any campaign, candidate, political party, PAC or political organization. The list means our customers and email subscribers. The one exception is the ad platforms described under "Who we share it with": to show our own ads, we send them a scrambled (hashed) copy of email addresses and phone numbers, and you can opt out.
We don't ask how you vote or what you believe, and we don't build profiles of customers' political views.

Who we share it with

We share it only as listed here:

Shopify, which runs our store, our checkout and our order emails, and the apps we use inside Shopify, such as the one that checks billing addresses at checkout;
the payment processors shown at checkout, to take your payment;
our fulfillment partner, which receives your name, shipping address, phone number (if you gave one) and what you ordered, to pack and ship it;
carriers, to deliver it;
ad platforms such as Meta (Facebook and Instagram): when we run ads, we send them a scrambled (hashed) copy of the email addresses and phone numbers on our customer list. They use it to show our ads to people on the list, to leave people who already bought out of ads meant for new customers, and to find people with similar interests. They get no other detail from the list. You can opt out (see "Your choices and rights");
our lawyers and accountants, when needed;
authorities, when the law requires it;
a buyer of the business, if Flag Folks is ever sold, under this policy.

Cookies

Shopify uses cookies to run your cart, checkout and account, to keep the site secure, and to measure how the site is used.
You can block or delete cookies in your browser; the cart and checkout need some of them to work.
Some US state laws let you opt out of targeted advertising and of the "sale" or "sharing" of personal information. You can use the "Your privacy choices" link at the bottom of our site, or write to us through our Contact page.
Our site does not respond to browser "Do Not Track" signals, because there is no common standard for them.

Your choices and rights

Unsubscribe from our marketing emails with the link in any of them.
Keep your email address and phone number out of the lists we send to ad platforms: write to us through the form on our Contact page, or use the "Your privacy choices" link at the bottom of our site. We'll remove them from the lists we've already sent and leave them out of every list after that. Unsubscribing from our emails doesn't do this on its own, so use one of these two ways.
You can ask to see the personal information we hold about you, get a copy, correct it, delete it, or opt out of targeted advertising. Write to us through our Contact page, starting your message with "Privacy request". We'll confirm it's you by checking the email address on your orders, and we'll answer within 45 days. Someone else can make the request for you with your written permission.
Some of these rights come from the law of the state you live in. We give them to every customer in the United States.
We won't charge you more or treat you differently for using them.
We must keep some records, such as orders for tax, even after a deletion request. If we do, we'll tell you what we kept and why.

How long we keep it

We keep order records for as long as tax and accounting law requires. We keep your email subscription until you unsubscribe; after that, we keep only your email address on a do-not-email list, so we can honor your choice. We keep other information only as long as we need it for the reasons in this policy.

Where your information is handled

We and the businesses that help us run the store handle your information in the United States and in other countries.

Keeping it safe

Payments are handled by Shopify and our payment processors, which follow the card industry's security standard (PCI DSS). We limit who on our team can see customer information. No system is perfectly secure. If a breach affects your information, we'll tell you as the law requires.

Children

Our site isn't meant for children under 13, and we don't knowingly collect their information.

Changes

If we change this policy, we'll post the new version here with a new date. If a change affects how we use information we already have, we'll email you before it applies.