Skip Navigation Website Accessibility

Privacy Policy

Please read our privacy policy carefully to get a clear understanding of how we collect, use, protect or otherwise handle your Personally Identifiable Information within our website.

1. Who We Are

The Meandering Thread
Theresa Porter
2 East Army Post Rd.
Des Moines, IA 50315
United States

2. What personal data we collect and why we collect it

We do not allow users to create accounts, so there is no data collected there that you can download.

When you place an order, your contact information is retained for 7 years for accounting purposes and then it is deleted. You may request we delete it sooner at any time by e-mailing us at We do not store your credit card information. It is encrypted and sent to Stripe (or PayPal) to collect your payment for us. Look for the green lock symbol on your browser to verify security.

When you use the contact form to contact us, your name and email is sent to our website. It also gets sent to our email address with Gmail. We use it to reply to your question. We will not use it to place you on a mailing list unless you ask us to. This contact information is deleted after we reply to you, and will not be shared with anyone else.

When you sign up for our newsletter, your e-mail address is sent to MailChimp and stored on their servers. We use it to send you news and marketing communications. You may unsubscribe at any time, and your email will be deleted from their servers.

When you leave a review on our website, the form asks for your name and email address; however, your email address is not required. It will be stored until you ask for it to be removed.

3. Cookies

You can control cookies from your browser. If you don’t accept cookies, this site will not function properly to allow you to place an order. These cookies to do things like remember the items you placed into the shopping cart so that you can continue shopping, and process those items for sale.

When you visit our website, Google Analytics will pick up your IP address; however, it is not personally identifiable. It is anonymized and set to be stored with Google for 26 months. Google Analytics uses cookies that compile aggregate data about site traffic and site interaction so that we can offer better site experiences and tools in the future. We only use this information for statistical analysis purposes.

If you are logged onto Facebook or Instagram and visit this site, Facebook or Instagram may log your visit for advertising purposes. We do not have access to this individualized data. We use some social sharing plugins, to allow you to share certain pages of our website on social media. Facebook Messenger is enabled on this site if you would like to use it to ask questions.

Occasionally, at our discretion, we may include or offer third party products or services on our website. These third party sites have separate and independent privacy policies. We therefore have no responsibility or liability for the content and activities of these linked sites. Nonetheless, we seek to protect the integrity of our site and welcome any feedback about these sites.

A cookie in no way gives us access to your computer or any sensitive information about you, other than the data you choose to share with us.


For our EU visitors, this Privacy Statement and its enumerated policies are intended to comply with the General Data Protection Regulation (GDPR) that sets guidelines for the collection and processing of personal information of individuals within the European Union (EU). If you are located in the EU, you will also be asked to provide clear and unequivocal affirmative consent to the collection, processing, and sharing of your user information via cookies and similar technologies.

5. How we protect your information

Our website is scanned on a regular basis for security holes and known vulnerabilities in order to make your visit to our site as safe as possible. Your personal information is contained behind secured networks and is only accessible by a limited number of persons who have special access rights to such systems, and are required to keep the information confidential. In addition, all sensitive information you supply is encrypted via Secure Socket Layer (SSL) technology. If we ever have a data breach, we will post it here and may notify you via e-mail if you are on our contact list.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Last Edited: 6/12/2018