Privacy Policy

1. Who we are

Estrah ("Estrah", "we", "us", "our") is based in Hattiesburg, Mississippi, produces apparel through its Punjab production network, and fulfils customer orders from the United States. We sell directly to consumers at estrah.com and to wholesale partners at supply.estrah.com. This policy explains what personal information we collect, why we collect it, and the choices you have.

2. Information we collect

We collect information you give us directly and information collected automatically when you use our site.

• Order details: name, email, phone number, billing and shipping details, and the items in your order.
• Payment information: processed by Stripe. Estrah receives the payment status and limited transaction details needed to fulfil, support, refund, and reconcile an order; Stripe handles the card entry and payment processing.
• Device & usage data: IP address, browser type, and requested URLs, recorded in our hosting provider's standard server logs.
• Communications: messages you send us via email or contact forms, including support and wholesale enquiries.

3. How we use your information

• To process, ship, and provide support for your order.
• To communicate order confirmations, shipping updates, and responses to enquiries.
• To send product or promotional updates, only where you have opted in — you can unsubscribe at any time.
• To detect and prevent fraud, and to comply with legal and tax obligations.
• To improve our site, products, and customer experience.

4. Cookies

We use Google Analytics 4 for first-party ecommerce measurement, including page views, product interactions, checkout starts, and completed purchases. Advertising storage, ad personalization, and Google advertising signals are disabled. Analytics may use a first-party identifier to distinguish visits. Your bag is also kept in your browser's local storage so it survives a page reload; it never leaves your device until checkout. You can clear browser storage through your browser settings, though the bag and checkout flow will then reset.

5. Sharing your information

We do not sell your personal information. We share it only with the service providers who help us run our business, under agreements that require them to protect your data and use it only for the services they provide us. Those providers are:

• Stripe — processes payments and stores the order record. Your name, email, phone number, billing and shipping address, and card details are handled by Stripe under their own privacy policy.
• Web3Forms — delivers paid-order notifications to our inbox and processes wholesale enquiry forms. Information submitted through those flows passes through this provider.
• Supabase and Resend — store newsletter subscriptions and deliver campaign email to subscribers who have opted in.
• Google Analytics — provides first-party usage and ecommerce measurement with advertising features disabled.
• Vercel — hosts this site and keeps the standard server logs described above.
• Google Fonts — serves the typefaces this site is set in. Your browser requests those files directly from Google, which means Google receives your IP address. No cookie is set and we receive nothing back.
• Shipping carriers — receive the name and address needed to deliver your order.

Our providers may process information in the United States and other locations where they or their subprocessors operate. Where applicable, we use the transfer mechanisms and contractual protections made available by those providers. We may also disclose information where required by law.

6. Data retention

We retain order and account information for as long as necessary to fulfil the purposes described in this policy, including satisfying legal, accounting, and reporting requirements.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, and to opt out of marketing communications. To exercise any of these rights, contact us at hello@estrah.com.

8. Security

We use industry-standard safeguards, including encrypted checkout, to protect your information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Children's privacy

Our site is not directed at children under 16, and we do not knowingly collect personal information from them.

10. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by an updated "Last updated" date above.

11. Contact us

Questions about this policy or your data? Email hello@estrah.com.