Policies
Privacy policy.
This policy explains what {{LEGAL_ENTITY_NAME}}, doing business as Hudor Clothing, collects when you use {{SITE_DOMAIN}}, why we collect it, who we share it with, and what you can ask us to do about it. It is written to be read, not to be survived.
1. Who we are
{{LEGAL_ENTITY_NAME}}, {{BUSINESS_ADDRESS}}, {{BUSINESS_CITY_STATE_ZIP}}. Privacy questions go to {{PRIVACY_EMAIL}}.
2. What we collect
- Information you give us. Name, email address, shipping address, billing address, and phone number when you place an order. Email address alone when you join the mailing list. Whatever you include when you email us.
- Payment information. Card details are entered into a hosted payment field served by CardConnect, our payment processor, and go directly from your browser to them. We never receive, transmit, or store your full card number, expiration date, or security code. What we receive back is a token and the last four digits, so we can identify the transaction.
- Your bag. The contents of your shopping bag are stored in your own browser, on your own device, using localStorage. Nothing about your bag reaches our servers until you check out, and clearing your browser data clears it.
- Information collected automatically. Our hosting provider keeps standard server request logs: IP address, browser type, pages requested, and timestamps. That is infrastructure, not profiling, and we do not use it to follow you around.
- Cookies and trackers. We do not currently run analytics scripts, advertising trackers, or third-party cookies. If that ever changes, we will update this policy first and say so plainly.
3. Why we collect it
To take and fulfill your order, to email you about that order, to answer your questions, to prevent fraud and abuse, and to meet our tax and accounting obligations. If you joined the mailing list, to send you the mailing list. That is the whole list of reasons.
4. Who we share it with
Only the service providers we need to run the store, and only the minimum each one needs:
| Provider | What it handles | What it receives |
|---|---|---|
| Vercel | Website hosting | Request logs, IP address |
| CardConnect / CardPointe (Fiserv) | Payment processing | Card data direct from your browser, billing details, order amount |
| Resend | Order and newsletter email | Name, email address, order contents |
| {{SHIPPING_PROVIDER}} | Label creation and tracking | Name, shipping address, package details |
We also disclose information when required by law, subpoena, or valid legal process, and in connection with a sale or transfer of the business, in which case this policy travels with the data.
5. What we do not do
We do not sell your personal information. We do not share it for cross-context behavioral advertising. We do not rent, trade, or otherwise hand your email address to anyone.
6. How long we keep it
Order records are retained for {{ORDER_RETENTION_PERIOD}} to satisfy accounting, tax, and warranty obligations. Mailing list records are kept until you unsubscribe, plus a suppression record so we do not accidentally email you again. Messages you send us are kept for {{CONTACT_RETENTION_PERIOD}}.
7. Your rights
Depending on where you live, you may have the right to request access to the personal information we hold about you, request correction of inaccurate information, request deletion, request a portable copy, opt out of the sale or sharing of personal information, and not be discriminated against for exercising any of these. Residents of California and of the other US states with comprehensive privacy laws in force have these rights by statute. We extend them to every customer regardless of state.
To exercise any right, email {{PRIVACY_EMAIL}} from the address on your order, or include enough detail for us to find your record. We respond within 45 days and will tell you if we need an extension. We may need to verify your identity before acting on a deletion request, and we may retain the minimum records that tax or fraud-prevention law requires us to keep.
8. Email preferences
Every marketing email includes an unsubscribe link and our physical mailing address. Unsubscribes are processed within 10 business days and normally within minutes. Transactional email about an order you placed is not marketing and will still be sent.
9. Children
This site is not directed to children under 13 and we do not knowingly collect personal information from them. If you believe a child has given us information, email {{PRIVACY_EMAIL}} and we will delete it.
10. Security
The site runs over HTTPS. Card data is handled inside CardConnect's hosted payment field so it never touches our servers, which keeps us in the lowest PCI compliance scope. Access to order data is limited to the people who need it to fill orders. No system is perfectly secure and we will not pretend otherwise.
11. Do Not Track
Browsers send Do Not Track signals inconsistently and there is no agreed standard for responding to them, so we do not respond to DNT headers. We honor recognized opt-out preference signals where required by law. Since we run no trackers, there is very little to opt out of.
12. Changes
If this policy changes materially we will post the new version here with a new date at the top and, for significant changes, note it in a mailing list email.
13. Contact
{{PRIVACY_EMAIL}}, or write to us:
{{LEGAL_ENTITY_NAME}}
{{BUSINESS_ADDRESS}}
{{BUSINESS_CITY_STATE_ZIP}}
Questions this page did not answer? Reach a person