This Privacy Policy ("Policy") describes the privacy practices of STM Bags, LLC and Standard Technical Merchandise Pty Ltd (collectively “STM Goods” and/or “STM Brands”), as applicable (collectively, "STM," "we," "us," or "our"). It explains the types of information we collect, the sources from which we collect it, how we use and disclose it, and the privacy choices and rights that may be available to you.
This Policy applies when you visit or interact with our websites and online store, purchase or consider our products, create or use an account, communicate with customer service, participate in promotions or events, submit a form or review, receive marketing communications, or otherwise interact with STM. This Policy does not govern the independent privacy practices of third-party websites, platforms, or services that you may access through links or integrations on our website.
We may update this Policy from time to time. When we do, we will post the revised Policy with an updated effective date. Where required by law, we will provide additional notice or obtain consent.
If you are asked to select "I accept," "I agree," or similar functionality relating to privacy, your selection will constitute consent only to the extent consent is required under applicable law.
A. Types of Information We Collect
1. Information You Provide to Us
We collect information that you voluntarily provide to us through our website and online store, customer service interactions, account registration, purchases, forms, reviews, events, promotions, contests or sweepstakes, marketing communications, and other interactions with STM.
Depending on how you interact with us, this information may include:
- Identifiers and contact information, such as your name, email address, telephone number, billing address, shipping address, account name, and other similar identifiers.
- Order and commercial information, such as products purchased, obtained, considered, returned, or reviewed; order history; product interests; and other purchasing or consuming histories or tendencies.
- Payment and billing information necessary to complete a transaction. Payment information is processed by Shopify and, depending on the payment method you select, may also be processed by PayPal or another payment service provider.
- Account information, including credentials and information associated with an STM customer account.
- Communications and content you provide, such as customer-service inquiries, contact-form submissions, product reviews, testimonials, survey responses, contest or promotion entries, and other communications.
- Eligibility information you choose to provide in connection with discounts or offers administered through VerifyPass.
- Information about another person that you provide to us, for example when you ask us to ship an order or gift to that person.
- Marketing preferences and information you provide when you subscribe to email or SMS communications.
2. Information We Receive From Third Parties
We may receive information about you from service providers, vendors, platforms, and other third parties that collect or process information on our behalf or in connection with our products and services. For example, Shopify supports our online store and may collect and provide customer, account, transaction, and website-interaction information to us. Our marketing, analytics, review, form, payment, inventory, and advertising providers may also provide information to us consistent with the services they perform.
This Policy governs STM's use of information we receive from third parties. A third party's own collection and processing of information is also governed by that third party's privacy policy.
3. Information Collected Automatically
When you visit or interact with our website or online store, we and our service providers may automatically collect information using cookies, pixels, tags, software development kits, server logs, and similar technologies. Depending on the technology and your interaction with us, this information may include:
- Internet Protocol (IP) address and other online identifiers;
- browser type, device type, operating system, device identifiers, and technical settings;
- referring and exit pages or URLs;
- pages, products, and content viewed; searches; clicks; and other website interactions;
- dates, times, and duration of visits or interactions;
- cart, checkout, purchase, and conversion activity;
- approximate location derived from IP address; and
- information used to measure advertising performance, personalize content, understand audiences, prevent fraud, and improve our website and services.
Some automatically collected information may constitute "personal information," "personal data," or similar terms under applicable privacy laws even when it does not directly identify you by name.
B. How We Use The Information
We may use personal information for the following business and commercial purposes:
- Operate, maintain, secure, troubleshoot, and improve our website, online store, products, and services.
- Process, fulfill, ship, and administer orders, returns, refunds, preorders, and product-availability notifications.
- Create and administer customer accounts.
- Process payments and prevent fraudulent or unauthorized transactions.
- Provide customer service and respond to inquiries, comments, complaints, and requests.
- Send transactional communications, including order, shipping, account, preorder, and availability notices.
- Send marketing and promotional communications by email or SMS where permitted by law.
- Personalize content, offers, product recommendations, and advertising.
- Measure website usage, understand customer interests and shopping behavior, perform analytics, and evaluate marketing and advertising performance.
- Administer reviews, forms, promotions, discounts, contests, sweepstakes, and eligibility-verification programs.
- Synchronize inventory, orders, customer information, and business records with our enterprise and operational systems.
- Protect STM, our customers, and others; detect security incidents; prevent fraud; and enforce our terms and policies.
- Comply with legal obligations, respond to lawful requests, establish or defend legal claims, maintain records, and conduct other internal business operations.
- Facilitate a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or other corporate transaction.
c. How We Disclose The Information
We may disclose personal information to service providers, contractors, and other third parties that support our business or provide functionality requested by you. Depending on the circumstances, these recipients may include:
- e-commerce, hosting, checkout, and payment providers;
- order processing, inventory, fulfillment, shipping, and enterprise-resource-planning providers;
- analytics and website-performance providers;
- email, SMS, customer-communication, preorder, and notification providers;
- advertising, marketing, social-media, search, and product-feed providers;
- review, form, eligibility-verification, and customer-engagement providers;
- fraud prevention, security, and technical-service providers;
- professional advisers, auditors, insurers, and other business advisers;
- government authorities, courts, regulators, law-enforcement agencies, or other persons when disclosure is required or permitted by law; and
- a buyer, successor, or other relevant party in connection with an actual or proposed corporate transaction.
We may also disclose information at your direction or with your consent.
Some disclosures involving advertising, analytics, or cross-context behavioral advertising may be considered a "sale," "sharing," or "targeted advertising" under certain state privacy laws even though STM does not sell consumer lists for money. See the state-specific sections below for applicable rights and opt-out methods.
D. Retention of Personal Information
We retain personal information only for as long as reasonably necessary and proportionate to accomplish the purposes for which it was collected or processed, including to provide products and services, maintain customer and transaction records, administer accounts, comply with legal, tax, accounting, warranty, and recordkeeping obligations, resolve disputes, prevent fraud, enforce agreements, and establish or defend legal claims.
Retention periods vary by category of information and are determined based on the nature and sensitivity of the information, the purposes for which it is used, the length of our relationship with you, legal and contractual requirements, and operational needs. When personal information is no longer reasonably necessary for these purposes, we may delete, deidentify, or aggregate it, subject to applicable law.
E. Marketing Communications
You may opt out of promotional email communications by using the unsubscribe link in the message. You may opt out of SMS marketing by following the instructions provided in the applicable message or messaging service. Opting out of marketing does not prevent STM from sending non-promotional communications that are necessary to complete a transaction, administer an account, provide requested services, or address security or legal matters.
Please allow a reasonable period for us to process an opt-out request. Marketing content already queued for transmission may be delivered before an opt-out is fully implemented.
F. Product Reviews and Testimonials
We may display product reviews, testimonials, or other content submitted by customers. Depending on the review functionality you use, information associated with a review may be processed by Judge.me and Shopify. Please avoid including information in a public review that you do not want displayed publicly. If you would like to request an update or deletion of content you submitted, contact us using the information below.
G. Minors
Our website and products are intended for a general audience and are not directed to minors. We do not knowingly collect personal information from minors under 13 through the website. If you believe a child under 13 has provided personal information to us, please contact us so that we can review and, where appropriate, delete the information. We do not knowingly sell or share the personal information of consumers under 16 without the affirmative authorization required by applicable law.
H. Security
We use administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. No method of transmission over the Internet or method of electronic storage is completely secure, however, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of passwords and account credentials and for notifying us if you suspect unauthorized use of your account.
I. Links and Third-Party Services
Our website may contain links to, embedded content from, or integrations with websites, platforms, and services operated by third parties. This Policy does not describe the independent privacy practices of those third parties. We encourage you to review the privacy policies of third-party services you use.
J. Your Privacy Choices
Depending on where you live and the law that applies, you may have rights concerning your personal information, including rights to access or know, correct, delete, obtain a portable copy of, or opt out of certain processing of your information. You may also have the right to withdraw consent or appeal a decision concerning a privacy request.
To submit a privacy request, contact us using the information in the "Contact Us" section below. We may take reasonable steps to verify your identity before processing a request. Authorized agents may submit requests where permitted by law, subject to appropriate verification.
You may also manage certain cookies or tracking technologies through any privacy-choice or cookie-management tool made available on our website. Where required by applicable law, we recognize qualifying universal opt-out preference signals, such as Global Privacy Control, as a request to opt out of sale or sharing/targeted advertising for the browser or device sending the signal.
K. Notice To California Residents
This section supplements the remainder of this Policy and applies to California residents to the extent STM is subject to the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the "CCPA"). It is intended to provide the disclosures required by the CCPA, including information relevant to STM's notice at collection. Terms defined in the CCPA have the same meanings when used in this section.
1. Categories of Personal Information
| Category | Examples STM May Collect | Sources | Purposes | Categories of Recipients | Retention Criteria |
|---|---|---|---|---|---|
| Identifiers | Name, alias, postal address, email address, telephone number, account name, IP address, online identifiers, and similar identifiers. | Directly from you; automatically from your device/browser; Shopify and other service providers. | Orders and fulfillment; accounts; customer service; marketing; analytics; security; legal compliance. |
|
As long as needed for the relevant transaction, account, customer relationship, marketing preference, security, legal, and recordkeeping purposes described in this Policy. |
| California Customer Records information (Cal. Civ. Code § 1798.80(e)) | Name, address, telephone number, payment and financial information, and other information included within the statutory category that STM actually receives. | Directly from you; payment/e-commerce providers. | Transactions, billing, fulfillment, customer service, fraud prevention, recordkeeping. |
|
As long as needed to process transactions and meet tax, accounting, fraud-prevention, warranty, chargeback, legal, and recordkeeping obligations. |
| Commercial information | Products purchased, obtained, considered, reviewed, returned, or preordered; purchasing and consuming history or tendencies. | Directly from you; Shopify; Judge.me; marketing and operational providers. | Fulfill orders; customer service; analytics; personalization; marketing; reviews; business operations. |
|
As long as needed for transactions, customer service, warranty/returns, analytics, legal compliance, and legitimate business records. |
| Internet or other electronic network activity | Browsing and search history on our site; interactions with pages, products, emails, advertisements, carts, and checkout; device and log data. | Automatically from your device/browser; Shopify; Google; Klaviyo; other analytics/advertising providers. | Website operation; analytics; security; personalization; advertising and marketing measurement. |
|
For periods reasonably necessary for website operation, analytics, security, advertising measurement, and legal compliance, subject to cookie settings and provider retention configurations. |
| Geolocation data | Approximate location derived from IP address or device/network information. | Automatically from your device/browser and service providers. | Security, analytics, regional content, advertising, and fraud prevention. |
|
For periods reasonably necessary for security, fraud prevention, analytics, regional functionality, advertising, and legal compliance. |
| Inferences | Preferences, interests, or audience segments inferred from purchases or website interactions. | Derived from commercial and internet/network activity; advertising and analytics providers. | Personalization, audience analysis, marketing, and advertising. |
|
For as long as the underlying data and resulting audience, personalization, analytics, or advertising purposes remain reasonably necessary and proportionate. |
| Sensitive personal information | Account log-in credentials and payment-card or financial information to the extent treated as sensitive personal information under California law. | Directly from you; Shopify/payment providers. | Account access; transaction processing; security and fraud prevention. |
|
Only as long as reasonably necessary for account access, payment processing, security, fraud prevention, and applicable legal/recordkeeping obligations. |
| Professional or employment-related information | Eligibility or affiliation information submitted through VerifyPass related to discounts based on status criteria. | Directly from you and/or VerifyPass. | Eligibility verification and administration of qualifying discounts or offers. |
|
Only as long as reasonably necessary to verify eligibility, administer the offer, prevent abuse, and meet legal or recordkeeping obligations. |
STM does not necessarily collect every example of information listed within a statutory category. The examples above describe information STM may collect in connection with its current business and website practices.
During the preceding 12 months, STM has disclosed the categories of personal information identified above to service providers and contractors for the business purposes described in the table and in Sections B and C of this Policy, including operating the website and online store; processing and fulfilling transactions; providing customer service and communications; maintaining accounts; conducting analytics; marketing and advertising; maintaining security and preventing fraud; synchronizing inventory and business records; and complying with legal obligations.
2. Sale or Sharing of Personal Information
STM is not in the business of selling personal information for monetary consideration. However, our use of certain advertising, analytics, social-media, and marketing technologies may constitute "selling" or "sharing" of personal information under the CCPA because information may be disclosed to third parties for cross-context behavioral advertising or related purposes.
During the preceding 12 months, STM has shared, and certain disclosures may also constitute a sale of, the following categories of personal information, as those terms are defined by the CCPA: identifiers; commercial information; Internet or other electronic network activity information; approximate geolocation data; and inferences. The categories of third parties to which such information has been sold or shared include advertising networks, analytics providers, social-media platforms, and marketing technology providers, including Google, Shopify, TikTok, and similar providers used for advertising, audience measurement, or cross-context behavioral advertising.
STM sells or shares these categories of personal information for purposes that may include measuring and attributing advertising, creating or reaching advertising audiences, personalizing advertising, analyzing website and campaign performance, and cross-context behavioral advertising.
STM does not have actual knowledge that it sells or shares the personal information of consumers under 16 years of age.
3. California Privacy Rights
- Right to know/access the categories and specific pieces of personal information STM has collected about you, subject to applicable limitations.
- Right to delete personal information, subject to statutory exceptions.
- Right to correct inaccurate personal information.
- Right to opt out of the sale or sharing of personal information.
- Right to limit the use and disclosure of sensitive personal information where the CCPA provides such a right. Based on STM's current practices, STM does not use or disclose sensitive personal information for purposes that trigger this limitation right.
- Right to non-discrimination for exercising CCPA rights.
To exercise these rights, use the privacy-choice link provided in our website footer, where applicable, or contact us using the information below. STM will honor qualifying opt-out preference signals, including Global Privacy Control (GPC), as required by California law. A qualifying signal will be treated as a request to opt out of sale/sharing for the browser or device that sends the signal and, where STM can associate the signal with a known consumer account, as required by applicable law. If you use a different browser or device, or clear cookies, you may need to communicate your opt-out preference again for that browser or device. Information about enabling GPC is available at globalprivacycontrol.org.
We may need to verify your identity before completing a request to know, delete, or correct personal information. Depending on the nature and sensitivity of the request, verification may include matching information you provide with information STM already maintains, confirming access to an email address or account, or requesting additional information reasonably necessary to verify the request. We will use information provided for verification only for verification purposes. We may deny or limit a request where permitted by law, including when we cannot reasonably verify the request or an applicable exception applies. An authorized agent may submit a request on your behalf as permitted by the CCPA; STM may require proof of the agent's authority and may ask you to confirm directly that you authorized the agent, unless the agent holds a qualifying power of attorney.
4. Shine the Light
California Civil Code section 1798.83 permits California customers to request certain information regarding disclosures of personal information to third parties for their own direct marketing purposes. To make such a request, contact us using the information below and identify your request as a "Shine the Light" request.
L. Notice To Residents Of Other U.S. States
Residents of states with comprehensive consumer privacy laws may have additional rights to the extent the applicable law applies to STM. These states currently include Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia, among others as laws become effective or are amended.
Depending on your state and applicable law, your rights may include:
- accessing or confirming whether we process your personal data;
- correcting inaccuracies;
- deleting personal data;
- obtaining a portable copy of personal data;
- opting out of targeted advertising, the sale of personal data, or certain profiling or automated decision-making;
- withdrawing consent for certain processing of sensitive data;
- obtaining information about third parties to which personal data has been disclosed where required by law;
- appealing our decision regarding a privacy request; and
- receiving non-discriminatory treatment for exercising privacy rights.
To exercise a right, contact us using the information below or use the privacy-choice mechanism on our website where applicable. We may verify your identity as permitted by law. If we decline a request and your state provides a right to appeal, you may appeal by replying to our decision or contacting us at the same address and stating that you wish to appeal.
STM does not use consumer personal data to make automated decisions that produce legal or similarly significant effects based on the practices presently identified to us. If STM materially changes these practices, this Policy will be updated as required.
M. International Users
STM operates in the United States and Australia and may use service providers located in the United States and other countries. If you access our website or provide information from outside the United States, your information may be transferred to, processed in, or stored in countries whose data-protection laws may differ from those where you live. Where applicable law requires safeguards for international transfers, STM will use appropriate measures.
This Policy does not replace any additional privacy notice that STM may be required to provide under the laws of Australia or another jurisdiction.
N. Cookies and Similar Technolgies
1. Cookies and Similar Technologies
Cookies are small data files that websites place on or access from your browser or device. We and our service providers also use pixels, tags, scripts, server-side technologies, and similar tools. These technologies can be used to operate the website, remember preferences, measure performance, understand how visitors interact with our site, communicate with customers, prevent fraud, and deliver or measure advertising.
We use both first-party and third-party technologies. Some technologies are necessary for the website and online store to function. Others support analytics, communications, reviews, marketing, advertising, or other business functions. Some analytics, advertising, and social-media technologies may involve a "sale," "sharing," or "targeted advertising" under applicable state privacy laws.
2. Website and Service Providers
| Third Party / Service | Description | Privacy Policy |
|---|---|---|
| Shopify (including Shopify Payments, Shop Pay, Sales Channels, Flow, and Checkout Blocks) | Operates STM's online store and checkout and supports account, transaction, payment, sales-channel, automation, and website functionality. | shopify.com/legal/privacy |
| Google & YouTube / Google Analytics / Google Ads / Google Merchant Center / Google Business Profile | Provides analytics, advertising, product-feed, search/business-profile, conversion-measurement, and YouTube functionality. Google Analytics measures interactions with STM's website. | policies.google.com/privacy |
| Analyzely | Supports Google Analytics 4 implementation and analytics for the Shopify store. | https://analyzely.app/terms/ |
| Klaviyo: Email Marketing & SMS | Provides email and SMS marketing, customer profiles, forms, and onsite behavioral tracking that may include site activity, product views, searches, collection views, and cart activity. | https://privacy.klaviyo.com/policies/ |
| TikTok | Supports social-media and advertising functionality and may collect device, browser, interaction, and advertising-event information. | tiktok.com/legal/privacy-policy-us |
| PayPal | Processes payments when PayPal is selected at checkout. | paypal.com/us/legalhub/privacy-full |
| Judge.me Reviews | Provides product-review functionality and may receive customer, order, purchase-verification, review, and usage information. | judge.me/privacy |
| Pify AI Contact Form Builder | Provides website contact-form functionality and processes information consumers submit through STM forms. | https://www.pifyapp.com/pages/pifyapp-privacy-policy |
| VerifyPass | Provides eligibility verification for certain discounts or offers and processes information submitted for verification. | https://verifypass.com/terms |
| REZ Preorder / Notify Me | Provides preorder and product-availability notification functionality and may process contact information and product interests. | https://notify-me.io/privacy-policy |
| Multifeeds | Supports product feeds and advertising/merchant-channel integrations, including the transmission of product and related conversion/feed information. | https://woolytech.com/privacy-policy/ |
| NetSuite Inventory Sync / NetSuite Connector | Synchronizes inventory, orders, customer, and related operational information between Shopify and NetSuite. | oracle.com/legal/privacy |
| Alpha Sale | Provides sale and promotional functionality for the website. | https://bd.alphalogic.io/privacy-policy.html |
| Yoast SEO | Provides search-engine-optimization functionality for STM's Shopify store. | yoast.com/privacy-policy |
| Agentic (Agentic AI) | Provides AI-related functionality associated with STM's Shopify and online commerce operations. | https://agentic.ai/privacy |
STM may change service providers or technologies as its website and business evolve. The current technologies actually deployed on the website, together with any cookie-consent or privacy-choice interface presented to you, may provide additional detail.
3. Managing Cookies and Privacy Preferences
You can manage non-essential cookies and similar technologies through our Cookie and Privacy Preferences tool. The tool allows you to manage cookies and technologies used for Personalization, Marketing, and Analytics purposes. Cookies identified as Required are necessary for the website and online store to function properly and cannot be disabled through the tool. You may select “Accept all,” “Decline all,” or make individual selections and select “Save my choices.” You can return to the Cookie and Privacy Preferences tool at any time to change your selections.
You may also configure your browser to block or delete cookies. Blocking certain technologies may affect website functionality or your shopping experience. Certain Marketing and Analytics technologies may involve the “sale” or “sharing” of personal information or “targeted advertising” as those terms are defined under applicable state privacy laws. California residents and residents of certain other states may have the right to opt out of these activities.
STM honors qualifying universal opt-out preference signals, including Global Privacy Control (GPC), as required by applicable law.
O. Contact Us
If you have questions about this Policy or wish to exercise a privacy right, please contact STM using the applicable information below.
United States
STM Bags, LLC
9150 Chesapeake Dr, Suite 190
San Diego, CA 92123
Postal Address: PO Box 722654, San Diego, CA 92172-2654
Email: customerservice@stmbrands.com
Australia
STM (Standard Technical Merchandise Pty Ltd)
Unit 21, 34-36 Ralph St.
Alexandria, NSW 2015
Postal Address: PO Box 7005, Alexandria, NSW 2015
Email: info@stmbags.com.au
P. Changes To This Policy
Last updated: September 1, 2026.
We may amend this Policy from time to time. We will post changes on this page with an updated effective date and provide any additional notice required by applicable law.
