Privacy policy

1. Who we are

Just Hoodies (“we”, “us”, “our”) is the data controller for personal data collected through justhoodies.co.uk and related customer services (email, returns portal, and account area).

Contact: hello@justhoodies.co.uk

2. What data we collect

• Account data: name, email, password (held securely by our auth provider), optional phone.
• Order data: delivery and billing details, items purchased, payment status, order history.
• Communications: messages you send via contact forms or support email.
• Marketing: email address and marketing preferences where you opt in.
• Technical data: IP address, device/browser type, and site usage if you consent to analytics cookies.

3. How we use your data and lawful bases

Under UK GDPR we rely on the following lawful bases:

• Contract: to process orders, deliver goods, handle returns, and manage your account.
• Legal obligation: tax, accounting, and fraud-prevention records.
• Legitimate interests: site security, service improvement, and responding to enquiries (balanced against your rights).
• Consent: marketing emails and non-essential cookies (including Google Analytics). You may withdraw consent at any time.

4. Who we share data with

We use trusted processors who handle data on our instructions:

• Stripe — payment processing (card, Klarna, PayPal where offered).
• Supabase — hosting, database, and authentication.
• Resend — transactional and support email delivery.
• Printful — fulfilment and production of made-to-order garments where applicable.
• Vercel — website hosting and performance (if you consent to analytics-related services).
• Google Analytics — website analytics, only if you accept analytics cookies.

We do not sell your personal data.

5. International transfers

Some processors may store or process data outside the UK. Where this occurs, we ensure appropriate safeguards (such as UK adequacy decisions or standard contractual clauses) are in place.

6. How long we keep data

• Order and tax records: typically up to 6 years after the transaction.
• Account data: while your account is active, then deleted or anonymised after a reasonable period of inactivity unless we must retain records by law.
• Marketing: until you unsubscribe or withdraw consent.
• Analytics: according to Google’s retention settings when you have consented.

7. Your rights

Under UK data protection law you may have the right to:

• Access a copy of your personal data.
• Rectify inaccurate data.
• Erase data in certain circumstances.
• Restrict or object to processing in certain circumstances.
• Data portability where applicable.
• Withdraw consent for marketing or cookies at any time.

To exercise your rights, email hello@justhoodies.co.uk. We may need to verify your identity.

8. Cookies

We use cookies and similar technologies as described in our Cookie policy . Non-essential cookies are only set with your consent.

9. Children

Our shop is not directed at children under 16. We do not knowingly collect data from children.

10. Complaints

If you are unhappy with how we handle your data, contact us first. You may also complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.

11. Changes

We may update this policy from time to time. The “last updated” date at the top will change when we do.