Privacy Policy

Who we are

ShirtBeat is a sole proprietorship operated by Hamza Ali, based at Block C, Media Town, Rawalpindi, Punjab, Pakistan. We are the data controller for the personal information described in this policy. Contact us any time at support@shirtbeat.com.

Information we collect

• Contact and order details — name, email, shipping and billing address, phone number (optional).
• Payment information — handled by our payment processor. We receive a token and the last four digits of your card; we never see or store full card numbers or CVV.
• Order history — items purchased, order totals, shipping and tracking data.
• Technical data — IP address, device and browser type, pages viewed, referring URL, timestamps.
• Communications — messages you send us through the contact form or by email.

How we use your information

• To process, produce, and ship your orders.
• To provide customer service and handle returns or claims.
• To prevent fraud and comply with legal obligations.
• To send transactional emails (order confirmation, shipping updates).
• To send marketing emails — only if you have opted in. You can unsubscribe at any time using the link in any marketing email.
• To improve the Site through aggregated analytics (see Cookies below).

Payment processing

Payments are processed by our third-party payment processor. Your full card details are transmitted directly to the processor over an encrypted connection and are never stored on our servers. The processor is PCI DSS compliant.

Who we share data with

• Print-on-demand fulfilment partner — we share your name, shipping address, and order details so they can produce and ship your order.
• Shipping carriers — for label creation and tracking.
• Payment processor — to complete the transaction.
• Email and analytics providers — to send transactional/marketing email and measure site usage.
• Authorities — where required by law or to protect our legal rights.

We do not sell your personal information.

Cookies and analytics

We use cookies and similar technologies to keep you signed in, to remember your cart, and to measure how the Site is used through aggregated analytics. You can control cookies through your browser settings; blocking essential cookies may break parts of the Site.

Data retention

We keep order records for as long as required by tax, accounting, and consumer protection law (typically 6 – 10 years depending on jurisdiction). Marketing contacts are retained until you unsubscribe. Support emails are kept for up to 3 years.

Your rights under GDPR (EU / UK)

If you are in the European Economic Area or the United Kingdom, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion ("right to be forgotten").
• Restrict or object to processing.
• Data portability.
• Withdraw consent for marketing at any time.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email support@shirtbeat.com. We'll respond within 30 days.

Your rights under CCPA (California)

If you are a California resident, you have the right to know what personal information we collect, to request deletion, to correct inaccurate information, and to opt out of the "sale" or "sharing" of personal information. As stated above, we do not sell your personal information. To exercise your rights, email support@shirtbeat.com. We will not discriminate against you for exercising them.

International transfers

Because we ship worldwide and use international fulfilment and technology providers, your data may be transferred to and processed in countries outside your own. Where required, we rely on Standard Contractual Clauses or equivalent safeguards.

Children

The Site is not directed to children under 16 and we do not knowingly collect personal data from them.

Changes to this policy

We may update this policy from time to time. Material changes will be posted here with a new "Last updated" date.

Contact

Privacy questions or requests: support@shirtbeat.com. General support: support@shirtbeat.com.