What We Collect And Why.

Dutty Bungle collects the information needed to run the shop, fulfil orders, support customers, maintain accounts, send requested emails and understand first-party shop activity where consent is given.

Controller Details

Legal seller/controller: [insert legal seller name]
Business address: [insert registered or trading address]
Email: hello@duttybungle.com

Order Data

We process names, email addresses, shipping addresses, order references, items, prices, delivery status, fulfilment references, support notes and refund/replacement status so we can perform the contract and support the order.

Payments

Payments are processed by Stripe. We do not store card numbers. We store checkout/payment references so we can match orders, refunds, fraud checks and support requests.

Fulfilment

We may share the information needed to produce and deliver your order with fulfilment partners, including Inkthreadable where applicable. Dutty Bungle remains responsible to you as the seller.

Email And Accounts

Resend is used for transactional emails such as order confirmations, dispatch updates, account links and support messages. If you create a profile, we store account identifiers, saved items, login/session information and optional profile details.

Marketing And Crew Signup

If you join the crew or ask for drop updates, we store your email for that purpose. You can ask to be removed at any time. If a separate email marketing provider is added later, this policy should name it before launch.

Optional Analytics

Essential cookies/local storage support checkout, bag, saved items, accounts and admin sessions. Optional first-party analytics only runs after consent. The browser creates random visitor and 30-minute session identifiers so we can measure anonymous visits, popular pages and shop conversion. The server stores hashed versions of those identifiers and does not store names, emails, IP addresses or full user-agent strings with analytics events.

Retention

Order and support records are kept while needed for fulfilment, customer support, accounting, fraud prevention and legal obligations. Detailed first-party analytics history is kept for no more than 395 days, expired account sessions are automatically removed, and crew signup data can be removed on request. Retention periods for order, account and support records should be confirmed before launch.

Your Rights

You can ask for access, correction, deletion, restriction, objection or portability where these rights apply. You can also complain to the ICO if you are unhappy with how your data is handled.

Details To Confirm

Legal seller and address
Any email marketing platform
Any third-party analytics, pixels, ads or heatmaps
Retention periods for order/account/support data