Privacy policy

Privacy Policy

Last updated: 15 October 2026

This Privacy Policy explains what information berstukstore.com (the "Site") collects about you, why we collect it, who we share it with, and the choices you have. The Site is operated by VLS Trading Ltd, trading as Berstuk Store ("Berstuk", "we", "us", "our").

Contact us

Berstuk Store (VLS Trading Ltd)
539 W Commerce St #465, Dallas, Texas 75208, United States
Email: info@berstukstore.com

If you have a question about this policy, want to exercise a privacy right, or wish to make a complaint, email us at the address above and we will respond.

The short version

• We sell craft kits. We collect what we need to show you the Site, take your order, deliver it, and send you marketing you asked for.
• We use cookies and similar technologies for analytics and advertising.
• Advertising and analytics cookies do not run until you accept them, and we honour browser opt out signals such as Global Privacy Control.
• We do not sell your personal information for money. Some advertising cookies count as "sharing" under California law, and you can switch that off at any time.
• We do not collect health information, financial account information, biometric information, or information about your race, religion, politics, sex life or sexual orientation.

What we collect and why

Device and usage information. Your IP address, approximate location derived from it, browser and device type, operating system, language, referring site, the pages and products you view, the search terms you type into our Site search, the links and buttons you click, how far you scroll, and how long you spend on a page. We collect this automatically through cookies, log files, tags and pixels, so that the Site loads correctly, so we can see what is working and what is not, and so we can measure our advertising.

Order information. Your name, billing address, shipping address, email address, phone number, payment method and the last four digits of your card, and the contents and value of your order. Your full card number goes directly to our payment processor and we never see or store it. We use this to take and fulfil your order, send confirmations and tracking, handle returns, screen for fraud, and keep the records the law requires.

Account and marketing information. Your email address and any preferences you give us when you sign up to our list, enter a prize draw, use an on site popup or create an account. We use this to send you the emails and texts you asked for, and you can unsubscribe from any of them at any time.

Customer service information. Whatever you tell us when you contact us by email or through a form, and our replies.

Cookies and analytics

A cookie is a small file stored on your device when you visit a website. We use three kinds.

Strictly necessary cookies make the Site work: your basket, your login, checkout, security and your own cookie preferences. These always run, because without them the Site cannot function.

Analytics cookies tell us how the Site is used: which pages people land on, where they leave, what they search for and how many visits turn into orders.

Advertising cookies let us measure which of our ads led to a visit or an order, and let our advertising partners show you our ads on other websites.

Analytics cookies and advertising cookies do not run until you accept them on our cookie banner. You can change your choice at any time using the cookie preferences link in the footer of every page, or by clearing cookies in your browser. Switching them off will not stop you from browsing or buying.

Shopify, which hosts our store, sets its own cookies for the basket, checkout, security and store analytics. Shopify's list is published at https://www.shopify.com/legal/cookies.

Opt out preference signals, including Global Privacy Control

If your browser or an extension sends an opt out preference signal such as Global Privacy Control (GPC), we treat it as a valid request to stop sharing your personal information for cross context behavioural advertising, and we apply it to that browser automatically. You do not need to do anything else. If you have an account with us and are signed in when the signal is received, we apply it to your account as well.

Who we share your information with

We share personal information with the service providers who help us run the business. We do not let any of them use it for their own purposes.

• Shopify hosts the store and processes orders and payments. https://www.shopify.com/legal/privacy
• Payment processors take your payment. We receive confirmation and the last four digits of your card, not the card number.
• Google provides Google Analytics and Google Ads, which we use to understand Site usage and to measure our advertising. https://policies.google.com/privacy. You can opt out of Google Analytics at https://tools.google.com/dlpage/gaoptout.

• Privy runs our email and text message marketing and our on site signup forms. https://privy.com/privacy-policy
• Fulfilment and delivery partners receive your name, address and order contents so your parcel can be packed and delivered. Orders from this Site are fulfilled through Amazon's multi channel fulfilment service.
• Our accountants and professional advisers, where they need it.

We will also disclose personal information where the law requires it, in response to a lawful request from a public authority, to enforce our terms, to protect our rights or the safety of others, or in connection with a sale or reorganisation of the business.

Advertising and your choices

We use your information to measure our advertising and, where you have accepted advertising cookies, to show you our ads on other websites. We do not upload your email address to advertising platforms for enhanced conversion matching.

Beyond our cookie banner, you can limit interest based advertising at:

• Google: https://adssettings.google.com
• Digital Advertising Alliance: https://optout.aboutads.info/
• Network Advertising Initiative: https://optout.networkadvertising.org/

Your California privacy rights

If you live in California, the California Consumer Privacy Act as amended gives you the rights set out below. We do not discriminate against anyone for using them: you will get the same products, prices and service either way.

Categories we have collected in the last 12 months: identifiers (name, email address, postal address, phone number, IP address, device and cookie identifiers); customer records (billing and shipping address, payment information, order history); commercial information (products bought or considered); internet and network activity (browsing on our Site, search terms, interactions with our ads); approximate geolocation derived from IP address; and inferences drawn from the above, such as which products are likely to interest you.

Where it comes from: directly from you, automatically from your device as you use the Site, and from our service providers and advertising partners.

Why we collect it: the business purposes described throughout this policy, which are fulfilling orders, customer service, security and fraud prevention, analytics and Site improvement, marketing and advertising, and legal compliance.

Sale and sharing: we do not sell personal information for money, and we do not sell or share the personal information of anyone we know to be under 16. We do share identifiers, internet activity and inferences with advertising partners for cross context behavioural advertising, which California law treats as "sharing". You can stop this at any time using the "Do Not Sell or Share My Personal Information" link in our footer, by changing your cookie preferences, or by sending a Global Privacy Control signal.

Sensitive personal information: we do not collect it, and we do not use or disclose it for the purposes that would give you a right to limit its use.

Your rights: to know what we have collected about you and what we have done with it; to receive a copy of it; to correct it if it is wrong; to have it deleted; to opt out of sharing for advertising; and to be free from discrimination for asking. To make a request, email info@berstukstore.com with the subject line "Privacy Request". We will verify your identity by matching the details you give us against our records, and we will respond within 45 days, or tell you if we need longer. An authorised agent may make a request for you if they provide written permission signed by you.

Other United States privacy rights

Residents of other states with comprehensive privacy laws, including Colorado, Connecticut, Virginia, Utah, Texas, Oregon and Montana, have comparable rights to access, correct, delete and obtain a copy of their personal information, and to opt out of targeted advertising. Use the same contact details and we will apply the same process. Where your state gives you a right to appeal a refused request, you may appeal by replying to our decision, and we will respond in writing.

Visitors from the United Kingdom and the European Economic Area

We ship only within the United States, but our parent company is registered in the United Kingdom and visitors from elsewhere can reach the Site. If you are in the United Kingdom or the EEA, we process your personal information on one of these legal bases: your consent, for marketing and for non essential cookies; performance of our contract with you, to take and fulfil your order; our legitimate interests in running, securing and improving the business; and compliance with our legal obligations. You have the right to access, correct, delete, restrict, object to and port your personal information, and to withdraw consent at any time. If you are unhappy with how we have handled a request, you can complain to the UK Information Commissioner's Office at https://ico.org.uk/make-a-complaint/ or to your local supervisory authority.

How long we keep your information

Order records are kept for seven years, because tax and accounting rules require it. Marketing contact details are kept until you unsubscribe and for a short period afterwards, so that we can honour your opt out. Analytics data is kept according to the retention setting of the tool, up to 14 months. Customer service correspondence is kept for three years. We delete or anonymise information once we no longer need it, unless we are required to keep it.

Security

We use the security controls built into Shopify and our other providers, including encryption of your connection to the Site and of payment data in transit. Access to customer data is limited to the people who need it. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Children

The Site is intended for adults and is not directed at children under 18. We do not knowingly collect personal information from children under 16. If you believe a child has given us personal information, email us and we will delete it.

Changes to this policy

We may update this policy to reflect changes to our practices or to the law. The date at the top shows when it last changed. If we make a material change, we will say so on the Site.