Privacy notice
Who we are: Hats & Stuff, 61 Bridge Street, Kington, HR5 3DJ, United Kingdom. We're the controller of the personal data described here. Contact: hello@hatsandstuff.com.
What we collect, and why
- Your name, delivery address and email. We use these to make, ship and support your order, and to email you order and shipping updates. Lawful basis: to perform our contract with you.
- Order records: items, prices, dates and payment references. We keep these as accounting and tax records. Lawful basis: legal obligation.
- IP addresses, briefly, to keep the shop secure: for example to block repeated wrong guesses when someone looks up an order. Cloudflare also sees them to deliver the site, and tells us the country they're in, which we use to show your region's prices first; we don't store it with anything about you. Lawful basis: our legitimate interest in keeping the shop and your order safe.
- No analytics, advertising trackers or third-party cookies. We set three functional cookies: one for your bag, one so the payment animation on your order page plays only once, and one for staff login. We do count page views: how many times each page was viewed each day, which site sent the visitor, the country and whether it was a phone or a computer, as daily totals only, with no cookies, no IP addresses and nothing that identifies you.
Who we share it with
- Printful makes and ships your order. They receive your name, delivery address and email, and pass the address to their delivery carriers.
- postcodes.io, a free public service, checks UK postcodes at checkout so orders don't go astray. It receives the postcode only, nothing else about you or your order.
- CoinCorner processes your Lightning payment. They receive the order number and amount, not your name or address.
- Resend sends our order emails. They receive your email address and the message.
- Google Cloud hosts the server and database the shop runs on, and Cloudflare delivers the website.
- Cloudflare and Google (Gmail) handle our email: messages to our address are routed by Cloudflare to a Gmail inbox.
- Anthropic: we run the shop with the help of an AI assistant (Claude). It can read order details and the emails you send us, to help us answer them and keep orders moving. A person is responsible for every decision about your order, and what it reads isn't used to train AI models.
We only pass on what each of them needs to make, deliver, take payment for or tell you about your order. Each keeps its own records under its own privacy policy and retention rules, which our deletion doesn't reach.
Some of these companies process data outside the UK, mainly in the US and the EU. Where they do, they rely on the safeguards UK law requires, such as the UK–US data bridge or standard contractual clauses.
How we look after it
- We ask for as little as possible: a name, an address and an email, because that's what it takes to post your order. No accounts, no passwords, no phone number, and no card number, ever.
- Your order page is private. Keep your order link private: anyone with it can see your order. It carries a 256-bit secret that we don't store: our server works it out again from a key kept apart from the order database. To find your order without the link, enter your order number plus either the delivery postcode or the email you ordered with. Repeated wrong guesses are blocked. The link expires when we delete your delivery details, 90 days after your order is finished.
- Our website uses HTTPS throughout, so pages and what you type into them travel encrypted.
- We only email you when you'd expect it: to answer your enquiries, to update you about your order, or to tell you when checkout opens if you've asked us to. No newsletters or unsolicited marketing, and we never sell or share your details for anyone's marketing.
- We don't keep it longer than we need it. Your name, email and street address are deleted from our order system automatically (see below).
How long we keep it
We delete your name, email and street address from our order system 90 days after your order is finished, keeping only what our accounts need (what was sold, for how much, when, and to which postcode area or, outside the UK, which state or province). Our encrypted backups can hold them a little longer, until those backups are replaced: at most about five weeks. If something about your order is still open, such as a refund, we keep them until it's settled, and never more than a year. We keep those accounting records for at least five years after the 31 January tax-return deadline for the year of the sale, as HMRC requires.
Your rights
You can ask for a copy of your data (including in a form you can take elsewhere), or ask us to correct it, delete it, restrict how we use it or stop using it. Email us and we'll reply within one month. You can also complain to the Information Commissioner's Office (ico.org.uk).
Bitcoin and privacy
We take Lightning payments only. A Lightning payment doesn't put your order on the public blockchain, and we never publish which payment belongs to which customer.