This is the privacy policy for HUSH ("we," "us," "our"). HUSH is operated by Hush Direct, 1209 Orange Street, Wilmington, DE 19801. Reach us at hello@hushdirect.xyz.
We try to keep this short. The substance is plain: we collect what we need to take your order, ship the bottle, and run the business. We don't sell your personal information.
What we collect
From you, when you buy. Your name, email address, shipping address, billing address, phone number, and payment information. Payment information is collected by our payment processor (Shopify Payments and the underlying card networks); we don't see or store full card numbers.
Automatically, when you visit. Your IP address, browser type, device information, pages you visit, time on page, referring site, and (with your consent where required) cookies and pixels used by analytics and advertising tools — including Meta and TikTok pixels. We use this to understand whether the site is working, what's broken, and which ads are bringing people who actually want HUSH.
From you, when you write to us. The contents of any message you send to hello@hushdirect.xyz or via a contact form, plus your email address.
From you, when you subscribe. Your email address, used only to send you the (very) occasional note unless you ask us not to.
How we use it
- To process your order and deliver the product.
- To send order, shipping, and refund updates.
- To respond when you reach out.
- To run the website, fix bugs, and prevent fraud.
- To measure how our advertising performs (so we don't spend more than we should).
- To send marketing emails — only if you've opted in. Every one has an unsubscribe link.
- To comply with the law where required.
Who we share it with
The minimum needed, and only as service providers. They're contractually limited to using the data to do the job we hired them for.
- Shopify — our e-commerce platform.
- Supliful — our fulfillment partner. They receive your name, address, and what you ordered, and ship it to you.
- Shopify Payments / payment networks — to process the charge.
- Klaviyo — to send transactional and (opted-in) marketing email.
- Meta and TikTok — to measure ad performance. We share hashed identifiers (email, phone) where you've consented; you can opt out below.
- Google Analytics or equivalent — for aggregate site analytics.
We do not sell your personal information. We do not share your information with third parties for their own marketing.
Cookies and tracking
The site uses cookies for essential functions (remembering your cart) and, with your permission where the law requires it, for analytics and advertising. You can control cookies in your browser, and you can disable advertising cookies via the consent banner where one is shown.
Your rights
Depending on where you live, you may have the right to:
- Know what personal information we hold about you.
- Get a copy of it.
- Have it corrected if it's wrong.
- Have it deleted (with limited exceptions for things like tax records and fraud prevention).
- Opt out of targeted advertising and the "sale" or "sharing" of personal information (we don't sell, but you can still opt out of cross-context advertising).
- Withdraw consent for marketing email at any time.
To exercise any of these, email hello@hushdirect.xyz. We'll verify your request and respond within the timeframes the applicable law requires (typically 30–45 days).
California residents: this section is your CCPA / CPRA notice. EEA / UK residents: this is also our notice under the GDPR. The legal bases we rely on are: (a) performance of our contract with you (to fulfill orders), (b) our legitimate interests (to run and improve the business and prevent fraud), (c) your consent (for marketing and non-essential cookies), and (d) compliance with legal obligations.
Data retention
We keep order and customer-service records for as long as we need to run the business and meet our legal obligations (typically 7 years for tax and accounting). Email subscribers are retained until you unsubscribe. Anonymous analytics is retained per the analytics tool's defaults.
Security
We use Shopify's infrastructure and reputable third-party providers, all of whom maintain industry-standard safeguards. No system is perfect, and no one can promise absolute security. If we ever discover a breach affecting your data, we'll notify you as required by law.
International transfers
If you're outside the United States, your information will be transferred to and processed in the United States. We rely on standard contractual clauses or equivalent safeguards where required.
Children
HUSH is not directed at children under 18 and we don't knowingly collect personal information from anyone under 18. If you believe a child has given us information, email us and we'll delete it.
Changes to this policy
We'll update this page when something material changes. The "last updated" date at the top will reflect the most recent revision. If a change is significant, we'll let you know — by email if we have an active address for you, or by a notice on the site.
Contact
HUSH
Distributed by Hush Direct
1209 Orange Street, Wilmington, DE 19801
hello@hushdirect.xyz