Privacy policy

Last updated: November 4, 2026

The Softables LLC (“we,” “us,” or “our”) operates thesoftables.com, an online store selling plush toys. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit our website, make a purchase, subscribe to emails, or contact us.

Personal information is information that identifies you or can reasonably be linked to you. We are responsible for the processing for which we decide how and why your information is used. Shopify’s role is explained below.

This policy does not replace any consent required by law. Visiting our website does not, by itself, give consent to optional tracking or marketing. If our Terms of Service conflict with this policy about the handling of personal information, this policy governs that subject, subject to applicable law.

Your information, at a glance

A simple overview of how information moves through our store.

01

You interact

You browse products, place an order, use an account, or contact us.

02

We provide the service

The Softables LLC and Shopify process relevant information to run the store and handle your request.

03

Providers help where needed

Relevant providers support payments, delivery, security, and other uses described in this policy.

Not every category is sent to every provider. The information involved depends on the service, your choices, and applicable law.

Personal Information We Collect

Order and contact information. When you place or attempt to place an order, we collect information such as your name, email address, telephone number, billing address, shipping address, products selected, order value, and delivery details. If you purchase a gift, we also process the recipient information needed for delivery.

Account information. If you use a customer account, we process account identifiers, saved contact details, purchase history, and account preferences made available through the account service.

Payment information. Shopify and the payment providers available at checkout process the information needed to complete your payment. We receive transaction details such as payment status, payment method, transaction identifiers, and any limited payment details made available for order management, refunds, accounting, and fraud prevention.

Customer communications. When you contact us, we receive the information you provide, including your name, contact details, order number, messages, conversation history, and any photographs or attachments you send.

Device and website activity. Information collected through the website may include your IP address, browser and device type, approximate location inferred from your IP address, cookie identifiers, referring pages, products viewed, searches, cart activity, and interactions with website features.

Marketing preferences and interests. We process subscription status, consent and opt-out records, and relevant campaign interactions where available. When personalization is used, this may also include product interests you share or interests inferred from shopping activity.

Please do not send passwords, full payment-card details, government identification numbers, health information, or other unnecessary sensitive information through ordinary email or chat.

The details

Personal information disclosure

What we may collect, why we use it, who may receive it, and how long it is kept. The cards summarize this policy; the full sections explain applicable uses, exceptions, and choices.

01

Order & contact information

Purchases and delivery

Examples
Name, email, phone number, billing and shipping addresses, order details, and delivery status.

Information category
Identifiers and commercial information.

Source
You, gift purchasers, Shopify, and payment or fulfillment providers.

Purpose
Processing and delivering orders, customer support, returns, fraud prevention, and required records.

Recipients
Shopify, payment, fulfillment, shipping, tracking, and support providers; advisers where needed.

Retention
As needed for orders, returns, claims, and applicable accounting, tax, or other legal obligations.

Sale, sharing, or targeted advertising

Relevant contact identifiers and purchase activity may support advertising measurement or audiences where permitted, subject to your choices.

02

Payment & transaction details

Checkout and refunds

Examples
Payment status, payment method, transaction identifiers, refunds, and limited payment details available to us.

Information category
Financial and commercial information; related identifiers.

Source
You, Shopify, and the payment provider used at checkout.

Purpose
Completing payments, issuing refunds, accounting, and investigating unauthorized transactions.

Recipients
Shopify, relevant payment providers, and accounting or legal advisers where needed.

Retention
As needed to complete transactions, resolve disputes, and meet financial and legal record requirements.

Sale, sharing, or targeted advertising

The advertising uses described in this policy may include purchase events. Payment-provider processing is addressed separately.

03

Device & browsing activity

Website use and performance

Examples
IP address, browser and device details, cookie identifiers, approximate location, page views, and cart activity.

Information category
Online identifiers, electronic network activity, and approximate location information.

Source
Your browser or device; Shopify and relevant analytics, security, or advertising tools.

Purpose
Website operation, security, troubleshooting, analytics, and permitted personalization or advertising.

Recipients
Shopify and relevant hosting, security, analytics, and advertising providers.

Retention
Varies by tool, cookie duration, retention settings, and necessary security or legal requirements.

Sale, sharing, or targeted advertising

Advertising-related disclosures may count as sale, sharing, or targeted advertising. Applicable consent requirements and your choices apply.

04

Customer account information

Your account and preferences

Examples
Account identifiers, saved contact details, purchase history, and account preferences.

Information category
Identifiers, commercial information, and preferences.

Source
You, Shopify, and your account interactions.

Purpose
Maintaining your account, providing requested services, and helping with account or order inquiries.

Recipients
Shopify and relevant customer-support or technical service providers.

Retention
As needed to maintain the account. Some purchase records must be kept separately after account closure.

Sale, sharing, or targeted advertising

Relevant shopping activity may support permitted personalization or advertising where features are enabled, subject to your choices.

05

Shopify chat & customer support

Questions, messages, and assistance

Examples
Messages, generated replies, contact details, order context, conversation history, and attachments you send.

Information category
Customer communications, identifiers, and related order or interaction information.

Source
You, Shopify, and relevant customer-support interactions.

Purpose
Answering questions, continuing conversations, resolving issues, and reviewing service quality.

Recipients
Shopify, our authorized support team, and relevant support providers. Shopify powers the AI-assisted chat.

Retention
As needed for support, service quality, and disputes; Shopify records also follow its applicable practices.

Sale, sharing, or targeted advertising

Starting a chat does not subscribe you to marketing emails. Shopify’s separate processing is described in its privacy notice.

06

Marketing preferences & interests

Subscriptions and relevant communications

Examples
Email address, subscription status, consent and opt-out records, campaign interactions, and product interests.

Information category
Identifiers, commercial information, electronic activity, and relevant inferences.

Source
You, Shopify, relevant messaging tools, and permitted shopping or campaign interactions.

Purpose
Managing subscriptions, sending permitted marketing, respecting opt-outs, and measuring campaigns.

Recipients
Shopify and relevant messaging, analytics, or advertising providers, depending on enabled features.

Retention
As needed to manage subscriptions and document choices. Limited records may be kept to honor an unsubscribe.

Sale, sharing, or targeted advertising

Relevant identifiers and activity may support campaign measurement or audiences where permitted. Applicable privacy choices remain available.

Advertising uses depend on the features involved, applicable law, and your privacy choices. These summaries do not create additional uses or fixed retention periods.

Where We Obtain Personal Information

We obtain information directly from you when you shop, use an account, subscribe, or contact us. We also receive information automatically through the website and its technologies, subject to applicable privacy choices.

Shopify and other service providers may supply information such as payment confirmations, fraud indicators, shipment updates, and support records. Where advertising or analytics features are used, relevant providers may supply information about website or campaign interactions.

We may receive your delivery details from someone sending you a gift. If you contact us through another platform, we receive the information that platform makes available with your message.

How We Use Personal Information

Purchases and delivery. We process orders and payments, arrange shipping, provide tracking, manage returns and refunds, and send communications about purchases.

Customer support. We answer questions, investigate order problems, and use relevant communications and order details to continue handling an inquiry.

Website operation and improvement. We maintain accounts and website features, remember applicable preferences, diagnose errors, and understand how the store is used. Optional analytics and personalization are subject to applicable choices and consent requirements.

Marketing and advertising. Where permitted, we send promotional messages, measure campaigns, and show relevant advertisements. You can manage these uses through the choices described below.

Security and fraud prevention. We use relevant transaction, account, and technical information to identify suspicious activity, investigate unauthorized payments, and protect customers and the store.

Legal and administrative purposes. We maintain necessary accounting and tax records, respond to lawful requests, address product-safety matters, establish or defend legal claims, and process privacy requests.

We do not treat this policy as permission to use personal information for an unrelated purpose that requires a separate notice, consent, or other legal basis.

How We Disclose Personal Information

Shopify and service providers. We disclose information needed for store hosting, checkout, payment processing, customer accounts, communications, technical support, analytics, and security. Providers acting on our behalf process information under the applicable service arrangements and legal requirements.

Fulfillment, shipping, and tracking providers. We disclose relevant recipient, order, and shipment information so providers can prepare and deliver purchases, provide tracking, and investigate delivery problems.

Advertising and marketing partners. Where these features are used, relevant identifiers, shopping activity, and website-interaction information may be disclosed for advertising, campaign measurement, and related marketing purposes, subject to applicable choices.

Professional advisers and authorities. We may disclose information when necessary for legal or accounting advice, compliance with law, responding to valid legal process, protecting people or property, or establishing or defending legal claims.

Business transactions. Information may be disclosed where necessary in connection with a proposed or completed sale, merger, restructuring, or transfer of our business, subject to applicable confidentiality and data-protection requirements.

We may also disclose information at your direction or with your valid permission. A provider’s separate privacy policy does not remove our responsibility for disclosures that we make.

Our Relationship with Shopify

Shopify provides the platform supporting our store, including hosting, checkout, order management, and related features. Shopify processes information on our behalf to provide these services.

For certain services, Shopify also determines its own purposes for processing personal information. When Shopify’s enhanced services are enabled, information about interactions with our store may be used together with information about interactions with other merchants and Shopify to support services such as personalization, analytics, and advertising. In those circumstances, Shopify acts as a separate controller or business for that processing.

Read the Shopify Consumer Privacy Policy for details. You can manage relevant Shopify privacy choices and requests through the Shopify Privacy Portal. You may also contact us about information processed for The Softables LLC.

Shopify Customer Chat

We use Shopify to provide customer chat, including AI-assisted replies. Shopify processes customer information, including chat communications, to generate responses and improve the quality of its Inbox agent over time. Relevant preferences and account or order information may support personalized assistance where available. Our authorized staff can review conversation history and continue providing support.

Please avoid entering unnecessary sensitive information in chat. You can request help from a person or email hello@thesoftables.com directly. Chat information is handled under this policy and Shopify’s applicable privacy practices. Starting a conversation does not subscribe you to marketing emails.

Advertising and Analytics

We may use advertising and analytics features to understand website activity, measure campaign performance, and show advertisements relevant to shopping interests. Depending on the features used, this can involve cookies, pixels, online identifiers, contact identifiers, and information about browsing, cart, or purchase activity.

Advertising and analytics partners may combine information received from our store with information from other websites, applications, or services according to their applicable roles and privacy notices.

Under some U.S. state privacy laws, these activities may constitute a “sale” of personal information, “sharing” for cross-context behavioral advertising, or processing for targeted advertising, even when no money is exchanged.

Where you have an applicable right to opt out, you can exercise it through Your Privacy Choices — Do Not Sell or Share My Personal Information or by contacting us. You do not need to create an account to submit an opt-out request.

Cookies and Similar Technologies

Our website uses cookies and similar technologies, such as local storage and pixels, for different purposes.

Essential functions. These technologies support the shopping cart, checkout, account access, security, and recording privacy choices.

Preferences. These technologies can remember settings and selections to make the website easier to use.

Analytics. Where used, these technologies help us measure website activity, understand product interest, and identify performance problems.

Advertising. Where used, these technologies support campaign measurement and advertising based on relevant browsing and shopping activity.

Where the law requires consent, we request it before using technologies that require consent. You can decline optional technologies or withdraw consent through the applicable cookie controls. Continuing to browse is not treated as consent where an affirmative choice is required.

You can also manage cookies through your browser. Blocking necessary cookies may affect checkout or other essential features. Browser cookie settings do not necessarily replace the advertising and data-sharing choices described below.

Where Google Consent Mode is enabled on our website, Google’s analytics and advertising tools adjust their behavior according to your consent settings. These settings cover analytics storage, advertising storage, sending user data to Google for advertising, and personalized advertising.

In a basic implementation, the relevant Google tags remain blocked until you give consent, and those tags do not send data to Google when consent is denied.

In an advanced implementation, Google may receive consent-status signals and limited measurements without the relevant advertising or analytics cookies before consent is given and when storage consent is denied. These signals may include timestamps, browser information, and referring-page details, and may support measurement and statistical modeling. Declining cookies therefore does not necessarily stop all information from reaching Google in an advanced implementation.

Consent Mode does not replace any consent or other legal requirement applicable to that processing. You can change your choices through the cookie preference controls available on our website or contact hello@thesoftables.com for help.

Your Advertising and Privacy Choices

You can manage your preferences in the following ways:

Additional controls are available from the following providers when you use their services:

Some controls require you to sign in or use a compatible browser. Choices may be specific to an account, browser, or device, so you may need to repeat them elsewhere. These tools do not remove all advertising, erase all previously collected information, or replace a privacy request to us. Their scope depends on the provider and tool.

Global Privacy Control and Browser Signals

Where required by applicable law, we honor recognized opt-out preference signals, including Global Privacy Control, as requests to opt out of the relevant sale, sharing, or targeted-advertising processing.

A browser-based signal applies to the browser or device sending it and, where we can associate it with an account and the law requires, to that account. You can also contact us or use our Your Privacy Choices page.

An ordinary browser “Do Not Track” setting is not treated as a substitute for a recognized opt-out preference signal unless applicable law requires otherwise.

How Long We Keep Personal Information

We retain information for as long as reasonably necessary for the purposes described in this policy, taking account of legal obligations, the nature of the information, and applicable privacy rights.

Order and transaction records are retained as needed to complete purchases, manage returns and disputes, and meet applicable accounting, tax, fraud-prevention, and legal-record requirements.

Account information is retained as needed to maintain your account and provide requested services. Closing an account does not automatically remove transaction records that must be retained separately.

Support records are retained as needed to resolve inquiries, maintain relevant service history, review service quality, and address disputes. Records held through Shopify are also subject to the relevant Shopify services and retention practices.

Technical and analytics records are retained according to the purpose of the relevant tool, its retention settings, and necessary security or legal requirements. Cookie duration varies by the technology used.

Marketing and privacy-choice records are retained as needed to manage subscriptions, document consent, and honor opt-outs. We may keep a limited suppression record after you unsubscribe to prevent further marketing.

When information is no longer needed and no lawful retention reason applies, we delete or anonymize it. Contact us for information about the retention applicable to a particular record.

Information Security

We use reasonable technical and organizational safeguards appropriate to the personal information and processing involved. Our store also relies on security features provided by Shopify and the providers supporting our services.

No transmission method or storage system can guarantee complete security. Please protect your account access and avoid sending unnecessary sensitive information through email or chat.

If a personal-data breach requires notification under applicable law, we will provide the required notices. This policy does not limit your legal rights concerning information security.

Your Privacy Rights

The rights available to you depend on the law that applies to your information and our business.

Access, correction, and deletion. You may have the right to confirm whether we process your information, request access or a portable copy, correct inaccuracies, or request deletion.

Advertising and sensitive information. Applicable rights may include opting out of a sale, sharing, or targeted advertising, and limiting certain uses or disclosures of sensitive personal information.

California residents. Where the CCPA applies, you may also request information about the categories of information collected, their sources, collection and disclosure purposes, and categories of recipients. The collection and disclosure sections above describe the relevant types of information and uses.

Additional data-protection rights. Where the GDPR or similar laws apply, you may have rights to object to processing, restrict processing, withdraw consent, and obtain applicable protections concerning decisions based solely on automated processing that produce legal or similarly significant effects. You may request human review where that right applies.

We will not unlawfully discriminate against you for exercising privacy rights. Rights may be subject to exceptions, such as a legal requirement to retain transaction records or protect another person’s information.

How to Submit a Privacy Request

Email hello@thesoftables.com and describe your request. You can also contact us using the details at the end of this policy. An account or purchase is not required to submit a request.

For access, correction, or deletion requests, we may need to verify your identity using information reasonably necessary for that purpose. We do not require unnecessary identity verification for an opt-out request. Please do not send identity documents unless we request them through an appropriate process.

An authorized agent may submit a request where permitted by law. We may ask for evidence of the agent’s authority and any confirmation from you that the applicable law permits.

We respond within the applicable legal timeframe. Where the CCPA applies, access, correction, and deletion requests generally receive a response within 45 calendar days, subject to a permitted extension. Where the GDPR applies, the usual timeframe is one month, subject to its permitted extensions. We will explain an applicable extension or refusal as required by law. Opt-out requests are handled within the separate timeframes that apply to them.

If you disagree with our response, reply to it or email us with “Privacy Appeal” in the subject line. We will review the matter and handle any statutory appeal within the required timeframe.

You may also complain to the relevant privacy regulator, state attorney general, or data-protection authority. Where applicable, this includes the French data-protection authority, the CNIL. Where your law gives you the right to complain directly to a regulator, you can do so without contacting us first.

Privacy in the EU, the UK, and Australia

The Softables LLC is the US-based data controller for the uses we determine. When you order for delivery outside the United States, we receive your order and shipping details in the United States and share the information needed with the providers handling payment, delivery, and customer support.

EU and UK. You can ask for access to your data, correction, deletion, or restriction. Where the legal conditions apply, you can ask for a portable copy of data you provided. You may object to processing based on our legitimate interests for reasons related to your situation. You can object at any time to direct marketing, including profiling for that purpose, and withdraw any consent you gave. Our legal bases for processing explain when we use order information to fulfill your contract, meet legal obligations, pursue legitimate interests, or act on consent.

Shopify initially processes EU and UK customer data through its Irish entity. Shopify and its providers may also process information in other countries, including Canada and the United States. See International Data Transfers for safeguards and how to request a copy. Shopify also publishes its provider names and processing locations and Data Processing Addendum.

EU complaints. You can contact us or complain directly to a data protection authority, including in the EU country where you live or work or where the issue occurred. Find the authority in the European Data Protection Board directory.

UK complaints. To raise a concern about how we handled your personal data, email hello@thesoftables.com or use our contact form. We will acknowledge your complaint within 30 days, investigate it, and tell you the outcome without undue delay. If your concern remains unresolved, you can complain to the Information Commissioner’s Office.

Australia. You can contact us to ask for access to your personal information, request a correction, or complain about how we handled it. Tell us what information or concern you would like us to review and how to reach you. We will consider your request, investigate complaints, and explain the outcome. If you are dissatisfied with our response or do not receive one within 30 days, you can contact the Office of the Australian Information Commissioner about a matter it covers. Your information may be processed in the United States and by providers outside Australia. Shopify’s provider list above identifies its processing locations.

Children’s Privacy

Our purchasing and customer-account services are intended for adults, including adults buying toys for children. A product’s age suitability is separate from eligibility to place an order or operate an account.

We do not knowingly collect personal information directly from children under 13 without the parental authorization required by applicable law. We do not knowingly sell or share personal information of individuals under 16 for cross-context behavioral advertising. Additional protections apply to minors where required by law.

A parent or guardian who believes a child has provided personal information can contact hello@thesoftables.com. We will investigate and take appropriate steps to remove information collected without required authorization and address applicable requests to review, delete, or stop further collection of a child’s information.

Please provide only the recipient details needed for delivery and avoid including children’s private information in support messages or public content.

Where applicable law requires a legal basis, we rely on the basis appropriate to the purpose:

Contract: Processing necessary to fulfill your purchase or take steps you request before purchasing.

Legal obligations: Processing needed to meet applicable accounting, tax, regulatory, and other legal requirements.

Legitimate interests: Processing necessary to secure the store, prevent fraud, handle inquiries and disputes, and operate and improve our business, where those interests are not overridden by your rights. This does not replace consent where consent is required.

Consent: Processing for which we request permission, including certain marketing and optional tracking. You may withdraw consent without affecting the lawfulness of processing completed before withdrawal.

Without information needed to complete a purchase, we may be unable to process or deliver an order. Optional advertising consent is not a condition of purchasing.

International Data Transfers

Your information may be processed outside the country where you live, including in countries where The Softables LLC, Shopify, and our service providers operate. Those countries may have different data-protection laws.

Where European or UK transfer rules apply, we rely on an applicable lawful transfer mechanism, such as an adequacy decision or appropriate contractual safeguards, including the European Commission’s Standard Contractual Clauses and relevant UK safeguards where required.

You can contact us to request information about applicable safeguards or a copy where you are entitled to receive one. Visiting our website is not treated as blanket consent to otherwise unlawful transfers.

Public Content and External Websites

If you submit a review, photograph, or other content for publication, the information included may become publicly visible. Avoid including personal information that you do not want published, particularly information about children or other people.

Private emails, order details, and support conversations are not made public merely because you send them to us.

External websites and services have their own privacy notices for processing they control. Those notices do not remove our responsibilities for information we disclose to them.

Changes to This Privacy Policy

We may update this policy to reflect changes in our services, data practices, or legal requirements. We will post the revised policy on this page with an updated date.

Where required by law, we will provide additional notice or obtain consent before making a material change to how personal information is used. Posting an update does not, by itself, supply consent required for a new use.

Contact Us

For privacy questions, requests, or complaints, contact The Softables LLC:

Email: hello@thesoftables.com
Telephone: +1 (929) 309-1516
U.S. business address: 20 Jay St, Suite 835, Brooklyn, NY 11201, United States
Website: thesoftables.com

Privacy controls: Your Privacy Choices — Do Not Sell or Share My Personal Information.