1. Overview and Data Controller
This Privacy Policy outlines how sunhatclub (“we”, “us”, “our”) collects, uses, and protects your personal information when you visit or purchase from www.sunhatclub.com.
For the purposes of applicable data protection laws, including the European Union General Data Protection Regulation (EU GDPR), sunhatclub operates as the data controller responsible for your personal information.
If you have any questions regarding this policy or our privacy practices, you may contact us at:
Brand: sunhatclub
Website: www.sunhatclub.com
Contact Email: zhaolei@sunhatclub.com
—
2. Information We Collect
We collect personal information necessary to deliver our products, handle orders, and provide a seamless customer experience. This includes:
Identity & Contact Data: Your full name, delivery address, billing address, and email address provided during the checkout process or when reaching out to customer support.
Transaction & Order Details: Information regarding the specific sunhats or display racks purchased, order values, shipping method selection, and communication logs related to your purchases.
Technical & Usage Data: Information automatically transmitted by your web browser or device when visiting our website, such as your IP address, browser type, operating system, network identifiers, and interaction data with our product pages.
—
3. Purpose and Legal Bases for Processing
We process your personal data strictly in accordance with European data protection regulations. The legal bases for processing include:
Performance of a Contract: Processing your name, shipping address, contact information, and order parameters is essential to fulfill purchase agreements, ship products across Europe, and address post-purchase customer service inquiries.
Compliance with Legal Obligations: Retaining tax records, commercial invoices, and transactional data to fulfill European tax, accounting, and consumer legislation requirements.
Legitimate Interests: Monitoring website performance, maintaining network integrity, preventing potential fraud, and improving overall operational stability.
—
4. Payment Processing and Payment Security
To ensure a reliable checkout experience, online payment processing for our store is provided by Stripe.
When you make a payment on www.sunhatclub.com, your payment credential details (such as credit or debit card numbers) are collected, processed, and tokenised directly by Stripe via encrypted protocols. We do not store, view, or handle your full credit card numbers or sensitive payment authentication data on our servers.
Stripe processes payment details in accordance with applicable financial standards, data privacy laws, and international security standards.
—
5. Data Retention Period
We retain personal data only for as long as necessary to fulfill the operational purposes for which it was collected, or to satisfy legal, statutory, and regulatory demands.
Order & Transaction Records: Information associated with completed purchases, invoicing, and order administration is stored for the duration required by applicable European commercial and tax regulations (typically up to 10 years following the transaction date).
Customer Support Communications: General inquiries and communication history sent to zhaolei@sunhatclub.com are retained for up to 3 years from the last interaction to handle potential ongoing inquiries or quality assessments.
Technical Logs: Server and usage logs processed for cybersecurity and system stability are retained for no longer than 12 months, unless security incidents require extended analysis.
Once the legal or operational retention window expires, data is permanently erased or securely anonymised.
—
6. Sharing Data with Service Providers
We do not sell, rent, or trade your personal information. We disclose necessary categories of data exclusively to third-party operational service providers who support our business functions:
Payment Infrastructure: Stripe (for transaction processing and fraud mitigation).
Logistics & Delivery Partners: European and regional postal or courier networks to deliver physical merchandise to your designated shipping location.
Technical Infrastructure: Web hosting and IT infrastructure providers essential for maintaining site accessibility.
All service providers processing personal data on our behalf operate under contractual commitments to enforce appropriate confidentiality and technical safeguards.
—
7. Data Storage and International Transfers
Your data is primarily processed within the European Economic Area (EEA). If a third-party technical or payment service provider accesses data from locations outside the EEA, transfers are conducted strictly under lawful transfer mechanisms approved by the European Commission, such as Standard Contractual Clauses (SCCs) or adequacy decisions.
—
8. Data Safeguards
We implement reasonable technical, operational, and administrative safeguards designed to protect personal data against unauthorized access, loss, alteration, or disclosure. While rigorous security protocols are deployed across our hosting and payment channels, no electronic transmission over the internet or automated storage infrastructure can be guaranteed as completely immune to all potential vulnerabilities.
—
9. Your Data Protection Rights
Under European Union data protection laws, visitors residing in the European Economic Area possess statutory rights regarding their personal data:
Right of Access: Request confirmation of whether we process your data and obtain a copy of held records.
Right to Rectification: Request corrections to inaccurate or incomplete personal records.
Right to Erasure: Request the deletion of personal data where legal processing requirements no longer apply.
Right to Restriction: Request the temporary restriction of processing under specified statutory scenarios.
Right to Data Portability: Request a structured copy of data provided to us for transfer to another controller.
* Right to Object: Object to data processing based on legitimate interest reasons.
To exercise any of these rights, please contact us at zhaolei@sunhatclub.com. If you consider that our processing breaches applicable privacy legislation, you maintain the right to lodge a complaint with your local European Data Protection Authority.
—
10. Cookies
Our site uses functional and essential cookies necessary for website operational performance, shopping cart memory, and security protocols. You can adjust your browser settings to decline or clear cookies; however, disabling essential technical cookies may impact site navigation and order processing functions.
—
11. Amendments to this Policy
We reserve the right to modify this Privacy Policy to reflect technical updates, legal requirement changes, or adjustments to our business operations. The current version will always be published on www.sunhatclub.com with the revised date indicated at the top of the statement.