Privacy policy

The short version

• We collect what we need to sell you clothes and ship them: your name, email, address and order.
• Card payments are handled by Stripe. We never see your card number.
• We measure how the site is used so we can improve it. Analytics cookies are only set if you press Accept.
• We don't sell your personal information.

Orders

When you check out we keep your name, email, shipping address, what you bought, what you paid and the order status. Payment happens on Stripe's checkout page; Stripe tells us whether it succeeded and gives us a payment reference, never your full card details. To ship your order we pass your name and address to the carrier and label service we use (for example Canada Post, Chit Chats or Shippo). We email you about your order.

Accounts

You can make an account with Google sign-in or with an email and password. With Google we receive your name and email address, not your Google password. Passwords are stored only as a secure hash. Your account shows your orders.

Newsletter

If you join the list, we keep your email address and where you signed up, to send you news about drops. Every newsletter includes an unsubscribe link, and you can ask us to remove you at any time.

The shop assistant

If you ask the assistant on the home page a question, we keep the question and the answer so we can improve its answers. Questions it can't answer from our own notes are sent to Anthropic's Claude to write a reply. Don't type personal details you don't want stored.

Measuring the site

We use our own measurement script to see which pages people read, how long a page is actively on screen, how far it is scrolled, which buttons and links are pressed, which site or ad campaign sent the visit, and the type of device and browser. It never records what you type into a form.

If you have not pressed Accept on our cookie notice, this script stores nothing in your browser. To group the pages of one visit, our server makes a code from your IP address and browser type with a key that changes every day, and keeps only that code, never the IP address. A visit can't be followed from one day to the next. If you press Accept, the script keeps a random ID in your browser's storage so we can tell a returning visitor from a new one. If you are signed in, a visit is linked to your account. Only the shop team sees this data, and we delete it after 180 days.

With your OK (the Accept button), we also use Google Analytics, a service from Google, which sets cookies and sends Google the pages viewed, the device and browser type and an approximate location. Until you press Accept it runs in a mode that sets no cookies. You can also use Google's opt-out add-on.

Cookies and storage

We use a session cookie to keep your bag and your sign-in working; the site can't work without it. Your cookie choice is remembered in your browser's local storage. Other storage is only used after you press Accept, as described above.

Who we share it with

Only the services that run the shop for us: Stripe (payments), our shipping carriers and label services, our email provider, Google (sign-in and, with your OK, analytics), Anthropic (the assistant) and our hosting. They may process data outside your country, under their own terms. We never sell your information or share it for other companies' marketing.

How long we keep it

Orders and payment records are kept as long as the law requires for tax and accounting. Account details are kept while your account is open. Newsletter addresses are kept until you unsubscribe. Site measurement data is deleted after 180 days.

Your rights

You can ask for a copy of the personal information we hold about you, ask us to correct or delete it, or object to how we use it, by writing to our email. Depending on where you live (for example the UK, the EU or Canada) you may also have the right to complain to your data protection authority.

Changes

If we change this policy, we'll update the date at the top of this page.