Sustory Privacy Policy
Section 1 — What do we do with your information?
When you make a purchase from Sustory, we collect the personal information necessary to process your order — including your name, shipping address, and email address. When you browse sustory.com, we also receive your device's IP address, which helps us understand how our site is being used and how to improve your experience. With your permission, we may also send you emails about new products, editorial content, and updates from Sustory.
Section 2 — Consent
How do we obtain your consent?
When you provide personal information to complete a transaction — such as placing an order, verifying payment, or arranging a return — we understand that you consent to its collection and use for that specific purpose. If we wish to use your information for a secondary purpose, such as marketing, we will request your explicit consent or give you a clear option to decline.
How do I withdraw my consent?
You may withdraw your consent at any time by contacting us at service@sustory.com. Upon request, we will stop contacting you and cease any further collection or use of your information.
Section 3 — Disclosure
We will only disclose your personal information if required to do so by applicable law, or if you violate our Terms of Service. We do not sell your personal information to third parties.
Section 4 — Payment Security
If you use a direct payment gateway, your credit card data is encrypted using Payment Card Industry Data Security Standard (PCI-DSS) protocols. Transaction data is retained only as long as necessary to complete your purchase and is deleted thereafter. All payment providers we work with comply with PCI-DSS standards as managed by the PCI Security Standards Council.
Section 5 — Third-party services
Third-party service providers we work with — including payment processors, shipping partners, and analytics tools — will only collect, use, and disclose your information to the extent necessary to perform their services. These providers have their own privacy policies, which we encourage you to review.
Some providers may be located in jurisdictions outside the United States. If your transaction is processed by a provider in another country, your information may be subject to the laws of that jurisdiction.
Once you leave sustory.com or are redirected to a third-party site, this Privacy Policy no longer applies. We are not responsible for the privacy practices of external websites.
Section 6 — Cookies & Tracking Technologies
We use cookies and similar technologies — including pixels and local storage — to operate our website, remember your preferences, analyze traffic, and deliver relevant advertising. You may disable cookies through your browser settings at any time; however, some features of sustory.com may not function as intended if you do so.
If you interact with ads on platforms such as Meta or Google that link to sustory.com, those platforms may also collect data according to their own privacy policies.
Section 7 — Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy. Order-related information is typically retained for up to 3 years for legal and accounting purposes. If you request deletion of your data, we will process your request within 30 days, subject to any legal obligations that require us to retain certain records.
Section 8 — Security
We take the protection of your personal information seriously. We use industry-standard practices — including SSL encryption and AES-256 storage — to prevent unauthorized access, misuse, or loss of your data. While no method of internet transmission is entirely risk-free, we comply fully with PCI-DSS requirements and continuously follow accepted security standards.
Section 9 — Age of consent
By using sustory.com, you confirm that you are at least 18 years of age, or the age of majority in your state of residence. Sustory is intended for adults only. If you have questions about age-related access, please contact us before using the site.
Section 10 — Changes to this policy
We may update this Privacy Policy from time to time. Any changes will take effect immediately upon posting to sustory.com. If material changes are made, we will notify you on this page so you remain informed about how your information is collected, used, and protected. In the event that Sustory is acquired or merged with another company, your information may be transferred to the new owners in order to continue serving you.
Questions & contact
If you would like to access, correct, amend, or delete any personal information we hold about you, or if you have any privacy-related questions or concerns, please contact our Privacy Compliance Officer:
service@sustory.com
sustory.com