Privacy Policy
PRIVACY POLICY
Privacy Policy
Effective date: [CRITT-CONFIRM: publish date]
Last updated: 2026-05-10
The short version
We collect what we need to ship you a shirt, keep your account secure, and answer your questions. We don't sell your data. We share it with the vendors who help us run the store (Shopify, Printful, and our AI-driven support inbox). You can ask us for a copy of your data or to delete it. If anything here is unclear, email support@zeroshotapparel.com and a real person will answer.
1. Who we are
ZeroShot Apparel Company ("ZeroShot," "we," "us," "our") is a Texas-based partnership that runs the online store at zeroshotapparel.com. We sell graphic t-shirts, printed on demand by our fulfillment partner Printful.
This Privacy Policy describes what information we collect about you, why we collect it, who we share it with, and the choices you have.
Mailing address: [CRITT-CONFIRM: business mailing address. Default is your home address until ZS gets a virtual mailbox / registered office. Strongly recommend a virtual mailbox before publishing — putting a residential address on a public privacy policy is a doxxing risk for a niche apparel brand.]
Contact: support@zeroshotapparel.com
2. What we collect
Information you give us when you place an order or contact us:
- Name
- Shipping address
- Billing address (if different from shipping)
- Email address
- Phone number (only if you provide it — it's optional at checkout)
- Order contents (the SKUs you bought, sizes, quantities)
- Anything you write to us in a support email
Information collected automatically when you browse the site:
- Your IP address and approximate location derived from it
- Browser type, device type, and operating system
- Pages you visit on the site, items added to cart, time spent
- Referring URL (if you arrived from a link elsewhere)
- Cookie identifiers (see Section 7)
Information from third parties:
- Payment confirmation from Shopify Payments (we do not see or store your full card number)
- Shipping and tracking updates from Printful
- Fraud signals from Shopify's risk-scoring service
We do not collect Social Security numbers, government IDs, biometric data, or health information.
3. Why we collect it
We use this information to:
- Fulfill your order (print your shirt, ship it, give you tracking)
- Respond to your support emails
- Send transactional emails (order confirmation, shipping notification, refund confirmation)
- Detect and prevent fraud and abuse
- Comply with our tax and accounting obligations
- Improve the store
- Send marketing emails only if you opted in
We do not use your information to build profiles for sale to third parties. We do not run behavioral ad targeting beyond standard Shopify/Meta pixel events that you can opt out of via cookie controls (Section 7).
4. Who we share it with
We share your information only with the vendors that help us operate the store. These vendors are bound by their own privacy obligations to us and process the data only to provide their service.
- Shopify — Your full order, name, email, shipping address, billing info, payment. The storefront, checkout, and payments run on Shopify Payments.
- Printful — Your name, shipping address, the SKU you bought. Printful prints and ships the shirt from one of their US facilities.
- Anthropic and Google (AI processing for our support inbox) — The contents of any email you send to support@zeroshotapparel.com, including your email address. Our support inbox is triaged by an AI system before a human reviews and replies. A human reviews every outbound reply before it sends. We disclose this here because it's an unusual processing relationship and we want to be straightforward about it.
- Carriers (USPS, UPS, FedEx, DHL — assigned by Printful) — Your name and shipping address. To deliver the package.
- Our accounting and tax systems — Order totals, tax collected, no personal identifiers beyond order number. Bookkeeping and tax filing.
We also share information when we are legally required to. We do not sell your personal information. We do not share it with data brokers.
5. How long we keep it
- Order records: seven years
- Email correspondence: two years after the last interaction
- Marketing list (if you opted in): until you unsubscribe, then we remove your address within 30 days
- Browsing analytics: Shopify's default retention (currently 25 months for aggregated data)
- Payment information: we don't retain it
6. Your rights
You can ask us what information we have about you; ask us to correct anything that's wrong; ask us to delete your information (subject to legal retention obligations); ask us to stop sending you marketing emails; and ask us not to "sell" or "share" your data.
To make any of these requests, email support@zeroshotapparel.com with the subject line "Privacy Request." We will respond within 45 days.
California residents — the CCPA/CPRA gives you the rights listed above plus the right to non-discrimination for exercising them.
Texas residents — the TDPSA gives you similar rights. We extend these rights to all Texas customers regardless.
Other states — Virginia, Colorado, Connecticut, Utah, and several other states have analogous laws. The rights above apply.
7. Cookies and similar tech
We use cookies and similar technologies for three purposes:
- Essential — to keep your cart populated, log you in, process checkout, and prevent fraud.
- Analytics — Shopify's built-in analytics, which tell us aggregate traffic patterns.
- Marketing — if you've opted in, we may use Meta Pixel or Google Ads pixel to measure ad performance and retarget.
[CRITT-CONFIRM: Are we running Meta Pixel or Google Ads on Drop 1? If not, strike the marketing-pixel paragraph entirely or mark it as "we may use these in the future and will update this policy first." Defaulting to "we may use them" language pending decision.]
8. Children
This site is not directed at children under 13. We do not knowingly collect information from anyone under 13.
9. Security
We protect your information with reasonable administrative, technical, and physical safeguards. Payments are processed by Shopify Payments under PCI-DSS compliance. We never see your card details. All data in transit is encrypted (HTTPS/TLS). Access to ZS customer data is restricted to Critt Golden and the AI fleet that handles support, with audit trails on agent activity.
10. International shipping (future)
ZeroShot currently ships only within the United States. When we expand internationally, we will update this policy to address EU GDPR and UK GDPR rights, the legal bases for processing, and international data transfer mechanisms.
11. Third-party links
The site may link to third-party sites. We are not responsible for the privacy practices of those sites.
12. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we'll update the "Last updated" date at the top. If the changes are material, we'll notify you by email (if we have your address) or by a banner on the site before the change takes effect.
13. Contact us
Email: support@zeroshotapparel.com
Mail: ZeroShot Apparel Company, [CRITT-CONFIRM: mailing address]