Privacy policy.

1. What we collect

Information you give us

• Your name, email address and shipping address when you place an order.
• Your billing address, when it differs from where the parcel is going.
• Your order history, which is the items, sizes, prices, dates and any returns or exchanges attached to them.
• Anything you write to us, including support email, and your reply to it. We keep the thread so the next person picking it up knows what has already been said.
• Your email address if you subscribe to our list, and nothing else.

Information collected automatically

• Analytics data about your visit: pages viewed, how long you stayed, the site or search that sent you, your device type, browser and rough location at city level.
• Your IP address, which is used to work out that rough location and to catch fraud and abuse, and is not used to identify you personally.
• Cookies and local storage, described in section 4.

What we never see

Card numbers. Payment details are handled by our payment processor and never reach our systems or our staff. We receive confirmation that an order was paid, the last four digits, and the card brand, which is what we need to issue a refund.

2. Why we collect it

• To fulfil your order. Printing a label, sending order and dispatch emails, and handling returns, exchanges and refunds.
• To answer you. Support requests need your order history in front of us to be any use.
• To keep records. Sales and tax records we are required by law to hold on to.
• To prevent fraud. Spotting stolen cards, address mismatches and abuse of the returns policy.
• To improve the site. Aggregate analytics tell us which pages confuse people and which sizes sell out first.
• To send you email you asked for. Only if you opted in, and only until you opt out.

3. Who we share it with

We share the minimum required with the companies that make the shop work. Each one gets only the fields it needs, and none of them are allowed to use your information for their own purposes.

• Shipping carriers. Your name, shipping address, email and phone number if you gave one, so the parcel arrives and the tracking emails work.
• Our payment processor. Order amount and billing details, handled by them directly.
• Our email provider. Your name and email address, to deliver order confirmations, dispatch notices and, if you subscribed, the newsletter.
• Our analytics provider. Usage data about your visit, as described in section 4.
• Our hosting and storage providers. Where the site and the order database physically live.
• Law enforcement or a regulator. Only where we are legally required to, and only what is required.

We do not sell your personal information, we do not rent it, and we do not trade it for advertising. If Summerteez were ever sold or merged, customer records would move with the business, and we would email you before that happened.

4. Cookies and analytics

We use a small number of them, in three kinds.

• Essential. A session cookie that keeps your cart and keeps you signed in. Without it the shop cannot work.
• Local storage. Your cart contents, wishlist and recently viewed items are saved in your own browser rather than on our servers. Clearing your browser data removes them and nothing is lost on our side.
• Analytics. One first party analytics cookie that records the visit described in section 1. It is used in aggregate to see what is working on the site.

We do not run third party advertising or retargeting pixels, so nothing here follows you to another website. You can block or clear cookies in your browser settings at any time. If you block the essential cookie the cart will stop working, which is a limitation rather than a punishment. We honour Global Privacy Control and browser Do Not Track signals as an opt out of analytics.

5. Marketing email

Two kinds of email leave here. Transactional email, such as your order confirmation and dispatch notice, is part of the order and cannot be turned off while an order is open. Marketing email, meaning new designs and restocks, only goes to people who asked for it, and every one of those has an unsubscribe link that works immediately and does not ask you why. Unsubscribing does not affect your orders.

6. How long we keep it

• Order and payment records. Seven years, because US tax rules require it. This is the one category we cannot delete on request while the period is running.
• Account details. For as long as your account is open, and deleted within 30 days of you closing it.
• Support email. Two years from the last message in the thread.
• Newsletter subscription. Until you unsubscribe. We then keep your email on a suppression list so we do not accidentally add you again.
• Analytics data. Fourteen months, then deleted.

7. Your rights

Wherever you live in the United States, you can ask us to:

• Tell you what personal information we hold about you and where it came from.
• Send you a copy of it in a portable file.
• Correct anything that is wrong.
• Delete it, subject only to the tax records described in section 6, which we are required to keep.
• Stop sending you marketing email.
• Opt out of analytics.

Email support@summerteez.com with the subject line Privacy request. We reply within one business day and complete the request within 30 days. We will ask you to confirm the request from the email address on the order, which is how we check it is really you. Exercising any of these rights costs nothing and changes nothing about how we treat you as a customer.

8. California privacy rights

If you live in California, the California Consumer Privacy Act as amended by the California Privacy Rights Act gives you specific rights. They are the rights listed in section 7, plus the right to know the categories of personal information we collect, the purposes we collect them for and the categories of third party we disclose them to, all of which are set out in sections 1 to 3.

We have not sold or shared personal information as those terms are defined by the CCPA in the previous twelve months, and we have no plans to. We do not use or disclose sensitive personal information for any purpose other than fulfilling your order. We do not knowingly sell the personal information of anyone under 16.

To exercise a California right, email us with the subject line California privacy request. We will acknowledge it within 10 business days and respond within 45 days, extending once by a further 45 days if the request is complicated, in which case we will tell you why. You may use an authorized agent, and we will ask for written proof of that authority. We will not discriminate against you for exercising any of these rights.

9. Security

The site runs over HTTPS, the order database sits behind access controls, and only the few people who need order data have accounts that can see it. Card details never touch our systems. No system is perfect, so if a breach ever affects your personal information we will tell you and the relevant authorities as required by law, and we will tell you what was in it rather than write around it.

10. Children

Summerteez is not directed at children under 13 and we do not knowingly collect their personal information. If you believe a child has given us information, email us and we will delete it.

11. Changes to this policy

When this policy changes we post the new version here and move the date at the top of the page. If a change materially affects how we handle information we already hold, we email everyone with an account or an open order before it takes effect.

12. How to reach us

Privacy questions and requests go to support@summerteez.com. A person reads it and replies within one business day. General questions can go to the same address, or through the contact page.