Privacy Policy
How TheCroftAndBarrow.com collects, uses, and protects your personal information.
Your privacy is important to us. This Privacy Policy explains what information we collect, how we use it, and what rights you have regarding your personal data. This policy complies with GDPR, CCPA/CPRA, and other applicable U.S. and international privacy laws.
1. Information We Collect
1a. Information You Provide Directly
We may collect information you voluntarily provide when you:
- Contact us through our contact form (name, email address, message content)
- Subscribe to email communications (email address, name)
- Communicate with us via email at support@thecroftandbarrow.com
1b. Information Collected Automatically
When you visit our Website, we and our third-party partners may automatically collect:
- IP address and approximate geographic location
- Browser type, version, and language settings
- Device type, operating system, and screen resolution
- Pages visited, time spent on pages, and navigation paths
- Referring URLs (how you arrived at our Website)
- Date and time of your visit
- Clickstream data and interactions with our content
1c. Information from Third Parties
We may receive information from third-party sources, including:
- Amazon Associates: Aggregate affiliate performance data (clicks, conversions) without personally identifiable information
- Analytics providers: Aggregated usage and traffic data
- Advertising partners: Information to help us understand our audience
2. How We Use Your Information
We use the information we collect for the following purposes:
- Website operation: To provide, maintain, and improve the Website
- Communication: To respond to your inquiries and messages
- Email communications: To send newsletters or updates you have opted into
- Analytics: To understand how visitors use our Website and improve user experience
- Affiliate tracking: To manage and measure our Amazon Associates affiliate performance
- Security: To detect, prevent, and address technical issues and fraud
- Legal compliance: To comply with applicable laws and legal obligations
- Personalization: To tailor content and recommendations to user interests
3. Cookies and Tracking Technologies
3a. Types of Cookies We Use
Essential Cookies: Required for the Website to function. These cannot be disabled.
Analytics Cookies: Help us understand how visitors interact with our Website (e.g., Google Analytics). These collect aggregated, anonymized data.
Advertising/Affiliate Cookies: Used to track affiliate referrals to Amazon.com and attribute commissions. Amazon’s affiliate tracking cookies may be placed when you click our affiliate links.
3b. Managing Cookies
You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. Note that blocking certain cookies may affect Website functionality. You can also opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.
4. How We Share Your Information
We do not sell your personal information. We may share your information in the following limited circumstances:
- Service providers: Third-party vendors who assist us in operating the Website (e.g., hosting providers, email service providers), who are contractually obligated to protect your data
- Affiliate partners: Amazon.com receives data through affiliate tracking when you click our links; their use of your data is governed by Amazon’s Privacy Policy
- Legal requirements: When required by law, court order, or governmental authority
- Business transfers: In connection with a merger, acquisition, or sale of assets, with notice provided to you
- Protection of rights: To protect the rights, property, or safety of our Website, users, or others
5. Data Security
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include SSL/TLS encryption for data transmission, secure server environments, and access controls.
However, no method of transmission over the internet or method of electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.
6. Your Privacy Rights
Depending on your location, you may have the following rights regarding your personal data:
General Rights (All Users)
- Right to access the personal information we hold about you
- Right to correct inaccurate or incomplete information
- Right to request deletion of your personal information
- Right to opt out of email communications at any time
- Right to data portability where technically feasible
GDPR Rights (EU/EEA Residents)
- Right to access, rectification, and erasure (“right to be forgotten”)
- Right to restriction of processing
- Right to object to processing based on legitimate interests
- Right to data portability
- Right to withdraw consent at any time where processing is based on consent
- Right to lodge a complaint with your local supervisory authority
Our legal basis for processing your data includes: your consent, contract performance (responding to your inquiries), legitimate interests (operating and improving our Website), and legal compliance.
CCPA/CPRA Rights (California Residents)
- Right to know what personal information is collected, used, shared, or sold
- Right to delete personal information we have collected
- Right to opt out of the sale or sharing of personal information (we do not sell personal information)
- Right to correct inaccurate personal information
- Right to limit use and disclosure of sensitive personal information
- Right to non-discrimination for exercising your privacy rights
Other State Privacy Rights
Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and other states with applicable privacy laws have similar rights to access, correct, delete, and opt out of the processing of their personal data. Contact us to exercise any of these rights.
To exercise any of these rights, please contact us at support@thecroftandbarrow.com. We will respond to verifiable requests within the timeframes required by applicable law (generally 30–45 days).
7. Children’s Privacy
TheCroftAndBarrow.com is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information promptly. If you believe we may have collected information from a child under 13, please contact us immediately at support@thecroftandbarrow.com. This Website complies with the Children’s Online Privacy Protection Act (COPPA).
8. Third-Party Links
Our Website contains links to Amazon.com and potentially other third-party websites. This Privacy Policy applies only to TheCroftAndBarrow.com. We are not responsible for the privacy practices of linked websites. We strongly encourage you to read the privacy policies of any third-party sites you visit, including Amazon’s Privacy Notice at amazon.com/privacy.
9. International Data Transfers
TheCroftAndBarrow.com is operated in the United States. If you are visiting from the European Union, European Economic Area, or other regions with laws governing data collection and use that may differ from U.S. law, please note that your information may be transferred to and processed in the United States.
For EU/EEA users, we rely on appropriate legal mechanisms for such transfers, including Standard Contractual Clauses where applicable. By using our Website, you consent to this transfer, storage, and processing of your information in the United States.
10. Data Retention
We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Contact form submissions are typically retained for up to 24 months. Email subscriber information is retained until you unsubscribe. Analytics data is retained according to the settings of our analytics provider (typically 26 months for Google Analytics).
11. Email Communications
If you subscribe to email communications from TheCroftAndBarrow.com, you may receive newsletters, product highlights, or other relevant content about Croft & Barrow clothing. You can unsubscribe from these communications at any time by:
- Clicking the “Unsubscribe” link in any email we send
- Emailing us at support@thecroftandbarrow.com with “Unsubscribe” in the subject line
Please allow up to 10 business days for your unsubscribe request to be processed.
12. Do Not Track Signals
Some browsers include a “Do Not Track” (DNT) feature. Our Website does not currently respond to DNT signals. However, you can use the cookie management options described in Section 3 to control data collection on your device.
13. California “Shine the Light” Law
California Civil Code Section 1798.83 permits California residents to request information about personal information shared with third parties for their direct marketing purposes. We do not share personal information with third parties for their direct marketing purposes. California residents with questions may contact us at support@thecroftandbarrow.com.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will post the updated policy on this page and update the “Last Updated” date. For material changes, we will make reasonable efforts to provide more prominent notice. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
15. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
Email: support@thecroftandbarrow.com
Response Time: Within 2 business days for general inquiries; within legally required timeframes for privacy rights requests
Address: 3613 Illinois Avenue, Portland, OR
Business Hours: Monday–Friday, 9:00 AM – 5:00 PM EST
Website: thecroftandbarrow.com
For privacy rights requests, please include your name, contact information, and a description of your request. We may need to verify your identity before processing your request.
16. Consent
By using TheCroftAndBarrow.com, you consent to the collection and use of your information as described in this Privacy Policy. Where consent is required by law (such as for certain cookies under GDPR), we will seek your explicit consent before collecting such data.
Last Updated: January 12, 2026