Privacy Policy

1. Introduction

This policy explains what personal information Shobley collects when you browse or buy from this store, why we collect it, and what control you have over it. It applies to this website and to the order and support emails we send you.

2. Information We Collect

We collect only what we need to run the store:

• Account information — your name, email address and password. If you sign in with Google, we receive your name, email address and Google account identifier instead of a password.
• Order information — the items you buy, your shipping and billing address, your phone number where you provide it, and your order history.
• Payment information — handled by Stripe, not by us. See section 4.
• Usage information — pages and products you view, searches you run, items you add to your cart, and the referral or campaign link that brought you to the store.
• Technical information — your IP address, browser and device type, and the cookies described in section 5.

3. How We Use Your Information

• To process, fulfill, ship and support your orders.
• To create and secure your account, and to sign you in.
• To send transactional email such as order confirmations, shipping updates, cancellations and refunds.
• To decide which products to stock and how to improve the store, based on aggregated browsing and search activity.
• To measure how well our advertising performs, where you have allowed analytics cookies.
• To detect and prevent fraud, abuse and payment disputes.

We do not sell your personal information.

4. Payments

Card payments are processed by Stripe. Your full card number, expiry date and security code are entered on Stripe's own secure payment page and are never sent to or stored on our servers. We receive only the result of the payment and a limited reference such as the card brand and last four digits, so we can match a payment to your order and process refunds.

5. Cookies & Analytics

We use two kinds of cookies:

• Essential cookies always run. They keep you signed in, remember your cart between visits, and protect forms against cross-site request forgery. The store cannot work without them.
• Analytics and advertising cookies only run after you press Accept on our cookie banner. These may include Google Analytics, the Meta pixel and the TikTok pixel, which help us understand which products and campaigns work.

If you press Decline, no analytics or advertising scripts are loaded at all. You can change your mind at any time by clearing this site's cookies in your browser, which brings the banner back.

6. Who We Share Data With

We share personal information only with the service providers we need to complete your order:

• Payment processing — Stripe.
• Fulfillment and shipping — our print and dropship partners and their carriers, who receive your name, shipping address and the items to ship.
• Email delivery — our transactional email provider.
• Analytics and advertising — only where you have consented, as described in section 5.

We may also disclose information where we are legally required to, or to protect our rights in a dispute. We do not share your personal information for any other purpose.

7. How Long We Keep Data

We keep order records for as long as we are required to for tax, accounting and dispute-resolution purposes. Account data is kept while your account is open. Analytics data is kept in aggregated form and is not tied back to your name or email address.

8. Your Rights & Choices

You can, at any time:

• View and update your name, email address and password from your profile settings.
• Review your orders from your order history.
• Ask us for a copy of the personal information we hold about you.
• Ask us to delete your account and personal information, subject to records we must keep by law.
• Withdraw your analytics and advertising consent, as described in section 5.

To make any of these requests, email support@shobley.com. Depending on where you live, you may have additional rights under laws such as the CCPA or GDPR, and we will honour those where they apply to you.

9. Security

Traffic to this store is encrypted in transit. Passwords are stored as salted hashes and are never readable by us or by our staff. Payment credentials never reach our systems. Administrative access is limited to named staff accounts and significant administrative actions are logged.

10. Children's Privacy

This store is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it.

11. Changes to This Policy

If we change this policy we will update the "last updated" date at the top of this page. Where the change is significant, we will tell you by email or with a notice in the store.

12. Contact Us

For any privacy question or request, email support@shobley.com.