The short version
We collect what we need to make your hoodie and get it to you, and nothing more. We have never sold anyone's data and we are not going to. We never see your card number - it goes straight to Stripe. At the time of writing we run no advertising trackers on this site: no Google Analytics, no Meta pixel, no tag manager. If that changes, this page changes first.
1. Who is responsible for your data
The Terrible Hoodie, 10 Brookwood Road, Clifton, NJ 07012. Questions, requests or complaints about privacy go to support@theterriblehoodie.com or (201) 400-7940.
2. What we collect
What you give us
- To fulfill an order: your name, email address, phone number and shipping address.
- Your personalization: the name you ask us to print.
- If you create an account: a password, stored only as a secure one-way hash. We cannot read your password and neither can anyone who obtained the database.
- If you contact us: whatever you put in the message.
- If you join a waitlist or sign up for offers: your email address.
What is recorded automatically
- Your IP address and browser user-agent, when you join a waitlist or when an action is written to our internal activity log. We use this to spot abuse and fraud, not to build a profile of you.
- Cart contents, so an interrupted order can be picked back up.
- A session cookie, which is what keeps your cart and your login working. It is strictly necessary for the site to function and is not used for advertising.
- A record of emails we sent you - the address, the subject and whether it was delivered - so we can tell whether your order confirmation actually reached you.
3. What we do not collect
- Card numbers, CVV codes or bank details. These are entered directly into Stripe's secure fields and are never transmitted to, or stored on, our servers. We hold only Stripe's reference for the payment.
- Advertising or cross-site tracking data. We currently run no third-party analytics or advertising pixels.
4. Why we use it
- To take payment, make your hoodie and ship it to you.
- To email you about your order - confirmation, production updates and tracking. These are service messages and you cannot opt out of them while an order is open.
- To answer you when you contact us.
- To send marketing email, only if you opted in. Every marketing email has an unsubscribe link and we honor it.
- To keep records we are required to keep, and to prevent fraud and abuse.
5. Who we share it with
We share the minimum necessary, with companies that are working for us:
- Stripe - to process your payment. Stripe is the controller of your payment data; their privacy policy is at stripe.com/privacy.
- Shipping carriers - your name and address, so the parcel can be delivered, and our shipping software which buys the label.
- Our own mail server - which we run ourselves, to send you order email.
- Where the law requires it - for example a valid legal request.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
6. How long we keep it
- Order and customer records: kept while your account is active and afterwards for as long as we need them for tax, accounting and dispute purposes.
- Marketing signups: until you unsubscribe.
- Waitlist and activity log entries: kept only as long as they are useful for security and abuse prevention, then removed.
7. Your rights
Wherever you live, you can ask us to:
- tell you what personal information we hold about you,
- give you a copy of it,
- correct anything that is wrong,
- delete it, where we are not required to keep it,
- stop sending you marketing.
Email support@theterriblehoodie.com and we will respond. We will not charge you, and we will not treat you differently for asking.
If you are a California resident, the CCPA and CPRA give you these rights specifically, including the right to know, to delete, to correct, and to opt out of sale or sharing. As above, we do not sell or share your personal information, so there is nothing to opt out of - but the right to know and to delete apply, and you can exercise them at the same address.
8. Security
- The whole site is served over HTTPS. Your connection is encrypted.
- Card details never reach our servers.
- Passwords are stored as one-way hashes, never as readable text.
- Administrative access to the store is password protected and separate from customer accounts.
No system is perfectly secure, and we will not pretend otherwise. If we ever discover a breach affecting your personal information, we will tell you and the relevant authorities as the law requires.
9. Children
This site is not directed at children under 13 and we do not knowingly collect their personal information. If you believe a child has given us information, contact us and we will delete it.
10. Changes to this policy
If we change how we handle your data - for example if we add analytics - we will update this page and change the effective date at the top before the change takes effect.
11. Contact
The Terrible Hoodie
10 Brookwood Road, Clifton, NJ 07012
Email support@theterriblehoodie.com
Phone (201) 400-7940