Privacy policy

Privacy Policy

Last updated: 03rd of September 2026. Prior policy can be read here

Three Trading Group Incorporated, doing business as 3HLinen ("we," "us," "our"), manufactures and sells linen textiles through our online store at 3hlinen.com. This Privacy Policy explains what personal information we collect, why we collect it, who we disclose it to, how long we keep it, and the choices you have.

This policy covers 3hlinen.com.

1. Information we collect

Information you give us

Category	Examples	Why we collect it
Contact and order details	Name, email address, billing and shipping address, phone number, order contents	To take, process, and deliver your order, and to communicate with you about it
Account details	Login email address and password	To create and secure your customer account
Payment details	Payment method type, confirmation of payment, and the last four digits of your card	To take payment and detect fraud. Your full card number and security code go directly to our payment provider — we do not receive or store them
Communications	Messages you send us by email, contact form, phone, or WhatsApp; product reviews and feedback	To answer you and to improve our products
Marketing preferences	Email and SMS subscription status and consent records	To send only what you have asked for, and to prove that you asked for it

Information collected automatically

Category	Examples	Why we collect it
Device and connection data	IP address, browser type and version, operating system, device identifiers, time zone	To load the site correctly and to keep it secure
Usage data	Pages and products viewed, search terms, links clicked, items added to cart, abandoned carts, the site or advertisement you arrived from	To measure and improve the store, and to send cart reminders where you have opted in
Approximate location	City and region, derived from your IP address	To show relevant currency, shipping, and content. We do not collect precise geolocation
Cookies and similar technologies	See section 6

Information from other sources

Our advertising and analytics providers give us aggregated and interest-based information about visitors.
Our payment, shipping, and fulfilment providers give us transaction and delivery status information.

What we do not collect

We do not collect government identification numbers, biometric information, precise geolocation, health information, racial or ethnic origin, religious or philosophical beliefs, union membership, immigration status, or information about your sex life or sexual orientation.

We do not sell or share personal information in any of these categories, because we do not hold it.

2. Why we use your information

To take, process, fulfil, and deliver your orders, including custom orders
To take payment and to screen orders for fraud
To provide customer service and respond to your messages
To operate, secure, and improve the website
To send marketing emails, text messages, and printed catalogues where you have chosen to receive them
To send cart reminders where you have opted in
To measure how our website and products perform
To show you our advertising on other websites and social media platforms
To comply with tax, accounting, and other legal obligations

3. Who we disclose your information to

Category	What they do	Providers
E-commerce platform and hosting	Runs the store, processes orders, provides store analytics	Shopify
Payment processors	Take and verify payment	Shopify Payments, Stripe, PayPal
Shipping and delivery carriers	Deliver your order	USPS, UPS, FedEx
Printing and mailing service providers	Print and post our catalogues	PaperRun
Email marketing and CRM platforms	Send our emails, manage customer records	Klaviyo, HubSpot
SMS provider	Send text messages you have opted in to	Sakari
Analytics providers	Measure website performance	Google
Advertising networks and social media platforms	Deliver and measure our advertising	Google, Meta, Pinterest, Microsoft
Professional advisers and authorities	Legal, accounting, and regulatory purposes	As required

Every provider above other than the advertising and analytics platforms acts on our instructions only. They are contractually prohibited from using your information for their own purposes or disclosing it further.

We may also disclose personal information to comply with the law, to respond to a subpoena, warrant, or other lawful request, to protect our rights or the safety of others, or in connection with a merger, acquisition, or sale of assets.

4. Sale and sharing of personal information

We do not sell your personal information for money.

We do use advertising technologies that disclose personal information to advertising platforms so they can show you our advertising elsewhere and measure whether it worked.

US state privacy laws describe this in different ways. Under California law, "sharing" means disclosing personal information to a third party for cross-context behavioral advertising, and "sale" means exchanging it for money or anything else of value. Other states, such as Virginia, define "sale" as an exchange for money only, which we do not do. Most states describe the same activity as "targeted advertising." We treat all of it as covered by the opt-out below.

Categories of personal information we sell or share

Identifiers — cookie identifiers, device identifiers, IP address. Where advertising features are enabled, this may also include your email address and phone number, including in hashed form.
Internet or other electronic network activity — pages and products viewed, links clicked, search terms, items added to cart, how you arrived at our website, interactions with our emails.
Commercial information — products you view, add to your cart, or purchase, and order values.
Approximate geolocation — city and region level, derived from your IP address.
Inferences — interest and audience segments derived from the information above.

Who receives it — advertising networks, social media advertising platforms, and analytics providers, currently Google, Meta, Pinterest, and Microsoft.

How to opt out — go to Do Not Sell or Share My Personal Information. No verification is required and there is no charge.

We do not knowingly sell or share the personal information of consumers we know to be under 16 years of age.

Automated decision-making. We do not use your personal information to make automated decisions that produce legal or similarly significant effects about you. Our platform provider Shopify applies limited automated fraud screening, such as temporarily blocking IP addresses or payment cards associated with repeated failed transactions. This does not have a legal or similarly significant effect on you.

5. Marketing communications

Email. Unsubscribe using the link at the bottom of any marketing email, or email privacy@3hlinen.com.

Text messages. Where you have given express written consent, we send order notifications, abandoned-cart reminders, promotional offers, and review requests by text message. Message frequency varies. Message and data rates may apply. Reply STOP to any message to opt out, or HELP for assistance. Consent to receive marketing texts is not a condition of any purchase. See our SMS Terms for full programme terms.

Printed catalogues. We send printed catalogues and booklets to customers using a printing and mailing service provider. That provider prints and posts our materials on our instructions only and does not use your address for its own purposes. To stop receiving printed mail, email privacy@3hlinen.com.

Opting out of marketing does not stop transactional messages about orders you have placed.

6. Cookies and tracking technologies

We use cookies and similar technologies in four groups:

Strictly necessary — required for the site to work, including your cart, checkout, and account login. These cannot be switched off.
Functional — remember your preferences, including your privacy choices and region.
Analytics — help us understand how the site is used.
Advertising — used to show you our advertising on other sites and to measure it.

You can manage analytics and advertising cookies at any time through our consent banner or on our Do Not Sell or Share My Personal Information page.

Most cookies we use are persistent and expire between 30 minutes and two years after they are set. Blocking cookies in your browser may stop parts of the site working, and browser settings alone do not stop every form of disclosure to advertising partners — use the opt-out page for that.

Opt-out preference signals. We recognise and honor the Global Privacy Control (GPC). If your browser or a browser extension sends this signal, we treat it as a valid request to opt out of the sale and sharing of your personal information for that browser and device. Firefox, Brave, and DuckDuckGo support GPC directly.

Do Not Track. We do not respond to "Do Not Track" browser signals, which have no agreed standard or legal effect. GPC is different and we do honor it.

7. How long we keep your information

Information	Retention period
Order and transaction records	7 years, to meet tax and accounting requirements
Customer account details	Until you delete the account, then 30 days
Marketing subscriber records	Until you unsubscribe, then 12 months. We then keep only a one-way hash of your email address or phone number, so that we do not contact you again by mistake
SMS consent records	4 years after you opt out, to evidence that consent was given
Customer service correspondence	3 years
Website analytics data	14 months
Cookies and advertising identifiers	Up to 24 months, as set out in our consent banner

When a retention period ends we delete the information or irreversibly anonymise it. Where immediate deletion is not possible — for example, in backups — we isolate the information from further use until deletion occurs.

8. Your privacy rights

Residents of US states with comprehensive privacy laws have the rights below. We extend these choices to all US residents, regardless of the state you live in.

Right to know — confirm whether we process your personal information, and obtain the categories we collect, the sources, the purposes, and the categories of third parties we disclose to.
Right to access — receive a copy of the specific pieces of personal information we hold about you.
Right to correct — have inaccurate personal information corrected.
Right to delete — have your personal information deleted, subject to legal exceptions such as completing a transaction or meeting tax obligations.
Right to portability — receive your personal information in a portable, machine-readable format.
Right to opt out of the sale and sharing of personal information, and of targeted advertising — see section 4.
Right to non-discrimination — we will not deny you goods or services, charge you a different price, or give you a lower quality of service because you exercised a privacy right. The discount described in section 10 is a permitted financial incentive, not discrimination.
Right to appeal — if we decline a request, you may appeal.

Information older than 12 months. Where we hold your personal information for longer than 12 months, you may ask us for information collected before the 12-month period preceding your request. Say so in your request and we will include it.

How to exercise these rights. See US Privacy Requests for the process, what we need from you, and how long we take. Opt-out requests do not go through that page — they are immediate and require no verification.

9. Residents of the EEA and the United Kingdom

If you are in the European Economic Area or the United Kingdom, we process your personal information on the following legal bases: your consent; performance of the contract between us; compliance with our legal obligations; and our legitimate interests, where these do not override your rights.

You have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to withdraw consent at any time. To exercise them, email privacy@3hlinen.com.

Your personal information is processed by Shopify, initially in Ireland and then transferred outside Europe for storage and further processing, including to Canada and the United States.

If you are not satisfied with our response, you may complain to your local data protection authority.

10. Notice of financial incentive

We offer a discount of 5% on your first order when you subscribe to our marketing emails. Under the privacy laws of several US states, including California, this is a financial incentive, because you receive something of value in exchange for personal information.

What we collect. Your email address, and your phone number if you choose to provide it.

How to join. Enter your email address in our signup form and confirm that you want to receive marketing emails. Participation is voluntary and is not required in order to buy from us.

Terms. There is no minimum order value and the discount code does not expire. It applies to your first order only and cannot be combined with other discounts or promotional offers.

How to withdraw. Unsubscribe using the link at the bottom of any marketing email, or email privacy@3hlinen.com. Withdrawing does not affect a discount you have already used.

The value of your information and how we calculated it. We estimate the value of the personal information you provide under this programme as equal to the value of the discount we give in exchange for it — that is, 5% of your first order. We calculated it this way because the discount is what the information is worth to us: it is the amount we are willing to give up in order to be able to contact you directly rather than reach you through paid advertising.

We have made this estimate in good faith. We believe the incentive is reasonably related to the value of your information to us, and the difference in treatment between subscribers and non-subscribers is reasonably related to that value.

11. Children

Our website is intended for adults and is not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, email privacy@3hlinen.com and we will delete it.

12. Security

We use administrative, technical, and physical safeguards designed to protect personal information against unauthorised access, loss, misuse, and alteration. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

13. Third-party links

Our website links to other websites, including social media platforms. We are not responsible for their privacy practices. Please read their privacy policies before giving them information.

14. Changes to this policy

We may update this Privacy Policy to reflect changes in our practices or for operational, legal, or regulatory reasons. We will update the "Last updated" date above and, where a change is material, tell you more prominently.

15. Contact us

Three Trading Group Incorporated DBA 3HLinen
5925 Fair Oaks Blvd, Suite 3
Carmichael, CA 95608
USA

Privacy requests: privacy@3hlinen.com
General enquiries: info@3hlinen.com Phone: +1 628-277-5469