Privacy policy

Privacy Policy

Last updated: 30 August 2026

StormStreams Merch (“StormStreams Merch,” “we,” “us,” or “our”) operates this online store and website, including the related content, products, features, tools, and services (collectively, the “Services”).

Our store is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy explains how we collect, use, store, and disclose your personal information when you visit our website, make a purchase, create an account, contact us, or otherwise use the Services.

Personal Information We Collect

Depending on how you interact with us, we may collect the following categories of personal information:

Contact information, such as your name, email address, telephone number, billing address, and delivery address.
Order information, such as the products you purchase, return, exchange, or cancel.
Payment and transaction information, such as your payment method, payment confirmation, and transaction details. Payment card information is processed securely by Shopify and its payment providers.
Account information, including your username, password, preferences, and account settings.
Communications you send to us, including customer-support enquiries and product reviews.
Device and technical information, such as your IP address, browser type, device type, operating system, network connection, and unique identifiers.
Website-usage information, including the pages and products you view, searches, cart activity, and how you interact with the Services.
Marketing preferences, including whether you have agreed to receive promotional communications.

How We Collect Personal Information

We may collect personal information:

Directly from you when you place an order, create an account, subscribe to marketing, contact us, or otherwise provide information to us.
Automatically when you use our website, including through cookies and similar technologies.
From Shopify and other companies that help us operate the store.
From payment processors, fulfilment providers, delivery companies, analytics providers, advertising partners, and other service providers.
From partners or other third parties where permitted by law.

How We Use Personal Information

We may use your personal information to:

Process payments and complete transactions.
Fulfil, deliver, return, refund, or exchange orders.
Create and manage customer accounts.
Provide order confirmations, delivery updates, and other service messages.
Respond to questions and provide customer support.
Personalise and improve our website, products, and Services.
Maintain the security of our store and prevent fraud, misuse, or unlawful activity.
Keep appropriate business, tax, and transaction records.
Comply with legal obligations and respond to lawful requests.
Enforce our terms, policies, and legal rights.
Send marketing communications where you have consented or where otherwise permitted by law.
Measure the effectiveness of our website and advertising.

Lawful Bases for Processing

Where UK data-protection law applies, we process personal information using one or more of the following lawful bases:

Contract: Processing is necessary to provide products or Services you requested, including processing and delivering your order.
Consent: You have given us permission, such as when you choose to receive certain marketing communications.
Legitimate interests: Processing is necessary for our legitimate business interests, such as improving our Services, preventing fraud, and securing our website, provided those interests are not overridden by your rights.
Legal obligation: Processing is necessary for us to comply with applicable laws, accounting requirements, or lawful requests.

Where processing is based on consent, you may withdraw your consent at any time.

Cookies and Similar Technologies

We and Shopify may use cookies and similar technologies to operate the website, remember your preferences, understand how visitors use the Services, improve performance, prevent fraud, and—where permitted—provide personalised advertising.

You can manage cookies through your browser settings and any privacy or cookie controls displayed on our website. Blocking certain cookies may prevent parts of the Services from working correctly.

How We Disclose Personal Information

We may disclose personal information when reasonably necessary to:

Shopify, which hosts and operates the ecommerce platform supporting our store.
Payment processors and financial-service providers.
Product fulfilment, print-on-demand, warehousing, delivery, and returns providers.
Technology, hosting, analytics, security, customer-support, and cloud-storage providers.
Marketing and advertising providers, where permitted by law and consistent with your choices.
Professional advisers, regulators, law-enforcement bodies, courts, or government authorities where required or permitted by law.
A buyer, successor, or relevant adviser in connection with a merger, sale, restructuring, insolvency, or transfer of all or part of our business.
Other parties when you request, direct, or consent to the disclosure.

We do not require service providers acting on our behalf to use your information for purposes unrelated to the services they provide to us.

Shopify

Our store is hosted by Shopify. Shopify collects and processes information about your access to and use of the Services to operate and improve its platform.

Information submitted through our store may be shared with Shopify and relevant service providers in countries outside the country where you live. Shopify may also process information as an independent controller when providing certain enhanced or personalised services.

You can learn more by reading the Shopify Consumer Privacy Policy and visiting the Shopify Privacy Portal.

Marketing

If you have agreed to receive marketing emails, you may unsubscribe at any time by selecting the unsubscribe link in an email.

After unsubscribing, we may still send non-promotional messages necessary to manage your account, respond to enquiries, or provide information about your orders.

International Transfers

Shopify and some of our service providers may process personal information outside the United Kingdom.

Where required, appropriate safeguards will be used for international transfers, such as an adequacy regulation, the UK International Data Transfer Agreement, the UK Addendum to the European Commission’s Standard Contractual Clauses, or another legally recognised safeguard.

Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including fulfilling orders, maintaining accounts, complying with legal and accounting obligations, resolving disputes, preventing fraud, and enforcing agreements.

Retention periods depend on the nature of the information, why it was collected, and applicable legal requirements. When information is no longer required, we will delete or anonymise it where reasonably practicable.

Security

We use reasonable administrative, technical, and organisational safeguards designed to protect personal information.

However, no internet transmission or storage system is completely secure. You should avoid sending sensitive information through unsecured communication channels and keep your account credentials confidential.

Your Rights

Depending on where you live and subject to applicable exceptions, you may have the right to:

Request access to personal information we hold about you.
Request correction of inaccurate or incomplete information.
Request deletion of your personal information.
Request restriction of certain processing.
Object to processing based on legitimate interests.
Object to direct marketing.
Request a portable copy of certain information.
Withdraw consent where processing is based on consent.
Submit a complaint to a data-protection authority.

To exercise a right, contact us using the email address below. We may need to verify your identity before completing your request. We will respond within the period required by applicable law.

Children’s Privacy

The Services are not directed at children, and we do not knowingly collect personal information from children who are not legally able to provide it.

If you believe a child has provided personal information to us improperly, please contact us so we can investigate and, where appropriate, delete it.

Third-Party Websites

Our Services may contain links to websites or platforms operated by third parties. We do not control those services and are not responsible for their privacy or security practices. You should review the privacy policy of any third-party service you use.

Complaints

If you have concerns about how we process your personal information, please contact us first so we can try to resolve them.

If you are in the United Kingdom, you may also complain to the Information Commissioner’s Office through ico.org.uk.

Changes to This Policy

We may update this Privacy Policy to reflect changes to our practices, Services, or legal obligations. We will publish the revised policy on this website and update the “Last updated” date. Where required, we will provide additional notice.