Effective date: 28 August 2026. This policy explains what Key West Sun Shirts (“we”, “us”) collects when you visit www.keywestsunshirts.com, place an order (we ship within the United States only), or contact us; how we use it; who we share it with; and the choices and rights you have. It applies to this website and to emails we send. It does not cover third-party sites we link to.
What we collect
- Order and contact details — name, shipping and billing address, email address, phone number (if you give one), what you bought, and any order notes. Card details are entered directly into our payment processor’s secure form; we never see or store your full card number.
- Account details — if you create an account: email address, a hashed password, your addresses and order history.
- Messages — anything you send through the contact form, by email, or in a wholesale enquiry (including business name and details).
- Marketing preferences — whether you have opted in to our newsletter.
- Site usage — pages viewed, products viewed and added to the cart, device and browser type, approximate location from your IP address, how you arrived, and, for a sample of visits, anonymised session recordings and heat-maps in which typed text is masked. See “Cookies and analytics” below.
We do not collect government ID numbers, precise geolocation, health, biometric or other sensitive information, and we do not knowingly collect information from children under 13.
How we use it
- To take payment, make your order and deliver it, and to send order confirmations and shipping updates.
- To answer questions and handle exchanges, returns and warranty claims.
- To run your account, if you have one.
- To send our newsletter — only if you opted in (for example by ticking the box at checkout or signing up in the footer). Every marketing email has an unsubscribe link.
- To invite you, after a purchase, to leave a review on an independent review platform. You can ignore the invitation.
- To understand how the site is used, fix problems and improve it.
- To prevent fraud, keep the site secure, and meet our legal and tax obligations.
We use your information only for the purposes above and for closely related ones you would reasonably expect. We do not make automated decisions about you that have legal or similarly significant effects.
Who we share it with
We share personal information only with service providers that act on our instructions to run the store, each receiving just what it needs for its task:
- Payment processing — the card and billing details you enter at checkout.
- Production and delivery — your name, shipping address, email and phone (for delivery notifications), and the items ordered, so your shirts can be made, packed and shipped.
- Email delivery — your email address and name, for order emails and (if opted in) the newsletter.
- Website hosting, security and support — data stored on the site is held on secure servers in the United States.
- Analytics — usage data as described under “Cookies and analytics”.
- Review platforms — your email address and order reference, only to send a review invitation after purchase.
We also disclose information when the law requires it, to protect our rights or the safety of others, or as part of a sale or merger of the business (in which case this policy continues to apply). We do not sell your personal information, and we do not share it for cross-context behavioural advertising.
Cookies and analytics
- Essential cookies keep your cart, session and login working and remember choices like the size guide you last opened. The store cannot work without them.
- Analytics — we use Google Analytics to measure traffic and shopping behaviour, and Microsoft Clarity to see how pages are used through anonymised session recordings and heat-maps. Both are configured to mask what you type, and neither is used to build advertising profiles of you. Google explains how it handles data from partner sites at policies.google.com/technologies/partner-sites; Microsoft’s privacy statement is at privacy.microsoft.com.
- Embedded badges — the customer-review badges on the site are loaded from the review platforms and may set their own cookies.
You can block or delete cookies in your browser settings; the cart and checkout need the essential ones. Google also offers a browser add-on to opt out of Google Analytics. We do not currently run advertising pixels on the site.
How long we keep it
- Order records: as long as needed for tax, accounting and warranty purposes — normally seven years.
- Account details: until you ask us to delete your account.
- Messages: until your question is resolved and for a reasonable period afterwards.
- Newsletter subscription: until you unsubscribe.
- Analytics data: for the retention period set in each tool, after which it is deleted or aggregated.
Security
The site is served over HTTPS, account passwords are stored hashed, card data is handled only by our payment processor under the PCI DSS standard, and access to order data is limited to staff who need it. No method of transmission or storage is completely secure, but we work to protect your information and will notify you and the relevant authorities if a breach affecting you occurs, as the law requires.
Your choices and rights
- Access, correction and deletion: you can ask what personal information we hold about you, ask us to correct it, or ask us to delete it. We will keep order records the law requires us to keep and tell you if we do.
- Marketing: unsubscribe from any marketing email using the link in it, or by contacting us.
- Account: log in to update your details or ask us to close the account.
- Portability: you can ask for a copy of the information you gave us in a machine-readable format.
To exercise any of these, email info@keywestsunshirts.com or use the contact form. We may need to verify your identity (usually by confirming the email address on the order). We respond within 45 days, and we will never treat you differently for exercising your rights. You may also authorise someone to make a request for you.
California residents
Under the California Consumer Privacy Act (as amended by the CPRA) you have the right to know what personal information we collect, use and disclose; to delete it; to correct it; to opt out of its sale or sharing; and to non-discrimination. In the last 12 months we have collected the categories listed under “What we collect” (identifiers, commercial information, internet activity, and, for account holders, login credentials) for the purposes listed under “How we use it”, and disclosed them only to the service-provider categories listed under “Who we share it with”. We have not sold or shared personal information, so there is nothing to opt out of.
Where we operate
We are based in Key West, Florida, sell and ship only within the United States, and store and process information in the United States. This site is intended for US customers. If you visit from elsewhere, your information is handled under US law as described in this policy.
Changes to this policy
We will update this page when our practices change and show the new effective date at the top. If a change materially affects how we use information you have already given us, we will tell you by email or a notice on the site.
Contact
Key West Sun Shirts · 7025 Shrimp Rd #8E, Key West, FL 33040 · info@keywestsunshirts.com · contact form.