Draft — legal review required

Privacy Policy

Last updated: October 20, 2026

Draft — legal review required. This policy must be reviewed by a lawyer and every bracketed placeholder filled in before it goes live.

UPVOTEBLUE is a home-textile studio based in Boston, Massachusetts, USA. This Privacy Policy explains what personal information we collect when you visit our website, request a quote, order a fabric sample kit or write to us, how we use it, and the choices you have.

Who we are

Business: UPVOTERED LLC, a Massachusetts limited liability company; UPVOTEBLUE is a brand of UPVOTERED LLC
Address: 78 Auckland St, Boston, MA 02125, USA
Email: info@upvote.blue
Phone: +1 617 304 1330

Relationship with our sister brand UPVOTERED: both brands are operated by UPVOTERED LLC. If you ask for a set that combines UPVOTERED furniture and UPVOTEBLUE textiles, your request is handled by the same team. We share information between the two brands only to answer a request that involves both.

Information we collect

Information you give us

Contact details: your name, email address, phone number, city and state or country, and company name if you write on behalf of a business.
Request details: the products you’re interested in (cushions, throws, rugs, curtains, upholstery, slipcovers, seat pads), sizes, quantities, fabric choices, your message, our quotes and our correspondence with you.
Photos and files you upload: pictures of rooms, interiors or furniture, measurements and sketches (JPG, PNG or PDF). Photos can reveal more than you intend, so please crop out faces, documents, house numbers and anything else we don’t need to see.
Shipping details: your shipping address and the recipient’s name when we send a fabric sample kit.
Billing details: if an order goes ahead. Card payments are handled by Stripe, so we never see or store full card numbers; for bank transfers (ACH) we keep the payment reference and amount.
Marketing preferences: whether you’ve opted in to our emails.

Information collected automatically

Technical data and logs: IP address, date and time of your visit or form submission, browser and device type, pages requested, and spam-filter signals. Our hosting and form providers collect this to deliver and protect the site.
Analytics data: only if you accept analytics in the cookie banner. We use Plausible Analytics, which works without cookies and doesn’t collect personal data or IP addresses.

For details on cookies and browser storage, see our Cookie Policy.

How we use your information

To answer your questions and prepare quotes
To pack and ship fabric sample kits
To plan and carry out made-to-order work: measurements, fabric, production and delivery
To invoice and keep the business and tax records we’re required to keep
To keep the website and forms secure and free of spam
To understand how the site is used, if you’ve consented to analytics
To send you news about fabrics, collections and the studio, if you’ve opted in
To comply with the law and to establish or defend legal claims

We share personal information only with service providers who help us run the studio and the site, and only as far as they need it:

Forms: what you submit is processed by a script on our own hosting and delivered to our mailbox; it is not stored on the web server.
Hosting provider: serves the website and keeps server logs. Hostinger.
Email provider: handles our email and, if you’ve opted in, our newsletter. Google Workspace for email; the newsletter is sent from the same account until it grows.
Shipping carrier: receives your name, shipping address and possibly phone number to deliver sample kits and orders. USPS and UPS.
Payment processor: if we take payments for orders. Stripe, Inc., for card payments.
Accountant or bookkeeper: for invoicing and tax records.
Analytics provider: only if you accept analytics. Plausible Insights OÜ (EU-hosted, cookieless).
Authorities: when required by law, subpoena or court order, or to protect our rights or the safety of others.

If the business is ever sold or reorganized, personal information may transfer to the new owner, subject to this policy.

We do not sell your personal information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

Marketing emails

We send marketing emails only if you tick the opt-in box on one of our forms. Opting in is never a condition of getting a quote or a sample kit. Every marketing email includes an unsubscribe link and our physical postal address, as required by the federal CAN-SPAM Act. We honor unsubscribe requests promptly, and you can also unsubscribe by writing to info@upvote.blue. We may still send you non-marketing messages about a request or order you’ve made.

Data security

We use reasonable administrative, technical and physical safeguards to protect personal information, such as access limited to people who need it and encrypted connections (HTTPS) to the site. No method of transmission or storage is completely secure, so we can’t guarantee absolute security.

We follow the Massachusetts data-security regulation 201 CMR 17.00 and keep a written information security program: access to personal information is limited to the people who need it to handle your request, accounts are protected with two-factor authentication, data is encrypted in transit, and paper records are kept locked at the studio.

How long we keep information

We keep personal information only as long as we need it for the purposes above or as the law requires, then delete or de-identify it.

Quote requests that don’t lead to an order: 24 months
Orders, invoices and business records: 7 years (tax and accounting records)
Uploaded photos and files: 24 months, or until the job is finished plus 24 months
Sample kit shipping details: 12 months
Server and security logs: 30 days
Marketing preferences: until you unsubscribe, then 3 years as a record of your choice

Children’s privacy

This site is not directed to children under 13, and we do not knowingly collect personal information from them, in line with the Children’s Online Privacy Protection Act (COPPA). If you believe a child has sent us personal information, contact us and we will delete it.

Your state privacy rights

Depending on where you live, you may have rights over your personal information, such as the right to know what we hold, to get a copy, to correct it, to have it deleted, and to opt out of its sale or use for targeted advertising. The California Consumer Privacy Act as amended by the CPRA, and comprehensive privacy laws in other states, apply only to businesses that meet certain thresholds, and they may or may not apply to us. Whether or not a state law applies to us, we honor requests from any US resident to see, correct or delete the personal information we hold — write to info@upvote.blue and we’ll respond within 45 days. We do not sell personal information or use it for targeted advertising.

Whatever the law requires, you’re welcome to ask us what information we have about you, or to ask us to correct or delete it. We’ll answer within a reasonable time and won’t treat you differently for asking. We may need to verify your identity first.

Visitors from the EU and UK

The site is run from the United States and your information is processed there. If you’re in the European Union or the United Kingdom, the GDPR or UK GDPR may apply to how we handle your information, for example when we ship a sample kit to you. Where they apply, we rely on the performance of a contract (answering your request, fulfilling an order), our legitimate interests (running and securing the site) and your consent (marketing emails, analytics). You can exercise the same rights of access, correction, deletion and objection by writing to info@upvote.blue.

Do Not Track and Global Privacy Control

If your browser sends a Global Privacy Control (GPC) signal, we treat it as declining analytics and don’t show the cookie banner. Browsers’ older Do Not Track setting has no agreed standard; we don’t track you across sites either way.

Contact us

Questions or requests about this policy: info@upvote.blue · UPVOTERED LLC, 78 Auckland St, Boston, MA 02125, USA · +1 617 304 1330

You can also use our contact page.

Changes to this policy

We may update this policy from time to time. The current version, with its last-updated date, is always on this page. If we make significant changes, we’ll highlight them on the site.

Related: Cookie Policy · Terms of Use