Privacy Policy
Data Controller
The Squatchery
Collected Personal Data
The "Collected Personal Data" section
Identity & contact info
- Full name
- Email address
- Phone number
- Billing address
- Shipping address
Account data (if customers create accounts)
- Username
- Password (note: stored encrypted/hashed, never in plain text)
- Order history
- Saved preferences (wishlist, sizes, etc.)
Payment data
- Payment card details or payment account info — usually you should clarify this is collected and stored by your payment processor (Stripe, PayPal, etc.), not by you directly, since most stores never see or store full card numbers
Technical/device data
- IP address
- Browser type and version
- Device type
- Cookies and similar tracking identifiers
- Pages visited, time on site, referral source (via analytics)
Communications
- Messages sent through contact forms, live chat, or email
- Customer service correspondence
Purpose of collecting data
For an online store, the "Purpose of collecting data" section should explain, in plain language, every reason you actually collect and use customer data. Regulators (especially under GDPR) expect this to be specific, not vague. Here's what typically belongs in it:
Core order-related purposes
- Processing and fulfilling orders (payment, shipping, returns/refunds)
- Verifying payment and preventing fraud
- Creating and managing customer accounts
- Sending order confirmations, shipping/tracking updates, and receipts
Customer service
- Responding to inquiries, complaints, or support requests
- Providing warranty or product support
Site operation & improvement
- Analyzing browsing behavior to improve the website (analytics)
- Remembering cart contents and preferences (functional cookies)
- Testing and fixing bugs
Legal & security
- Complying with tax, accounting, and record-keeping laws
- Detecting and preventing fraud or abuse
- Enforcing your terms of service