1. Introduction

This Privacy Policy explains how Hearth & Table Kitchen collects, uses, discloses, retains, and protects personal information in connection with our kitchen, dining, and home goods retail services, including our website, customer communications, order processing, fulfillment, returns, promotions, and related services. This Policy is intended for visitors, customers, account holders, gift recipients, and other individuals who interact with us in the United States.

Hearth & Table Kitchen is responsible for the personal information we collect and process as described in this Policy. If you have questions or wish to exercise privacy rights, you may contact us at [email protected] or by mail at 184 Bleecker Street, New York, NY 10012, US.

This Policy is effective as of 2026-05-22. We may update it from time to time to reflect changes in our services, legal obligations, or data practices. When we make material changes, we will take reasonable steps to notify you, such as by posting an updated Policy with a new effective date.

2. Personal Information We Collect

We collect personal information that you provide directly, that is generated when you use our services, and that we receive from service providers or business partners. The categories of personal information we may collect include:

Identifiers: name, billing and shipping address, email address, phone number, account login information, order number, and similar contact details.
Commercial information: products viewed, added to cart, purchased, returned, exchanged, wish lists, gift messages, preferences, transaction history, payment confirmation details, and customer service records.
Payment-related information: payment method type, billing details, transaction identifiers, and fraud-prevention signals. We generally rely on payment processors to handle full card numbers and security codes.
Internet or electronic network activity: device identifiers, browser type, operating system, IP address, pages visited, referring pages, search terms, interactions with emails, and approximate usage data.
Approximate location information: location inferred from IP address, shipping destination, store or delivery area, and similar non-precise location data.
Communications: messages you send to us, customer support inquiries, reviews, survey responses, and feedback about our products or services.
Inferences and preferences: product interests, household or dining preferences, marketing preferences, and recommendations based on your interactions with us.

We do not intentionally collect sensitive personal information such as government identification numbers, precise geolocation, biometric data, or health information unless you voluntarily provide information in a way that is not requested by us. Please avoid submitting unnecessary sensitive information through customer support messages or product reviews.

3. Sources of Personal Information

We collect personal information from several sources. First, we collect information directly from you when you place an order, create an account, subscribe to emails, contact customer service, participate in a promotion, request a return, or otherwise communicate with us.

Second, we collect information automatically through cookies, pixels, tags, server logs, and similar technologies when you visit our website or interact with our emails. These technologies help us operate the site, remember preferences, analyze performance, prevent fraud, and deliver or measure advertising where permitted.

Third, we may receive information from service providers and partners, such as payment processors, shipping carriers, fraud-prevention vendors, analytics providers, advertising partners, email service providers, customer support platforms, and e-commerce tools. We may also receive address correction or delivery status information from carriers, and information from platforms where you interact with our brand.

4. How We Use Personal Information

We use personal information for business and commercial purposes related to providing and improving our services. These purposes include:

Processing purchases, payments, refunds, returns, exchanges, gift orders, and related transactions.
Fulfilling and delivering orders, providing shipment updates, confirming delivery, and handling customer support inquiries.
Creating, maintaining, and securing customer accounts, including authentication and account preferences.
Communicating with you about orders, products, availability, promotions, events, policy updates, and customer service matters.
Personalizing your shopping experience, product recommendations, and content based on your preferences and interactions.
Operating, maintaining, troubleshooting, and improving our website, systems, products, services, and customer experience.
Conducting analytics, reporting, forecasting, inventory planning, quality control, and internal business administration.
Detecting, preventing, and responding to fraud, unauthorized transactions, security incidents, misuse, and legal claims.
Complying with legal obligations, tax and accounting requirements, law enforcement requests, regulatory inquiries, and enforceable legal process.

Where a legal basis is required by applicable law, we process personal information as necessary to perform a contract with you, to comply with legal obligations, based on your consent, and for legitimate business interests such as security, service improvement, fraud prevention, customer support, and responsible marketing. You may withdraw consent where our processing is based on consent, subject to legal or operational limitations.

5. Cookies, Analytics, and Advertising

We and our service providers may use cookies and similar technologies to collect information about your device and interactions. Cookies may be necessary for website functionality, such as keeping items in your cart, remembering choices, enabling checkout, and maintaining security. Analytics technologies help us understand traffic, page performance, product interest, and how customers move through the website.

We may also use advertising and measurement technologies to promote Hearth & Table Kitchen products, measure campaign performance, limit repetitive advertising, and understand whether an advertisement led to a visit or purchase. These technologies may involve the disclosure of identifiers, device information, internet activity, and inferences to advertising or analytics partners.

You can usually adjust browser settings to block or delete cookies. If you disable certain cookies, some features may not work correctly. Some states treat certain targeted advertising or cross-context behavioral advertising practices as a sale, sharing, or targeted advertising. Where required, we provide choices to opt out of these activities. We do not knowingly use cookies to target advertising to children under 13.

6. How We Disclose Personal Information

We may disclose personal information to third parties for the purposes described in this Policy. These disclosures may include:

Service providers and contractors: companies that help us with payment processing, order fulfillment, shipping, hosting, security, analytics, customer support, email delivery, marketing operations, fraud prevention, and professional services.
Payment and transaction partners: payment processors, banks, financing providers, fraud-screening vendors, and platforms needed to complete transactions and prevent unauthorized activity.
Shipping and delivery partners: carriers and logistics providers that deliver products, process returns, verify addresses, and provide delivery notifications.
Advertising and analytics partners: partners that help measure website activity, improve marketing, and provide interest-based or targeted advertising, subject to your rights and choices.
Legal, safety, and compliance recipients: regulators, courts, law enforcement, government authorities, insurers, auditors, and legal advisors when necessary to comply with law or protect rights and safety.
Business transfer recipients: parties involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar business transaction involving all or part of our business.

We do not sell personal information for money. However, some disclosures for advertising or analytics may be considered a sale, sharing, or targeted advertising under certain state privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act, referred to in this Policy as the CCPA.

7. Retention of Personal Information

We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by law. Retention periods vary depending on the type of information, the context in which it was collected, and our legal and operational needs.

For example, we may retain order and transaction records for tax, accounting, warranty, return, fraud-prevention, and legal compliance purposes. Customer service communications may be retained to resolve issues, maintain service quality, and document our responses. Marketing preferences may be retained to honor opt-outs and avoid sending unwanted communications. Website logs and analytics data are generally retained for shorter periods unless needed for security, troubleshooting, fraud prevention, or aggregated reporting.

When personal information is no longer needed, we will delete it, de-identify it, aggregate it, or otherwise handle it in accordance with applicable law and our internal retention practices.

8. Your Privacy Choices

You have choices regarding how we use personal information. You may unsubscribe from marketing emails by using the unsubscribe instructions in those emails or by contacting us at [email protected]. Even if you opt out of marketing emails, we may still send transactional or service messages, such as order confirmations, shipping notices, return updates, security alerts, or policy notices.

You may be able to access, update, or correct certain account information by logging into your account, if account features are available. You may also contact us to request assistance with updating inaccurate information.

You can control cookies through your browser settings and, where available, through cookie preference tools. You may also use device or platform settings to limit certain advertising identifiers. We will honor legally required opt-out preference signals where required and technically feasible, including applicable browser-based signals that communicate a request to opt out of sale or sharing for targeted advertising.

9. U.S. State Privacy Rights and CCPA Notice

Residents of certain U.S. states, including California, Colorado, Connecticut, Virginia, Utah, and others, may have specific privacy rights depending on applicable law and our relationship with you. These rights may include the right to know or access personal information, the right to request deletion, the right to correct inaccurate information, the right to obtain a portable copy of personal information, the right to opt out of sale, sharing, or targeted advertising, and the right to limit the use or disclosure of sensitive personal information where applicable.

For California residents, the CCPA requires notice of the categories of personal information collected, the purposes for collection and disclosure, and the categories of third parties to whom information may be disclosed. In the preceding 12 months, we may have collected and disclosed the categories listed in this Policy, including identifiers, commercial information, internet or electronic network activity, approximate location information, communications, and inferences. We collect and disclose these categories for the business and commercial purposes described above.

We do not knowingly sell or share personal information of consumers under 16 years of age. We do not use or disclose sensitive personal information for purposes that would require a right to limit under the CCPA unless we provide the required notice and choice.

To submit a privacy request, contact us at [email protected]. We may need to verify your identity before fulfilling a request, such as by matching information you provide with information we maintain. Authorized agents may submit requests where permitted by law, but we may require proof of authorization and may ask the consumer to verify their identity directly. We will not discriminate against you for exercising privacy rights, but certain choices may affect our ability to provide requested services.

10. Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, loss, misuse, alteration, or disclosure. These safeguards may include access controls, secure payment processing through third-party providers, monitoring, staff training, vendor review, and procedures for responding to suspected security incidents.

No website, payment system, email communication, or storage method is completely secure. You are responsible for maintaining the confidentiality of your account credentials and for using strong, unique passwords. If you believe your account or interaction with Hearth & Table Kitchen has been compromised, please contact us promptly at [email protected].

11. Children’s Privacy

Our services are intended for adults and are not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13 without appropriate consent, we will take reasonable steps to delete it.

If you are a parent or guardian and believe a child has provided personal information to us, please contact us at [email protected]. We may request information necessary to locate and delete the relevant data.

12. Contact Us

If you have questions about this Privacy Policy, our privacy practices, or your privacy rights, please contact Hearth & Table Kitchen at [email protected] or by mail at 184 Bleecker Street, New York, NY 10012, US.

Please include enough information for us to understand and respond to your request. For privacy rights requests, we may ask for information needed to verify your identity and protect your information from unauthorized access or deletion.