Privacy Policy

Who we are

Last One Up Club sells hiking t-shirts printed on demand and shipped worldwide. For questions about this policy or your data, contact us at hello@lastoneupclub.com.

What we collect

• Account details — your name, email address and a securely hashed password (if you create an account).
• Order and delivery information — the delivery name and address, order contents and order history. If you save addresses to your address book, we store those too.
• Payment information — payments are handled by our payment processor. We receive confirmation of payment and limited details (such as the result and a reference), but we do not receive or store your full card number.
• Support and reviews — the content of support tickets and messages you send us, and any reviews and photos you submit.
• Technical data — a session cookie to keep you signed in, and basic information needed to operate and secure the site (for example, to apply rate limits).

Analytics and session recordings

We run our own visitor analytics on our own servers — no third-party analytics service receives your browsing data.

• Aggregate analytics (always on, cookieless)— we count page views, visits, referring sites and basic events (such as adding to cart or completing checkout) so we can see which pages and products work. This uses a random identifier kept only in your browser tab's session storage: it is not a cookie, it is discarded when the tab session ends, and it cannot recognise you across visits. We store the pages you viewed without any query parameters, the referring site, campaign tags from the arriving link, and whether the screen was mobile- or desktop-sized. We do not store your IP address (it is used transiently for rate limiting only), your name, or anything that identifies you.
• Session recordings (only with your consent)— if you accept cookies on our consent banner, we may record how the page is used (mouse movement, scrolling, taps and page structure) to find usability problems. Everything you type is masked before it leaves your browser, and payment details are entered on our payment processor's own page, which is never recorded. We honour the “Do Not Track” and Global Privacy Control browser signals: when either is set, we do not record, regardless of consent. Declining cookies never affects your ability to shop.
• Retention — aggregate analytics data is deleted after 90 days; session recordings are deleted after 30 days.

How and why we use it

We use your data to:

• create and manage your account;
• produce, fulfil and deliver your orders, including routing them to the print facility that makes it;
• take payment and send order confirmations, dispatch notices and other service messages;
• provide customer support and handle any issues or returns;
• request a review after your order (you can ignore or opt out of these); and
• keep the service secure and prevent abuse.

Our legal bases are performance of our contract with you (to fulfil orders and run your account), our legitimate interests (to operate, secure and improve the service), your consent where required (such as optional marketing), and compliance with legal obligations.

Who we share it with

We only share data with the service providers we need to run Last One Up Club, under agreements that require them to protect it:

• our print-on-demand production partner, to print, pack and ship your order and ship it to you;
• our payment processor, to take payment securely;
• our cloud hosting and storage providers, to run the site and store product imagery and any photos you attach;
• our email provider, to send order and service emails.

We do not sell your personal data. Where a provider processes data outside the UK, we rely on appropriate safeguards for that transfer.

How long we keep it

We keep order records for as long as needed to fulfil your order and to meet our legal and accounting obligations. Saved addresses are kept while your account is active or until you delete them. You can remove saved addresses at any time, or ask us to close your account.

Your rights

Under UK data protection law you have the right to:

• access the personal data we hold about you;
• ask us to correct inaccurate data;
• ask us to delete your data;
• object to or restrict certain processing;
• request a copy of your data in a portable format; and
• withdraw consent where we rely on it.

To exercise any of these, email hello@lastoneupclub.com. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

Security

We use industry-standard measures to protect your data, including encrypted connections, hashed passwords and access controls on our storage. No system is perfectly secure, but we work to keep your information safe and to limit who can access it.

Children

Last One Up Clubis intended for adults. We don't knowingly collect data from children. If you believe a child has provided us with personal data, please contact us and we'll remove it.

Changes to this policy

We may update this policy from time to time. When we do, we'll revise the “last updated” date at the top of this page.