Privacy policy

Last updated: October 28, 2026

Whitaker & Co. (“we,” “us,” or “our”) operates whitakerhatters.com, including our online store and related services (the “Services”). Our store is powered by Shopify.

This Privacy Policy explains how we collect, use, share, and protect personal information when you browse our website, place an order, or contact us.

Privacy contact: contact@whitakerhatters.com

For purposes of applicable data protection laws, the business identified above is the controller of personal information processed for the purposes described in this policy, except where another provider acts independently.

1. Personal Information We Collect

Depending on how you interact with our Services, we may collect:

  • Contact information: Your name, email address, telephone number, billing address, and shipping address.
  • Order information: Products ordered, shipping selections, payment status, purchase history, returns, exchanges, and cancellations.
  • Payment information: Information needed to process your payment, including billing details and transaction confirmations. Payment providers process payment credentials according to their own privacy and security practices.
  • Account information: Information you provide when creating or managing a customer account, where available.
  • Communications: Messages, photos, and other information you send when contacting customer support or submitting feedback.
  • Device and usage information: Your IP address, browser, device identifiers, pages viewed, interactions with our website, and approximate location inferred from your IP address.
  • Preferences: Your marketing subscriptions, cookie choices, and other privacy settings.

Please do not send payment card details or other sensitive information by email.

2. How We Collect Information

We collect personal information:

  • Directly from you when you order, complete a form, create an account, or contact us.
  • Automatically through cookies and similar technologies when you use our website, subject to applicable consent requirements.
  • From service providers supporting payments, shipping, fraud prevention, customer support, analytics, and advertising, where these services are enabled.

3. How We Use Your Information

We use personal information to:

  • Accept and process orders and payments.
  • Deliver products and provide shipping updates.
  • Handle enquiries, returns, exchanges, refunds, and complaints.
  • Maintain customer accounts and remember preferences.
  • Protect our store, customers, and transactions against fraud and misuse.
  • Understand website performance and improve the shopping experience.
  • Send marketing communications where permitted.
  • Measure advertising performance and provide relevant advertising where enabled and permitted.
  • Maintain records and meet legal, tax, accounting, and regulatory obligations.

Ordering a free clearance item does not change how we handle your personal information. We still need relevant contact, delivery, and payment information to fulfil the order and collect any shipping charges.

4. Legal Bases for Processing

Where UK or European data protection law applies, we rely on the following legal bases:

  • Contract: To process your order, arrange delivery, and provide requested services.
  • Legal obligation: To maintain required records and comply with applicable law.
  • Legitimate interests: To operate and secure our business, prevent fraud, handle enquiries, and improve our Services, where those interests are not overridden by your rights.
  • Consent: For activities requiring consent, including certain marketing communications and non-essential cookies or tracking technologies.

Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect processing lawfully carried out before withdrawal.

5. Cookies and Similar Technologies

Our website uses cookies and similar technologies to support functions such as shopping carts, checkout, security, and remembering preferences.

Where enabled, we also use these technologies for analytics and advertising. Where consent is required, non-essential technologies should operate only after you have given that consent.

You can manage your choices through the cookie banner or privacy controls available on our website. You can also manage cookies through your browser, although blocking essential cookies may affect store functionality.

6. How We Share Information

We may share relevant personal information with:

  • Shopify, which hosts and supports our store.
  • Payment providers, to process payments and refunds.
  • Fulfilment partners and delivery companies, to prepare, ship, and deliver orders.
  • Technology and support providers, to maintain our website and assist customers.
  • Analytics and advertising providers, where enabled and permitted by your choices and applicable law.
  • Professional advisers and authorities, where necessary for legal advice, compliance, fraud prevention, or protecting rights.
  • Parties to a business transaction, if necessary in connection with a proposed sale, restructuring, or transfer of our business, subject to appropriate safeguards.

We may also share information at your request or with your consent.

7. Shopify’s Role

Shopify processes personal information to operate our store and may also process information for its own purposes when you use services such as Shop or Shop Pay. The roles and practices applicable to those services are explained in Shopify’s privacy notices.

For more information, visit the Shopify Consumer Privacy Policy and Shopify Privacy Portal.

8. Advertising and Marketing Choices

You can unsubscribe from marketing emails using the unsubscribe link in those messages or by contacting us. We may still send essential communications about your orders, payments, or customer service requests.

If we use advertising technologies that constitute a “sale,” “sharing,” or targeted advertising under applicable US privacy laws, eligible residents may opt out through the privacy controls available on our website or by contacting us.

Where required by applicable law, we honour recognised opt-out preference signals, including Global Privacy Control, for the browser or device sending the signal.

9. International Transfers

We and our service providers may process personal information outside your country of residence. Those countries may have different data protection laws.

Where required, international transfers are protected by recognised safeguards, such as adequacy decisions, Standard Contractual Clauses, or applicable UK transfer arrangements. You may contact us for information about safeguards relevant to your personal information.

10. How Long We Keep Information

We retain personal information for as long as reasonably necessary for the purposes described in this policy.

Retention depends on factors including:

  • Whether we need information to fulfil an order or provide support.
  • Whether you maintain an account or marketing subscription.
  • Applicable tax, accounting, and other recordkeeping requirements.
  • The need to resolve disputes, prevent fraud, or establish and defend legal claims.

When information is no longer needed, we delete or anonymise it, subject to legitimate backup and legal retention requirements.

11. Security

We use reasonable technical and organisational measures to protect personal information. However, no website, transmission method, or storage system can guarantee absolute security.

Please keep account credentials confidential and contact us if you suspect unauthorised use of your account.

12. Your Privacy Rights

Depending on your location and applicable law, you may have the right to:

  • Access the personal information we hold about you.
  • Correct inaccurate information.
  • Request deletion of your information.
  • Receive certain information in a portable format.
  • Restrict or object to certain processing.
  • Withdraw consent.
  • Opt out of applicable sales, sharing, or targeted advertising.
  • Appeal a decision concerning a privacy request, where applicable.

To make a request, email contact@whitakerhatters.com.

We may need to verify your identity before responding. Authorised agents may submit requests where permitted by law, subject to verification of their authority. We respond within applicable legal time limits and do not discriminate against customers for exercising privacy rights.

Some requests may be subject to exceptions, including where information must be retained to comply with legal obligations.

13. Children’s Privacy

Our Services are intended for adults. We do not knowingly collect personal information from children under 16.

If you believe a child has provided personal information to us, contact us so we can investigate and take appropriate action.

14. Third-Party Links

Our website may contain links to third-party websites or services. Their privacy practices are governed by their own policies. Please review those policies before providing personal information.

15. Complaints

If you have concerns about how we handle your personal information, contact contact@whitakerhatters.com.

Depending on your location, you may also complain to your local data protection authority. UK residents can contact the Information Commissioner’s Office. EEA residents can find their authority through the European Data Protection Board.

16. Changes to This Policy

We may update this policy to reflect changes to our practices, services, or legal requirements. We will update the “Last updated” date and provide additional notice where required.

17. Contact Us

Whitaker & Co.
Email: contact@whitakerhatters.com
Website: whitakerhatters.com