Privacy Policy

Diego Costa, trading as LGYMBTQ, of 15 Sheas Court, Dublin D07 EC90, Ireland, is the data controller for this site. Contact us about anything on this page at spot@lgymbtq.com.

What we collect, and why

• Your name, email, delivery address and phone number, so we can take your order, ship it and contact you about it. Lawful basis: performance of a contract. Kept for 7 years as part of our tax records.
• Order and payment records, so we can fulfil, refund and account for orders. Lawful basis: contract and legal obligation. Kept for 7 years.
• Your email address, if you subscribe, so we can tell you about new drops. Lawful basis: consent. Kept until you unsubscribe.
• Site usage data, collected on our own servers with no cookies and no third parties, so we can see what's working. Lawful basis: legitimate interests. Kept for 14 months.

We never receive your card details. Stripe handles payment directly.

We don't collect anything we don't need, and we never sell your data to anyone.

Who we share it with

We use a small number of service providers, each processing data only on our instructions:

• Stripe processes payments. EU and USA.
• Printful prints and ships your order, and receives your name and address. EU, in Latvia and Spain.
• Supabase stores order data. EU, in Ireland.
• Vercel hosts the website. EU and USA.
• Resend sends order and marketing emails. EU.

Where a provider transfers data outside the EEA, that transfer is covered by the European Commission's Standard Contractual Clauses or by an adequacy decision.

We'll also disclose data where the law requires it.

Your rights

Under GDPR you can ask us to:

• Show you the data we hold about you
• Correct anything that's wrong
• Delete it, where we're not legally required to keep it
• Restrict or object to how we use it, including the site usage data we collect under legitimate interests
• Send it to another provider
• Withdraw your consent at any time, for anything based on consent

Email spot@lgymbtq.com. We respond within one month, free of charge.

If you think we've got something wrong, you can complain to the Irish Data Protection Commission at dataprotection.ie, or to the supervisory authority in your own country.

Cookies

See our cookie notice.

Children

This site isn't for under-18s, and we don't knowingly collect their data.

Changes

If we change this policy we'll update the date at the top, and if the change is significant we'll tell you by email.