Privacy Policy | A Shirt Shop

Last updated: 2025-06-16

1. Introduction

At A Shirt Shop (operated by AutoTrading OÜ, “we”, “our”, “us”) we value your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, share and protect the data you provide when you visit ashirtshop.com (the “Site”) or purchase our products.

2. Who is responsible for your data?

Data controller: AutoTrading OÜ, Karamelli tn 2, 11317 Tallinn, Estonia.

3. Information we collect

Information you give us – name, postal address, e‑mail, telephone, payment details and any other data you enter at checkout, in forms or by contacting us.
Automatically collected data – IP address, browser information, referral source, cookies and usage statistics.
Order fulfilment data – product customisation files and shipment tracking numbers generated by suppliers.

4. How we use your information

To process and deliver your order via suppliers.
To manage your account and provide customer support.
To improve and secure the Site, and to analyse performance.
To send service messages (e.g. order confirmations, shipping updates) and, with your consent, marketing communications.
To comply with legal obligations (tax, accounting, consumer‑protection and GDPR requirements).

5. Legal bases

We process personal data only when we have a lawful basis under Article 6 GDPR: contract performance, legitimate interests, consent or legal obligation.

6. Cookies and similar technologies

We use essential, performance and advertising cookies. You can manage cookies in your browser.

7. Sharing of data

We share data only as necessary:

Supplier – receives the data required to print, pack and ship your order.
Payment providers – Stripe or PayPal get the information needed to complete the transaction.
Couriers and postal operators receive shipment details.
Professional advisers and authorities where required by law.

8. International transfers

Supplier may process your order at facilities in the United States, the EU or other regions. When data moves outside the EEA we rely on Standard Contractual Clauses or equivalent safeguards as described in supplier's policy.

9. Retention

We keep order data for 10 years (accounting law). Marketing‑consent data is retained until you withdraw consent. Cookies expire as set out in your browser.

10. Your rights

You have the right to access, correct, erase or port your data, and to object to or restrict processing. To exercise your rights, contact us at info@ashirtshop.com. You can lodge a complaint with the Estonian Data Protection Inspectorate.

11. Security

We use HTTPS encryption, secure payment gateways and role‑based access controls.

12. Changes to this policy

We may update this Privacy Policy. Material changes will be notified on the Site or by e‑mail.

13. Contact

Questions? Email us at info@ashirtshop.com or write to AutoTrading OÜ, Karamelli tn 2, 11317 Tallinn, Estonia.