Privacy Policy

Stussy Shop UK operates stussyshopuk.com — an online retailer offering authentic Stussy-inspired clothing and accessories including hoodies, shirts, sweatshirts, jackets, sweatpants, and shorts. This Privacy Policy explains how we collect, use, disclose, and protect your personal information.

Information You Provide Directly

• Account Information — name, email address, and password when you sign up or create a guest checkout account
• Order Information — billing address, shipping address, phone number, and payment details when you purchase
• Communications — messages and enquiries you send to our support team
• Newsletter Signup — your email address when you subscribe to our mailing list

Information Collected Automatically

• Browsing Data — pages visited, items viewed, items added to cart, and referring URLs
• Device Information — IP address, browser type, operating system, and device identifiers
• Location Data — general geographic location based on your IP address
• Cookies & Tracking Data — see Section 04 for full details

Payment Information

We do not store full credit card details on our servers. All payment processing is handled by secure third-party payment processors. We only retain the last four digits of your card and your billing address for order verification purposes.

We use cookies and similar technologies to improve your experience, analyse site traffic, and personalise content:

We share your data only with trusted third parties who help us operate our business. We do not sell your personal information to any third party.

Stussy Shop UK takes commercially reasonable steps to secure your personal information both online and offline:

• SSL/TLS Encryption — all data transmitted between your browser and our website is encrypted during sign-in and payment entry
• Payment Security — we are PCI-DSS compliant and do not store full card details
• Password Protection — your account is password-protected; keep your login credentials secure and notify us immediately of any unauthorised access
• Access Controls — limited employee access to personal data on a need-to-know basis
• Security Measures — procedures and security systems in place to prevent unauthorised access once data is received

We retain your personal data only as long as necessary for the purposes set out in this policy:

• Order Records — 7 years (required for tax and accounting compliance)
• Account Information — until you delete your account, plus 30 days for recovery
• Marketing Email Lists — until you unsubscribe, or after 3 years of inactivity
• Customer Support Records — 2 years after your last interaction
• Analytics Data — up to 26 months

After the applicable retention period, your data is securely deleted or anonymised.

Our business is based in the United Kingdom. If you access our website from the EU or another region with different data protection laws, your information may be transferred to and processed in the UK or other countries where our service providers operate.

Under the General Data Protection Regulation (GDPR) and UK GDPR, you have the following rights regarding your personal data:

• Right to Access — request information about and a copy of the personal data we process about you
• Right to Rectification — request correction or update of inaccurate or incomplete personal data
• Right to Erasure — request deletion of your personal data (“right to be forgotten”)
• Right to Restriction — request that we temporarily or permanently stop processing all or part of your data
• Right to Object — object to processing based on legitimate interests or for direct marketing
• Right to Portability — receive your data in a structured, machine-readable format
• Right to Withdraw Consent — withdraw consent at any time where processing is based on consent
• Right Not to Be Subject to Automated Decisions — not to be subject to decisions based solely on automated processing that have legal or significant effects

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the following rights:

• Right to Know — request disclosure of what personal information we collect, use, or disclose about you
• Right to Delete — request deletion of personal information we’ve collected from you
• Right to Correct — request correction of inaccurate personal information
• Right to Opt-Out — we do not sell your personal information; advertising cookies may qualify as “sharing” under CCPA — opt out via our cookie preferences
• Right to Non-Discrimination — we will not discriminate against you for exercising any CCPA rights

To submit a CCPA request, email support@stussyshopuk.com with subject line “CCPA Request.” We’ll verify your identity and respond within 45 days.

• Opting In — you opt in by subscribing via our newsletter form or checking the marketing box at checkout
• Opting Out — unsubscribe at any time via the “Unsubscribe” link in any marketing email, or by emailing us directly
• Transactional Emails — even after unsubscribing from marketing, you’ll still receive essential order-related emails (confirmations, shipping updates, refund notifications)
• Processing Time — unsubscribe requests are processed within 10 business days

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last Updated” date at the top of this page and where appropriate notify registered users by email. We encourage you to review this policy periodically. Continued use of our website after the effective date of any changes constitutes your acceptance of the updated policy.

Questions, comments, or concerns about this Privacy Policy or how we handle your personal data? Email us directly — we respond within 30 days. For EU/UK residents, if you’re not satisfied with our response, you have the right to contact your national data protection authority.