Privacy policy

Last Updated: November 1, 2026

Welcome to Bramble & Bluegrass (“Bramble & Bluegrass,” “we,” “us,” or “our”). This Privacy Policy explains how we collect, use, disclose, and protect information when you visit our website, shop with us, place an order, contact us, or otherwise use our services (collectively, the “Services”).

Our online store is powered by Shopify, which provides the technology and infrastructure used to operate our online store.

By using our Services, you agree to this Privacy Policy. If you do not agree, please do not use our Services.

This Privacy Policy should be read together with our Terms of Service, Shipping Policy, and Refund & Return Policy.

1. Information We Collect

Depending on how you interact with Bramble & Bluegrass, we may collect the following categories of information.

Information You Provide Directly

  • Full name

  • Email address

  • Phone number

  • Shipping address

  • Billing address

  • Account information

  • Order information

  • Information you provide when contacting us

  • Information you provide when submitting a review

  • Information provided when participating in a promotion, giveaway, survey, or other activity

  • Any other information you voluntarily provide to us

Order and Transaction Information

When you place an order, we may collect information associated with that transaction, including:

  • Products purchased

  • Order number

  • Order history

  • Shipping and delivery information

  • Payment status

  • Returns, refunds, exchanges, or replacements

  • Customer-service communications

  • Information necessary to fulfill or support your order

Payment Information

Payments made through our website are processed through Shopify and/or other third-party payment providers.

We generally do not receive or store your complete credit or debit card number on our own systems. Payment providers may collect and process payment information according to their own privacy policies and terms.

Account Information

If you create an account with us, we may collect:

  • Name

  • Email address

  • Login credentials

  • Account preferences

  • Saved information associated with your account

  • Order history

Device and Website Information

When you visit our website, certain information may be collected automatically, including:

  • IP address

  • Browser type

  • Device type

  • Operating system

  • General geographic location

  • Pages or products viewed

  • Referring websites

  • Date and time of visits

  • Information about how you interact with our website

This information may be collected through cookies, pixels, analytics tools, logs, and similar technologies.

Sensitive Personal Information

We do not intentionally collect sensitive personal information, such as government identification numbers, precise geolocation, health information, biometric information, or financial account credentials, except where necessary to process a payment or comply with applicable law. Payment card details are collected and processed by our payment providers, not stored directly by Bramble & Bluegrass.

2. How We Collect Information

We may collect information from the following sources:

Directly From You

You may provide information when you:

  • Create an account

  • Place an order

  • Subscribe to our emails

  • Contact us

  • Submit a review

  • Participate in a promotion or giveaway

  • Complete a form

  • Otherwise communicate with us

Automatically

Information may be collected automatically when you browse or interact with our website through cookies, pixels, analytics tools, and similar technologies.

From Service Providers

We may receive information from companies that provide services to us, including payment processing, ecommerce technology, website hosting, analytics, shipping, fulfillment, customer service, email, fraud prevention, and marketing services.

From Third Parties

We may receive information from third-party platforms or services when you interact with our Services through those platforms, where permitted by applicable law.

3. How We Use Your Information

We may use personal information for the following purposes.

Processing and Fulfilling Orders

  • Process and confirm orders

  • Process payments

  • Fulfill purchases

  • Arrange shipping and delivery

  • Provide shipping and tracking information

  • Process returns, refunds, exchanges, or replacements

  • Respond to questions about your order

  • Provide customer service

  • Communicate with suppliers, product creators, manufacturers, or fulfillment partners when necessary to fulfill your purchase

Third-Party and Direct Fulfillment

Some products sold through Bramble & Bluegrass may be provided and/or shipped directly by independent product creators, makers, manufacturers, suppliers, or fulfillment partners.

When necessary to fulfill an order, we may provide the applicable fulfillment partner with information such as:

  • Customer name

  • Shipping address

  • Order details

  • Email address or other contact information when necessary

  • Information necessary to process a return, replacement, refund, or other order-related issue

These partners may process your information according to their own privacy policies and applicable agreements.

Operating and Improving Our Services

  • Operate and maintain our website

  • Improve our products and Services

  • Understand how customers use our website

  • Improve the shopping experience

  • Personalize website content where appropriate

  • Remember preferences

  • Troubleshoot technical issues

  • Monitor website performance

  • Develop new products, services, and features

Marketing

Where permitted by law, and with your consent when required, we may use your information to send:

  • Promotional emails

  • Special offers

  • New product announcements

  • Other marketing communications

You may unsubscribe from promotional emails at any time by using the unsubscribe link provided in the email.

Even if you opt out of marketing communications, we may continue to send non-promotional communications concerning your orders, transactions, account, or other services you have requested.

Fraud Prevention and Security

  • Detect and prevent fraud

  • Protect customers and our business

  • Secure our website and Services

  • Investigate suspicious or unauthorized activity

  • Prevent unauthorized transactions

  • Enforce our policies

Legal and Compliance Purposes

We may use or disclose information when reasonably necessary to:

  • Comply with applicable laws and regulations

  • Respond to lawful requests from government authorities

  • Respond to subpoenas, court orders, or other legal processes

  • Protect our legal rights

  • Protect the safety or rights of our customers or others

  • Investigate suspected violations of our policies

  • Enforce our agreements

4. Lawful Bases for Processing

If you are located in the United Kingdom, European Economic Area, or another jurisdiction that requires identification of lawful bases, we process personal information only where we have a valid legal basis, including:

  • Performance of a contract: to process orders, payments, shipping, returns, refunds, customer support, and order-related communications.

  • Legal obligations: to maintain transaction records and comply with tax, accounting, consumer-protection, fraud-prevention, and other legal requirements.

  • Legitimate interests: to operate and secure our website, prevent fraud, improve our Services, analyze website use, and communicate about orders and services, provided these interests are not overridden by your rights.

  • Consent: to send marketing emails, use certain non-essential cookies or advertising technologies, and process personal information for purposes where consent is required.

Where processing is based on consent, you may withdraw your consent at any time.

5. How We Share Information

We do not sell personal information for money. However, depending on applicable law, certain advertising and analytics technologies may be considered a “sale” or “sharing” of personal information.

We may share information when reasonably necessary to operate our business, fulfill orders, provide Services, or comply with legal obligations.

Shopify

Our online store is powered by Shopify. Shopify may process information necessary to operate our store, including information related to:

  • Shopping cart functionality

  • Orders

  • Payments

  • Customer accounts

  • Website functionality

  • Security

  • Analytics

  • Fraud prevention

  • Other ecommerce services

Shopify’s handling of information is also governed by Shopify’s own privacy policies.

For more information about how Shopify processes personal information when you use our store, please review Shopify’s Consumer Privacy Policy: https://www.shopify.com/legal/privacy/consumers

Payment Providers

Payment information may be processed by Shopify Payments or other payment providers available through our store.

Suppliers, Product Creators, and Fulfillment Partners

Because some Bramble & Bluegrass products may be fulfilled or shipped directly by independent suppliers, makers, product creators, manufacturers, or fulfillment partners, we may share information necessary to fulfill your order.

This may include your:

  • Name

  • Shipping address

  • Order information

  • Email address

  • Phone number, when necessary

These parties may also receive information necessary to handle an approved return, replacement, refund, damaged shipment, incorrect item, or other order-related issue.

Shipping and Delivery Providers

We may share information necessary to deliver your order with shipping carriers, delivery services, and other logistics providers.

Business and Technology Providers

We may share information with companies that provide services such as:

  • Website and ecommerce services

  • Payment processing

  • Email delivery

  • Customer support

  • Analytics

  • Marketing

  • Advertising

  • Fraud prevention

  • Cloud storage

  • Technology and software services

  • Shipping and fulfillment

These service providers may access personal information only as reasonably necessary to provide services to us or as otherwise permitted by law.

Legal and Business Transactions

We may disclose information when required or permitted by law or when reasonably necessary to protect our rights, customers, business, or Services.

If Bramble & Bluegrass is involved in a merger, acquisition, sale of assets, financing, bankruptcy, reorganization, or similar business transaction, personal information may be transferred as part of that transaction, subject to applicable law.

6. Cookies and Similar Technologies

Our website may use cookies, pixels, tags, web beacons, analytics technologies, and similar tools.

These technologies may be used to:

  • Keep items in your shopping cart

  • Remember preferences

  • Maintain website functionality

  • Understand website traffic

  • Analyze website usage

  • Improve our Services

  • Personalize content

  • Measure advertising performance

  • Provide advertising that may be more relevant to you

Shopify and third-party service providers may also use cookies and similar technologies in connection with our website.

You may be able to control certain cookies through your browser or device settings. Disabling cookies may affect the functionality of portions of our website.

7. Advertising and Marketing Technologies

We may use third-party advertising, analytics, and marketing services.

These services may collect information about your interactions with our website, advertisements, emails, or other Services and may use that information to help us measure marketing effectiveness or provide advertisements that may be more relevant to you.

Depending on where you live, applicable privacy laws may provide you with rights concerning targeted advertising, the sale or sharing of personal information, or certain other forms of processing.

Where required by applicable law, we recognize and honor legally recognized opt-out preference signals, such as the Global Privacy Control (GPC) signal, with respect to the sale or sharing of personal information for targeted advertising.

You may also contact us at bramblenbluegrass@gmail.com to request that we not sell or share your personal information for targeted advertising.

You may unsubscribe from promotional emails at any time using the unsubscribe mechanism included in the communication.

8. Your Privacy Rights

Depending on where you live and applicable law, you may have certain rights regarding your personal information.

These rights may include:

  • Right to access: request information about the personal information we collect, use, or maintain about you.

  • Right to correct: request correction of inaccurate personal information.

  • Right to delete: request deletion of personal information, subject to legal and other applicable exceptions.

  • Right to data portability: request a copy of certain personal information in a portable format.

  • Right to opt out: opt out of certain targeted advertising, sale of personal information, sharing of personal information, or profiling activities.

  • Right to withdraw consent: withdraw consent where processing is based on consent.

Not every privacy right applies in every jurisdiction, and certain exceptions may apply.

To exercise an applicable privacy right, contact us using the information in the Contact Us section.

We may need to verify your identity before completing certain requests. We will not discriminate against you for exercising privacy rights available to you under applicable law.

How We Respond to Requests

We will respond to verifiable privacy requests within the time required by applicable law, generally within 30 days for requests under the UK GDPR or EU GDPR and within 45 days for requests under applicable U.S. state privacy laws.

If more time is reasonably necessary, we will inform you of the reason and expected response date.

You may designate an authorized agent to submit a request on your behalf where permitted by applicable law. We may require verification of the agent’s authority and your identity before acting on the request.

9. Children’s Privacy

Our Services are not directed toward children.

We do not knowingly collect personal information from children under 16, or under the applicable age of consent in their jurisdiction.

If you believe that a child has provided personal information to us without appropriate authorization or consent, please contact us so that we can review the situation and take appropriate action.

10. Data Security

We take reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration, or destruction.

However, no method of transmitting or storing information electronically is completely secure. We therefore cannot guarantee absolute security.

Please do not send sensitive financial, authentication, or other confidential information through unsecured methods of communication.

11. Data Retention

We retain personal information only as long as reasonably necessary for the purposes described in this Privacy Policy, including to complete transactions, provide Services, comply with legal obligations, resolve disputes, prevent fraud, and enforce our agreements.

As a general practice:

  • Order and transaction records may be retained for up to 7 years to meet tax, accounting, fraud-prevention, and legal-record requirements.

  • Marketing email preferences are retained until you unsubscribe or request removal, subject to legal record-keeping needs.

  • Customer-service communications may be retained for up to 3 years after the related order or inquiry is resolved.

  • Website analytics and technical logs may be retained for a shorter operational period, depending on the applicable service provider’s settings.

  • Return, refund, dispute, fraud, and legal records may be retained longer where necessary to resolve the matter or comply with legal obligations.

When personal information is no longer needed, we will delete or de-identify it where technically feasible and permitted by applicable law.

12. Third-Party Websites and Services

Our website may contain links to third-party websites, social media platforms, applications, or other services.

We are not responsible for the privacy practices, security, content, or policies of third-party websites or services.

If you choose to visit a third-party website or use a third-party service, we encourage you to review its privacy policy before providing personal information.

13. International Processing

Some of our service providers, including Shopify and certain suppliers, fulfillment partners, technology providers, or other service providers, may process or store information outside the country in which you reside.

Privacy laws in those locations may differ from the laws where you live.

Where required by applicable law, appropriate safeguards will be used for international transfers of personal information.

For customers in the UK or European Economic Area, Shopify’s Data Processing Addendum governs Shopify’s processing of personal data on our behalf where applicable.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

  • Our business

  • Our Services

  • Technology

  • Service providers

  • Applicable laws or regulations

  • Our privacy practices

When we make changes, we will update the Last Updated date at the beginning of this Privacy Policy.

Where required by applicable law, we may provide additional notice of material changes.

We encourage you to review this Privacy Policy periodically.

15. Contact Us

If you have questions about this Privacy Policy, want to exercise an applicable privacy right, or have another privacy-related concern, please contact us:

Bramble & Bluegrass
Email: bramblenbluegrass@gmail.com
Mailing Address: PO Box 33
Calhoun, TN 37309

Please provide enough information for us to understand your request and respond appropriately.

Thank you for trusting Bramble & Bluegrass.