Privacy policy

Last updated: October 12, 2026

Who we are

StitchSonnet is operated by HORIZON LINK E-COMMERCE LIMITED ("we", "us"), H02, ROOM 2204, 22/F, SEAPOWER CENTRE, 73 LEI MUK ROAD, KWAI CHUNG, New Territories, Hong Kong SAR. We are the controller of personal information used to operate our store, fulfil orders and respond to you, except where Shopify or another provider acts independently for its own purposes. Contact hello@stitchsonnet.com for privacy questions or rights requests.

This policy explains how personal information is handled when you visit stitchsonnet.com, shop, subscribe or contact us. It does not make marketing consent a condition of purchasing.

Information we process

• Contact and delivery information you provide, including name, email, telephone number and billing or shipping address.
• Order and service information, including purchased items, payment status, discounts, returns, support correspondence and information you provide about an issue.
• Subscription information, including the email address and optional details you enter, consent status and unsubscribe preferences.
• Device and website usage information, such as IP address, browser, cookies or similar identifiers, pages visited and interaction with the store.
• Payment information processed by Shopify and the payment provider you choose. Do not send card numbers, security codes or passwords to our support email.

Sources and purposes

Information comes directly from you, from your use of the store and from service providers involved in payments, subscriptions, delivery and support. We use it to operate the store, process orders and refunds, arrange delivery, answer questions, prevent fraud, keep records and improve the shopping experience. Where permitted and in accordance with your choices, we also use it to provide marketing and measure its performance.

Where EU or UK data protection law applies, our legal bases include performing a contract or taking steps at your request before a purchase, complying with legal obligations, legitimate interests such as secure store operation and customer support where those interests do not override your rights, and consent where required for marketing or non-essential tracking. You may withdraw consent without affecting processing already lawfully carried out.

Email signup and marketing

We use Yeps for store signup forms and Shopify Messaging for email marketing and automations. The details you submit and your subscription preferences may be processed by these services to record your signup and deliver the relevant email. You can unsubscribe from marketing through the link in an email or by contacting us. We may still send necessary order, delivery, refund or service messages.

Cookies and your choices

The store uses cookies and similar technologies for functions such as shopping-cart operation, preferences, security and measurement. Where a consent banner is shown, use it to choose whether to allow optional uses. You can also manage cookies in your browser, although blocking essential cookies may affect store functions. To ask about or change a choice you cannot access, contact us.

Where applicable, you may opt out of sale or sharing for targeted advertising through our data-sharing opt-out page. Shopify's privacy tools process supported opt-out preference signals, including Global Privacy Control, where applicable. Email unsubscribe preferences are managed separately from browser cookie preferences.

Providers and disclosures

We disclose information as needed to Shopify, payment providers, Yeps, email service providers, delivery and fulfilment providers, and providers supporting security and customer service. We may disclose information to comply with law, respond to valid legal requests, protect rights and prevent fraud, or in connection with a business transfer subject to applicable safeguards. Information may also be shared when you direct us or consent to it.

Reviews and visitor analytics

We use Judge.me to collect and display product reviews. Relevant contact, order and review information is processed to request, verify and manage feedback. You can opt out of review-request messages using the available email link or by contacting us.

We use Microsoft Clarity to understand how visitors interact with the store, including clicks, scrolling and session recordings. This may involve device information, IP addresses and similar identifiers. We configure analytics to follow applicable consent choices and mask entered information. Use the available cookie and privacy controls to manage optional analytics, or contact us for help. See Microsoft's Privacy Statement for information about Microsoft's processing.

Shopify services

Our store is hosted by Shopify. Shopify processes store and transaction information to provide its services. Shopify Network Intelligence is enabled for this store; it can combine information about interactions with this store with information from other merchants and Shopify to support enhanced products, advertising and personalised experiences. For processing where Shopify acts independently, see the Shopify Consumer Privacy Policy and Shopify Privacy Portal, including the choices available to you.

Retention, security and international processing

We retain information for as long as reasonably needed for the purposes described above, including fulfilling orders, resolving disputes, handling rights requests and meeting tax or recordkeeping obligations. Retention depends on the type of information and applicable legal requirements. We use appropriate measures to protect information, but no transmission or storage system is completely secure.

Our business is in Hong Kong SAR, orders are fulfilled from China, and Shopify indicates that this store's customer data is hosted in the United States. Providers may process information in other countries. Where required, international transfers must rely on an applicable lawful transfer mechanism, such as an adequacy decision or approved contractual safeguards. Contact us for information about the safeguards relevant to your data.

Your rights

Depending on your location, you may have rights to access, correct, delete or receive a copy of information, restrict or object to certain processing, withdraw consent, or opt out of certain advertising uses. These rights can be subject to legal exceptions. Send a request to hello@stitchsonnet.com. We may need proportionate information to verify your identity or an authorised agent's authority; please do not send identity documents unless we explain why they are needed and how to provide them securely.

We will respond within applicable legal time limits and will not unlawfully discriminate against you for exercising a right. Where applicable, you may appeal a decision by contacting us and may complain to your local data protection authority. EU/EEA authority information is available from the European Data Protection Board; UK residents may contact the Information Commissioner's Office and Hong Kong residents the Privacy Commissioner for Personal Data.

Children and external links

The store is intended for purchases by adults. If you believe a child has provided personal information without appropriate authorisation, contact us so we can assess and address it. Third-party websites linked from the store have their own privacy practices.

Policy updates

We may update this policy to reflect changes in services or legal requirements. We will show the revised date here and provide additional notice where required. For questions, contact hello@stitchsonnet.com or write to our business address above.