Privacy Policy
Effective Date: 9/15/2025
1. Who We Are
This Privacy Policy describes how Duty Uniform (“we,” “our,” “us”) collects, uses, and protects your personal data when you visit or website at https://www.dutyuniform.com.
2. Information We Collect
- Information you provide: name, email, shipping/billing address, phone number, and order details.
- Payment info: we never store full credit card numbers. Card data is sent directly to our payment processor (Stripe).
- Technical data: IP address, browser type, device type, operating system, pages visited, and referring site.
- Cookies & tracking: session and analytics cookies to operate and improve our site.
3. How We Use Your Data
We process personal data to:
- Fulfill and ship your orders, provide customer support, and process returns/refunds.
- Communicate about orders, updates. We don't use it for marketing.
- Improve our website and prevent fraud or abuse.
- Comply with legal and tax obligations.
4. Legal Bases for EU/UK Users (GDPR)
Under the General Data Protection Regulation (GDPR), we process personal data on the following bases:
- Contract: to provide the products you requested.
- Legitimate interests: to improve our site, prevent fraud, and protect our business.
- Consent: for optional marketing emails and non-essential cookies. You may withdraw consent at any time.
- Legal obligation: to meet tax, accounting, or regulatory requirements.
5. Payments
All payments are processed securely through Stripe. Duty Uniform never stores any credit card numbers or details. Stripe receives your payment information directly. For details on Stripe’s practices, visit Stripe Privacy Policy.
6. Cookies
We use cookies to make our website function, remember your preferences. We do not use any non-essential cookies (such as marketing or analytics). You can manage or withdraw consent by closing your browser set your browser settings at any time.
7. Sharing & Disclosure
We do not sell your personal data. We share data only with trusted service providers acting on our behalf, including:
- Payment processor (Stripe)
- Shipping carriers and fulfillment partners (USPS, UPS)
- Email providers (Google)
These processors are bound by contracts to use the data solely for providing their services and to protect it.
8. International Data Transfers
Your data may be transferred to countries outside your residence (for example, to U.S. servers). Where required, we use EU Standard Contractual Clauses or other lawful safeguards to protect such transfers.
9. Data Retention
We keep order and shipping records for as long as needed to fulfil your order, meet legal obligations, and resolve disputes—generally up to 7 years for tax/accounting requirements—then we securely delete or anonymize the data.
10. Your Rights
If you are in the EU/EEA/UK, you have the right to:
- Access, correct, or delete your personal data.
- Object to or restrict processing of your data.
- Withdraw consent at any time (for marketing or cookies).
- Request data portability in a machine-readable format.
- Lodge a complaint with your local data-protection authority.
To exercise these rights, email us at contact-us@dutyuniform.com.
11. Security
We use mandatory HTTPS, encryption at rest for key systems, and limited access—to protect your data. No system is completely secure; we will notify you and regulators of any data breach as required by law. All server access is provided by controlled and regulated SSH keys and passwords.
12. Children
Our services are not directed to children under 13 (or the minimum age required by local law). We do not knowingly collect data from children.
13. Changes to This Policy
We may update this policy periodically. Updates will appear on this page with a new “Effective date.”