Privacy Policy

Last updated: November 3, 2026

This policy explains what information isthathux.com and the IsThatHux merch shop ("IsThatHux", "we", "us") collect, why, who we share it with, and how we protect it. Questions? Email [email protected].

What we collect

• When you order: your name, email address, shipping address, the items you chose (including any name you asked us to print), and the order total. Your card details go directly to our payment processor, Stripe; we never see or store your full card number.
• When you join the merch email list: your email address.
• When you contact us: whatever you include in your email.
• When you visit the site: our host and our network provider (Cloudflare) keep standard server logs, such as IP address, browser type, the page requested and the time, to keep the site working and secure.
• On your device: the shop remembers your cart, shipping country and size-guide units in your browser's local storage so they're there next time. This stays on your device, isn't sent to us, and you can clear it any time in your browser settings. We don't use advertising or analytics cookies.

How we use it

• to process payment, make and ship your order, and send order and shipping updates;
• to answer questions and handle replacements or refunds;
• to email you about merch drops, only if you joined the list (you can leave any time);
• to prevent fraud and abuse, and to meet legal, tax and accounting obligations.

We don't sell or rent your personal information.

Who we share it with

Only the service providers needed to run the shop, and only what each one needs:

• Stripe (payments): your payment details, email, billing and shipping information. Stripe's privacy policy.
• Printful (printing and shipping): your name, shipping address, email and order details. Printful's privacy policy.
• Shipping carriers, through Printful: your name and address, to deliver the package.
• Google (Gmail): we send order and shipping emails from a Gmail account, so your email address and order details pass through Google.
• Cloudflare and our hosting provider: they handle the site's traffic and servers.

Some of these providers process information outside Canada (for example in the United States or the EU), where it may be subject to local laws. We may also disclose information if the law requires it.

If you play an embedded YouTube or TikTok video on the site, or load our fonts from Google Fonts, those services receive your IP address and may set their own cookies under their own policies.

How long we keep it

We keep order records for as long as needed to fulfil the order, provide support, and meet tax and legal requirements (generally up to 7 years). Email-list addresses are kept until you unsubscribe. Server logs are kept for a short time.

How we protect it

The site uses HTTPS everywhere. Payments are handled by Stripe, which is certified to PCI DSS Level 1. Order data is stored on a server that only we can access, and our service accounts are protected with strong credentials and two-step authentication.

Your choices and rights

You can ask to see, correct or delete the personal information we hold about you, or withdraw consent to marketing emails, by emailing [email protected]. We'll respond within 30 days. Some records (such as completed orders) must be kept for tax purposes. If you're not satisfied, you can contact the Office of the Privacy Commissioner of Canada.

Children

The shop isn't intended for children under 13, and we don't knowingly collect their information.

Changes

If we change this policy, we'll update the date above. Significant changes will be noted on the site.