Privacy policy

1. Data Controller Information

• Merchant Name: Tommy John
• Official Website: https://tommyjohn.shop
• Primary Contact Email for All Privacy Matters: info@tommyjohn.shop
• Hosting & E-Commerce Platform Provider: Shopify Inc., a third-party data processor acting under data processing agreements with us. Shopify only processes your personal data to operate our online store and complete checkout functions and is prohibited from using your data for independent marketing purposes without separate consent.

2. Categories of Personal Information We Collect

2.1 Information You Voluntarily Provide

1. Account Registration Data: Full legal name, valid email address, custom account password, saved shipping and billing addresses, size preferences for underwear, tees and loungewear.
2. Checkout & Transaction Data: Full name, billing address, delivery address, phone number, order number, purchased items (boxer briefs, thongs, loungewear sets, T-shirts etc.), order subtotal, shipping fees, tax amounts, payment method identifiers (we do not store full credit card numbers; payment processing is fully handled by Shopify PCI-DSS compliant gateways).
3. Customer Support Correspondence: Emails sent to info@tommyjohn.shop containing sizing questions, return/refund requests, product defect claims, feedback about Second Skin underwear, Cool Cotton fabric or bamboo viscose boxer briefs, complaints and return photos.
4. Marketing Opt-In Data: Email address collected when you voluntarily subscribe to our newsletter for new arrivals, discount promotions and restock alerts for our intimate and casual apparel lines.
5. Review & User-Generated Content: Names, product ratings and written reviews you post on product pages for boxer briefs, lounge sets, undershirts and T-shirts.

2.2 Automatically Collected Technical & Behavioral Data

1. Device Metadata: Device model, operating system, browser type, unique device identifiers, screen resolution, language settings and IP address.
2. Website Usage Logs: Page visit timestamps, product pages viewed (including thong, boxer brief, loungewear and T-shirt listings), time spent browsing, click paths, cart additions/abandonments, search queries for apparel sizes and styles, exit pages.
3. Tracking Technology Data: Information captured via strictly necessary cookies, analytics cookies, advertising pixels, web beacons and local storage to maintain your shopping cart, remember login sessions, analyze store traffic and serve personalized product recommendations.
4. Location Metadata: General geographic region derived from IP address for shipping zone calculations and regional tax rate display.

3. Legal Bases for Processing Your Personal Data

1. Contract Performance: Processing checkout, shipping, return and refund data to fulfill sales contracts for boxer briefs, T-shirts, lounge sets and intimates you purchase.
2. Consent: Sending marketing newsletters, deploying non-essential analytics and advertising tracking cookies; you may withdraw consent at any time via email to info@tommyjohn.shop.
3. Legitimate Business Interest: Fraud detection, website security, store performance analytics, customer service improvement, preventing repeated chargebacks and optimizing our apparel product catalog.
4. Legal Compliance: Retaining order and transaction records to satisfy tax, accounting and consumer protection legal obligations.

4. Purposes We Use Your Personal Information

1. Complete order fulfillment: Process payments, arrange carrier shipping, send order confirmations, tracking updates and delivery alerts for boxer briefs, thongs, loungewear sets, T-shirts and casual pants.
2. Deliver customer support: Respond to sizing guidance, return requests, defective item claims and policy questions submitted to info@tommyjohn.shop.
3. Maintain registered customer accounts: Save shipping addresses, size preferences and order history for faster repeat checkout.
4. Website optimization: Analyze browsing behavior to improve page layout, product categorization (Men’s Best Sellers, Women’s Sleep Tops, New Arrivals) and fabric/underwear product descriptions.
5. Personalized recommendations: Suggest matching lounge sets, complementary boxer briefs or T-shirts based on your viewed and purchased items.
6. Fraud and loss prevention: Verify payment authenticity, flag suspicious orders and reduce chargeback risks for intimate apparel sales.
7. Marketing communications (only with explicit opt-in consent): Send email newsletters with new arrivals, limited discounts, and restock notifications for seamless panties, bamboo boxer briefs and Cool Cotton undershirts.
8. Legal record retention: Store transaction history to comply with tax, audit and consumer dispute requirements.
9. Moderate customer reviews: Display verified purchase feedback for our underwear and loungewear lines and remove defamatory or inappropriate user content.

5. Third Parties We May Share Your Personal Data With

1. Shopify Inc.: E-commerce platform, checkout hosting, payment gateway management, order database storage, analytics and fraud screening tools.
2. Payment Processors: PCI-compliant payment gateways integrated within Shopify to authorize card and digital wallet transactions; full payment credentials are never stored on our servers.
3. Shipping & Logistics Carriers: Share delivery name, address, phone number and order contents to ship boxer briefs, T-shirts and loungewear to your location.
4. Analytics Providers: Tools that process anonymized browsing data to measure website traffic, cart conversion and product performance.
5. Email Marketing Service Providers: Only if you opt into newsletters; we share your email address solely to deliver promotional apparel updates.
6. Legal Authorities: Disclose your personal data when compelled by valid court orders, government regulatory requests or to protect our legal rights in fraud/chargeback disputes.

6. Cookie & Tracking Technology Disclosure

1. Strictly Necessary Cookies: Mandatory for core store functions including shopping cart storage, secure login sessions, checkout page loading and cookie consent banner memory. These cannot be disabled without breaking website functionality and do not require opt-in consent.
2. Analytics Cookies: Track anonymous browsing behavior to improve product pages for underwear, loungewear and T-shirts; only activated if you accept non-essential tracking via our cookie banner.
3. Marketing & Retargeting Pixels: Serve personalized ads featuring our boxer briefs, thongs and lounge sets on external platforms; only active with your explicit consent.
   
   
   You may adjust cookie preferences anytime by clearing browser local storage or revisiting our cookie consent banner on https://tommyjohn.shop. Requests to disable tracking may be submitted via info@tommyjohn.shop.

7. Data Retention Periods

1. Active Customer Account Data: Stored until you submit a full account deletion request via info@tommyjohn.shop.
2. Order & Transaction Records: Retained for a minimum of seven years to meet tax and accounting legal obligations globally.
3. Marketing Newsletter Emails: Stored until you unsubscribe via the footer link in promotional emails or send an opt-out request to info@tommyjohn.shop.
4. Customer Support Emails: Retained for three years after resolving your return, sizing or product inquiry.
5. Automatic Analytics & Cookie Data: Anonymized usage logs are purged after 12 months; identifiable device tracking data expires within 90 days.
6. Unsubmitted Abandoned Cart Data: Automatically deleted after 30 calendar days.

8. Your Legal Data Subject Rights

1. Right to Access: Request a full copy of all personal data we hold about you, including order history, saved addresses and support correspondence related to your underwear and loungewear purchases.
2. Right to Rectification: Correct inaccurate saved names, shipping addresses, phone numbers or account details.
3. Right to Erasure (“Right to be Forgotten”): Request permanent deletion of your customer account and all linked personal data, excluding mandatory tax/legal order records we are required to retain by law.
4. Right to Data Portability: Receive your transaction and account data in machine-readable CSV format to transfer to other retailers.
5. Right to Object: Opt out of marketing emails, analytics tracking and retargeting advertising at any time.
6. Right to Restrict Processing: Temporarily pause data usage while we verify corrections or deletion requests.
7. CCPA Exclusive Right to Opt-Out of Sale: We do not sell your personal information to third parties, but you may submit a formal “Do Not Share” request via info@tommyjohn.shop to disable cross-platform retargeting.
8. Right to Lodge a Complaint: If you believe we violated data protection laws, you may submit a formal complaint to your local data supervisory authority or send detailed grievance correspondence to info@tommyjohn.shop for internal resolution.

9. Children’s Privacy Protection

10. Data Security Safeguards

1. End-to-end SSL/TLS encryption for all website browsing, checkout form submissions and email communications sent to info@tommyjohn.shop.
2. Shopify PCI Level 1 compliance to secure all payment processing; we never store full credit card, CVV or banking credentials on our site servers.
3. Restricted internal staff access to customer data, limited only to fulfillment and support team members handling order and return requests.
4. Regular automated security scans, firewalls and database access logs to detect unauthorized data access attempts.
5. Secure permanent deletion protocols for expired or requested-erasure personal records.
   
   
   No online transmission or digital storage system can guarantee 100% security against unforeseen breaches, but we take all commercially reasonable measures to minimize data risk. In the event of a qualifying data breach, we will notify affected users and relevant regulatory authorities within mandatory legal timelines.

11. International Data Transfers

12. Marketing Opt-Out Instructions

1. Click the “Unsubscribe” hyperlink located at the bottom of every marketing email we send, or
2. Send a simple opt-out request email to info@tommyjohn.shop with the subject line “Newsletter Unsubscribe”.
   
   
   Unsubscription takes effect within 2 business days; you will still receive critical transactional emails (order confirmations, shipping tracking, return status updates) unrelated to marketing promotions.

13. Amendments to This Privacy Policy

14. Severability Clause

Official Privacy Contact Information