Privacy Policy

Last updated: 10 November 2026

At Dumbfookhams Shop, we respect your privacy. This Privacy Policy explains what personal information we collect when you browse our website, place an order, use order tracking or contact us, and how that information is used and shared.

By using the website, you acknowledge the practices described in this policy. Where applicable law requires consent or another legal basis for a particular activity, we will rely on that required basis.

1. Information We Collect

Depending on how you use the website, we may collect the following information:

• Contact and checkout information: your name, email address, phone number and shipping or billing address.
• Order information: products ordered, selected sizes or variants, order ID, order status, order totals, shipping details and fulfilment information.
• Payment-related information: payment status, transaction reference and information needed to reconcile or support a payment. Payment details are handled by the payment service used at checkout.
• Support communications: information you choose to provide when you contact us by email or another contact channel about an order, return, replacement, complaint or other enquiry.
• Technical information: information that may be provided by your browser or hosting infrastructure, such as IP address, browser type, device information, request and error logs, and approximate location where used for currency display or service operation.
• Browser-stored information: information such as cart contents, wishlist items, currency preference and temporary checkout or order-review state, where the website uses browser storage to provide these features.

Please do not send us payment passwords, card security codes or other authentication secrets by email or through support messages.

2. How We Use Information

We use information for legitimate store operations, including to:

• Process orders and communicate order confirmations or important order updates.
• Arrange product production, fulfilment, shipping and delivery through Printify and its fulfilment partners.
• Calculate or obtain shipping charges, applicable taxes and order totals.
• Verify order details and provide the order-tracking service.
• Respond to customer enquiries received through the contact details published on our website, and handle cancellations, defects, replacements, refunds and complaints.
• Protect the website, detect suspicious activity, prevent misuse and troubleshoot technical problems.
• Maintain business records and comply with applicable legal obligations.

We currently send transactional emails, such as order confirmations and order-related updates. We do not currently use the website to send marketing email campaigns.

3. Sharing Information with Service Providers

We share only the information reasonably needed for a provider to perform its role. Depending on the transaction and services in use, recipients may include:

• Printify and fulfilment partners: product, recipient and delivery information needed to produce and fulfil your order.
• Firebase and Google Cloud services: information used for backend operations, order records and related application data.
• Website hosting and infrastructure providers: information processed to host, secure and deliver the website and its services.
• Payment service providers: payment-related information required to process or verify a transaction, when a payment gateway is integrated and enabled.
• Other operational providers: services needed for shipping, currency display, security, communications or technical support, where applicable.

We may also disclose information where required by law, valid legal process or a competent authority, or where reasonably necessary to protect the rights, safety and security of customers, our store or others.

4. Payments

Payment processing is handled through the payment method made available at checkout. We do not intentionally store complete payment-card numbers, CVV/security codes or online-banking passwords on our own systems.

Cashfree status: Cashfree is planned as a payment provider but is not currently integrated or enabled on the website. This policy will be updated if our payment arrangements change.

During development or testing, the website may contain a simulated payment flow. A simulated payment is not a real payment and should not be treated as a completed commercial transaction.

5. Cookies and Browser Storage

Our website uses limited browser technologies to make essential store features work. These are not currently used for advertising or analytics tracking.

• Order-tracking cookie: after you successfully verify an order, the website may set a temporary cookie named dfh_track_session. It helps maintain the verified tracking session so you do not need to submit your order ID and contact details for every tracking request. It is configured as HttpOnly, uses SameSite=Lax, is marked Secure in production and is scoped to the order-tracking API path. Its session lifetime is approximately 15 minutes.
• Local and session storage: the website may use browser storage for functional features such as your cart, wishlist, currency preference and temporary checkout or order-review state. These items are stored in your browser and are distinct from cookies.

The tracking cookie is strictly functional; it is not an advertising cookie. The backend checks whether a tracking session has expired. Automatic deletion of expired session records from the database is not currently enabled, but expired sessions are rejected and cannot be used to continue tracking.

You can manage or clear cookies and browser storage through your browser settings. Blocking or clearing them may affect cart, checkout or order-tracking functionality.

6. Order Tracking

To access an order through our tracking page, you must provide the order ID and verify it using the email address or phone number associated with the order.

After successful verification, a temporary tracking session may be created in your browser as described above. Anyone who has both a valid order ID and the matching checkout email address or phone number may be able to access the associated order information. Please keep these details private and avoid using order tracking on a shared or public device.

7. International Processing

Because our store serves customers in different countries and uses third-party technology and fulfilment providers, information may be processed or stored in countries other than the country where you live. Those countries may have different data-protection laws.

Where required, we will take appropriate steps for international transfers and processing in accordance with applicable data-protection requirements.

8. Data Retention

We keep personal information for as long as reasonably necessary for the purposes described in this policy, including fulfilling orders, providing support, maintaining business and tax records, resolving disputes, preventing fraud and meeting legal obligations.

Retention periods may vary depending on the type of information and the reason it was collected. Browser-stored information can generally be cleared by you through your browser. Temporary tracking sessions are time-limited and expired sessions are rejected by the backend; expired database records may remain until routine cleanup.

9. Security

We use reasonable technical and organisational measures intended to protect information against unauthorised access, loss, misuse or alteration. These measures may include access controls, secure connections, server-side handling of sensitive service credentials and safeguards around order verification.

No website, storage system or method of transmission can be guaranteed to be completely secure. Please use a unique, secure email account and contact us promptly if you believe your order information has been accessed improperly.

10. Your Choices and Privacy Rights

Depending on your location and applicable law, you may have rights to request access to, correction of, deletion of or information about the processing of your personal data, or to object to or restrict certain processing.

You can contact us using the details below to make a privacy request. We may need to verify your identity before acting on a request and may retain information where required or permitted by law.

11. Children’s Privacy

Our store is not intended to collect personal information directly from children who are not legally able to make purchases or provide consent under the laws that apply to them. If you believe a child has provided personal information to us inappropriately, please contact us so we can review the matter.

12. Third-Party Websites and Services

Our website may link to or rely on third-party websites and services. Their privacy practices are governed by their own policies. We encourage you to review those policies before providing information directly to a third party.

13. Changes to This Privacy Policy

We may update this policy when our website, service providers, data practices or legal requirements change. The latest version will be published on this page with an updated date. Material changes will be reflected in the revised policy.

14. Contact Us

If you have questions about this Privacy Policy or want to make a privacy-related request, contact:

Store: Dumbfookhams Shop
Customer support email: dumbfookhams@gmail.com

Thank you for trusting Dumbfookhams. We appreciate your support and take the handling of your information seriously.