Last updated: 14 October 2026

This policy explains how Little Roam handles personal information when you visit our store, place an order or contact us. It covers our shopping services for customers in the United States, Canada and the United Kingdom.

1. Who we are

Little Roam is operated by Riverstone Commerce, 904 Park Cir, Sun Prairie, Wisconsin 53590, United States. We are responsible for the personal information we handle for our store and, where applicable, act as its data controller. For privacy questions or requests, email support@littleroam.site.

2. Information we collect

Information you provide:

• Your name, email address, billing and shipping addresses, and phone number where provided for an order or delivery.
• Order details, such as the products, sizes and quantities you select, and payment and transaction information supplied through checkout.
• Your email address and preferences if you subscribe to marketing messages.
• Messages, order information and photos of an item you send when asking for help.

Payment details are processed by our checkout payment providers. Our ordinary store checkout does not give us access to your full payment card number. Please do not send card details by email.

Information generated when you use the store: device and browser details, IP address, approximate location, pages and products viewed, cart activity and referral information. Cookies and similar technologies may collect some of this information, subject to applicable law and your privacy choices.

We also receive order, payment, fraud-prevention and delivery updates from Shopify, payment providers, fulfilment partners and carriers.

3. How we use your information

• To take payment, process and deliver orders, and send confirmations and tracking updates.
• To answer questions and handle cancellations, returns, refunds and complaints.
• To protect the store and detect fraudulent or abusive activity.
• To send marketing messages when permitted by law and your choices. Marketing consent is not required to make a purchase.
• To understand and improve the store's performance. If we use advertising or additional analytics tools, their use is subject to applicable consent and opt-out requirements.
• To meet legal, tax and accounting obligations and resolve disputes.

4. Legal bases and consent

For processing subject to UK data protection law, we rely on the appropriate legal basis: performing our contract with you for orders and delivery; legal obligations for required records; legitimate interests for store security, fraud prevention and proportionate service improvement; and consent where required for marketing or tracking technologies. We consider your rights when relying on legitimate interests.

For Canadian customers, we obtain consent where required by applicable privacy law and use information for purposes that are reasonable in the circumstances. You can withdraw consent, subject to legal or contractual restrictions. If withdrawal prevents us from providing a requested service, we will explain the consequences.

You can unsubscribe from marketing using the link in an email or by contacting us. This does not stop messages needed to manage an order or a privacy request.

5. Who receives your information

We share information needed to provide our services with:

• Shopify: our store platform, which supports hosting, checkout, orders and related services.
• Payment and fraud-prevention providers: to process payments and protect transactions.
• Suppliers and fulfilment partners: to prepare and dispatch your order. They receive the delivery information needed for that purpose and may be located outside your country, including in China.
• Carriers: to deliver packages and provide tracking.
• Other service providers: where used for customer support, email delivery or permitted analytics. Advertising partners receive information only where those services are used and disclosure is permitted by law and your choices.
• Professional advisers or authorities: where needed for legal obligations, legitimate claims or protecting rights.

Shopify may also process information for its own purposes when providing certain services. Its handling of that information is explained in Shopify's Privacy Policy.

We do not sell your personal information for money. Some advertising disclosures can nevertheless qualify as a sale, sharing or targeted advertising under applicable US state law. Where such disclosures apply, you have the relevant opt-out rights described below.

6. Cookies and privacy choices

Cookies and similar technologies support functions such as the cart, checkout and security. Additional technologies may remember preferences, measure store use or support advertising. You can find information about Shopify's technologies in its Cookie Policy.

Where consent is required, advertising and other tracking technologies require your choice before use. Continuing to browse does not, by itself, provide that consent. You may accept, refuse or withdraw consent through the privacy controls made available on the store. Contact us if you cannot find a control or need help with a privacy choice.

Browser settings can also block or delete cookies, although blocking essential technologies may affect the cart or checkout. Browser settings alone may not control every type of data disclosure. Where applicable law provides for an opt-out preference signal, such as Global Privacy Control, you may use that signal to communicate an opt-out for the browser or device concerned.

7. International processing

We are based in the United States. Shopify, our suppliers and other service providers may process information in other countries, including Canada and China. Privacy laws in those countries may differ from those where you live.

Where a transfer is subject to restrictions under UK or other applicable privacy law, it must use a permitted transfer mechanism and any safeguards required by that law. These may include an adequacy decision or approved contractual safeguards. Contact us for information about the safeguards relevant to your information.

8. How long we keep information

We retain information for as long as needed for the purpose for which it was collected, including managing orders, support, returns, legal claims and required tax or accounting records. Retention depends on the type of record and the applicable requirements; we do not apply one fixed period to every kind of information.

When you unsubscribe, we stop marketing to you and may retain limited information to record and respect your choice. Information no longer needed is deleted or anonymised, subject to lawful retention requirements.

9. Your privacy rights

Depending on where you live and the law that applies, you may be able to:

• Ask what personal information we hold about you and obtain a copy.
• Ask us to correct inaccurate information or delete information, subject to lawful exceptions.
• Object to or restrict certain processing, or receive information in a portable format where that right applies.
• Withdraw consent or opt out of marketing.
• Opt out of a sale, sharing for cross-context behavioural advertising, targeted advertising or certain profiling where applicable law provides that right.

Email support@littleroam.site to make a request. We may need proportionate information to verify your identity or an authorised agent's authority. We will respond within the applicable legal timeframe, explain any lawful refusal and provide an appeal process where required. We will not discriminate against you for exercising applicable privacy rights.

UK customers may complain to the Information Commissioner's Office. Canadian customers should first raise a concern with us; if it remains unresolved, they may contact the applicable federal or provincial privacy regulator, including the Office of the Privacy Commissioner of Canada. Using a complaint channel does not require you to give up other legal rights.

10. US state privacy rights

Where a US state privacy law applies to our processing, residents may have additional rights to know the categories and specific pieces of information collected, the purposes of collection, the categories of sources and recipients, and relevant disclosures. California residents may have rights under the CCPA/CPRA, including access, correction, deletion and opting out of sale or sharing, subject to the law's applicability and exceptions. Other states may provide similar rights and a right to appeal a refused request.

Use available store privacy choices or email us to exercise an applicable opt-out. You may use an authorised agent where allowed. We do not knowingly sell or share for advertising the personal information of children under 16.

11. Security

We take reasonable steps to protect personal information and limit access to those who need it. No online transmission or storage method is completely secure. Please avoid sending unnecessary sensitive information in support messages.

12. Children

Although we sell children's clothing, our shopping service is intended for parents, guardians and other adult customers. We do not knowingly collect personal information directly from children under 16. For a sizing question or damaged-item claim, describe the garment or send a photo of the item; you do not need to identify or photograph your child.

If you believe a child has provided personal information directly to us, contact support@littleroam.site so we can investigate and delete it where appropriate.

13. Changes to this policy

We may update this policy when our practices or applicable requirements change. The date above shows the latest revision. We will provide additional notice or obtain new consent where required for a material change.

14. Contact us

Little Roam / Riverstone Commerce
904 Park Cir
Sun Prairie, Wisconsin 53590
United States
Email: support@littleroam.site