Privacy Policy
This Privacy Policy explains how SUBSTANDARD (“we”, “us”, “our”) collects, uses, and protects your personal data when you visit or make a purchase from our website.
1. Who We Are
SUBSTANDARD is a UK-based merchandise brand operating via this website. For data protection purposes, we are the “data controller” of your personal information.
2. What We Collect
When you place an order or create an account, we may collect:
- Name
- Billing and shipping address
- Email address
- Phone number (if provided)
- Order details
- IP address and browser data for security and fraud prevention
We do not store full payment card details on our servers.
3. How We Use Your Data
- To process and fulfil orders
- To communicate about your purchase
- To provide customer support
- To prevent fraud and abuse
- To comply with legal obligations
If you opt in to marketing communications, we may also use your email address to send updates, offers, or product announcements. You can unsubscribe at any time.
4. Legal Basis for Processing
Under UK GDPR, we rely on the following lawful bases:
- Performance of a contract (processing your order)
- Legal obligation (accounting, tax records)
- Legitimate interests (security, fraud prevention)
- Consent (for marketing emails)
5. Payment Processing
Payments are processed securely via third-party payment providers (such as Stripe, Apple Pay, or Google Pay). These providers handle your payment information directly and operate under their own privacy policies.
6. Print & Fulfilment Partners
To produce and ship made-to-order items, we may share necessary details (such as your name and shipping address) with trusted fulfilment partners. They are contractually required to use this data only for order fulfilment.
7. Reviews & Public Information
If you leave a product review, your chosen display name may appear publicly. We recommend using a pseudonym. Billing and payment information is never displayed publicly.
8. Data Retention
We retain order information for as long as necessary for accounting, tax, and legal obligations. Account data may be deleted upon request unless retention is legally required.
9. Your Rights
Under UK data protection law, you have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request deletion (where legally permitted)
- Object to processing
- Withdraw consent for marketing
To exercise these rights, contact us using the details provided on this website.
10. Cookies
We use cookies to ensure the website functions properly (e.g., shopping cart, login sessions) and to improve performance and security. You can manage cookie settings via your browser.
11. Security
We implement appropriate technical and organisational measures to protect your data. However, no internet transmission is ever completely secure.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The version displayed on the Site at the time of use applies.
Last updated: February 2026