Privacy Policy

Controller: SUMMERTHUG LLC, support@summerthug.com. We collect only what we need: email, address, order history. No sale of data.

What we store & why

• Contact + shipping (fulfilment, legal basis: contract)
• Order + certificate scan counters (fraud prevention)
• Newsletter email (consent, unsubscribe anytime)
• Essential cookies: cart, auth, consent (1 year)

Processors

Paystack (payments), DHL (shipping), Cloudflare R2/D1 (hosting), Google Analytics (only with consent, anonymized IP), Sentry (errors). No Facebook pixel.

Retention & transfers

Orders retained 7 years for tax, otherwise deleted on request. US hosting; EU transfers under SCCs.

Your rights

Access, rectify, erase, port, object, withdraw consent at support@summerthug.com — response within 30 days. Lodge complaint with your DPA. Manage cookies via footer Cookie Preferences or Cookies Policy.

Effective: September 2026. See also Terms, Cookies, Returns.