Privacy

When you place an order we collect your name, email, shipping address, phone number if you give one, and the details of what you asked us to embroider. If you create an account we also store your password as a one-way hash. We cannot read it, and neither can anyone who breaks in.

We never see or store your card number. Payment details go directly to Stripe, our payment processor, on their own page.

To make your piece, ship it, email you about it, and answer you when you write in. If you opt in, we’ll also email you when new pieces drop. You can unsubscribe from any of those emails.

We don’t run analytics, advertising pixels, or third-party trackers of any kind. Nothing on this site follows you anywhere else.

Every page on this site is served over an encrypted connection, and the browser is instructed to refuse an unencrypted one for the next two years. The database is encrypted at rest and reachable only over an encrypted connection.

Passwords are stored as bcrypt hashes, never as text, so a copy of our database wouldn’t give anyone your password. Signing out invalidates your session on our side as well as in your browser.

Card numbers never reach us at all. Payment happens on Stripe’s own page, which is why we can say plainly that we have nothing to leak on that front.

Only the services required to run the shop: Stripe for payments, our email provider for order emails, our hosting and database provider, and the carrier that delivers your parcel. We do not sell your information, and we do not share it for advertising.

We use a small number of strictly functional cookies: one to keep you signed in, and one to remember what’s in your bag. There are no advertising or third-party tracking cookies on this site.

You can see and edit your details from your account at any time. Ask us and we’ll send you a copy of everything we hold about you, or delete your account entirely, though we have to keep basic order records for tax purposes.

Write to hello@shoprebrand.com for any of that.

This shop isn’t directed at children under 13, and we don’t knowingly collect their information.