Privacy Policy

Introduction

Welcome to Hoodix ("we", "us", "our"). We are committed to protecting your personal data in full compliance with the General Data Protection Regulation (GDPR).

This Privacy Policy explains how we collect, use, store, and protect your information when you visit hoodix.info or use our services.

Data We Collect

• Personal Identification: Name and email address — when you contact us or place an order.
• Order Information: Product details, quantities, and any custom design files you upload.
• Contact Data: Information from our contact form or emails to info@hoodix.info.
• Technical Data: Anonymised IP address, browser type, and device data via server logs.
• Cookie / Storage Data: A localStorage entry recording your cookie consent preference.

How We Use Your Data

• To process and fulfil your orders, including custom print jobs.
• To communicate with you about your order or enquiries.
• To provide post-sale customer support.
• To comply with applicable EU legal obligations.

Special Clause: Custom Designs & Product Images

• User-Submitted Designs: Artwork provided for custom print orders is used solely to process that order. We will not use, share, or display your designs without explicit written consent.
• On-Site Images: All website imagery is our own property, properly licensed, or used with permission.
• Removal Requests: Email info@hoodix.info with subject "Image Removal Request". We respond within 5 business days.

Legal Basis for Processing (GDPR)

• Contract Performance (Art. 6(1)(b)): Processing required to fulfil your order.
• Consent (Art. 6(1)(a)): When you accept our cookie notice or tick the contact form consent checkbox.
• Legal Obligation (Art. 6(1)(c)): Where required by EU law.
• Legitimate Interest (Art. 6(1)(f)): For improving our services, where this does not override your rights.

Cookies & Local Storage

We use a single localStorage entry to record your cookie consent preference. We do not use third-party tracking, advertising, or analytics cookies.

Data Retention

We retain personal data only as long as necessary, or as required by applicable EU law. Contact form submissions are deleted after 24 months.

Third-Party Service Providers

We do not sell or trade your data. Trusted providers receive only data strictly required for their services, under confidentiality agreements.

International Data Transfers

Where data is transferred outside the EEA, we ensure adequate protection through the European Commission's Standard Contractual Clauses (SCCs) or equivalent frameworks.

Your Rights Under GDPR

• Right of Access (Art. 15): Request a copy of your personal data.
• Right to Rectification (Art. 16): Request correction of inaccurate data.
• Right to Erasure (Art. 17): Request deletion under certain conditions.
• Right to Restrict Processing (Art. 18): Request limits on how we use your data.
• Right to Object (Art. 21): Object to processing based on legitimate interest.
• Right to Data Portability (Art. 20): Request your data in a portable format.
• Right to Withdraw Consent: Withdraw at any time without affecting prior lawful processing.

We respond within 30 days. You may also lodge a complaint with your national EU supervisory authority or the EU Data Protection Board.

Data Security

We apply appropriate technical and organisational measures to protect your data. All traffic is encrypted via HTTPS / TLS.

Changes to This Policy

We may update this policy periodically. Changes are posted here with an updated "Last Updated" date.