Privacy Policy.

1. Information We Collect

Information you provide to us

• Order information: name, email address, shipping address, and order details (items, size, customization, quantity) when you place an order.
• Customization content: any custom name or number you submit for personalized products.
• Communications: information you provide when you contact us for support.

Information collected automatically

• Usage data: pages visited, time spent on the Site, browser type, device type, and general location (city/region level) inferred from IP address, collected via standard web analytics.
• Cookies: small files stored on your device to support cart functionality, remember preferences, and (if applicable) measure Site performance. See Section 6 for more on cookies.

Information we do not collect

We do not collect or store your full payment card number, CVV, or other sensitive card data. Payments are processed directly by Stripe, our payment processor, which collects this information under its own privacy policy.

2. How We Use Your Information

We use the information we collect to:

• Process and fulfill your orders, including order confirmation emails sent via our email provider, Resend;
• Respond to customer service inquiries;
• Operate, maintain, and improve the Site;
• Detect and prevent fraud, abuse, or security incidents;
• Comply with legal obligations.

We do not sell your personal information to third parties.

3. Who We Share Information With

We share information with the following categories of service providers, solely to operate the Site and fulfill orders:

Each of these providers processes data under their own privacy policies and security practices. We may also disclose information if required by law, subpoena, or other legal process, or to protect the rights, property, or safety of Footy Dept., our customers, or others.

4. Data Retention

We retain order information for as long as necessary to fulfill the order, comply with our legal and tax obligations, resolve disputes, and enforce our agreements. If you would like your data deleted sooner, contact us at iggyduenas@gmail.com and we will honor your request to the extent we are not legally required to retain it (for example, tax and accounting records).

5. Your Rights

Depending on your location, you may have the right to:

• Request access to the personal information we hold about you;
• Request correction of inaccurate information;
• Request deletion of your personal information, subject to legal retention requirements;
• Object to or restrict certain processing of your information.

To exercise any of these rights, contact us at iggyduenas@gmail.com. We will respond within a reasonable timeframe.

If you are located in the European Economic Area or United Kingdom, you may also have the right to lodge a complaint with your local data protection authority. If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected and the right to opt out of the sale of personal information — note that we do not sell personal information as defined under the CCPA.

6. Cookies

We use cookies and similar technologies for:

• Essential functions: keeping items in your cart, remembering your session.
• Analytics (if enabled): understanding how visitors use the Site so we can improve it.

You can control cookies through your browser settings. Disabling cookies may affect the functionality of the Site, including cart functionality.

7. Children’s Privacy

The Site is not directed at children under 13 (or the relevant minimum age in your jurisdiction), and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

8. Data Security

We take reasonable technical and organizational measures to protect your information, including encrypted connections (HTTPS), access controls on our database, and use of reputable third-party processors. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. International Data Transfers

Our service providers may process and store data in countries other than your own, including the United States. By using the Site, you consent to the transfer of your information to these jurisdictions, which may have different data protection laws than your country of residence.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date above reflects the most recent revision. Material changes will be reflected on this page; continued use of the Site after changes are posted constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy or how we handle your information, contact us at iggyduenas@gmail.com.