Privacy Policy

Last updated: July 2026

Mildred's ("we", "us") is operated by ALAE CAPITAL Ltd., PO Box 30236, RPO Ogilvie, Whitehorse, Yukon Y1A 5M2, Canada. We take the privacy of our customers and visitors seriously. This policy explains what we collect, why, and the choices you have.

1. Information we collect

• Identity & contact: name, email address, shipping address, phone number (optional) — collected when you place an order, create an account, subscribe to our emails, or contact us.
• Order information: order history, purchase amounts, payment method used. We never see or store your full card number — payments are processed by our payment providers.
• Browsing data: IP address, browser type, pages viewed, visit source — collected via cookies and similar technologies.
• Communications: messages you send us and responses to post-purchase surveys.

2. How we use it

• Processing and delivering your order, including shipping notifications
• Customer support and applying the Mildred's Promise (our 60-day guarantee)
• Sending marketing emails, only if you opted in — you can unsubscribe anytime
• Improving our products, website and customer experience
• Fraud prevention and compliance with legal, tax and accounting obligations

3. Who we share it with

We share data only with service providers who need it to do their job: Shopify (store hosting and order management), our payment processors (e.g. Shopify Payments, PayPal), our fulfillment and shipping partners (to deliver your order), email service providers (transactional and marketing emails), and analytics and advertising partners (e.g. Meta, Google) where permitted. We may disclose information to authorities when legally required.

We never sell your personal information.

4. Data retention

Order records are kept as long as required for tax and accounting purposes. Account data is kept while your account is active. Email subscriber data is kept until you unsubscribe. Cookie lifetimes are limited and can be managed in your browser settings.

5. Your rights

You can request access to, correction of, or deletion of your personal information, and you can opt out of marketing at any time. California residents may exercise their rights under the CCPA/CPRA, and visitors from the EU/UK may exercise their GDPR rights. To make a request, email us at hello@mildredswash.com. We respond within 30 days and may ask you to verify your identity.

6. Security

We use industry-standard safeguards including SSL/TLS encryption, restricted access to personal data, and regular backups.

7. Changes

We may update this policy from time to time. The date above reflects the latest version. Material changes will be communicated by email or on this page.