Privacy Policy

Last Updated: 14 May 2026

This Privacy Policy explains how Sunset Harbor Clothing (“we”, “us”, or “our”) collects, uses, stores, and protects your personal information when you visit or make a purchase from sunset-harbor.com (“the Site”).

Sunset Harbor Clothing is based in the United Kingdom, but we may sell and ship products to customers in other countries.

By using our Site, placing an order, or contacting us, you acknowledge that we will use your personal information as described in this Privacy Policy.

1. Information We Collect

We collect personal information when you use our Site, place an order, contact us, sign up for marketing, or interact with our services.

a. Information You Provide to Us

This may include:

your name;
billing address;
shipping address;
email address;
phone number;
order details;
payment and transaction information;
messages you send to us;
marketing preferences;
customer account details, if you create an account.

Payment details are processed securely by our payment providers. We do not directly store full card details.

b. Information Collected Automatically

When you visit our Site, we may automatically collect certain information about your device and browsing activity, including:

your IP address;
browser type and version;
device type;
time zone;
pages or products viewed;
how you interact with the Site;
referring websites, adverts, or search terms;
cookies and similar tracking technologies.

This information helps us operate the Site, improve user experience, analyse traffic, understand marketing performance, and help protect against fraud or misuse.

c. Cookies and Similar Technologies

We may use cookies, pixels, tags, log files, and similar technologies.

Cookies are small files stored on your device. Some cookies are essential for the Site to work properly, such as keeping items in your basket, processing orders, remembering preferences, and keeping the Site secure.

Other cookies may be used for analytics, advertising, or improving the customer experience. Where required by law, we will only use non-essential cookies with your consent.

The ICO says privacy notices should clearly explain why personal data is processed, how long it is kept, and who it is shared with. It also says people should be told about their data rights in a clear and accessible way.

2. How We Use Your Information

We use your personal information to:

process and fulfil your orders;
arrange production, shipping, and delivery;
send order confirmations and delivery updates;
respond to customer enquiries;
manage returns, refunds, replacements, or order issues;
process payments and prevent fraud;
provide customer support;
improve our Site, products, and services;
analyse website traffic and marketing performance;
send marketing communications where permitted;
show relevant advertising where allowed by law;
comply with legal, tax, accounting, and regulatory obligations;
protect our legal rights and prevent misuse of our Site.

3. Legal Basis for Using Your Information

Where UK GDPR or EU GDPR applies, we rely on different legal bases depending on how we use your information.

These may include:

Contract — to process and fulfil your order.
Legal obligation — to keep records for tax, accounting, or legal reasons.
Consent — for certain cookies, marketing emails, or optional tracking where required.
Legitimate interests — to operate our business, improve our Site, prevent fraud, respond to enquiries, and understand customer use of our services, provided your rights do not override those interests.

Where we rely on consent, you can withdraw your consent at any time.

The ICO says organisations should decide and explain their lawful basis for using personal data, and privacy notices should explain people’s rights, including the right to withdraw consent where consent is used.

4. Sharing Your Information

We may share your personal information with trusted third parties who help us operate our business and provide our services.

These may include:

Shopify, which powers our online store;
Printful or other fulfilment partners, who help produce and ship orders;
payment providers, who process transactions securely;
delivery and postal services, who deliver your order;
email and customer support providers;
analytics providers, such as Google Analytics;
advertising platforms, such as Google, Meta, TikTok, or similar platforms, where used;
professional advisers, such as accountants or legal advisers;
authorities, regulators, or law enforcement where required by law.

We only share information where it is necessary for business, legal, security, fulfilment, payment, analytics, advertising, or customer service purposes.

Shopify provides customer privacy tools for merchants, including privacy settings, cookie banners, consent preferences, privacy policies, and data sales opt-out options.

5. International Customers and International Data Transfers

Sunset Harbor Clothing is based in the United Kingdom, but we may sell to customers in other countries and use service providers located outside the UK.

This means your personal information may be transferred to, stored, or processed in countries outside the UK, including countries where our service providers operate.

Where required, we use appropriate safeguards to protect international transfers of personal information. These may include adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or other lawful transfer mechanisms.

The ICO explains that the UK International Data Transfer Agreement and UK Addendum are recognised safeguards for restricted transfers under UK data protection law.

6. Marketing and Advertising

Where you have given consent, or where otherwise permitted by law, we may send you marketing communications about our products, offers, news, or updates.

You can opt out of marketing emails at any time by clicking the unsubscribe link in our emails or by contacting us.

We may also use cookies, pixels, and advertising tools to help us show relevant adverts online or understand how our advertising performs. Where required, we will ask for your consent before using non-essential advertising cookies.

You can also manage advertising preferences through the settings provided by platforms such as Google, Meta, TikTok, or other advertising services.

7. Your Privacy Choices

You can manage your privacy choices in several ways:

using the cookie banner or privacy settings on our Site;
changing your browser settings to block or delete cookies;
unsubscribing from marketing emails;
contacting us to exercise your privacy rights.

Blocking cookies may affect how some parts of the Site work, especially features such as shopping baskets, checkout, preferences, or account functions.

8. Your Rights

Depending on where you live, you may have rights over your personal information.

For UK and EU customers, these rights may include the right to:

access the personal information we hold about you;
correct inaccurate or incomplete information;
request deletion of your personal information;
restrict how we use your information;
object to certain uses of your information, including direct marketing;
withdraw consent where we rely on consent;
request transfer of your information to another provider;
complain to a data protection authority.

To exercise your rights, please contact us using the Contact Us page on our website.

We will respond to valid privacy requests within the time required by applicable law. For UK GDPR requests, this is usually within one month.

9. Customers Outside the UK

If you live outside the United Kingdom, you may have additional privacy rights under the laws of your country, state, or region.

Where these rights apply, we will handle privacy requests in accordance with applicable law.

This may include rights relating to access, correction, deletion, portability, objection, consent withdrawal, targeted advertising, or certain types of data sharing.

10. Data Retention

We keep personal information only for as long as necessary for the purposes described in this Privacy Policy.

Order information is usually kept for at least six years where required for tax, accounting, legal, or business record purposes.

Customer support messages may be kept for as long as needed to deal with your enquiry, resolve disputes, improve service, or maintain business records.

Marketing information is kept until you unsubscribe or withdraw consent, unless we need to keep limited information to record your preferences.

Device, analytics, and cookie information is kept for the period required by the relevant tool or service, or as long as needed for analytics, security, or business purposes.

11. Cookies

We use cookies and similar technologies to operate our Site, improve performance, understand visitor behaviour, and support marketing or advertising.

Cookies may include:

Essential cookies — needed for the Site to work properly.
Performance and analytics cookies — help us understand how visitors use the Site.
Advertising cookies — help us show relevant adverts and measure marketing performance.
Preference cookies — remember choices such as region, currency, or settings.

You can manage cookie preferences through our cookie banner, privacy settings, or browser settings.

Shopify explains that cookies can include strictly necessary, performance, advertising, and social media or content cookies, and that they can help websites remember actions and preferences.

12. Security

We take reasonable technical and organisational steps to protect your personal information.

However, no website, system, or method of transmission is completely secure. We cannot guarantee absolute security, but we work to protect your information using appropriate safeguards.

Payment information is processed through secure payment providers and encrypted systems.

13. Children’s Privacy

Our Site is not intended for children under the age of 13, and we do not knowingly collect personal information from children.

If you believe a child has provided us with personal information, please contact us so we can take appropriate action.

14. Links to Other Websites

Our Site may contain links to third-party websites, apps, or services.

We are not responsible for the privacy practices, content, or security of third-party websites. Please review their privacy policies before providing personal information.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, services, legal requirements, or privacy practices.

The latest version will always be posted on this page with a new “Last Updated” date.

16. Contact Us

If you have any questions about this Privacy Policy, or if you would like to exercise your privacy rights, please contact us using the Contact Us page on our website.