Effective date: September 8, 2026
1. Who we are and what this policy covers
This policy is issued by Shop Makers US Holdings Inc., a Delaware corporation, and its subsidiary Shop Makers Pike LLC, which operates the Shop Makers store at 106 Pike St, Seattle, WA 98101 (together "Shop Makers", "we", "us").
Shop Makers is a retail store where independent makers rent display space and sell their goods. This policy explains how we collect, use, share, store and protect personal information when you:
shop in a Shop Makers store or buy or receive a Shop Makers gift card;
sell your goods at Shop Makers as a vendor;
apply to become a vendor, join a space waitlist, or apply for a job with us;
visit www.shopmakers.us or our help centre at docs.shopmakers.us, or subscribe to our newsletter;
use MakersPOS, our vendor portal and point-of-sale system at pos.shopmakers.us.
If you work for us, our Employee Privacy Notice explains how we handle your information as an employee. This policy does not cover it.
Our Canadian stores are operated by Shop Makers Marketplace Inc. and Shop Makers Marketplace Vancouver Inc. under a separate privacy policy at www.shopmakers.ca/privacy-policy.
2. Categories of personal information we collect
We collect only what we need for the purposes described in section 4.
Customers
Email address, so we can send your receipt or deliver a gift card. We do not currently offer paper receipts, so we ask for an email at the register.
Purchase history: what you bought, where, when, and for how much, plus any returns or exchanges.
Payment details limited to the card brand and last four digits. We never see or store your full card number.
Gift card details: the card code, balance, and the email address of the recipient if you send a card to someone else.
Your marketing preference: whether you have unsubscribed from marketing email.
Vendors and makers
Business name and your personal first and last name.
Email address, a backup email address, phone number and mailing address.
Tax identification number, such as your EIN.
Your Stripe Connect account identifier, which links your MakersPOS account to the Stripe account you use to receive payouts.
Membership and billing history, including plan, location, fees paid and any refunds.
An image of your handwritten electronic signature and a record of the agreements you accepted, with the date and version.
Product listings, product photos and pricing you enter into MakersPOS.
Sales and payout history.
Vendor applicants and waitlist prospects
Name, email address, business details and your answers to our application questions, collected through our application form (hosted by Paperform) and, for space waitlists, through MakersPOS.
Job applicants
Resume, contact details and anything else you send us through our careers form (hosted by Paperform) or through a LinkedIn posting.
Website visitors and newsletter subscribers
Email address if you subscribe to our newsletter.
Technical information sent by your browser, such as IP address, device type and pages visited, collected through cookies and similar technologies described in section 7.
3. How we collect it
Most of the information we hold comes directly from you: at the register, in MakersPOS, through our forms, or by email.
We also receive information from:
Stripe, our payment processor, which sends us payment confirmations, card brand and last four digits, and payout status. Stripe collects vendor identity documents and bank details directly; we do not receive copies.
Squarespace, Paperform and Zapier, which run our websites, forms and online gift card orders and pass the details you enter to us.
Cookies and pixels on our websites, described in section 7.
In-store cameras, described in section 8.
Where you give us information about another person (for example, a gift card recipient's email), we rely on you to have that person's permission.
4. How we use your information
Purpose Who it applies to Complete a sale, send a receipt, process returns and exchanges Customers Issue, deliver and redeem gift cards Customers and recipients Send marketing email about products, events and promotions, unless you opt out Customers, subscribers, vendors Run your vendor membership: onboarding, billing, payouts, notifications, support Vendors Verify identity and prevent fraud in payouts and payments Vendors Keep records of agreements you accepted Vendors Review your application or hold your place on a waitlist Applicants, prospects Consider you for a job Job applicants Operate, secure and improve our websites and MakersPOS Everyone Meet tax, accounting and legal requirements, including sales tax collection Everyone Respond to legal requests and protect our rights Everyone
We do not sell personal information, and we do not share it with third parties for their own marketing. We do not use automated decision-making that produces legal or similarly significant effects about you.
5. Payments and Stripe
All card payments are processed by Stripe. In store, your card is read by a Stripe Terminal device. Vendor membership fees are collected through Stripe Checkout and Stripe Subscriptions and are charged automatically each month, seven days before your renewal date.
Shop Makers never stores full card numbers. We keep only the card brand and last four digits so you can identify a payment on your receipt or account.
Vendor payouts are sent through Stripe Connect Express. When you set up payouts, Stripe collects your identity documents and bank account details directly. That information is governed by Stripe's privacy policy, available at stripe.com/privacy, not by this policy.
6. Email, receipts and marketing
Transactional email
We send receipts, gift card deliveries, membership notices, payout notices and account alerts by email through Postmark. These messages relate to a transaction or account you have with us.
Marketing email
If you buy from us and give us your email address at the register, subscribe to our newsletter at www.shopmakers.us, or become a vendor, we may send you marketing email about products, events and promotions. If you receive a gift card from someone else, we do not send you marketing email unless you buy from us or subscribe.
As required by the CAN-SPAM Act, every marketing email identifies the sender, includes our physical mailing address, and includes a working unsubscribe link. We honor unsubscribe requests within 10 business days, and usually immediately. You can also opt out by emailing privacy@shopmakers.us. Opting out of marketing does not stop transactional email you need to receive, such as receipts.
Open tracking
Our email service currently records whether an email was opened, using a small image (a "tracking pixel") in the message. This applies to receipts and other transactional email as well as marketing email. We use this information to confirm delivery and troubleshoot problems.
7. Cookies, tracking and Do Not Track
MakersPOS
MakersPOS sets one strictly necessary cookie that keeps you signed in for up to 12 hours, and one cookie that remembers your display preferences. Neither is used for advertising or analytics.
Our websites
www.shopmakers.us is built on Squarespace and sets Squarespace's standard cookies for site function and basic visitor statistics. Squarespace's cookie policy is at squarespace.com/cookie-policy. We do not use Google Analytics, and we do not currently use advertising pixels on www.shopmakers.us.
Do Not Track
Some browsers offer a "Do Not Track" signal. There is no common standard for how websites should respond to it, and our websites and MakersPOS do not currently change their behavior when they receive it. We do not allow third parties to collect personal information about your online activities over time and across different websites when you use our sites, other than as described above for Squarespace.
You can block or delete cookies in your browser settings. Blocking the MakersPOS session cookie will prevent you from signing in.
8. In-store cameras
Our store may use video cameras for safety and loss prevention. Signs at the store entrance tell you when cameras are in use. Footage is kept for 14 days unless it is needed to investigate an incident, and is shared only with law enforcement or insurers where necessary.
9. Third parties we share your information with
We share personal information with service providers who help us run our business. They may use it only to provide services to us.
Provider What they do for us Where they process data Vercel Hosts MakersPOS United States Upstash (Vercel KV) Rate limiting; briefly stores IP addresses United States Neon Hosts our databases on Amazon Web Services United States (Ohio and Oregon) Stripe Card payments, membership billing, vendor payouts, identity verification United States Postmark Sends transactional email United States EmailOctopus Sends vendor marketing email United Kingdom Archbee Hosts our help centres United States and European Union When I Work Staff scheduling (employee data only) United States Google Workspace email and documents, Drive folders, Cloud Storage backups, Google Reviews link on receipts United States Squarespace Websites, forms, newsletter signup, online gift card orders United States Zapier Passes online gift card orders to MakersPOS United States Paperform Vendor application, support and careers forms Australia and United States GitHub Code hosting and backup automation United States LinkedIn Job postings United States
We may also disclose personal information:
to our affiliates, including Shop Makers Marketplace Inc. and Shop Makers Marketplace Vancouver Inc. in Canada, which provides shared administrative and technical services;
to our professional advisers, insurers and auditors;
to law enforcement, regulators or courts where required by law, subpoena or other valid legal process;
to a buyer or successor if we sell or reorganize our business, subject to this policy;
to protect the rights, property or safety of Shop Makers, our vendors, our customers or others.
Vendors can see sales data for their own products, including the date, location and amount of each sale. Vendors do not see customer names or email addresses.
10. Where your information is stored
Our systems are hosted in the United States by the providers listed in section 9, and backed up nightly to Google Cloud Storage in the United States. Because our head office and shared administrative team are in Canada, staff in Canada may access your information to provide support and run our business. Canadian law will apply to that access.
11. How long we keep it
We keep personal information only as long as needed for the purposes in this policy and to meet legal obligations, then delete or anonymize it.
Record Retention period Transaction, receipt and sales tax records 7 years Vendor agreements and signatures 7 years after membership ends Customer records Until you ask us to delete them, or after 3 years of inactivity Marketing consent Until you withdraw it, plus a record that you withdrew Vendor applications and waitlist entries 24 months Job applications 12 months Email delivery logs 24 months Security and access logs 12 months Database backups 30 days rolling Camera footage 14 days
12. How we protect it, and what we do if there is a breach
We use administrative, technical and physical safeguards appropriate to the sensitivity of the information, including encryption in transit and at rest with our hosting providers, passwords stored only as salted hashes, role-based access for staff, rate limiting on sign-in and password reset, contracts with service providers, and payment card data handled entirely by Stripe, a PCI DSS Level 1 provider.
No system is perfectly secure. If a security breach affects your personal information as defined by Washington's data breach notification law, we will notify you without unreasonable delay and within the time the law requires (currently 30 days after discovery), and we will notify the Washington Attorney General where the law requires it. If you live in another state, we will follow that state's notification law.
13. Health information
Shop Makers sells handmade goods, including bath, body and wellness products. We do not intentionally collect "consumer health data" as defined by the Washington My Health My Data Act, and we do not use your purchase history to infer anything about your health. If you believe we hold information about you that identifies your health status, contact privacy@shopmakers.us and we will review and, where required, delete it.
14. Your rights and choices
You can, at any time:
Review and request changes to the personal information we hold about you.
Ask us to delete your information where we are not legally required to keep it.
Opt out of marketing using the unsubscribe link or by contacting us.
Ask questions or complain about our handling of your information.
If you live in a state that grants you additional privacy rights, such as the right to know, correct, delete, or opt out of the sale or sharing of personal information, you may exercise those rights by contacting us using the details in section 17. We do not sell personal information or share it for cross-context behavioral advertising.
To make a request, email privacy@shopmakers.us. We may need to verify your identity first. We aim to respond within 30 days and will tell you if we need more time. We will not discriminate against you for exercising your rights.
If you are not satisfied with our response, you may contact the Federal Trade Commission (ftc.gov) or the Washington State Office of the Attorney General (atg.wa.gov).
15. Children
Our store welcomes families, but our websites, newsletter, MakersPOS and vendor program are not directed at children under 13, and we do not knowingly collect personal information online from children under 13, consistent with the Children's Online Privacy Protection Act. If you believe a child under 13 has given us personal information, contact us and we will delete it.
16. Changes to this policy
We may update this policy from time to time. We will post the new version at www.shopmakers.us/privacy-policy with a new effective date. If a change materially affects how we use information we already hold, we will tell you by email or by a notice in MakersPOS before it takes effect.
17. Contact us
Shop Makers US Holdings Inc. & Shop Makers Pike LLC
106 Pike St, Seattle, WA 98101
Head office: 1208 West Pender Street, 3rd Floor, Vancouver BC V6E 2S8
Email: privacy@shopmakers.us