Privacy policy

Who we are

House Of Minky is run by To confirm: legal name of the business that sells online, Washington, Utah. Questions about your information: officialhouseofminky@gmail.com. Mail: 90 E 100 S, St. George, UT 84770.

What we collect

• Your cart. It’s kept on your own device (in your browser’s storage). We don’t receive it until you check out.
• Your account, if you make one: your email, your name if you add it, and whether you want our emails. If you set a password, our sign-in provider keeps it only in a scrambled (hashed) form we can’t read.
• Your orders, once checkout opens: your name, email, shipping address, what you bought and what you paid. Card payments are handled by Stripe; we never see or store your full card number.
• House Ambassadors applications: your name, email, mobile number, the channels you post on with your account and follower counts, your monthly impressions, anything you add in the note, and your confirmations that you’re 18 or older, will disclose the partnership, and that it’s OK to text you about the program.
• House Ambassadors: what we need to credit and pay you. Payouts and tax forms (your W-9) are handled by our payout partner; your tax ID isn’t stored in our systems.
• Security information: our hosting keeps standard logs, including network (IP) addresses, to run and protect the site. To stop repeated sign-in or application attempts, we count them using one-way codes made from your email and network address, never the address itself; sign-in counts are deleted after about a day.
• Clicks on a House Ambassador’s link: when you open an Ambassador’s link (their shop page, or a product or collection link that carries their name), our server adds one to that Ambassador’s count of clicks for the day. To count you only once a day, it makes a one-way code from your network address and browser details, and to stop one network adding more than a few clicks a day, a second one from your network address alone. The codes change every day and are deleted after about two days, and the count holds nothing about you. No cookie is used. If you chose Only what’s needed, or your browser sends Global Privacy Control and you haven’t chosen, your click isn’t counted.
• Visits: when you open a page, a small script from our website host, Vercel, counts the visit: the page, the site that sent you there, your approximate location (country, region and city), and your kind of device, its operating system and your browser. It sets no cookie and stores nothing on your device. To count you only once, Vercel makes a one-way code from your visit and discards it after 24 hours. We see only totals, never who you are. A private address, such as a custom order’s payment link, is sent without its private part. If you chose Only what’s needed, or your browser sends Global Privacy Control and you haven’t chosen, your visits aren’t counted.
• The “are you a person” check on the sign-in, email sign-up, Ambassador application and privacy request forms is run by Cloudflare (Turnstile). When one of those forms loads it, Cloudflare sees your network address and some details of your browser, to tell people from automated programs.
• A checkout you start and don’t finish: the email you typed, what was in your bag, and when.
• The House email list: every email address you give us joins it, whether through the sign-up, the bag’s box, an order (paid or left unfinished), a Design Studio email, an Ambassador application, or signing in with an emailed code. We keep your email, where you joined, the words you were shown, and when. Someone who has unsubscribed isn’t added back by any of these.
• A privacy request, if you send one: your email, what you asked for, and anything you add.

Cookies and your device

• Sign-in cookies keep you signed in. Scripts on the page can’t read them.
• hom_ref: when you arrive through a House Ambassador’s link or shop page, or enter their code, this cookie remembers which one, so they get credit for your order. It holds only their shop address, nothing about you, and lasts 30 days.
• Your cart is kept in your browser’s storage, as above.
• We don’t use advertising or analytics cookies. Counting visits, as above, uses none.
• Our Cookie policy lists every one, how long it lasts, and how to turn off the one that isn’t needed.

How we use it

• To take, pack, ship and support your orders
• To run your account and keep it secure
• To credit House Ambassadors for orders they send, and to see how many people open their links. They see the orders credited to them, never your name, email or address.
• To see how many people visit, which pages they open and where they came from, in totals only
• To review Ambassador applications and run the program, including texting applicants and Ambassadors about the program
• To send marketing emails to the House email list, which every email address you give us joins. If you start a checkout and leave it unfinished, we also send one reminder email to the address you typed. Every email has a way to unsubscribe, and anyone who unsubscribes stays off the list.
• To keep records the law requires, such as tax and accounting records

Who we share it with

We don’t sell your personal information, and we don’t share it for advertising.

We share only what each needs to do its job for us: our website host (Vercel), which also counts visits for us, our database and sign-in provider (Supabase), our payment and payout provider (Stripe), the provider of the “are you a person” check (Cloudflare), and our email provider (today Google, through the House’s Gmail mailbox; To confirm: once the House’s own email domain is connected: Resend). The team that packs and ships orders sees what’s needed to send yours: your name and shipping address and what you ordered.

We may also share information when the law requires it, or to protect our customers or the business from fraud.

How long we keep it

Your account stays until you close it. Order records are kept for To confirm: number years for tax and accounting. Ambassador applications are kept for To confirm: period. Sign-in attempt counts are deleted after about a day. The codes used to count clicks on an Ambassador’s link are deleted after about two days; only each Ambassador’s daily count of clicks is kept. The code Vercel uses to count a visitor once is discarded after 24 hours; only the visit totals are kept.

Your choices and rights

• See, correct or download what we hold about you
• Close your account and have us delete your information. Order records the law makes us keep are kept with your name and contact details removed.
• Stop marketing emails at any time, from any email or your account page
• To ask for any of these, use the Your data form at /privacy/request. You don’t need an account. We answer within To confirm: number days.
• Depending on where you live, including California and other states with privacy laws, you may have more rights, such as knowing what we collect and limiting how it’s used. To use any of these rights, use the Your data form at /privacy/request, or email officialhouseofminky@gmail.com. We won’t treat you differently for asking. To confirm: offer these rights to everyone, or only where the law requires?

Children

Our site isn’t meant for children. We don’t knowingly collect personal information from children under 13, and House Ambassadors must be 18 or older.

Security

We protect your information with encrypted connections, sign-in cookies scripts can’t read, and access limited to the people who need it. No system is perfectly secure; if something goes wrong that affects you, we’ll tell you as the law requires.

Changes

When we change this policy, we update the date at the top.