Privacy Policy

Last updated: July 16, 2026

1. What we collect

• Order data: name, shipping address, email, and the items you buy — needed to make and deliver your order.
• Payment data: your card details go straight to our payment processor (Stripe) from the payment form — they never reach our servers and we never see or store them. We keep only the payment's reference and its status.
• Technical data: basic logs and approximate location (used, for example, to suggest towns near you). Our site runs on Cloudflare.
• Content you upload: if you personalize a product with your own image (for example an emblem), we store that image securely to preview and produce your order, share it with our print partner only for fulfillment, and delete it within 90 days after your order is completed.

2. How we use it

• To produce and deliver your order — order details are shared with our print partners only as needed for fulfillment.
• To answer support requests.
• With your consent, to send occasional emails about new hometown products — you can unsubscribe anytime.

3. What we don't do

We don't sell your personal data. We don't share it with anyone beyond the services that make the store work (Stripe and PayPal for payments, print partners for fulfillment, Cloudflare for hosting).

4. Your rights

Wherever you live — and especially under the EU/UK GDPR — you can ask us to access, correct, export or delete the personal data we hold about you. Email support@rootsworn.com and we'll respond within 30 days.

5. Cookies

We use only what the store needs to function: a cart identifier stored in your browser, and the cookies our payment processor sets on the payment form to prevent fraud. Checkout happens on this site — you are not sent to another company's page.

6. Retention & contact

Order records are kept as long as tax and consumer law require, then deleted. Questions about this policy: support@rootsworn.com.