Short version: When you shop with us we collect only what we need to take your order, ship it, and email you about it. We share your address with Printful so they can print and ship your order, and with Stripe so they can take payment. We don’t sell your data, ever. You can ask to see it, change it, or delete it at any time.
Last updated: 20 May 2026
Who we are
This is the privacy policy for shop.runreps.com, the merchandise shop operated by RunReps. It sits alongside our main site at runreps.com.
Contact: hello@runreps.com
We are the data controller for the personal data described below.
What we collect, and why
When you place an order
To take your order and ship it to you, we collect:
- Your name
- Your email address
- Your shipping address and billing address
- Your phone number (if the courier needs it for delivery)
- The items, sizes and quantities you ordered
We use this to fulfil your order, send you order confirmation and shipping updates, handle returns or refunds, and meet our legal obligations around tax and accounting records.
Legal basis: performance of a contract (your order) and legal obligation (tax, accounting).
Payment details
Card and payment details are entered directly into Stripe’s secure checkout. We never see or store your full card number, expiry, or CVV. Stripe handles all of that under their own PCI-compliant systems. Their privacy policy is at stripe.com/privacy.
Order updates and transactional emails
When you order, you’ll get automatic emails from the shop platform: order confirmation, shipping notification, delivery confirmation. These are part of the order itself, not marketing.
Legal basis: performance of a contract.
We don’t currently run a separate shop newsletter or marketing email list. If we add one in the future, it will be opt-in only and you’ll be told what you’re signing up for before you sign up.
When you visit the shop
We use Plausible Analytics, a privacy-friendly analytics tool that doesn’t use cookies and doesn’t collect personal data. Plausible records anonymised page visits, referrer, country, browser and device type. It doesn’t track you across other websites and doesn’t build a profile on you. Plausible’s data policy.
Legal basis: legitimate interest in understanding how our shop is used.
Cookies
We use a small number of cookies, only where strictly necessary:
- Cart and checkout cookies to remember what’s in your basket between pages and during checkout.
- Session cookies to keep you logged in if you have a customer account.
- Stripe cookies set during checkout for fraud prevention and payment security.
We don’t use advertising or retargeting cookies. We don’t share data with Facebook, Google, TikTok or any other ad platform for marketing purposes.
Who we share your data with
Your data is shared only with the providers who help us run the shop:
| Who | What they get | Why |
|---|---|---|
| Printful | Name, shipping address, phone, order details | To print and ship your order |
| Stripe | Name, email, billing address, payment details | To take your payment securely |
| Couriers (Royal Mail, Evri, USPS, DHL and others, chosen by Printful) | Name, shipping address, phone | To deliver your order |
| Plausible Analytics | Anonymised, aggregated visit data | To understand site usage |
We never sell your data and we never share it for third-party marketing or advertising.
Where your data is stored
Our shop platform, Stripe and Printful store data on servers in the UK, EU and US. Where data is transferred outside the UK or EU, it is protected by appropriate safeguards under UK GDPR Article 46 (standard contractual clauses or equivalent).
How long we keep your data
| Data | How long |
|---|---|
| Order records | 7 years (UK accounting and tax law) |
| Customer account details (if you have an account) | Until you ask us to delete them, or 3 years after your last order |
| Analytics | Aggregated only, no personal data retained |
Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you
- Correct any data that’s wrong or out of date
- Delete your data (except where we’re legally required to keep it, e.g. order records for tax purposes)
- Export your data in a portable format
- Object to us using your data on grounds of legitimate interest
- Complain to the Information Commissioner’s Office (ico.org.uk) if you think we’ve handled your data badly
To exercise any of these rights, email hello@runreps.com. We’ll respond within 30 days.
Children
The shop isn’t intended for children under 16. We don’t knowingly collect data from anyone under 16. If you believe we’ve collected data from a child, contact us and we’ll delete it.
Changes to this policy
We’ll update this page if the way we handle data changes. The “Last updated” date at the top will tell you when.
Questions
Email hello@runreps.com. A real person reads it.