Privacy Policy — The Ivy Keep

Effective date: September 30, 2026

This Privacy Policy explains how The Ivy Keep (“The Ivy Keep,” “we,” or “us”) collects, uses, shares, and protects information when you visit theivykeep.com (the “Site”) or purchase from us.

Information we collect

Order information: your name, email address, shipping address, the objects you purchase, and order totals.
Payment information: payments are processed by Stripe. Your card details are provided directly to Stripe and are not seen or stored by us. Stripe provides us with the information needed to confirm and record your order.
Account information: your email address, which is used to send you a one-time sign-in code. We do not store passwords for customer accounts.
Messages and requests: information you send through the contact form or your account, including cancellation, address-change, and return requests.
Correspondence list: your email address if you choose to sign up for correspondence from The Ivy Keep or choose to hear from us at checkout.
Notification requests: your email address if you ask to be notified when an object becomes available.
Saved objects: the objects you choose to save for later, associated with your account or stored for your current visit.
Mobile phone number: if you choose to receive text messages from us, your mobile number and a record of your consent.
Technical information: your IP address and basic browser information may be used briefly to protect the Site from abuse, such as repeated sign-in attempts. Our web host may also maintain standard server logs.

How we use your information

We use your information:

To process, ship, and support your orders, including sending order confirmations, shipping notices, and tracking information.
To allow you to sign in to your account and manage your orders.
To respond to your messages and requests.
To send correspondence if you have chosen to receive it. You may unsubscribe at any time.
To notify you when an object you asked about becomes available.
To maintain the security and operation of the Site, prevent fraud and abuse, and meet legal, tax, and accounting obligations.

We do not sell your personal information, and we do not use your information for targeted advertising.

Who we share information with

We share information with service providers that help us operate the shop, as needed for them to provide their services. These may include:

Stripe, our payment processor.
Our web hosting and email providers, to operate the Site and send email.
Shipping carriers, to deliver your order.
Cloudflare, whose Turnstile service helps protect forms from automated submissions.
Cloudflare Web Analytics, which helps us understand visits to the Site without using cookies to follow you across other websites.
Intuit Mailchimp, which sends correspondence emails and, if you have opted in, text messages.

We may also disclose information when required by law, when reasonably necessary to protect our rights or the security of the Site, or in connection with a sale, merger, or transfer of all or part of the business.

Text messages (SMS)

If you choose to receive text messages from The Ivy Keep, we use your mobile number to send the messages you have signed up to receive and to respond to your replies.

Mobile information will not be shared with third parties or affiliates for their own marketing or promotional purposes. Information may be shared with service providers that support the text-message program, such as our messaging provider or customer-service providers, as needed to provide those services.

Text-message opt-in data and consent will not be shared with third parties for their own marketing or promotional purposes.

You may stop receiving text messages at any time by replying STOP. Reply HELP for help. See the Text Messages section of our Terms & Conditions for additional program details.

Cookies and similar technologies

The Site uses essential cookies or similar technologies needed for functions such as the shopping cart and account sign-in.

We do not use advertising cookies or cookies to track you across other websites. Cloudflare Turnstile may use technologies necessary to perform its security checks.

How long we keep information

We keep personal information only for as long as reasonably necessary for the purposes for which it was collected and for applicable legal, tax, accounting, security, or recordkeeping requirements.

In particular:

Order records are kept for as long as needed for accounting, tax, and legal purposes.
Sign-in codes expire after 15 minutes and are deleted once used.
Security records containing IP addresses are generally deleted within about one day.
Correspondence list addresses are kept until you unsubscribe or ask us to remove them.
Notification requests are kept until we have notified you about the requested object or the request is otherwise no longer needed.
Mobile numbers and text-message consent records are kept while you are subscribed and afterward for as long as reasonably necessary to document that consent was given or withdrawn.
Messages and requests are kept for as long as needed to assist you and maintain appropriate business records.

How we protect your information

The Site is served over an encrypted connection (HTTPS). Payments are handled by Stripe, our payment processor. Access to records containing personal information is limited and protected.

No method of transmission or electronic storage is completely secure, but we take reasonable measures to protect the information entrusted to us.

Your rights and choices

You may ask us to access, correct, or delete personal information we hold about you, subject to any information we are required or permitted to retain. You may also unsubscribe from correspondence at any time.

Residents of some states, including California, may have additional rights under applicable state privacy laws, such as rights concerning access, correction, or deletion of personal information.

We will not discriminate against you for exercising any privacy rights available to you under applicable law.

To make a privacy request, contact us using the information below. We may need to verify your identity before completing certain requests.

Children

The Site is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

If you believe a child has provided personal information to us, please contact us so that we can take appropriate steps to delete it.

Changes to this policy

We may update this Privacy Policy from time to time. The effective date at the top of this page shows when the policy was last updated.

Contact

Questions or requests concerning privacy may be sent to:

The Ivy Keep

2505 Braselton Highway

Buford, GA 30519

Email: desk@theivykeep.com

Or contact us through the Contact page.