1. OVERVIEW & SCOPE
Old School T-Shirts ("we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, process, and safeguard your personal information when you visit our website, register an account, upload custom artwork, or place an order.
2. PERSONAL DATA WE COLLECT
We process personal data necessary for fulfilling customer orders, providing studio customizer functionality, and maintaining secure store infrastructure:
- Identity & Contact Data: Name, email address, phone number, shipping address.
- Account Data: Hashed password credentials, saved custom design references.
- Financial Data: Stripe Checkout session tokens (we do NOT store raw credit card details).
- Custom Media Uploads: PNG artwork files uploaded to our private storage bucket.
- Technical Telemetry: IP addresses, HTTP access logs, and integration security audit records.
3. SUB-PROCESSORS & THIRD-PARTY INTEGRATIONS
To operate our print-on-demand storefront, we share minimal data strictly with trusted service providers:
- Supabase Inc.: Database hosting, user authentication, and private customer storage.
- Stripe Inc.: Payment gateway processing. Card payments are processed directly by Stripe under PCI-DSS compliance.
- Printful Inc.: On-demand print fulfillment and parcel shipment dispatch.
- Brevo (Sendinblue): Transactional email delivery (order confirmations, shipping updates).
4. CUSTOM ARTWORK PRIVACY
Custom artwork files uploaded to our online studio are stored in private storage containers accessible only to you and authorized fulfillment services for printing. Uploaded artwork is never published publicly or shared with third parties for advertising purposes.
5. DATA RETENTION & YOUR RIGHTS [LEGAL REVIEW REQUIRED]
We retain transactional order data for legally required tax, accounting, and audit periods. You have the right to request access to your personal data, data export, or account deletion by contacting [OWNER CONFIG REQUIRED: PRIVACY EMAIL]. Legal financial order records are retained as required by applicable commercial regulations.