1. Who we are
Apparel You operates an online custom-merchandise service and client-store platform in Trinidad and Tobago. In this policy, “Apparel You”, “we”, “us”, and “our” refer to Apparel You. Questions or privacy requests may be sent to apparelyoutt@gmail.com.
2. Information we collect
Depending on how you use the service, we may collect:
- Account information: first name, email address, authentication details, and account activity.
- Optional birthday information: date of birth only when you separately choose to receive birthday offers.
- Order and delivery information: name, email, phone number, delivery or collection choice, address, delivery notes, products, sizes, quantities, discounts, and order history.
- Optional marketing and shopping activity: marketing preferences, consent and withdrawal records, unfinished or saved cart contents, purchase frequency, offer eligibility, discount use, and campaign delivery or link-interaction information.
- Artwork and design information: uploaded artwork, mockups, placement choices, print specifications, saved designs, proofs, and approval history.
- Payment information: payment status, amount, reference, and transaction outcome. Payment-card or bank details entered on WiPay are handled by WiPay and are not stored by Apparel You unless expressly stated at the point of collection.
- Client-store information: store contacts, branding, product submissions, sales, earnings, payout requests, hosting status, and related business records.
- Technical, analytics, and communication information: session data, consent-controlled page visits and shopping-step events, device and browser information made available by our service providers, security logs, notices, and messages you send us.
3. How we use information
We use personal information to create and secure accounts; save designs; review artwork; prepare quotes and proofs; process orders and payments; print, deliver, or arrange collection; manage returns and refunds; operate client stores and payouts; send service messages; prevent misuse; keep business records; and comply with applicable law.
If you separately opt in to birthday offers, we may use your first name, email address, and date of birth to send a birthday-related promotion. This choice is optional, is not required to create an account or place an order, and can be changed through your account or withdrawn by contacting apparelyoutt@gmail.com.
If you separately opt in to general email marketing, we may use your email address, cart activity, purchase history, product interests, and discount activity to send cart reminders, product offers, discounts, and second-purchase or repeat-customer offers. We may use limited segmentation, such as identifying customers with an unfinished cart or one completed purchase, to decide which relevant offer to send. General email marketing and birthday marketing are independent choices and neither is required to create an account or place an order.
If you separately allow website analytics, we use limited page-view and shopping-step events to understand how the website is used and improve ordering. This choice is stored on your device and can be withdrawn at any time. We do not use this analytics setting to identify you by name or email.
4. When we share information
We share only what is reasonably needed with service providers supporting the website and fulfilment process, including:
- Supabase for authentication, databases, and file storage;
- WiPay for payment processing;
- Resend for transactional email and, where you have opted in, marketing-email delivery;
- PostHog for consent-controlled, limited website and product analytics;
- Cloudflare Turnstile for checkout abuse and automated-traffic prevention. Cloudflare may receive technical information needed to perform the security check, such as network, browser, device, and challenge-response information;
- OpenAI’s ChatGPT Sites service and its infrastructure providers for website hosting and delivery;
- ODeliver and other couriers or delivery partners for fulfilment within Trinidad and Tobago. The delivery provider may receive the recipient name, phone number, delivery address, delivery instructions, order reference, order value or payment status, and parcel details reasonably needed to create and complete the delivery;
- professional advisers, insurers, or public authorities where reasonably necessary or required by law.
A client store may receive reports about its products, sales, discounts, and earnings. It does not receive a customer’s full payment credentials. We do not sell personal information.
5. Retention and security
We limit collection, use, access, and retention of personal information to what is reasonably needed for the purposes described in this policy. We do not keep optional profile information simply because it may be useful in the future.
When an account-closure request is eligible for processing, saved addresses, birthday information, marketing preferences, and other optional profile fields are removed or de-identified as part of the closure process, normally within 30 days. Residual copies may remain in restricted backups for up to 90 days before being overwritten through the normal backup cycle and are not used for marketing or ordinary account activity.
Information forming part of a completed order, payment, refund, delivery, payout, tax, accounting, fraud-prevention, or dispute record may be retained for up to six years after the end of the relevant transaction or tax period, or longer where applicable law, a regulator, court process, chargeback, or unresolved claim requires it. These retained records are limited to what is reasonably necessary and are not used to continue a closed profile or send marketing.
Unfinished-cart information used for reminders will normally be removed or de-identified within 90 days of the last cart activity unless it becomes part of an order. Marketing campaign interaction records will normally be retained for no more than 12 months. Consent and withdrawal records may be retained longer where reasonably necessary to demonstrate and respect your choices, including keeping a limited suppression record after unsubscribe.
We use access controls and service-provider safeguards intended to protect information, but no online system can be guaranteed completely secure.
6. Your choices and requests
You may ask to access, correct, or delete personal information, object to or restrict certain uses, change website analytics through the footer privacy choices, change email-marketing or birthday-offer preferences through your account, unsubscribe using the link in a promotional email, or ask a question about our practices. Withdrawal applies to future optional processing and does not affect necessary order, payment, security, or service messages. Some records may need to be retained for completed transactions, legal obligations, security, disputes, or to maintain an unsubscribe request. Send requests to apparelyoutt@gmail.com using the email connected to your account where possible.
7. Children and young people
The service is not intended for a child to enter a binding purchase independently. A person under 18 should use the service only with the involvement and permission of a parent or legal guardian. Client-store operators are responsible for having authority to provide any personal information, names, images, or artwork relating to minors.
8. Trinidad and Tobago privacy principles
We aim to handle personal information fairly, transparently, for identified purposes, and with appropriate safeguards, having regard to the Data Protection Act, 2011 of Trinidad and Tobago and other applicable requirements.
9. Changes to this policy
We may update this policy when our services, providers, or legal obligations change. The revised version and effective date will be posted here. Material changes may also be communicated through the website or account email.