Privacy Policy
SoulTies ("we") is a 501(c)(3) not-for-profit organization (Tax ID 99-1986953) operating soulties.us. This policy describes what we collect, why, and the choices you have.
What we collect
Order information. When you buy, our payment processor Stripe collects your payment details directly — card numbers never touch our systems. We receive your name, email, shipping address, and order contents to fulfill your purchase.
Donation information. Donations are processed by Zeffy. We receive donation amounts and, where you consent, your email, to attribute funds to projects and issue impact updates.
Email. If you opt in (footer, checkout, or after donating), we store your email with Klaviyo to send project updates and drop announcements. Every email includes an unsubscribe link. We do not sell or rent your information to anyone, ever.
Analytics & advertising cookies. Only with your consent (the banner), we use Google Analytics and — where enabled — Meta and TikTok pixels to measure which campaigns fund the most impact. Decline, and no analytics or advertising cookies are set. You can clear your choice by deleting site data in your browser.
How we use it
To fulfill orders, issue donation and impact receipts, comply with tax law applicable to nonprofits, improve the site, and — with consent — measure advertising. Our legal bases are contract performance, legal obligation, consent, and legitimate interest in operating a nonprofit store.
Sharing
Service providers only, under contract: Stripe (payments), Zeffy (donations), Klaviyo (email), Vercel (hosting), analytics providers you consent to, and shipping carriers. NGO partners receive aggregate funding data, never your personal information.
Your rights
Email hello@soulties.us to access, correct, or delete your data, or to withdraw consent. California and EU/UK residents have additional statutory rights (CCPA/GDPR), which we honor for everyone regardless of residence.
Retention & security
Order records are kept as required by tax law; marketing profiles until you unsubscribe; analytics per provider defaults. Data in transit is encrypted (TLS); access is limited to those who need it.
Children
The site is not directed to children under 13 and we do not knowingly collect their data.
Changes
We will post changes here with a new effective date. Material changes will be announced by email where we have it.