Privacy policy

This page describes what we collect when you order a patch, which companies process that data on our behalf, and how to ask us to delete it.

Who we are

Squad Outfitters sells custom embroidered patches at squadoutfitters.com. The data controller is LEGAL ENTITY NAME of REGISTERED ADDRESS. Reach us at sales@squadoutfitters.com.

What we collect

Order information

Your name, email address, shipping address, and the specification of the patch you ordered: size, quantity, backing, and thread choices.

Artwork you upload

Any image you send us so we can quote, digitise, and manufacture your patch. We store it so you can reorder the same design later.

Payment information

Card details are entered directly into Stripe and are never sent to or stored on our servers. We retain only the Stripe transaction reference and the amount.

Technical information

Your IP address and browser user-agent, logged by our host for security and abuse prevention.

Who processes it

We use the following providers. Each one only receives the data it needs to do its job.

• Stripe: payment processing.
• Cloudflare: website hosting, delivery, and bot protection via Turnstile.
• Supabase: database and account authentication.
• Resend: order and proof notification emails.
• fal.ai: generating preview images of your artwork as a patch.

We do not sell your personal information, and we do not share it with anyone for their own marketing.

Cookies

Strictly necessary cookies keep your cart and your signed-in session working; these cannot be switched off. Analytics and marketing cookies are off until you turn them on. You can change your choice at any time from the Cookie settings link in the footer.

How long we keep it

Order records and the artwork attached to them are kept for RETENTION PERIOD so you can reorder and so we can meet tax and accounting obligations. After that they are deleted.

Your rights

You can ask us for a copy of your data, ask us to correct it, or ask us to delete it. Email sales@squadoutfitters.com and we will respond within 30 days. Depending on where you live you may also have the right to complain to a data protection regulator.

Children

This site is intended for business and adult customers. We do not knowingly collect information from children under 13.

Changes

If we change this policy we will update the date at the top of the page.