Privacy Policy

This policy explains how Gabrelle Green, a Texas sole proprietor trading as stillsidetracked, handles information through this rug shop. For privacy questions or requests, contact g@stillsidetracked.com.

Information we use

• Custom requests: your name, email, design and size requirements, optional preferences, and any reference image you choose to upload. We ask for a city, postal code, and country only when needed to quote delivery; do not send a street address at this stage.
• Purchases arranged directly: online checkout is disabled on this website. If we agree on an order by email or Instagram, we may need the rug, price, tax, shipping charge, payment references, name, email, and delivery address to fulfill it. Square collects payment and billing details on its own payment or invoice pages. Our shop does not receive your full card number or security code.
• Consent and security: the policy version and acknowledgements submitted with your request or checkout, their date, and a temporary IP-derived identifier to limit repeated requests. We do not store a raw IP address in the shop's request records.
• Hosting: OpenAI Sites and its infrastructure providers process technical information to deliver and secure the site. Sites provides traffic statistics such as visits and page views. Provider logging and retention are controlled by the hosting service.

Please do not include identification documents, payment details, medical information, or other sensitive information in requests or photos. Our request form does not ask for birth dates, phone numbers, or precise device location. Square may request additional billing or contact information on its hosted payment and invoice pages; that information is governed by Square’s privacy notice. New images uploaded through our forms are re-encoded in your browser to remove embedded photo metadata before upload.

Why we use it

We use information to answer requests, agree on a design and quote, fulfill orders, arrange delivery or pickup, handle refunds and disputes, prevent abuse, and meet recordkeeping obligations. Sending a request does not subscribe you to advertising. We do not use customer reference images in public listings or marketing without separate permission.

Who receives information

If you follow the Instagram link and send a direct message, Instagram processes that message under its own privacy practices. We use the information you send to respond to your enquiry. Do not send card details or sensitive documents through direct messages.

Authorized shop staff can access requests and orders. Service providers receive information needed for their work: OpenAI Sites and Cloudflare for hosting and storage; Square for payments and invoices when connected; email providers for correspondence; and delivery providers for shipped orders. We may also disclose information where required by law or to resolve a dispute. We do not sell personal data or share it for targeted advertising.

When shipping is connected, Shippo and the selected carrier (UPS or USPS) receive the address and package information needed to quote and arrange delivery. The owner’s shipping setup also uses Shippo for test quotes. Requesting a rate does not sign anyone up for marketing.

Provider information: OpenAI privacy policy, Cloudflare privacy policy, Square privacy policy, and Shippo privacy notice.

Cookies and tracking

Our shop code does not install advertising pixels, session replay, optional analytics scripts, or social-media embeds. Fonts and product images are served by the shop. Instagram and TikTok receive a visit only if you follow their links. Hosting and payment services have their own technical processing. See our Cookie Policy.

We do not change our shop's behavior in response to Do Not Track signals. Our shop does not sell data or run targeted advertising regardless of a Do Not Track or Global Privacy Control setting. This statement does not describe separate websites you choose to visit.

Retention and protection

We keep request and order information only as needed to respond, fulfill the transaction, handle claims, or satisfy tax and legal obligations. Unneeded requests and reference images can be deleted by the owner after review. Order records needed for tax or dispute purposes may have to be retained even after a deletion request. We periodically review retained records; there is no automatic deletion schedule for all orders.

IP-derived request identifiers older than one hour are cleared during the next request or owner-inbox maintenance. Hosting logs, email, backups, and payment-provider records have separate retention rules. Owner-only access protects request images and management tools. No service can promise absolute security.

Your choices and requests

Email g@stillsidetracked.com to request access, correction, a copy, or deletion of your information, or to withdraw permission for further work on an inquiry. Withdrawal does not undo earlier processing or required transaction records. You do not need a shop account. We may verify the request using your existing email or order details; do not send identification documents unless a necessary, secure process has been agreed.

We aim to respond within 30 days and will follow any shorter applicable deadline. If we cannot fulfill a request, we will explain why. Reply with “Privacy appeal” to request a review. Where Texas privacy law applies, appeals are handled within its required time limits, and you may complain to the Texas Attorney General. Your statutory rights are not limited by this policy.

Children and policy changes

Requests and purchases are intended for adults age 18 and over. We do not knowingly collect information from children under 13. A parent or guardian who believes a child submitted information should contact us so we can investigate and delete it where required. We show updates on this page and provide additional notice if required for a material change.