Privacy policy
What we collect, why we collect it, who else sees it, and how to make us delete it. Written to be read rather than skipped.
Who we are
Alden & Roe LLC, a company registered in New York State, trading at 214 Mercer Street, Suite 3B, New York, NY 10012, USA, is the controller of personal information collected through this website. You can reach our privacy contact at privacy@aldenandroe.com.
What information we collect
Information you give us
- Order information. Name, billing and delivery address, email address, phone number, and the items you buy.
- Payment information. Card details are entered directly into our payment processor's hosted fields. We receive only the last four digits, the card brand, and an authorisation result. We never see or store the full card number or the security code.
- Account information. If you create an account, your email address, a hashed password, and saved addresses.
- Contact and support messages. Anything you send us by the contact form, email or phone, including fit details you choose to share.
- Marketing preferences. Your email address if you subscribe, plus whether you have opened or clicked our emails.
Information collected automatically
- IP address, approximate location derived from it, browser and device type, and operating system.
- Pages viewed, referring page, search terms used on the site, and time spent.
- Cookie and local storage identifiers, as described below.
Why we use it
| Purpose | Data used | Legal basis |
|---|---|---|
| Taking and delivering your order | Order and payment data | Performance of a contract |
| Customer service and returns | Order data, messages | Performance of a contract |
| Fraud prevention | Order data, IP address | Legitimate interests |
| Site analytics | Usage data, cookie IDs | Consent |
| Advertising and measurement | Usage data, cookie IDs | Consent |
| Marketing emails | Email address, engagement | Consent |
| Tax and accounting records | Order and payment data | Legal obligation |
Cookies and similar technologies
When you first visit, a banner asks whether you accept analytics and advertising cookies. Choosing "Essential only" means we set no analytics or advertising cookies at all. Your choice is stored in your browser and you can change it by clearing site data.
- Strictly necessary. Session, shopping bag contents, security tokens and your cookie choice. These cannot be switched off because the store cannot function without them.
- Analytics. Aggregated measurement of pages viewed, devices used and checkout drop-off, so we can fix what is broken. Set only with consent.
- Advertising. Used to measure whether an ad led to a visit or a purchase, and to show you our products on other sites. Set only with consent.
We honour Global Privacy Control signals sent by your browser as a valid opt-out of the sale or sharing of personal information.
Advertising
With your consent we use third-party advertising services, which may include Google Ads and its remarketing features. These services use cookies and similar identifiers to measure ad performance and to show you our products on other websites you visit.
You can opt out of personalised Google advertising through Google Ad Settings, and out of third-party vendor cookies through the Network Advertising Initiative opt-out page. Declining advertising cookies does not stop you from buying anything on this site.
Who we share information with
We do not sell personal information for money. We share it only with service providers who need it to do a job for us, under contract, and only for that job:
- Payment processing. Our PCI-DSS compliant payment provider, to authorise and settle payments.
- Shipping. Carriers such as USPS and UPS, to deliver your order and provide tracking.
- Email. Our email platform, to send order notifications and, if you subscribed, marketing.
- Hosting and analytics. Our hosting provider and, with consent, our analytics and advertising providers.
- Professional advisers and authorities. Accountants, lawyers, or law enforcement where we are legally required to disclose.
Some of these providers process data in countries outside your own. Where personal information from the UK or EU is transferred to the United States, we rely on Standard Contractual Clauses.
How long we keep it
- Order and transaction records: 7 years, to meet US tax and accounting requirements.
- Account data: until you delete the account, then 30 days in backups.
- Marketing subscriptions: until you unsubscribe, then removed within 30 days.
- Support correspondence: 24 months from the last message.
- Analytics data: 14 months.
How we protect it
The site is served over TLS. Access to customer data is limited to the three members of staff who need it, protected by unique accounts and two-factor authentication. Payment card data never touches our servers. We test our checkout and hosting configuration annually and patch on a monthly cycle.
No system is perfectly secure. If a breach affects your personal information, we will notify you and the relevant authority as required by law, without undue delay.
Your rights
Depending on where you live, you may have the right to:
- Know what personal information we hold about you and get a copy of it
- Correct information that is wrong or incomplete
- Delete information we no longer need to keep
- Opt out of the sale or sharing of personal information, and of targeted advertising
- Withdraw consent at any time, without affecting processing already carried out
- Object to processing based on legitimate interests
- Ask us to transfer your data to another provider
- Not be discriminated against for exercising any of these rights
California residents have these rights under the CCPA as amended by the CPRA. UK and EU residents have them under the UK GDPR and the EU GDPR. To exercise any of them, email privacy@aldenandroe.com. We respond within 30 days and may need to verify your identity first, usually by confirming details of a recent order.
If you are unhappy with our response, you may complain to your state attorney general, to the UK Information Commissioner's Office, or to your local EU supervisory authority.
Children
This store is intended for adults. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, email us and we will delete it.
Changes to this policy
We update this page when our practices change. The "last updated" date at the top always reflects the current version. If a change materially affects how we use your information, we will email subscribers and show a notice on the site rather than changing it quietly.
Contact us about privacy
Email privacy@aldenandroe.com, call +1 (212) 804-7719, or write to Alden & Roe LLC, Attn: Privacy, 214 Mercer Street, Suite 3B, New York, NY 10012, USA.