Privacy Notice
Last Updated Date: June 5, 2026
This Privacy Notice (the “Privacy Notice” or “Notice”) is to inform you how Purl NYC, LLC (d/b/a Purl Soho) and affiliates (“Purl,” “We,” “Us,” or “Our”) will collect, transfer, store, and/or use (“process”) personal information, including personally identifiable information, that you submit or we collect through offline activities such as phone calls or emails, and/or our website located at www.purlsoho.com (our “Site”).
This Notice is subject to our Terms of Use, which are incorporated herein by reference and located at https://www.purlsoho.com/terms-of-use/. Please read it carefully. By using the Site, you understand and are accepting the practices described in this Notice and accept its terms. You also give your express permission for us to process personal information in accordance with this Notice.
We reserve the right to modify or amend this Notice at any time to reflect changes in our personal information practices or applicable law. Should it be necessary to do so, we will notify you and/or request your express consent, if required, of any material changes to this Notice by posting such changes at the Site or by other acceptable means. Each version of the Notice is identified at the top of the page by its Last Updated date. Your continued use of the Site after changes have been posted constitutes your acceptance of the Notice as amended for personal information collected going forward, unless additional consent is required under applicable law. If you do not agree to the terms of our Notice, please do not use the Site or provide us your personal information.
COLLECTION AND USE OF PERSONAL INFORMATION
We collect most of the personal information about you directly from you—in person, by telephone, by email, and/or via our Site.
Personal Information That You Provide To Us. You may provide us with the following personal information: name, email address, and any other information you provide when you communicate with us.
This includes information collected directly from you when you provide it to us, such as information that you provide by filling in forms on our Site. This includes the following:
Contact Us: If you choose to submit information to us via our Contact Us page, we will collect your name, email address, phone number, company name, and any additional information you choose to provide.
Online Purchases: If you make a purchase on the Site, we collect your email address, first and last name, shipping addresses, phone number (optional in case we need to contact you about your order), any gift note you provide, and your payment information (including billing address, credit card number, expiry date and CVV/CVC code) in order to process the transaction. If you purchase a gift card, we collect the name and email address of the gift recipient in order to deliver the gift card by email on your behalf.
Returns: If you choose to make a return on the Site, we collect your order number and email address. If you are returning a product that was a gift, we collect your order number, zip code, name, and email address. We use this information to process your return.
Create an Account: You are not required to create an account to access or use our Site. If you choose to create an account on our Site, we collect your email address and a password you create in order to create and administer your account. We also may collect your consent to send you marketing communications, which is optional. We also save your order history in your account. We use this information in order to provide the best possible Site experience for you and for our legitimate interests, i.e., to be as efficient as we can to deliver the best service for you at the best price. Do not disclose your password to anyone. If you become aware of any unauthorized access to or use of your account, you must notify us immediately.
Contests and Promotions: When you enter a contest or participate in a promotion, we may collect your name, address, email address, phone number, and any additional information or content required for the contest or promotion (such as information you post on social media). We use this information to administer your participation in the contest or promotion, including prize fulfillment. As part of a contest or promotion, we may obtain your consent to share or otherwise publish the content you submit.
Marketing Emails: If you sign up to receive our marketing emails or we otherwise have your consent, we will collect and use your email address to send you emails about new products, special offers, and other information. If you no longer wish to receive these communications, you can unsubscribe at any time by clicking the “unsubscribe” link included at the bottom of the newsletter. Alternatively, you can opt out of receiving our newsletter by contacting us at the contact information under “Contact Us” below. Please note that you may continue to receive certain transactional or account-related communications from us, such as your receipt or online order confirmation.
1-On-1 Help. Purl Soho provides you the option of providing certain information to us to help you with your current or future knitting projects. If you choose to register for a 1-On-1 Help session, we will collect your name, email address, and any information you provide concerning your project.
Affiliate Program. Purl Soho grants you the option to apply to become a Purl Soho affiliate. To apply, you must provide the following information that Purl Soho will use to contact you: full name, email address, Instagram and Ravelry handles, website URL (optional) and the type of fiber work.
Yarn Support. Purl Soho offers “yarn support” by giving designers yarn for use in print and online magazines. To request yarn support, you will be asked to provide the following information that Purl Soho will use to contact you: full name, email address, website URL (optional), Instagram and Ravelry handles, yarn you are working with, quantities requested, and any additional information about your yarn usage.
We may also use automatic data collection technologies to collect certain information:
Personal Information Automatically Collected: We also use cookies and other technologies to collect personal information automatically through your use of the Site as described in the section entitled Information Automatically Collected.
INFORMATION AUTOMATICALLY COLLECTED
Cookies & Other Technologies. A cookie is a small file containing a string of characters that may be sent to your web browser when you visit a website. Cookies might be used for the following purposes: (1) to enable certain functions; (2) to provide analytics; (3) to store your preferences; and (4) to enable ad delivery and behavioral advertising.
Cookies can either be session cookies or persistent cookies. A session cookie expires automatically when you close your browser. A persistent cookie will remain until it expires or you delete your cookies. Expiration dates are set in the cookies themselves, some may expire after a few minutes while others may expire at a later time. Cookies placed by the website you’re visiting are sometimes called “first party cookies,” while cookies placed by other companies are sometimes called “third party cookies.”
The Site uses cookies that are sent by us or our third-party services. The use of cookies and other technology, described below, allows us to make our Site more responsive to your needs by delivering a better and more personalized experience to you. We use these cookies to identify you as a valid user, to ensure that no one else can sign on simultaneously with your account from another computer and to help us serve you better based on your registration preferences. We may also use cookies to help us facilitate any promotions or surveys that we provide. You can reset your browser to refuse cookies or to indicate when a cookie is being sent. By changing your preferences, you can accept all cookies, you can be notified when a cookie is set, or you can reject all cookies. If you do so and cookies are disabled, you may be required to re-enter your information more often and certain features of our Site may be unavailable.
The following information may automatically be received and/or collected from you through the Site: IP address, browser type, browser language, internet service provider (ISP), resource requested, date and time of resource request, and HTTP referring resource (if provided by the browser), operating system, and/or clickstream data. We aggregate this data, and may combine this data with other information we collect about you to better understand how visitors use our site, improving user experience, and to help manage, maintain, and report on use of our website. We also store IP addresses for fraud detection and prevention purposes.
Third-Party Service Providers: We sometimes utilize third-party service providers to help us track the activity within the Site. These third parties may use cookies and other tracking technologies. Our third-party service providers include the following:
Google Analytics (see below)
Analytics: We may use a third party such as Google Analytics to help us gather and analyze information about the areas visited on the Site (such as the pages most read, time spent, search terms and other engagement data) in order to evaluate and improve the user experience and the Site. For more information about Google Analytics or to prevent the storage and processing of this data (including your IP address) by Google, you can download and install the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en. You can also obtain additional information on Google Analytics’ data privacy and security at the following links:
https://policies.google.com/technologies/partner-sites
https://support.google.com/analytics/topic/2919631
More Information. You may learn more about cookies and how to opt out of them by visiting the following third-party website: http://www.allaboutcookies.org/.
DO NOT TRACK SIGNALS
The Site does not respond to Do-Not-Track (“DNT”) signals. To find out more about DNT, you may wish to visit the following third-party website www.allaboutdnt.com.
PURPOSES OF INFORMATION COLLECTION AND PROCESSING
We use information to provide you with a superior experience and, as necessary, to administer and manage our operations. We use your personal information in the following ways:
To comply with our legal and regulatory obligations;
To provide our products and services to you;
To provide you with information or services that you request from us;
To fulfill any other purpose for which you provide it;
To provide you with functionality of the Site;
To provide client service and/or marketing products or services;
For our legitimate interests or those of a third party;
To conduct research and perform analysis to measure, maintain, protect, develop, and improve our products or services;
To administer, enhance, and communicate with you regarding our events, marketing, and advertising;
To make communications necessary to notify you regarding order confirmations, products, services, market research, requests, marketing, security, privacy, and administrative issues; and/or
In any other way we may describe when you provide the information or for any other purpose with your consent or to comply with applicable law.
A legitimate interest is when we have a business or commercial reason to use your information, so long as this is not overridden by your own rights and interests. The table below explains why we process your personal information:
| How we process your personal information | Our reasons |
| To provide information about our products and/or services to you | To take steps at your request before entering into a contract |
| To prevent and detect fraud against you or our organization | For our legitimate interests or those of a third party, i.e. to minimize fraud that could be damaging for us and for you |
| Processing necessary to comply with professional, legal and regulatory obligations that apply to our business, e.g. under health and safety regulation or rules issued by our professional regulator | To comply with our legal and regulatory obligations |
| Gathering and providing information required by or relating to audits, enquiries or investigations by regulatory bodies | To comply with our legal and regulatory obligations |
| Ensuring business policies are adhered to, e.g. policies covering security and internet use | For our legitimate interests or those of a third party, i.e. to make sure we are following our own internal procedures so we can deliver the best service to you |
| Operational reasons, such as improving efficiency, training, and quality control | For our legitimate interests or those of a third party, i.e. to be as efficient as we can so we can deliver the best service for you at the best price |
| Ensuring the confidentiality of commercially sensitive information |
For our legitimate interests or those of a third party, i.e. to protect trade secrets and other commercially valuable information To comply with our legal and regulatory obligations |
| Statistical analysis to help us manage our business, e.g. in relation to our financial performance, customer base, product range or other efficiency measures | For our legitimate interests or those of a third party, i.e. to be as efficient as we can so we can deliver the best service for you at the best price |
| Preventing unauthorized access and modifications to systems |
For our legitimate interests or those of a third party, i.e. to prevent and detect criminal activity that could be damaging for us and for you To comply with our legal and regulatory obligations |
| Updating and enhancing customer records |
For the performance of our contract with you or to take steps at your request before entering into a contract To comply with our legal and regulatory obligations For our legitimate interests or those of a third party, e.g. making sure that we can keep in touch with our customers about existing orders and new products |
| Statutory returns | To comply with our legal and regulatory obligations |
| Ensuring safe working practices, staff administration and assessments |
To comply with our legal and regulatory obligations For our legitimate interests or those of a third party, e.g. to make sure we are following our own internal procedures and working efficiently so we can deliver the best service to you |
| Marketing our services to existing and former customers, third parties who have previously expressed an interest in our services and/or third parties with whom we have had no previous dealings. | For our legitimate interests or those of a third party, i.e. to promote our business to existing and former customers |
| External audits and quality checks, e.g. for ISO or Investors in People accreditation and the audit of our accounts | For our legitimate interests or those of a third party, e.g. to maintain our accreditations so we can demonstrate we operate at the highest standards or to comply with our legal and regulatory obligations |
HOW WE DISCLOSE YOUR PERSONAL INFORMATION
We may disclose personal information that we collect or that you provide as described in this Privacy Notice to contractors, service providers, and other third parties we use to support our business (such as analytics and search engine providers that assist us with Site improvement and optimization) and who are contractually obligated to keep personal information confidential, use it only for the purposes for which we disclose it to them, and to process the personal information with the same standards set out in this Privacy Notice. Whenever we engage a service provider, we require that its privacy and security standards adhere to this Privacy Notice and applicable state privacy legislation.
We may process and transfer your personal information in and to a foreign country, with different privacy laws. In these circumstances, the governments, courts, law enforcement, or regulatory agencies of that country may be able to obtain access to your personal information through the laws of the foreign country.
You are welcome to contact us to obtain further information about our policies regarding service providers. See Contact below.
YOUR STATE DATA PRIVACY RIGHTS
Although Purl Soho does not currently meet the thresholds for certain state data privacy laws to apply (such as the California Consumer Privacy Act), if you are a resident of a state with a consumer data privacy law that is applicable to Purl Soho, we will endeavor to respect the consumer rights granted to you under the applicable statute. To contact us about these rights, please contact [email protected] with “PRIVACY” in the subject line.
RETENTION OF INFORMATION
We will keep your personal information for as long as necessary to fulfill the purposes we collected it for and in accordance with our internal document retention policy and any applicable laws. We will retain and use personal information as long as you have an account with us or we are providing products and/or services to you. Thereafter, we will keep your personal information for as long as is necessary, subject to the specific retention periods outlined in our internal retention schedule:
To respond to any questions, complaints or claims made by you or on your behalf;
To show that we treated you fairly; or
To keep records required by law.
We will not retain your personal information for longer than necessary for the purposes set out in this Privacy Notice. Different retention periods apply for different types of personal information.
Under some circumstances, we may anonymize your personal information so that it can no longer be associated with you. We reserve the right to use such anonymous and de-identified data for any legitimate business purpose without further notice to you or your consent.
PERSONAL INFORMATION STORAGE
All personal information is stored on databases and/or servers that are operated by us and/or our third-party vendors.
NOT INTENDED FOR USE OUTSIDE U.S.
The Site is primarily intended for use within the United States. The Site may function in countries other than the United States. If you use the Site from outside the United States, you explicitly accept that your personal information may be transferred to, stored, and processed in the United States where laws regarding processing of personal information may differ than the laws of other countries.
SECURITY
To protect your personal information in our custody or control from theft, unauthorized access, use, modification and disclosure, and to maintain its accuracy and integrity, we have implemented reasonable technical, physical and administrative security measures. These measures include:
Stored on secure servers behind firewalls;
Encrypted payment transactions using SSL or other technology;
De-identifying or aggregating the information; and
Other measures to secure the personal information from accidental loss and from unauthorized access, use, alteration, and disclosures.
Although we have implemented reasonable safeguards, please note that no electronic transmission of information can be guaranteed to be entirely secure. You acknowledge and agree that we are not responsible for the theft, destruction, or inadvertent disclosure of your personal information. In the unfortunate event that your personal information is compromised, we may notify you by e-mail (at our sole and absolute discretion) to the last e-mail address you have provided us in the most expedient time reasonable under the circumstances; provided, however, delays in notification may occur while we take necessary measures to determine the scope of the breach and restore reasonable integrity to the system, as well as for the legitimate needs of law enforcement if notification would impede a criminal investigation.
Information may be held at our offices and those of our third-party agencies, service providers, representatives and agents as described above (see How We Disclose Your Personal Information). Some of these third parties may be based outside the United States. For more information, including on how we safeguard your personal information when this occurs, see Not Intended for Use Outside U.S. above.
CHILDREN’S INFORMATION
The Site is marketed for, and directed to, purchase by adults or with the consent of adults. Individuals under the age of 18 (or the age of majority in their jurisdiction of residence, if different) are not permitted to use the Site without the supervision of a parent or legal guardian.
We do not knowingly collect or solicit personal information from anyone who we know to be under the age of 16, or knowingly allow such persons to use the Site. Should we learn that someone under the age of 16 has personal information through the Site, we will remove that personal information as soon as possible.
If you are under the age of 16, you should use the Site only with the involvement of a parent or guardian and should not submit any personal information to us at all. To the extent possible, any personal information from anyone who we know to be under the age of 16 will be destroyed.
LINKS TO OTHER WEBSITES
The Site may contain links to other websites of interest. Once you have used these links to leave our site, you should note that we do not have any control over other websites. Therefore, we will not be responsible for the protection and privacy of any information you provide whilst visiting such other websites and such sites are not governed by this Notice. You should exercise caution and look at the privacy policy applicable to the website in question.
TERMS OF USE
This Notice is expressly incorporated into our Terms of Use. Any dispute between you and us regarding the privacy of your personal information is subject to this Notice and our Site Terms of Use, including limitation on damages, resolution of disputes, and application of applicable law.
CONSUMERS WITH DISABILITIES
To request this Notice in an alternative format, please reach out to us at the contact information provided below.
CONTACT
Questions and requests related to this Notice or the manner in which we or our service treat your personal information, or to request access to our collection of your personal information may be directed us at the following email address: [email protected] with “PRIVACY” in the subject line. We will respond to such requests in accordance with applicable law.