Mix and Match

Terms of service

Palmbang ("Palmbang", "we", "us" or "our") runs palmbang.com (the "Site"). This Privacy Policy explains how we collect, use and share your personal information when you visit the Site, buy from us or contact us (together, the "Services"). Short version: we use your data to make and ship your shirts, and to run the store. We don't sell it to anyone for money.

1. Personal information we collect

Contact details: name, shipping and billing address, email, phone number.
Order and payment information: items bought, order history, payment confirmation. Card details are handled by our payment processors; we never see or store your full card number.
Account information: login email, saved addresses and preferences, if you create an account.
Customer support: anything you send us by email, chat or forms, including photos for return claims.
Size finder answers: height, weight and fit preferences you enter to get a size recommendation. These are used to suggest a size and are not linked to your identity.
Device and usage information: IP address, browser, device type, pages viewed and how you use the Site, collected through cookies and similar technologies.

2. Where it comes from

Directly from you when you shop, sign up or contact us.
Automatically through cookies and similar technologies when you use the Site.
From service providers that help us run the store (payment processors, shipping carriers, analytics and marketing partners).

3. How we use it

To fulfil your order: process payment, make your shirt, ship it, send order and tracking emails, handle returns and exchanges.
Marketing: send newsletters and offers if you opt in, and show ads that are more relevant to you. You can unsubscribe any time with the link in every email.
Security and fraud prevention: detect and prevent fraudulent orders and protect the Site.
Customer support: answer questions and improve our service.
Improving the store: understand which pages, products and features work.
Legal compliance: keep tax and accounting records and respond to lawful requests.

4. Who we share it with

Shopify, which powers our store. See Shopify's privacy policy at shopify.com/legal/privacy.
Production and fulfilment partners that print, sew, pack and ship your order (they receive your name, address and order details only).
Shipping carriers, payment processors, email, analytics and customer-support providers.
Advertising partners (for example Meta and Google) for personalised ads, when you allow it.
Authorities when the law requires, or to protect our rights, customers or others.
A buyer or successor in a merger, sale or similar business transfer.

5. Cookies

We use cookies to keep your cart, remember preferences, measure traffic and support advertising. You can control cookies in your browser and through our cookie banner where available. We honour the Global Privacy Control (GPC) signal as an opt-out of "sale" or "sharing" of personal information where required by law.

6. Third-party websites

The Site may link to other websites and platforms (like Instagram or TikTok). We're not responsible for their privacy practices, so please read their policies.

7. Children

The Services aren't intended for children, and we don't knowingly collect personal information from anyone under the age of majority where they live. If you're a parent or guardian and believe your child has given us information, contact us and we'll delete it.

8. Security and retention

We use reasonable safeguards to protect your information, but no method of transmission or storage is 100% secure. We keep personal information for as long as we need it to provide the Services, keep records for tax and accounting, resolve disputes and enforce our policies, then delete or anonymise it.

9. Your rights and choices

Depending on where you live, you may have the right to:

Access the personal information we hold about you, or receive a copy (portability).
Correct inaccurate information.
Delete your personal information.
Opt out of the "sale" or "sharing" of personal information and of targeted advertising.
Withdraw consent, object to or restrict processing (UK and EEA residents).
Unsubscribe from marketing emails at any time.

To make a request, email aloha@palmbang.com. We may need to verify your identity before acting on it, and you may use an authorised agent. We won't treat you differently for exercising these rights.

10. Complaints

If you have a complaint about how we handle your information, contact us first. If you're not satisfied, you may have the right to complain to your local data protection authority.

11. International transfers

We and our partners may store and process your information outside your country, including in the United States and in the countries where your order is made and shipped from. Where required, we use recognised safeguards such as the European Commission's Standard Contractual Clauses.