Privacy Policy

Privacy Policy

Last updated: April 30, 2026

Yardlow & Sons makes men's heritage chelsea boots and welted derbies. We sell direct from the bench. This is what we collect, why we collect it, and what you can do about it.

Who we are

Yardlow & Sons Co. operates yardlowandsons.com. We are a small US-based men's footwear business. Questions about your data go to support@yardlowandsons.com. A real person answers.

What we collect

To send a pair of boots to your door we need your name, your shipping address, your billing address, an email so we can confirm the order and send tracking, and the payment information that lets the card settle. Your full card number does not sit on our servers. It lives with our payment processor.

If you visit the site without buying, our store software logs standard browsing data. The pages you looked at, the time you spent, the device, the browser, the rough geographic area your IP suggests. That is how we learn which last is selling, which last is dragging, and where the catalog needs better photography.

If you sign up for the newsletter or check the marketing box at checkout, we save your email address. You leave the list with the unsubscribe link in any email we send.

How we use it

Four uses. Fulfilling the order. Settling the transaction. Answering support emails. Sending marketing emails to people who opted in. That is the list.

We do not sell your data. We do not rent it. We do not trade it.

Who we share with

The site runs on Shopify. Payments go through Shopify Payments and Stripe, both PCI-DSS certified. Email marketing runs on Klaviyo. Site analytics use Google Analytics. If you arrived from an advertisement, Meta Pixel may have logged the visit.

Each vendor receives only the data needed to do its job. Shopify gets order data. Stripe gets payment data. Klaviyo gets your email if you subscribed. Google and Meta get pseudonymous browsing data, which you can switch off in our cookie banner.

Cookies

The site uses three categories of cookies. Functional cookies remember your cart and keep you signed in. The site does not work without them. Analytics cookies show us how the catalog is browsed in aggregate. Marketing cookies measure ads and let us re-show you a boot you looked at. The banner lets you accept or reject the analytics and marketing categories. Functional cookies stay on.

Your rights

If you live in the European Economic Area or the United Kingdom, GDPR gives you the right to see what we hold, correct mistakes, ask for deletion, take it with you in a portable format, and object to certain processing. If you live in California, CCPA gives you the right to know what we collect, request deletion, opt out of any sale of personal information (we do not sell, but the right exists), and not be discriminated against for asking. To exercise any of these rights, write to support@yardlowandsons.com. We respond within 30 days.

Children

Yardlow & Sons is a men's footwear brand. The site is not intended for anyone under 13. We do not knowingly collect data from children. If a parent thinks a child has submitted information, write to support@yardlowandsons.com and we will remove it. This follows the US Children's Online Privacy Protection Act (COPPA).

Data retention

Order records stay on file for seven years for US tax purposes. Marketing email addresses stay on the list until you unsubscribe. Browsing data follows the retention windows of the analytics tools that collect it, typically 14 to 26 months.

Security

The site runs on Shopify's PCI-DSS Level 1 infrastructure. Data in transit is encrypted by TLS. Card data does not touch our own servers. Strong passwords and two-factor authentication on every administrative account. No system is unbreakable. We treat your data the way we treat the boots: carefully, without shortcuts.

Contact us about privacy

Questions, requests, or complaints about your data: support@yardlowandsons.com. Monday to Friday, 8 AM to 5 PM ET. Usually answered within one business day.

Changes to this policy

If we update the policy in any meaningful way, subscribers get an email and a banner goes up on the site for a reasonable window before changes take effect. The date at the top tells you when the current version went live.