Privacy Policy

Last updated: October 1, 2026

Indigo Sundries is a family business. We make soap on our property in Eastern Kentucky, and when you order from us, a real person in our family packs your box. This policy explains, in plain English, what information you share with us when you use this website, what happens to it, and the choices you have.

"Indigo Sundries," "we," "us" and "our" mean Indigo Sundries. "You" means you, the person using the site.

The short version

• You give us what we need to fill your order: your name, email, shipping address and payment.
• Your card details go straight to our payment processor. We never see or store your full card number.
• We don't sell your information. Ever.
• We don't use analytics or advertising tools to track how you browse.
• You can unsubscribe from marketing emails with one click, and you can ask us to see, fix or delete your information.

Information you give us

When you create an account. Your name, email address and a password. Your password is stored in scrambled (hashed) form by our hosting provider, so nobody at Indigo Sundries can read it.

When you place an order. Your name, email, shipping address, billing address, phone number if you give it, what you ordered, and any notes you add at checkout.

When you pay. Your payment details go directly to Stripe. We receive a confirmation that you paid, plus basic details like the card brand and last four digits, so you and we can recognize the payment later.

When you subscribe. The products and scents in your subscription, how often it ships, your next billing date, and whether it's active, paused or cancelled. Stripe keeps the payment method you choose for your subscription on file so your renewals can be charged.

When you sign up for emails. Your email address and, if you give it, your name. We also record the welcome code we send you and whether it's been used.

When you write a review. Your review, star rating, and the name you choose to show with it. Reviews are public, so please don't put anything in one you wouldn't want your neighbors to read.

When you play the bubble game. If you earn a coupon, it appears on your screen. We record the code, when it was issued, when it expires (7 days later), and whether it's been used. When you use it at checkout, we record it with the email address on that order, so each person gets one reward every 30 days. To keep the game fair and stop one person from collecting unlimited codes, we also record a browser identifier and your IP address, both in scrambled (hashed) form. That lets us tell when the same browser comes back, but we can't read the original identifier or IP address.

When you contact us. Whatever you put in your message, including wholesale inquiries and prayer requests. Prayer requests stay with our family.

Information collected automatically

When you visit the site, your browser sends some basic information on its own, like your IP address and browser type. Our website host receives this so it can deliver pages to you and keep the site secure. We don't use analytics tools, tracking pixels or advertising cookies.

Cookies. The site uses only the small files (cookies) it needs to work: one keeps you logged in, one remembers what's in your cart, and one lets the bubble game recognize your browser so rewards stay fair. You can block or delete cookies in your browser settings, but your cart, login and the game may stop working if you do.

How your information is used

• To fill, ship and support your orders, including sending you order confirmations and shipping emails.
• To run your account and your subscription, charge renewals on schedule, and let you pause, change or cancel.
• To send you the newsletter and occasional offers, if you signed up for them.
• To send you a welcome email with a 10% off code for your first order when you join the newsletter.
• To send you one reminder email if you enter your email address, leave items in your cart, and don't check out. It goes out about 4 hours later, only if you haven't unsubscribed, and it has an unsubscribe link.
• To issue and check bubble-game coupon codes, limit rewards to one per email address every 30 days, and prevent abuse.
• To show your reviews on the site.
• To answer your questions and wholesale inquiries.
• To keep the site secure, prevent fraud, and meet our legal, tax and accounting obligations.

Who your information is shared with

We share your information only with the companies that help us run the shop, and only what each one needs to do its job:

• Stripe: payment processing and subscription billing.
• Shippo: creating shipping labels. Your name, shipping address and package details pass through Shippo to the carrier.
• UPS and USPS: delivering your order.
• Resend: sending order emails, account emails, welcome emails, cart reminders and newsletters.
• Supabase: hosting the database behind the site, including your account and order records.
• Vercel: running the website itself.

We may also share information if the law requires it, to protect our rights or someone's safety, or if the business is ever sold or passed on (in which case this policy would still apply to your information).

We do not sell your personal information, and we do not share it with advertisers.

Emails you'll get

Order and account emails (confirmations, shipping updates, password resets, subscription and payment notices) are part of doing business with us, so you'll receive them as long as you have an order or account with us.

Marketing emails (the welcome email, newsletters, offers and cart reminders) are optional. Every one has an unsubscribe link at the bottom. Click it and you're off the list. You can also reply and ask.

How long your information is kept

Your account information stays as long as your account is open. Order records are kept as long as we need them for taxes and accounting, which is commonly 7 years. If you ask us to delete your account, we'll delete or anonymize what we're not required to keep.

Keeping your information safe

The site uses encrypted connections (HTTPS), card data is handled by Stripe rather than stored by us, and access to customer records is limited to the people who need it to fill your orders. No system is perfectly secure, but we take reasonable care, and we'll tell you if something goes wrong that affects your information.

Your choices and rights

You can:

• See and update your account details, and manage or cancel your subscription, from your account page.
• Unsubscribe from marketing emails at any time.
• Ask for a copy of the personal information we hold about you.
• Ask us to correct it or delete it.

To make a request, email hello@indigosundriessoap.com. We'll answer within 30 days. Depending on where you live, your state's privacy law may give you additional rights, and we'll honor them.

Children

This site isn't meant for children under 13, and we don't knowingly collect information from them. If you think a child has given us information, contact us and we'll delete it.

Changes to this policy

If we change this policy, we'll post the new version here and update the effective date. If the change is significant, we'll let you know by email or with a notice on the site.

Contact us

Questions about your privacy? You can reach us here:

• Email: hello@indigosundriessoap.com
• Or use the form on our contact page.