Privacy Policy

This Privacy Policy describes how El Hilo Co LLC ("El Hilo Co", "we", "us", or "our") collects, uses, and shares information about you when you use our website and services. Please read this policy carefully.

Types of Data Collected

Among the types of Personal Data that El Hilo Co collects, by itself or through third parties, there are: Cookies; Usage Data; email address; first name; last name; phone number; and various types of Data.

Complete details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy. Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically when using El Hilo Co.

Unless specified otherwise, all Data requested by El Hilo Co is mandatory. Failure to provide this Data may make it impossible for El Hilo Co to provide its services. Users who are uncertain about which Personal Data is mandatory are welcome to contact the Owner.

Users are responsible for any third-party Personal Data obtained, published, or shared through El Hilo Co and confirm that they have the third party's consent to provide the Data to the Owner.

Mode and Place of Processing the Data

Methods of Processing

The Owner takes appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of the Data. The Data processing is carried out using computers and/or IT-enabled tools, following organizational procedures strictly related to the purposes indicated. In addition to the Owner, certain types of persons involved in the operation of El Hilo Co — including administration, sales, marketing, legal, and system administration — or external parties (such as technical service providers, hosting providers, and communications agencies) may have access to the Data as Data Processors.

Legal Basis of Processing

The Owner may process Personal Data relating to Users if one of the following applies:

• Users have given their consent for one or more specific purposes.
• Provision of Data is necessary for the performance of an agreement with the User and/or for any pre-contractual obligations thereof.
• Processing is necessary for compliance with a legal obligation to which the Owner is subject.
• Processing is necessary for the purposes of the legitimate interests pursued by the Owner or by a third party.

Place

The Data is processed at the Owner's operating offices and in any other places where the parties involved in the processing are located. Depending on the User's location, data transfers may involve transferring the User's Data to a country other than their own.

Retention Time

Personal Data shall be processed and stored for as long as required by the purpose for which it was collected. Personal Data collected for performance of a contract shall be retained until the contract is fully performed. Once the retention period expires, Personal Data shall be deleted.

The Purposes of Processing

The Data concerning the User is collected to allow the Owner to provide its Service, comply with legal obligations, respond to enforcement requests, protect its rights and interests, detect malicious or fraudulent activity, and the following: Analytics, Contacting the User, Handling payments, Registration and authentication, Hosting and backend infrastructure, Tag Management, Remarketing and behavioral targeting, and User database management.

Detailed Information on the Processing of Personal Data

Analytics

These services enable the Owner to monitor and analyze web traffic and track User behavior.

Tag Management

Contacting the User

Handling Payments

Payment processing services enable El Hilo Co to process payments by credit card or other means. El Hilo Co shares only the information necessary to execute the transaction with the financial intermediaries handling it. El Hilo Co does not store payment card information.

Registration and Authentication

Hosting and Backend Infrastructure

Remarketing and Behavioral Targeting

These services allow El Hilo Co and its partners to inform, optimize, and serve advertising based on past use of the Service by the User.

Cookie Policy

El Hilo Co uses cookies and other tracking technologies ("Trackers") to support essential site functions, including storing session IDs and cart contents. These Trackers allow the website to remember user sessions, maintain shopping cart contents, and provide a consistent browsing experience. Some cookies are placed by third-party services that appear on our pages. You can manage cookie preferences through your browser settings.

The Rights of Users

Users may exercise certain rights regarding their Data processed by the Owner. In particular, Users have the right to:

• Withdraw their consent at any time where they have previously given consent to processing.
• Object to the processing of their Data if processing is carried out on a legal basis other than consent.
• Access their Data and learn if Data is being processed by the Owner.
• Verify and seek rectification — the right to verify the accuracy of their Data and ask for it to be updated or corrected.
• Restrict the processing of their Data under certain circumstances.
• Have their Personal Data deleted or otherwise removed under certain circumstances.
• Receive their Data in a structured, commonly used and machine-readable format.
• Lodge a complaint before their competent data protection authority.

How to Exercise These Rights

Any requests to exercise User rights can be directed to the Owner through the contact details provided in this document. These requests can be exercised free of charge and will be addressed by the Owner as early as possible, and always within one month.

Selling Goods and Services Online

The Personal Data collected is used to provide Users with services and process orders, including payment and delivery. The Personal Data collected to complete the payment may include credit card information or other payment details. The kind of Data collected depends on the payment system used. El Hilo Co does not store payment card information.

Additional Information About Data Collection

Legal Action

The User's Personal Data may be used for legal purposes by the Owner in court or in stages leading to possible legal action arising from improper use of El Hilo Co or the related Services. The User declares to be aware that the Owner may be required to reveal personal data upon request of public authorities.

System Logs and Maintenance

For operation and maintenance purposes, El Hilo Co and any third-party services may collect files that record interaction with El Hilo Co (system logs) and use other Personal Data (such as IP addresses) for this purpose.

Do Not Track Requests

El Hilo Co does not support "Do Not Track" requests. To determine whether any of the third-party services it uses honor "Do Not Track" requests, please read their privacy policies.

Changes to This Privacy Policy

The Owner reserves the right to make changes to this privacy policy at any time by notifying Users on this page. It is strongly recommended to check this page regularly, referring to the date of the last modification listed at the bottom. Should changes affect processing activities based on the User's consent, the Owner shall collect new consent from the User where required.

Information for California Consumers (CCPA)

This section applies to all Users who are consumers residing in the State of California, United States of America, according to the California Consumer Privacy Act of 2018 (CCPA). These provisions supersede any other possibly divergent provisions contained in the privacy policy.

Categories of Personal Information Collected

We have collected the following categories of personal information: identifiers and internet information. We will not collect additional categories of personal information without notifying you.

Your California Privacy Rights

• The right to know — the categories and sources of personal information collected, the purposes for which we use it, and with whom it is shared.
• The right to delete — the right to request deletion of your personal information, subject to certain legal exceptions.
• The right to opt out — the right to opt out of the sale of your personal information.
• The right to non-discrimination — we will not discriminate against you for exercising any of your CCPA rights.

Opt-Out of the Sale of Personal Information

You have the right to opt out of the sale of your personal information. To do so, contact us using the details at the top of this document. El Hilo Co does not share any text messaging originator opt-in data and consent with any third parties.

How to Submit a Verifiable Request

To exercise your California privacy rights, submit a verifiable request to us using the contact details provided in this document. We will confirm receipt within 10 days and respond within 45 days. We may take up to 90 days if we notify you of the reason and extension. You may submit a maximum of 2 requests over a period of 12 months.

Definitions and Legal References

Personal Data (or Data)

Any information that directly, indirectly, or in connection with other information allows for the identification or identifiability of a natural person.

Usage Data

Information collected automatically through El Hilo Co, which may include IP addresses, browser type, pages visited, time spent on pages, and other device and environment information.

Cookies

Small sets of data stored in the User's browser that help El Hilo Co remember preferences, sessions, and cart contents.

Data Controller (or Owner)

The natural or legal person that determines the purposes and means of the processing of Personal Data. For El Hilo Co, the Data Controller is El Hilo Co LLC, Alton, TX.

Service

The custom embroidery ordering service provided by El Hilo Co as described on this website.

User (or You)

Any natural person or legal entity using El Hilo Co.

Last updated: April 25, 2026 — El Hilo Co LLC, Alton, TX