Privacy policy

Effective Date: January 1st, 2025

This Privacy Policy describes how Shepherd of 23 ("we", "us", or "our") collect, use, and share information about you. This policy applies to information we collect when you use our website, shop in our online store, or otherwise interact with us as described below (collectively, the “Site”). We may change this Privacy Policy from time to time. If we make changes, we will notify you by revising the date at the top of this policy, and in some cases, we may provide additional notice (such as adding a statement to the homepage of our website or sending an email notification). We encourage you to review the Privacy Policy whenever you interact with us to stay informed about our information practices and the ways you can help protect your privacy. Capitalized terms not defined herein shall have the meanings ascribed thereto in our Terms of Service.

Acceptance of These Terms

By using this Site, you signify your acceptance of this policy and any changes to this policy. If you do not agree to this policy, please do not use our Site. Your continued use of the Site following the posting of changes to this policy will be deemed your acceptance of those changes.

Collection of Information

We collect information from you directly, automatically when you visit the Site, and sometimes from third parties. Some of this information may be considered "Personal Information" or “Personal Data,” and some of which may be considered “sensitive” under applicable laws. We consider information that identifies you as a specific, identified individual to be personal information (such as your name, phone number, email address), and we treat additional information, including IP addresses and cookie identifiers, as "personal information" where required by applicable law. If we combine non-personal information with personal information, we treat the combined information as personal information under this Privacy Policy. We may de-identify or pseudonymize personal information, but will maintain and use de-identified data without attempting to re-identify it, except where permitted by applicable law.

Information You Provide to Us

We collect information you provide directly to us. For example, we collect information when you use our website, shop in our online store, create an online account, join our subscription programs, sign up to receive our emails, participate in a contest or survey, communicate with us via social media, request customer support, or apply for a job. This Site collects information that identifies, relates to, describes, or is capable of being linked, directly or indirectly, with a particular consumer or device. The types of personal information we may collect include your name, email address, zip code, billing address, shipping address, phone number, payment information, product preferences, demographic information, and any other information you provide.

In some cases, we may also collect information about others, such as when you purchase a gift card or ship products to someone. We will use this information to fulfill your requests and may also use it for marketing communications, unless the recipient has opted out.

Information We Collect Automatically

We automatically collect certain information when you access or use our website or transact business with us. This includes: (i) information about your use of our website, such as the browser type, access times, pages viewed, IP address, and referring link; (ii) transaction details, including product information and purchase/return data; and (iii) we may use cookies, web beacons, and other tracking technologies to collect information about your browsing and purchasing behavior. We may combine this data with other information to improve our website and user experience, understand which areas of the site are popular, tailor communications, and analyze campaign effectiveness.

Retention and Transfer of Personal Information

We retain Personal Information that you provide as long as we consider it potentially useful for contacting you about our products and services, or as required to comply with legal obligations, resolve disputes, and enforce agreements. You can request that we delete your information by unsubscribing, opting-out, or emailing us at hello@shepherdof23.com. Personal Information may be transferred and stored on secure servers in the United States.

Use of Information

We may use information about you for various purposes, including to:
(i) facilitate and improve your online shopping experience;
(ii) provide the products and services you request, process transactions, and send you related information, including confirmations and receipts;
(iii) respond to your comments, questions, and requests, and provide customer service;
(iv) communicate with you about products, services, offers, promotions, rewards, and events, and provide news and information we think will be of interest to you;
(v) manage your online account(s) and send you technical notices, updates, security alerts, and support and administrative messages;
(vi) personalize your online experience and provide advertisements, content, or features that match your profile and interests;
(vii) monitor and analyze trends, usage, and activities;
(viii) process and deliver contest, promotion, and sweepstakes entries and rewards;
(ix) link or combine with information we obtain from others to help us understand your needs and provide you with better service; and
(x) carry out any other purpose for which the information was collected.

We are based in the United States, and the information we collect is governed by U.S. law. By accessing or using our website or otherwise providing information to us, you consent to the processing and transfer of information in and to the U.S. and other countries.

Text Marketing:
With your permission, we may send text messages about our store, new products, and other updates. Updates may include Checkout Reminders. Webhooks will be used to trigger the Checkout Reminders messaging system.

Your Information Choices and Control

Shepherd of 23 respects your need to access and control your Personal Information, so we provide you with the following choices:

  • You may correct, update, and delete your account.
  • You may change your preferences for subscriptions, newsletters, and alerts.
  • You may choose whether to receive offers and promotions for our products and services, or products and services that we think may be of interest to you.
  • You may request access to the Personal Information we hold about you and request that we amend or delete it. Please note that we may be required to keep such information and not delete it (or keep it for a certain time), in which case we will comply with your deletion request only after fulfilling these requirements. When we delete any information, it will be removed from the active database, but residual copies may remain in our Site’s back-up systems due to the nature of those systems’ operations.
  • We may also retain your information for fraud prevention or similar purposes.

You can exercise these controls and choose to opt in or out of services and communications through the website or by following the instructions directly provided in the communications we send you. For assistance, please email hello@shepherdof23.com.

Sharing of Information

We may share information about you as follows:
(i) with vendors, consultants, and other service providers who need access to such information to carry out work on our behalf;
(ii) in response to a request for information if we believe disclosure is in accordance with any applicable law, regulation, or legal process, or as otherwise required by any applicable law, rule, or regulation;
(iii) if we believe your actions are inconsistent with our user agreements or policies, or to protect the rights, property, and safety of us or any third party;
(iv) in connection with, or during negotiations of, any merger, sale of company assets, financing, or transfer of all or a portion of our business to another company; or
(v) with your consent or at your direction.

We may also share aggregated or de-identified information, which cannot reasonably be used to identify you. We do not share your personal information that we have collected directly from you on our Site with third parties for those third parties’ direct marketing purposes unless you have consented (either through an opt-in or opt-out opportunity) at the time you provide your personal information.

Advertising and Analytics

We engage third parties to serve advertisements on our behalf across the Internet and to provide analytics services. These entities may use cookies, web beacons, and other technologies to collect information about your use of our websites, such as your IP address, web browser, pages viewed, time spent on pages, links clicked, and conversion information. This information may be used by us and others to, among other things, analyze and track data, determine the popularity of certain content, deliver advertising and content targeted to your interests on our websites and other websites, and better understand your online or offline activity. We may also work with third parties to serve ads to you as part of a customized campaign on other websites or platforms. For a detailed description of the ways in which we and third parties collect information automatically and how it is used, please see our Cookie Policy.

We use third-party analytics and advertising tools to understand how visitors use our website, measure performance, and deliver relevant ads. These tools include services such as Google Analytics and TikTok Pixel. TikTok may collect or receive information from our website and use it to provide measurement services and targeted advertising. You can learn more about TikTok’s privacy practices here. 

Links to 3rd Party Websites

Our Site may contain links to other websites. Our Privacy Policy does not apply to the practices of other websites, and Shepherd of 23 is not responsible for the actions and privacy policies of third parties. We encourage you to be aware when you leave our Site and to read the privacy policies of each website that you visit.

Security

We take reasonable measures to help protect information about you from loss, theft, misuse, unauthorized access, disclosure, alteration, and destruction. We use organizational, procedural, and technical safeguards to secure data in our possession, consistent with the sensitivity level of such data. When sensitive information (such as credit card data) is collected on our Site, it is protected through the use of encryption, such as the Secure Socket Layer (SSL) protocol, and may be processed by third parties using similar levels of protection. However, no transmission of data over the internet is guaranteed to be completely secure. It may be possible for third parties not under our control to intercept or access transmissions or private communications unlawfully. While we strive to protect Personal Information, we cannot ensure or warrant the security of any information you transmit to us.

Children's Privacy

We do not knowingly collect any Personal Information from children under the age of 16. We do not sell products for purchase by children, and all children’s products we sell are intended for purchase by adults only. If we learn that we have collected or received Personal Information from a child under 16 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 16, please contact us at hello@shepherdof23.com.

California Privacy Notice for California Residents

This California Privacy Notice supplements the information in Shepherd of 23's privacy policy and applies only to California residents.

This notice is provided pursuant to the California Consumer Privacy Act of 2018 (CCPA) and the California Privacy Rights Act of 2020 (CPRA), including any associated regulations. Terms used in this California Privacy Notice have the same meaning as provided in the CCPA, CPRA, and related regulations, unless otherwise defined.

Exercising Your California Privacy Rights

As a California resident, you have the following rights regarding your Personal Information:

(1) Right to Know: You can request information about the Personal Information we collect, use, disclose, and sell, including the categories and specific pieces of Personal Information we have collected about you.

(2) Right to Delete: You can request that we delete the Personal Information we have collected about you.

(3) Right to Correct Inaccurate Information: You can request that we correct any inaccurate Personal Information we hold about you.

(4) Right to Opt-Out of Sharing: You can opt-out from the sharing of your Personal Information and Sensitive Personal Information with third parties for cross-context behavioral advertising (i.e., targeted advertising).

(5) Right to Opt-Out of Sale: You can opt-out from the sale of your Personal Information and Sensitive Personal Information.

(6) Right to Limit the Use and Disclosure of Sensitive Personal Information: You can request that we limit the use and disclosure of your Sensitive Personal Information to the purposes outlined by the CPRA.

Verifying Your Requests

We will take reasonable steps to verify your identity based on the information you provide and the type of request you are making.

In your request, you must provide enough information to allow us to verify that you are the person about whom we collected Personal Information, or their authorized representative. You must also describe your request in sufficient detail so that we can understand, evaluate, and respond to it. If we cannot verify your identity, we may not be able to fulfill your request. Making such a request does not require you to create an account with us, and we will only use the information you provide in the request to verify your identity.

Submitting a Request

Only you, or a person registered with the relevant authorities that you authorize to act on your behalf, may make a request related to your Personal Information. You may also make a verifiable consumer request on behalf of your minor child.

The verifiable consumer request must:

  • Provide sufficient information that allows us to reasonably verify that you are the person about whom we collected Personal Information or an authorized representative of a California resident who wishes to make a request.

We may not be able to respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information relates to you. Making a verifiable consumer request does not require you to create an account with us. We will ask you for the email information you used to interact with us or sign up for a loyalty program, receive emails, or make purchases, to help verify your identity or authority to make the request and confirm that your information is in our system. Any information provided to submit a request will only be used for verification and request purposes.

California residents may make requests by emailing us at hello@shepherdof23.com. Please include “CCPA Rights Request” in the subject line of your email.

Timing

We will make best efforts to respond to a verified consumer request within 45 days. If we need more time, we will inform you in writing of the reason and the extension. You may only make a request for access or data portability twice within a 12-month period.

Information We Collect

Shepherd of 23 collects and uses your information for the purposes described in this Privacy Policy, which include "business purposes" under the CCPA and CPRA. We do not sell your personal information for monetary consideration. However, California law may categorize our sharing of personal information with companies that provide services to us (such as those that help us market or advertise our products and services to you) as "sales." We may "sell" or may have "sold" the following categories of personal information for valuable consideration, as listed in the table below.

Our Site collects Personal Information, which is information that identifies, relates to, describes, references, or is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or device. Personal Information does not include: (i) publicly available information from government records; (ii) de-identified or aggregated consumer information.

In particular, Shepherd of 23 has collected the following categories of Personal Information from its consumers within the last 12 months:

Category Examples We Collect We Sell
A. Identifiers A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver’s license number, passport number, or other similar identifiers. Yes Yes
B. Personal Information Categories (as listed in the California Customer Records statute) A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Yes Yes
C. Protected classification characteristics under California or federal law Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information). Yes Yes
D. Commercial information Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. No No
E. Biometric information Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data. No No
F. Internet or other similar network activity Browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement. Yes Yes
G. Geolocation data Physical location or movements. Yes Yes
H. Sensory data Audio, electronic, visual, thermal, olfactory, or similar information. No No
I. Professional or employment-related information Current or past job history or performance evaluations. No No
J. Non-public education information Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records. No No
K. Inferences drawn from other Personal Information Profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. Yes Yes
L. Equipment information Information about your internet connection, the equipment you use to access our Site, and usage details. Yes Yes

 

Information You Provide to Us

Shepherd of 23 obtains the categories of Personal Information listed above from the following categories of sources:

  • Directly from you. For example, from forms you complete, products and services you purchase, or inquiries you make.
  • Indirectly from you. For example, from observing your actions on our Site, such as interactions with our website or services.

How We Use Your Information

We may use or disclose the Personal Information we collect for one or more of the following business purposes:

  • To fulfill or meet the reason you provided the information. For example, if you share your name and contact information to ask a question about our products or services, we will use that Personal Information to respond to your inquiry. If you provide your Personal Information to purchase a product or service, we will use that information to process your payment and facilitate delivery. We may also save your information to facilitate future orders or process returns.
  • To provide, support, personalize, and develop our Site, products, and services.
  • To create, maintain, customize, and secure your account with us.
  • To process your requests, purchases, transactions, and payments and prevent transactional fraud.
  • To provide you with support and respond to your inquiries, including investigating and addressing concerns and monitoring and improving our responses.
  • To personalize your Site experience based on your preferences and behavior.
  • For testing, research, analysis, and product development, including to improve our Site, products, and services.
  • To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.
  • As described to you when collecting your Personal Information or as otherwise set forth in applicable laws, including the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).

Shepherd of 23 will not collect additional categories of Personal Information or use the Personal Information we collected for materially different, unrelated, or incompatible purposes without providing you notice.

Disclosure of Your Information

We do not sell, trade, or rent Users' Personal Information to others, and we have not done so during the preceding twelve (12) months.

We may disclose your Personal Information to third parties for a business purpose. When we disclose Personal Information for a business purpose, we enter into contracts that describe the purpose and require the recipient to keep that Personal Information confidential and not use it for any purpose except performing the contract.

We share your Personal Information with the following categories of third parties:

  • Subsidiaries and affiliates.
  • Contractors and service providers who assist us with business operations, such as payment processing, shipping, and customer service.
  • Data aggregators for analytics and marketing purposes.
  • Third parties with whom we partner to offer products and services to you, such as marketing or promotional partners.

We may also disclose your Personal Information:

  • To comply with any court order, law, or legal process, including to respond to any government or regulatory request.
  • To enforce or apply our Terms of Service and other agreements, including for billing and collection purposes.
  • If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of Shepherd of 23, our customers, or others, which includes sharing information with other companies for fraud protection.
  • We may share aggregated information about our users without restriction. This information does not personally identify you.

Disclosures of Personal Information for a Business Purpose:

  • To service providers that help us with operations such as processing payments and shipping.
  • To marketing and advertising partners for tailored campaigns.
  • For analytics and site improvement through third-party service providers.

Right to Know

You have the right to request that we disclose information about our collection and use of your Personal Information over the past 12 months, including:

  • Categories of Personal Information we collected;
  • Categories of sources for the Personal Information we collected;
  • Our business purpose for collecting Personal Information;
  • The categories of third parties with whom we share that Personal Information; and
  • The specific Personal Information we collected about you.

In order to provide specific pieces of information, we may require a signed declaration under penalty of perjury that you are the consumer whose Personal Information is the subject of the request.

Right to Delete

You have the right to request that we delete any of your Personal Information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your Personal Information from our records, unless an exception applies.

We may deny a deletion request where retaining the information is necessary for us or our service providers. For example, data may need to be kept to:

  • Complete a sales transaction for which we collected the Personal Information (such as the sale of products to you);
  • Track consumer complaints or product issues;
  • Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity;
  • Debug products to identify and repair errors that impair existing intended functionality;
  • Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law;
  • Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.);
  • Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement, if you previously provided informed consent;
  • Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us;
  • Comply with a legal obligation; and
  • Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

Right to Correct Inaccurate Information

You have the right to request that we correct inaccurate information we hold about you. If you would like to exercise your Right to Correct, please submit your request by emailing hello@shepherdof23.com.

Right to Limit the Use and Disclosure of Sensitive Personal Information

We do not use or disclose sensitive personal information other than to provide you with our services as permitted by California law. Shepherd of 23 does not sell or share sensitive personal information for the purpose of cross-context behavioral advertising.

We collect sensitive personal information based on one or more of the following legal grounds:

  • You have given explicit consent to the collection for one or more specified purposes;
  • Where the collection of sensitive personal information is manifestly made public by you; and/or
  • Where the collection is necessary for the exercise or defense of legal claims.

If you would like to exercise your Right to Limit the Use and Disclosure of Sensitive Personal Information, please submit your request by emailing hello@shepherdof23.com.

Do Not Sell or Share

Right to Opt-Out of Sharing

California consumers have the right to opt out of the sharing of their Personal Information or Sensitive Personal Information to a third party for cross-context behavioral advertising (i.e., targeted advertising), whether or not for monetary or other valuable consideration.

Right to Opt-Out of Sale

California consumers have the right to opt out of the sale of their Personal Information or Sensitive Personal Information.

Making Requests to “Opt-Out” of the “Sale” or “Sharing” of “Personal Information”

If you are a California consumer and would like to submit a request to opt out of the sale or sharing of your personal information, you may click on the link “Do Not Sell or Share My Personal Information” in the footer of our site or choose to enable online, where available, a universal tool that automatically communicates your opt-out preferences, such as the Global Privacy Control (“GPC”). We will process the GPC signal as a request to opt out.

Other Important Information for Do Not Sell or Share

Shepherd of 23 engages in online advertising practices (and certain analytics or similar activities), which may be considered a “sale” or “share” for cross-context behavioral advertising under the CCPA and CPRA. To disable sharing through cookies set by third parties that may be considered "sales" or “sharing” under the CCPA and CPRA, click on “Manage Cookie Preferences” in the footer of the website.

In addition, the Digital Advertising Alliance offers tools for California consumers to send requests under the CCPA and CPRA to opt out of the sale of personal information by some or all of the participating companies: https://www.privacyrights.info/

Non-Discrimination

We will not discriminate against you for exercising any of your CCPA and CPRA rights. Unless permitted by the CCPA and CPRA, we will not:

  • Deny you goods or services.
  • Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
  • Provide you a different level or quality of goods or services.
  • Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

Notice of Financial Incentive

Under California regulations, certain programs we offer that provide benefits to consumers may be considered financial incentive programs. We may collect personal information from you in connection with these programs, such as contact information (name, email address, residential address) and certain commercial information for various reasons, including administering the program, contacting you regarding your account (if any), providing the benefits to you, serving you better, and fulfilling your requests associated with the program.

To opt-in to these programs, you may need to provide certain information, register for an account, agree to the applicable program terms, or follow the instructions associated with the program. Please also refer to the terms of the program you are joining for further details. Participation in our programs is voluntary, and you can withdraw at any time.

To the extent that we provide a program that may be considered a financial incentive because it is directly or reasonably related to the collection, deletion, or sale or retention of consumer personal information, the value is reasonably related to the overall value we receive from the personal information participants provide specific to the program, minus the costs and expenses we incur in providing the program.

Other California Privacy Rights

California's "Shine the Light" law (Civil Code Section § 1798.83) permits users of our Site that are California residents to request certain information regarding our disclosure of Personal Information to third parties for their direct marketing purposes. To make such a request, please send an email to hello@shepherdof23.com.

Notice To Nevada Residents

Pursuant to Nevada law, you have the right to opt-out of the sale of certain covered Personal Information we have collected about you through our Site. Please note that Shepherd of 23 does not sell your covered information as those terms are defined under applicable Nevada law. However, you may still submit an opt-out request and we will honor that request as required by Nevada law if we were to engage in such a sale in the future. If you are a Nevada resident and would like to opt-out of future sales of your information, please email hello@shepherdof23.com.

Notice to Virginia Residents

We set forth above in our Privacy Policy the categories of Personal Information we process, the purpose for processing personal data, the categories of Personal Information shared, and the categories of third parties with whom Personal Information is shared.

If you are a Virginia Consumer and would like to exercise your rights pursuant to the Virginia Consumer Data Protection Act (VCDPA), and any implementing regulations adopted thereunder, please email hello@shepherdof23.com.

Virginia Consumers have the following rights, all subject to the meanings and exceptions set forth in the VCDPA:

  • To confirm whether we are processing your Personal Data and request to access such data ("Right to Access").
  • That we correct inaccurate Personal Data we hold about you (“Right to Correct”).
  • That we delete the Personal Data provided by you or obtained about you ("Right to Delete").
  • To obtain a copy of the Personal Data previously provided by you to us and, to the extent feasible, in a readily usable format to allow data portability (“Right to Obtain”).
  • To opt-out out of:
    • The processing of your Personal Data for the purposes of targeted advertising (“Right to Opt-Out of Targeted Advertising”). Shepherd of 23 engages in online advertising practices (and certain analytics or similar activities) that may be considered “targeted advertising” under the VCDPA. To disable sharing through cookies set by third parties that may be considered targeted advertising under the VCDPA, please visit our Cookie Policy. You may click on the link “Do Not Sell or Share My Personal Information” on the footer of our Site or you may choose to enable online, where available, a universal tool that automatically communicates your opt-out preferences, such as the Global Privacy Control (“GPC”). We will process the GPC signal as a request to opt out.
    • The processing of your personal data for the purposes of a sale (“Right to Opt-Out of Sale”). Shepherd of 23 does not sell Personal Data to third parties for monetary compensation.
    • The processing of your personal data for the purposes of profiling (“Right to Opt-Out of Profiling”). Shepherd of 23 does not engage in profiling in furtherance of decisions that produce legal or similarly significant effects concerning a consumer.

VCDPA Appeals

Pursuant to the VCDPA, if, for any reason, you would like to appeal our decision relating to your request, you have the right to submit an appeal and can do so by emailing hello@shepherdof23.com. Please include your full name, the basis for your appeal, and any additional information to consider.

Contact Us

If you have any questions about this Privacy Policy, the practices of this Site, or your dealings with this Site, please contact us at: