BARBARC / LEGAL

Privacy policy

Last updated 2 November 2026

Information we collect

We collect the information needed to create and fulfil custom clothing orders: your name, email address, phone number, delivery address, garment choices, personalisation, uploaded artwork, approval decisions, order history and messages you send us. We also receive payment status and transaction references from Stripe. BARBARC does not receive or store your full card details.

How we use it

We use this information to prepare artwork, provide quotes, take payment, manufacture and deliver orders, answer support requests, prevent fraud and keep the service secure. Our lawful bases are performing our contract with you, taking steps at your request before a contract, complying with legal duties and our legitimate interests in operating and protecting the service.

CHILLBRO league applications

If you apply to list a league, we store the league details, invite links, contact email and any image you submit so we can review and manage the listing. Your contact email and our review notes are private to the BARBARC owner. Once approved, the league name, description, image and public links appear in the CHILLBRO league directory. Contact sales@barbarc.com to update your details or request removal. Joining a league takes you to the organiser’s separate website or community.

CHILLBRO HQ rewards

If you join HQ, we keep your account identifier, a protected hash of your verified email, chosen callsign, points ledger, referrals, reward claims and mission evidence to operate the rewards programme and prevent duplicate or fraudulent awards. Evidence and review notes are private to you and the BARBARC owner. Your callsign, rank and achievement totals appear on member scoreboards only if you opt in; you can change that choice in HQ. We retain records while needed to honour rewards, resolve disputes and meet legal obligations. Contact sales@barbarc.com to request access, correction or deletion. Selecting a referral link sets a signed, first-party attribution cookie for up to 30 days to apply that requested referral; it is not used for third-party advertising. Approved creative submissions may be reused only under the permission you give when submitting.

HQ drop invitations and marketing choices

If you register for a CHILLBRO HQ drop, we store your verified account email, mobile number, invitation request and separate email/text marketing choices, with the wording version and consent time. We use consent to send the invitation and any offers you choose. Providing a mobile number does not itself permit marketing texts. Your details are visible only to the BARBARC owner and the service providers needed to run the campaign. Resend processes invitation emails. Change your choices in the HQ signup page or use the unsubscribe link in an invitation; this does not affect your account or necessary order updates. We retain active preferences and proportionate consent/withdrawal records to honour your choices, and remove information when no longer needed. Contact sales@barbarc.com for access, correction or deletion.

Shipping label purchases

When you buy final postage separately, we keep the selected service, delivery and contact details, payment confirmation and your uploaded shirt-front image. The image helps the owner match the correct parcel to its label and is not publicly displayed. Royal Mail receives the delivery and contact details needed for postage and tracking; we email your tracking number when it becomes available.

Who processes it

We use service providers including Vercel for hosting, Supabase for customer authentication, database and private file storage, Stripe for payments, Resend for account-confirmation, password-reset order-confirmation and tracking emails, Royal Mail for delivery and tracking notifications (using your delivery address, email and phone number), and Google Workspace for business email. They process information to provide those services. Some providers may process data outside the UK using their contractual and legal safeguards.

How long we keep it

We keep order, payment and accounting records for the periods required for tax, legal and dispute purposes. Artwork and production files are kept while needed to fulfil the order and handle reasonable follow-up requests, then deleted or anonymised when no longer required. Security records may be retained for a shorter period appropriate to investigating abuse.

Your choices and rights

You can ask for access to, correction of, or deletion of your personal information, or object to or restrict some processing. Where processing relies on consent, you can withdraw it. Email sales@barbarc.com. You may also complain to the UK Information Commissioner’s Office at ico.org.uk.

Customer accounts and social sign-in

If you create an account, we use your email address and a secure account identifier to save your orders across devices. If you choose an available social sign-in provider, it shares the identity information you authorise, such as your email and name. We do not receive your Google or Facebook password. Essential session cookies keep you signed in. You can sign out, reset your password, disconnect authorised apps in your account, or contact us to request account deletion.

Optional website analytics

With your permission, first-party analytics cookies help us count new and returning browsers, visits and public shopping pages. We store a random browser identifier as a protected hash, broad referral category, device category and visit times. We do not store full referrer URLs, search terms, IP addresses, private order links or artwork in these analytics records. If you are signed in, we classify a visit as before your first paid website purchase or from an existing buyer; anonymous visitors remain unknown. Analytics records do not contain your account ID or email. No analytics data is sent to advertising platforms.

Analytics cookies last up to 90 days. We keep visit records for up to 90 days, removing expired records during daily maintenance when tracking is active. Your browser record is removed after 90 days of inactivity. Change or withdraw your choice at any time using Privacy choices; withdrawal stops future tracking and removes the analytics identifier from your browser. We remember your choice for 90 days. Browser changes, cleared cookies, declined tracking and ad blockers make visitor counts incomplete.

We also use existing paid website order records to report sales and whether buyers have ordered before, for our legitimate interest in understanding and improving the business. This sales reporting does not depend on optional analytics cookies. It excludes separate manually entered manufacturer jobs and cannot establish purchases made outside our website records.

Local storage and security

The website stores a private order reference in your browser so you can return to an order. We use technical and organisational safeguards appropriate to the information we process. Do not share private order links.

ChatGPT plugin

If you connect BARBARC in ChatGPT, BARBARC receives only the information needed for the tools you choose to use. Artwork is transferred only after your approval. We do not use customer artwork or order information to train our own AI models.