Privacy Policy

Sleevary sells personal information to no one, confirms every privacy request within 2 business days, and answers it within 45 days. This policy took effect Oct. 2, 2026 and describes what DIAMOND NISHELLE EVANS FUNY LLC, which runs sleevary.com, collects from the adults who shop here and why, given that the readers of the books are children and the buyers are not.

Children kept out of data collection

The books on sleevary.com are written for readers aged 2 to 14, but the store itself is for adults, and no personal information is knowingly gathered from a child younger than 13. A child has no reason to type anything into the site, because orders, questions, and returns all come from the adult who pays. If a parent or guardian finds out that a child younger than 13 typed in personal details, an email to customer service gets them deleted within 10 business days, as the Children’s Online Privacy Protection Act expects of any website.

Teenagers shielded from targeted ads

Sleevary shows no targeted advertising to anyone, including readers aged 13 to 17, and it sells no personal data about anyone in that age group, which matches what Connecticut and several other states now require for minors.

Visits and orders covered by this policy

This policy applies to visits to sleevary.com, to orders placed on it, and to messages that reach customer service as emails, phone calls, or contact form entries. Pages on other websites, including the windows that PayPal opens at checkout, are covered by those companies’ own policies.

Language models kept away from customer data

No customer data goes into training an AI model, whether a large language model or any other kind, and none is sold or handed to companies that build such models.

Details typed in at checkout

Checkout asks for the details an order cannot be completed without:

  1. Name and email address, for the confirmation and shipping emails.
  2. Billing address, which the card issuer or PayPal checks.
  3. Shipping address, if it differs from the billing address, for the label on the box.
  4. Phone number, which the carrier may use if a delivery runs into trouble.
  5. Card or PayPal details, typed into fields run by Stripe and PayPal.

Messages to customer service add whatever the sender chooses to include, usually an order number and a description of the problem.

Technical data recorded automatically

Each visit leaves the visitor’s IP address, which browser and device were used, which pages were opened, and when, in the server logs of the host and of Cloudflare, which screens traffic before it reaches sleevary.com. These records exist to keep sleevary.com online and to block attacks, and they are never combined into a profile of a visitor.

Information received from payment processors and carriers

Stripe and PayPal send back the result of each payment, the outcome of their fraud screening, and enough to recognize the method later, such as the card network and last four digits. Carriers send the scan events of each box until the delivery scan, and both kinds of report are stored with the order.

Data used to fill and deliver orders

Personal information lets Sleevary charge the order, get the books packed and delivered, send order emails, answer messages, process returns, screen payments for fraud, and keep the records tax law asks for. Sleevary sends no newsletter or marketing email, nor does any detail feed an advertising profile.

Service providers named one by one

Six kinds of company receive part of the data, each for one task:

  1. The US book distributor that packs and labels each box.
  2. The carrier that delivers the box.
  3. Stripe and PayPal, the two payment processors behind checkout.
  4. Brevo, which delivers order and customer service emails.
  5. The hosting company that runs sleevary.com.
  6. Cloudflare, which filters traffic before it reaches the host.

Data categories passed to each provider

The distribution partner gets what a packing slip needs, meaning the customer’s name, the shipping address, a phone number, and the titles, while the carrier gets only what goes on the label plus the phone number for delivery problems. Billing details and the amount go to Stripe or PayPal, Brevo handles email addresses and the wording of the emails it sends, and the technical data of each visit passes through the host and Cloudflare. No provider may use any of it beyond its job for Sleevary.

Contact details never sold or rented

Sleevary does not sell, rent, or trade personal information, and it does not share it for cross-context behavioral advertising, so the list of third parties to whom Sleevary has sold or may sell personal information is empty. Customer contact details are never passed to another business for its own marketing.

Cookies limited to the cart and payment steps

The cookies on sleevary.com keep the site working. WooCommerce, the store software, sets cookies that remember what is in the cart and carry the checkout from one step to the next, Stripe and PayPal place their own cookies inside their payment fields to catch fraud, and Cloudflare can set a short-lived cookie while deciding whether a visit comes from a human or an automated script. There are no advertising, analytics, or social media cookies, which is why no cookie banner appears, and a browser that sends the Global Privacy Control signal still has it treated as an opt-out.

Records kept 6 years or less

Order and payment records are kept for 6 years for tax and accounting purposes, customer service emails for 3 years, and server logs for 90 days. After those periods, records are deleted or stripped of anything that identifies a person.

Security handled by encryption and limited access

Every page loads over HTTPS, card numbers stay inside Stripe’s field, and PayPal sign-ins stay on PayPal’s pages, so a full card number never reaches the servers of sleevary.com. Access to order records is limited to the people who run Sleevary, and the distribution partner can see the shipping details of the orders it packs, with no view of payment data or order history.

Rights exercised by email or form

Customers can ask to see the personal information Sleevary holds about them, to correct it, to delete it, to receive a copy in a portable format, and to say no to any sale or sharing. The process runs in three steps:

  1. The customer writes to contact@sleevary.com, putting the words “Privacy request” in the subject, or uses the form on the Contact Us page.
  2. Customer service confirms receipt within 2 business days and checks identity by matching the email address and an order number, without asking for an ID document.
  3. The request is answered within 45 days, and if more time is needed, the customer is told why before the first 45 days end, with at most 45 more days added.

Someone acting as an authorized agent may file a request once the customer has signed a permission for it. Records that tax law requires Sleevary to keep can be held back from deletion until the retention period ends, and the reply says so when that happens.

California residents covered by the CCPA

Every right in the section above is also a legal right in California, where the CCPA, since amended by the CPRA, grants it. In the last 12 months, Sleevary has collected identifiers, commercial information such as order history, and internet activity such as server logs, for the purposes listed on this page, and it has sold or shared none of them. Opting out is set out step by step in Do Not Sell or Share My Personal Information, a companion to this policy, and using any of these rights never changes a price or the service a customer receives.

Residents of other states included

Nineteen other states had a consumer privacy law in effect on Oct. 2, 2026. Virginia, Colorado, Connecticut, and Utah put theirs in force in 2023, and Texas, Oregon, Florida, and Montana followed in 2024. The 2025 group is Delaware, Iowa, Maryland, Minnesota, Nebraska, New Hampshire, New Jersey, and Tennessee, while Indiana, Kentucky, and Rhode Island joined on Jan. 1, 2026. Their residents use the same three steps, and Sleevary answers them on the same schedule. A customer in any other state, North Carolina included, can use the same steps and receives the same answer.

Sensitive information left uncollected

Sleevary does not ask for Social Security numbers, driver’s license numbers, dates of birth, precise location, health information, or any other sensitive personal information as California law defines it.

Emails processed by Brevo in the European Union

Brevo, the email delivery service, is based in France and may process email addresses and the text of order emails on servers in the European Union, and Cloudflare routes traffic through data centers around the world. All other personal information is stored and processed in the United States.

Breaches reported without unreasonable delay

Should a breach of Sleevary’s systems, or of a provider’s, expose someone’s personal information, that person receives an email without unreasonable delay, as North Carolina’s Identity Theft Protection Act (N.C. Gen. Stat. 75-65) requires, describing what happened and what can be done about it.

Links to other sites governed by their own policies

Links to carriers, publishers, PayPal, or government websites lead to pages that Sleevary does not control, and their privacy practices are set out in their own policies.

Privacy requests addressed to customer service

Privacy questions and requests reach customer service by email at contact@sleevary.com under the subject “Privacy request“, by phone at +1 (743) 242-0838, through the form on the Contact Us page, or by mail to DIAMOND NISHELLE EVANS FUNY LLC, 306 Craig St, Greensboro, NC 27406, and customer service works Monday to Friday from 7:45 a.m. until 5 p.m. Eastern, replying to every message within 1 business day.