Privacy Policy

Who we are

SODRK is an independent clothing brand based in the United States. We operate the online store at sodrk.com. When this policy says “SODRK”, “we”, “us” or “our”, it means the owner of sodrk.com, who is responsible for your personal information as the data controller.

Contact: [email protected]

Information we collect

Information you give us

• Order details: name, email address, phone number, billing address, shipping address and the items you buy.
• Account details: if you create an account, your login email, password (stored encrypted) and order history.
• Payment details: card information is entered directly with Stripe. We never see or store your full card number.
• Newsletter: your email address, if you sign up for releases and restocks.
• Messages: anything you send us by email, such as questions, return requests or feedback.

Information collected automatically

• Device and usage data: IP address, browser type, device type, operating system, pages viewed, referring URL and the date and time of your visit.
• Cookies: small files that keep your bag, login and checkout working and help protect the site. See our Cookie Policy.
• Order attribution: WooCommerce records how you arrived at the store (for example, the referring site) and attaches it to your order.

How we use your information

• Process, fulfil and ship your orders
• Take payment and prevent fraud
• Send order confirmations, shipping updates and replies to your messages
• Handle returns, refunds and misprint claims
• Send our newsletter, if you signed up (you can unsubscribe at any time)
• Keep the site secure, fast and working properly
• Understand how the store is used so we can improve it
• Meet our legal, tax and accounting obligations

We do not sell your personal information, and we do not share it for cross-context behavioural advertising.

Who we share it with

We share only what each provider needs to do its job. Each one handles your information under its own privacy policy.

Stripe, Inc.

Payment processing. Receives your payment details, billing address, name, email address and order amount. Location: United States.

Printful Inc.

Printing, packing and shipping. Receives your name, shipping address, email address, phone number and the items ordered. Printful passes delivery details to the postal carrier that ships your order. Locations: United States, European Union and other fulfilment regions.

Klaviyo, Inc.

Email marketing. Receives your email address if you sign up for our newsletter. Our store also shares order details with Klaviyo (name, email address, items ordered and order value) so it can send relevant emails to subscribers. Location: United States.

Cloudflare, Inc.

Security and content delivery. Processes IP addresses and request data to protect the site from attacks and load pages quickly. Location: global network.

Hostinger

Our website, including WooCommerce and its order database, runs on servers operated by Hostinger International Ltd. Hostinger stores the site’s files, order database and server logs, which include IP addresses and device information.

Legal and business reasons

We may disclose information if required by law, to respond to valid legal requests, to protect our rights or the safety of others, or as part of a sale or transfer of the business.

Legal bases (EU, EEA and UK)

If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases under the GDPR and UK GDPR:

• Contract: to process and deliver your order and manage your account.
• Legitimate interests: to secure the site, prevent fraud and improve the store.
• Consent: for the newsletter and any non-essential cookies. You can withdraw consent at any time.
• Legal obligation: to keep tax and accounting records.

International transfers

SODRK is based in the United States, and our providers operate in several countries. Your information may be processed outside the country where you live. Where required, our providers use recognised safeguards for these transfers, such as the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.

How long we keep it

• Order and tax records: as long as required by law, usually up to 7 years.
• Account details: until you delete your account or ask us to.
• Newsletter: until you unsubscribe.
• Emails with us: up to 2 years after the conversation ends.
• Server and security logs: kept for a short period by our hosting and security providers.

Security

The site uses HTTPS encryption, and payments are handled by Stripe, which is certified to PCI DSS Level 1. We limit access to personal information to what is needed to run the store. No method of transmission or storage is completely secure, but we take reasonable steps to protect your information.

Your rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you
• Correct information that is wrong or incomplete
• Delete your information
• Receive a copy of your information in a portable format
• Object to or restrict certain processing
• Withdraw consent at any time, where we rely on consent
• Opt out of the sale or sharing of personal information (we do neither)
• Not be treated differently for exercising your rights

EU, EEA and UK

You can also lodge a complaint with your local data protection authority.

California and other US states

Residents of California, Colorado, Connecticut, Virginia, and other states with privacy laws have the rights listed above. In the last 12 months we collected identifiers, commercial information, and internet activity data for the purposes described in this policy. We have not sold or shared personal information.

Canada, Australia and elsewhere

You may have similar rights to access and correct your information under local law, including PIPEDA and the Australian Privacy Act.

How to make a request

Email [email protected]. We will reply within 30 days, or sooner where local law requires. We may need to confirm your identity before acting on a request.

Children

Our store is not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has given us information, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top shows when it last changed. If we make significant changes, we will post a notice on the site or email customers where appropriate.

Contact

Questions about this policy or your information can be sent to:

SODRK
United States
[email protected]