Privacy policy

Privacy Policy

Effective Date: November 14, 2026

Sunlit Knit Studio respects the privacy of our customers and visitors. We understand that shopping online involves sharing personal information, and we take that responsibility seriously.

This Privacy Policy explains how information may be collected, used, disclosed, and protected when you visit www.urbansleepspace.com, browse our products, place an order, or contact our customer support team.

This policy is intended to describe our general privacy practices in connection with our online store. The precise information collected will depend on the store functions, technologies, and service providers actually enabled on the website.

1. Information We May Collect

When you interact with our website, we may collect several categories of information.

A. Information You Provide Directly

When placing an order, contacting us, or submitting information through the website, you may provide:

  • Name.

  • Billing address.

  • Shipping address.

  • Email address.

  • Order details and purchase history.

  • Information you include in customer service messages.

  • Other information you voluntarily submit through website forms.

We use this information to process purchases, communicate with customers, respond to requests, and provide services connected with the online store.

B. Transaction Information

When you purchase a knitted beanie, baseball cap, sun hat, or another product offered by Sunlit Knit Studio, information about the transaction may be recorded.

This may include:

  • Items purchased.

  • Order value.

  • Discounts or promotions applied.

  • Payment status.

  • Shipping and fulfilment information.

  • Refunds, cancellations, and return history.

Payment card details and other sensitive payment credentials should be handled by the payment service provider used at checkout. We do not claim to store complete payment card numbers or security codes unless our actual payment system and security arrangements support that practice.

C. Technical and Device Information

When you visit our website, certain technical information may be collected automatically, depending on the website's configuration and the technologies in use.

This may include:

  • IP address.

  • Browser type and version.

  • Device type.

  • Operating system.

  • Approximate location inferred from an IP address.

  • Pages viewed and interactions with the website.

  • Referring website or source.

  • Date and time of website activity.

This information may help us understand how visitors use the store, identify technical problems, and improve website performance.

2. How We Use Information

We may use collected information for legitimate business purposes, including:

Order fulfilment: To confirm purchases, process transactions, arrange delivery, and manage order-related communications.

Customer support: To answer questions, investigate delivery issues, review return requests, and address complaints.

Website operation: To maintain the website, troubleshoot technical errors, improve navigation, and support a reliable shopping experience.

Security and fraud prevention: To detect suspicious activity, protect customer accounts and transactions, and help prevent misuse of the store.

Business administration: To maintain transaction records, manage refunds, prepare accounting information, and meet applicable legal obligations.

Marketing communications: Where permitted by law and subject to any required consent or opt-out mechanism, we may use contact details to send store updates, promotional messages, or product announcements.

We do not promise that every listed activity is currently enabled. Our actual practices should match the tools and services operating on the website.

3. Cookies and Similar Technologies

Our website or its service providers may use cookies, pixels, tags, local storage, or similar technologies.

These technologies may support:

  • Shopping cart functionality.

  • Checkout operations.

  • Website preferences.

  • Security and fraud prevention.

  • Traffic measurement and analytics.

  • Advertising or marketing measurement, if enabled.

Some cookies may be necessary for the website to function, while others may be optional.

Where applicable law requires consent before optional cookies or tracking technologies are used, we will seek that consent through an appropriate mechanism. Visitors may also be able to manage cookies through their browser settings, although disabling certain cookies may affect website functionality.

4. When We May Share Information

We do not sell personal information in exchange for money as a general business practice. However, operating an online store may require information to be shared with service providers and other parties in limited circumstances.

These may include:

E-commerce and hosting providers: Companies that host, maintain, or support the website and online checkout.

Payment processors: Providers that process payments, refunds, or transaction security checks.

Shipping and fulfilment providers: Companies that help prepare, dispatch, transport, or deliver customer orders.

Analytics and technical providers: Services that help us understand website performance or identify technical issues.

Professional advisers: Accountants, legal advisers, auditors, or other professionals where access is reasonably necessary.

Government and legal authorities: Where disclosure is required by law, legal process, or a valid request from an authorized authority.

Service providers should receive only information reasonably necessary for their assigned functions, subject to applicable contractual and legal obligations.

5. Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this policy.

For example, order and transaction information may need to be retained for accounting, tax, dispute resolution, fraud prevention, and legal compliance.

Customer service correspondence may be retained to maintain a record of prior communications and resolve follow-up issues.

When information is no longer needed, we will take reasonable steps to delete, de-identify, or securely dispose of it, subject to applicable retention requirements and technical limitations.

6. Data Security

We use reasonable administrative, technical, and organizational measures intended to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

No internet transmission or electronic storage system can be guaranteed to be completely secure. Therefore, we cannot promise absolute security.

Customers should also take reasonable precautions, including using secure devices, protecting their email accounts, and avoiding the transmission of unnecessary sensitive information through ordinary email.

7. Privacy Rights and State Laws

Privacy rights vary depending on where a customer lives and whether the business meets the relevant legal requirements.

Depending on applicable law, eligible individuals may have rights to:

  • Request confirmation about whether certain personal information is being processed.

  • Access personal information.

  • Request correction of inaccurate information.

  • Request deletion of certain information.

  • Obtain a portable copy of certain information.

  • Opt out of certain forms of targeted advertising, sale of personal data, or profiling where the law provides such rights.

  • Appeal a decision concerning a privacy request where an appeal right applies.

The Kentucky Consumer Data Protection Act took effect on January 1, 2026. It applies only to businesses meeting the law's scope and thresholds and is subject to statutory exemptions. Sunlit Knit Studio does not represent that it necessarily meets those thresholds.

If you believe a privacy law gives you a right to make a request, please contact us at info@urbansleepspace.com. We may need to verify your identity and the applicable jurisdiction before processing the request.

We will not unlawfully discriminate against a customer for exercising a privacy right protected by applicable law.

8. Children's Privacy

Our online store is intended for a general shopping audience and is not designed to knowingly collect personal information directly from children under 13.

If we become aware that personal information has been collected from a child under 13 without the legally required parental consent, we will take reasonable steps to address the information in accordance with applicable law.

Parents or guardians who believe that a child has submitted personal information to us may contact info@urbansleepspace.com.

9. Third-Party Websites

Our website may contain links to third-party websites or services. These websites operate under their own privacy policies and practices.

We do not control the privacy practices of independent third parties and encourage visitors to review the applicable privacy information before submitting personal data to them.

10. Marketing Communications

If you receive promotional emails from us, you may opt out by using the unsubscribe mechanism included in the message, where provided, or by contacting info@urbansleepspace.com.

Even if you opt out of promotional communications, we may still send non-promotional messages relating to an existing order, refund, account, security issue, or customer service request.

11. Changes to This Policy

We may update this Privacy Policy when our website operations, service providers, business practices, or legal obligations change.

The revised version will be posted on this page with an updated effective date. We encourage visitors to review this page periodically.

12. Contact Information

For privacy questions, data requests, or concerns about how information is handled, please contact:

Sunlit Knit Studio
850 Dixie Hwy
Louisville, KY 40210
United States

Email: info@urbansleepspace.com
Website: www.urbansleepspace.com