top of page

Privacy Policy

Privacy Policy for Shirthappens.online

Last updated: January 2026

​

1. Introduction

Welcome to [Shirt Happens. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you as to how we look after your personal data when you visit our website and tell you about your privacy rights and how the law protects you.

​

2. The Data We Collect

We may collect, use, store, and transfer different kinds of personal data about you, including:

  • Identity Data: Name, username, or similar identifier.

  • Contact Data: Billing address, delivery address, email address, and telephone numbers.

  • Financial Data: Payment card details (usually processed by a secure third-party provider like Shopify Payments, Stripe, or PayPal).

  • Transaction Data: Details about payments to and from you and other details of products you have purchased from us.

  • Technical Data: IP address, login data, browser type, and location.

3. How We Use Your Data

We will only use your personal data when the law allows us to. Most commonly, we use it to:

  • Register you as a new customer.

  • Process and deliver your order, including managing payments, fees, and charges.

  • Manage our relationship with you (e.g., notifying you about changes to our terms or privacy policy).

  • Deliver relevant website content and advertisements to you.

4. Legal Basis for Processing

Under the UK GDPR, the main bases we rely on are:

  1. Contractual Obligation: To fulfil the order you placed.

  2. Legitimate Interests: For running our business and providing administrative/IT services.

  3. Consent: For sending direct marketing communications via email (which you can withdraw at any time).

5. Third-Party Disclosures

We may share your data with external third parties such as:

  • Service providers acting as processors (e.g., IT and system administration services).

  • Professional advisers including lawyers, bankers, and insurers.

  • HM Revenue & Customs (regulators and other authorities based in the UK).

  • Delivery Couriers to get your products to you.

6. International Transfers

If we transfer your data outside the UK (for example, using a US-based email marketing tool), we ensure a similar degree of protection is afforded to it by ensuring specific safeguards are in place.

7. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way.

8. Your Legal Rights

Under UK data protection laws, you have rights including:

  • The right to access – You can ask for copies of your personal data.

  • The right to rectification – You can ask us to correct inaccurate information.

  • The right to erasure – You can ask us to delete your data in certain circumstances.

  • The right to object – You can object to the processing of your data.

9. Contact Details

If you have any questions about this privacy policy or our privacy practices, please contact us via the contact link at the bottom of this page.

​

bottom of page