Privacy policy

Privacy Policy

Last updated: 2026

Drip&Verse is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, and what rights you have. It applies to all customers in the USA, European Union, United Kingdom, and other regions where applicable data protection laws are in force.

1. Who We Are

Drip&Verse operates as a print-on-demand apparel brand. When we refer to 'Drip&Verse', 'we', 'us', or 'our' in this policy, we mean the brand and its associated data controller. For privacy enquiries, contact us at avelorcorporation@gmail.com.

2. What Data We Collect

We collect the following types of personal data:

Data You Provide

Name and contact information (email address, phone number)
Shipping and billing address
Payment information (processed securely by Shopify Payments — we do not store card details)
Communications you send us (emails, support queries)

Data Collected Automatically

IP address and browser type
Pages visited on our website and time spent
Device type and operating system
Referring URLs and search terms

Data from Third Parties

Data from social login providers (if used)
Analytics data from Google Analytics and Meta Pixel (aggregated and anonymised where possible)

3. How We Use Your Data

We use your personal data only for legitimate business purposes:

To process and fulfil your orders
To send order confirmations, shipping updates, and tracking information
To respond to customer support enquiries
To send marketing communications (only with your consent — you can unsubscribe at any time)
To improve our website, products, and customer experience through analytics
To comply with legal obligations

4. Legal Basis for Processing (EU/UK Customers — GDPR)

For customers in the European Union and United Kingdom, our legal bases for processing personal data are:

Contract performance: processing your order and delivering products
Legitimate interests: fraud prevention, website security, analytics
Consent: marketing emails and cookies (where consent is required)
Legal obligation: tax records, consumer protection compliance

5. Data Sharing

We do not sell your personal data. We share data only with trusted third-party service providers who help us operate our store:

Shopify — e-commerce platform and payment processing
Tapstitch — our print-on-demand production partner (receives order details and shipping address only)
Shipping carriers — for delivery of your order
Klaviyo or similar — email marketing platform (if you opt in)
Google Analytics / Meta Pixel — website analytics and advertising measurement

All third-party providers are required to handle your data securely and in compliance with applicable data protection laws.

6. Cookies

Our website uses cookies to function correctly and improve your experience. Cookies are used for:

Keeping items in your cart during a session
Remembering your preferences
Analytics and performance measurement
Targeted advertising (where applicable and with consent)

You can manage your cookie preferences through your browser settings or our cookie consent tool. Disabling certain cookies may affect the functionality of the website.

7. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes described in this policy:

Order data: retained for up to 7 years for legal and tax compliance
Marketing data: until you unsubscribe or withdraw consent
Analytics data: in anonymised form, indefinitely

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Right to access — request a copy of the data we hold about you
Right to rectification — request correction of inaccurate data
Right to erasure — request deletion of your data (subject to legal obligations)
Right to restrict processing — request we limit how we use your data
Right to data portability — receive your data in a machine-readable format
Right to object — object to processing for marketing or legitimate interests
Right to withdraw consent — at any time, for consent-based processing

To exercise any of these rights, email us at avelorcorporation@gmail.com. We will respond within 30 days. EU and UK residents may also lodge a complaint with their national data protection authority (e.g. the ICO in the UK or a relevant EU DPA).

9. Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Our store is hosted on Shopify, which maintains industry-standard security certifications including PCI DSS compliance.

10. International Data Transfers

If you are located in the EU or UK, your data may be transferred to and processed in countries outside the EEA (such as the United States). Where such transfers occur, we ensure appropriate safeguards are in place, such as standard contractual clauses or equivalent mechanisms.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be published on this page with a revised date. We encourage you to review this policy periodically.