Privacy policy

Last updated: August 2026

This Privacy Policy explains how Sherman & Son collects, uses, shares, and protects personal information when you visit our website, make a purchase, contact us, or otherwise use our services.

This policy applies to visitors and customers in the United States, United Kingdom, Ireland, Australia, New Zealand, and Canada. Where applicable local law provides additional or stronger privacy rights, those rights will apply.

Who We Are

Sherman & Son is an online store owned and operated by Captivo Commerce LLC.

Captivo Commerce LLC is responsible for the personal information collected through this website and acts as the data controller or responsible organization where applicable under relevant privacy laws.

We process personal information in accordance with applicable privacy and data protection laws, including:

United States — applicable state privacy laws, including the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA)
United Kingdom — UK GDPR and the Data Protection Act 2018
Ireland — EU GDPR and the Data Protection Act 2018
Australia — Privacy Act 1988 and the Australian Privacy Principles
New Zealand — Privacy Act 2020 and the Information Privacy Principles
Canada — PIPEDA and applicable provincial privacy laws, including Quebec's Act respecting the protection of personal information in the private sector

For questions or requests concerning your personal information, contact us at info@shermanandson.com.

Personal Information We Collect

Depending on how you interact with our website and services, we may collect:

Identification and contact information, including your name, shipping address, billing address, email address, and phone number
Order and transaction information
Payment-related information necessary to process and manage transactions
Technical information, including IP address, browser type, device information, and browser or device settings
Size, width, style, and other preferences that you voluntarily provide
Preferences and choices made while using the website
Browsing and interaction information collected through cookies and similar technologies
Communications with our customer service team, including emails, return or exchange requests, and photographs or other information you voluntarily submit in connection with a return, claim, or inquiry

We do not directly store full payment card numbers. Payment information is handled by payment service providers used to process transactions.

We may collect personal information directly from you, automatically through your use of our website, and from service providers involved in payments, fraud prevention, order processing, and related services.

Where required by law, we limit the collection of personal information to what is reasonably necessary for the purposes described in this policy.

How and Why We Use Personal Information

We may use personal information to:

Process, manage, and fulfill orders
Process returns, exchanges, and refunds
Respond to customer service requests and inquiries
Provide sizing or fit assistance when requested
Send information concerning purchases, orders, or customer accounts
Send marketing communications where permitted by law or where you have provided consent
Verify orders and prevent, detect, and investigate fraud, payment abuse, unauthorized transactions, and misuse of our services
Manage payment disputes and chargebacks
Establish, exercise, or defend legal claims
Meet tax, accounting, regulatory, and other legal obligations
Maintain and improve the security, performance, functionality, and operation of our website and services
Analyze website usage and marketing performance where permitted by applicable law

UK and Ireland

Where the UK GDPR or EU GDPR applies, we rely on the following legal bases where appropriate:

Purpose	Legal Basis
Processing and fulfilling orders	Performance of a contract
Returns and exchanges	Performance of a contract
Customer service and order communications	Performance of a contract
Fraud prevention and order verification	Legitimate interests
Marketing communications where consent is required	Consent
Non-essential cookies and tracking where consent is required	Consent
Site security and certain operational improvements	Legitimate interests
Tax, accounting, and legal record-keeping	Legal obligation
Establishing or defending legal claims and chargebacks	Legitimate interests and, where applicable, establishment or defense of legal claims

Where we rely on legitimate interests, we consider our interests together with the potential impact on your rights and freedoms.

You may object to certain processing based on legitimate interests as described under Your Rights.

Fraud Prevention and Order Verification

To protect our customers and our business, orders may be screened using fraud-prevention and risk-analysis tools provided by Shopify, payment providers, or other service providers.

Fraud screening may consider information such as IP address, device information, billing and shipping information, transaction information, order history, and other risk signals associated with a transaction.

If an order is flagged for review, we may contact you and request additional information reasonably necessary to verify the order.

If we are unable to verify an order or reasonably believe that a transaction is fraudulent or unauthorized, we may cancel the order and refund the payment to the original payment method.

Where applicable law provides rights relating to automated decision-making, you may contact us at info@shermanandson.com to request information or exercise applicable rights.

We retain relevant order, transaction, communication, and fraud-prevention records only for as long as reasonably necessary for the purposes described in this policy and to comply with applicable legal requirements.

E-Commerce Platform and Payments

Our store operates using Shopify, which provides e-commerce infrastructure, hosting, checkout, and order-management services.

Payments are processed through payment service providers. Payment-related and transaction information may be processed by Shopify and applicable payment providers as necessary to complete transactions, prevent fraud, process refunds, and manage payment disputes.

For additional information about Shopify's processing practices, you may review Shopify's applicable privacy documentation.

Sharing Personal Information

We may share personal information with service providers and other parties where reasonably necessary to operate our business, provide our services, fulfill orders, comply with legal requirements, and protect our rights.

These may include:

Recipient	Purpose	Information That May Be Shared
Shopify	E-commerce platform, hosting, checkout, and order management	Contact, order, transaction, and technical information
Payment providers	Payment processing and fraud prevention	Billing, payment-related, and transaction information
Email and messaging providers	Order notifications, customer communications, and marketing where permitted	Name, email address, phone number, and relevant order information
Analytics and advertising providers	Analytics, advertising measurement, and marketing where permitted	Technical information, browsing information, and online identifiers
Shipping and fulfillment providers	Shipping, delivery, returns, and fulfillment	Name, delivery address, phone number, and order information
Customs and logistics providers	Customs clearance and international delivery where applicable	Name, address, order information, and declared order value

We may also disclose information where required by law, regulation, court order, lawful government request, or where reasonably necessary to protect our rights, customers, or business.

We do not sell personal information for monetary compensation.

Certain advertising or analytics activities may be considered a "sale," "sharing," or use for targeted advertising under some US state privacy laws. Where applicable, you may exercise your right to opt out through available privacy or cookie controls on our website or by contacting info@shermanandson.com.

International Transfers

Captivo Commerce LLC is established in the United States. Some of our service providers may also process information in the United States or other countries outside your country of residence.

Where required by applicable law, we use appropriate safeguards or other lawful mechanisms for international transfers of personal information.

For individuals in the United Kingdom or European Economic Area, these safeguards may include applicable adequacy decisions, approved contractual safeguards such as Standard Contractual Clauses, the UK International Data Transfer Addendum or other lawful transfer mechanisms, where appropriate.

For Australia, New Zealand, and Canada, we handle overseas disclosures and processing in accordance with applicable privacy requirements.

Personal information processed in another country may be subject to the laws of that jurisdiction and may, where legally permitted, be accessible to courts, government agencies, or law-enforcement authorities.

Marketing Communications

We may send marketing communications where permitted by applicable law and, where required, after obtaining your consent.

Marketing communications provide a way to unsubscribe or otherwise change your marketing preferences.

Depending on your location, additional requirements may apply, including:

Canada — applicable requirements under Canada's Anti-Spam Legislation (CASL)
United Kingdom and Ireland — applicable electronic marketing and privacy requirements
Australia — Spam Act 2003
New Zealand — Unsolicited Electronic Messages Act 2007

Withdrawing consent from marketing does not affect transactional or service communications that are necessary to process or manage your orders.

Cookies and Similar Technologies

We use cookies and similar technologies to operate our website, maintain essential functionality, improve performance, prevent fraud, understand website usage, and support advertising and marketing activities where permitted.

Cookies may include:

Category	Purpose
Strictly Necessary	Cart, checkout, security, authentication, and essential site functionality
Functional	Preferences such as language, currency, region, or other site settings
Analytics	Understanding website traffic, interactions, and performance
Advertising	Advertising measurement, campaign attribution, audiences, and remarketing where permitted

Strictly necessary technologies may operate where required for the website and services to function.

Where applicable law requires consent before non-essential cookies or similar technologies are used, we obtain that consent through our available privacy or cookie controls.

You may change available cookie and privacy preferences through the controls provided on our website. Browser settings may also allow you to block or delete certain cookies, although doing so may affect website functionality.

The specific cookies and technologies used on our website may change as our services and service providers change.

Advertising and Analytics

We may use analytics and advertising services, including services provided by Google, Meta, Shopify, and other providers, to understand website usage, measure advertising performance, and support advertising activities.

Depending on your consent choices and applicable law, these providers may receive online identifiers, technical information, browsing activity, and information about interactions with our website.

Where consent is legally required, non-essential advertising and analytics technologies are activated in accordance with the consent choices available through our website.

You may change available privacy and cookie preferences at any time through the controls provided on our website.

Your Privacy Rights

Depending on where you live and the law that applies to you, you may have rights concerning your personal information.

These rights may include the right to:

Request access to personal information we hold about you
Request correction of inaccurate information
Request deletion of certain information
Request restriction of certain processing
Receive certain information in a portable format
Object to certain processing
Withdraw consent where processing is based on consent
Opt out of certain targeted advertising, sale, or sharing activities where applicable
Exercise rights relating to certain automated decision-making where applicable
Lodge a complaint with an applicable privacy regulator

Not every right applies in every jurisdiction or circumstance.

To submit a privacy request, contact info@shermanandson.com.

We may need to verify your identity before completing certain requests. We will only request information reasonably necessary for verification.

We respond to verified privacy requests within the timeframe required by applicable law.

We will not unlawfully discriminate against you for exercising an applicable privacy right.

Certain information may be retained despite a deletion request where retention is necessary to complete a transaction, comply with legal obligations, prevent fraud, maintain required business records, resolve disputes, or establish or defend legal claims.

Complaints

If you have concerns about how we handle your personal information, please contact us at info@shermanandson.com.

Depending on your location, you may also have the right to contact the relevant privacy or data protection authority, including:

United Kingdom — Information Commissioner's Office
Ireland — Data Protection Commission
Australia — Office of the Australian Information Commissioner
New Zealand — Office of the Privacy Commissioner
Canada — Office of the Privacy Commissioner of Canada and, where applicable, a provincial privacy authority
Quebec — Commission d'accès à l'information du Québec
United States — the applicable state authority where relevant

Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, misuse, or loss.

Our e-commerce and payment service providers also maintain security measures applicable to their services.

No internet transmission or electronic storage system can be guaranteed to be completely secure.

Where a personal data breach occurs, we will provide notifications to affected individuals and applicable authorities where and within the timeframe required by applicable law.

Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including processing transactions, providing customer service, maintaining business and financial records, preventing fraud, resolving disputes, defending legal claims, and complying with legal obligations.

Different categories of information may have different retention periods.

Order, transaction, accounting, and related business records may be retained for the period required under applicable tax, accounting, consumer protection, and other laws, as well as for an appropriate period in connection with potential disputes, chargebacks, or legal claims.

Marketing preference and consent records may be retained for an appropriate period to administer your preferences and demonstrate compliance with applicable requirements.

When personal information is no longer reasonably necessary, we may delete, anonymize, or otherwise dispose of it in accordance with applicable requirements.

Children's Privacy

Our website and products are intended for adults.

We do not knowingly collect personal information from children in circumstances where doing so would violate applicable law.

If you believe that a child has provided personal information to us improperly, contact info@shermanandson.com so that we can review the matter and take appropriate action.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, business practices, technologies, or legal requirements.

The current version will be published on this page together with its updated revision date.

Where required by applicable law, we will provide additional notice of material changes.

External Websites

Our website may contain links to third-party websites or services.

When you leave our website or interact with a third-party service, that party's privacy practices may apply. We encourage you to review the privacy policies of third-party websites and services you use.