Privacy

Last updated: 7 October 2026

Who We Are

This privacy notice explains how Socks for John uses personal data when you visit the storefront, contact us, or place an order.

Data controller: Deulm. Contact: hello@deulm.com. Address: 50 Woodstock Grove, London.

Information We Collect

We may collect your name, email address, delivery address, billing address, phone number, order details, correspondence, fraud-prevention information, and information needed to manage returns or customer service.

Checkout and payment are processed by Stripe. Stripe receives transaction and payment information needed to operate its services, prevent fraud, authenticate payments, and process refunds. Socks for John does not store full payment card details.

If you allow store statistics, the storefront records a random tab-session identifier, product views, cart actions, checkout starts, broad referral source, country code, and device category. These event-level records are pseudonymous, used only to understand and improve the store, and not used for advertising or cross-site tracking. Event-level records and order source labels are scheduled for automatic deletion after 90 days. The analytics endpoint also processes a network address to limit automated abuse; that address is kept separately from the event record and scheduled for daily deletion once more than 1 day old.

If a tagged campaign link brought you to Socks for John after you allowed store statistics, its short source label (for example, instagram) may be kept for that tab session. If there is no tag, Socks for John records only a broad referrer category or direct. If you then place an order, the session's first source may be copied into the order record so Socks for John can compare channel revenue. A source remains explicitly unattributed when no consented session event is available.

How We Use Information

We use personal data to process and deliver orders, take payment, provide customer support, handle returns, prevent fraud, keep business records, respond to enquiries, maintain site security, and comply with legal obligations.

Lawful Basis

We process order and delivery information because it is necessary to perform the contract with you. We process accounting, tax, and legal records because we have legal obligations. We process customer-service messages and basic site-security information where we have legitimate interests in operating the store and responding to customers.

Optional first-party store statistics are processed only after your consent. You can withdraw that consent below; withdrawal stops future collection in this browser, while previously collected event-level records are scheduled to expire after 90 days.

If Socks for John later sends optional marketing emails, those messages will be sent only where there is a lawful basis to do so, and you will be able to unsubscribe.

Who We Share Information With

We share information with service providers where needed to run the store, including Cloudflare for hosting, Stripe for checkout and payment processing, delivery/courier services, email providers, professional advisers, and authorities where required by law.

Some service providers may process personal data outside the UK. Where this happens, Socks for John relies on the provider's transfer safeguards, such as adequacy arrangements or approved contractual protections.

How Long We Keep Information

We keep order records for up to 6 years where needed for accounting, tax, legal, and customer-service purposes. Enquiry messages are kept only for as long as needed to respond and manage the relationship, unless a longer period is required by law.

Your Rights

You may have the right to ask for access to your personal data, correction, deletion, restriction, objection, or a copy of your data. To make a request, contact hello@deulm.com.

These rights depend on the lawful basis and circumstances of the processing. Socks for John may need to keep certain order records where required for legal, accounting, dispute, or fraud-prevention reasons.

Complaints

If you are unhappy with how your personal data is handled, contact Socks for John first so we can try to resolve it. You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk.

Cookies

The storefront uses browser storage for the cart, a short-lived tab-session identifier for the limited statistics described above after permission, a first-touch campaign source for that tab session, and your statistics preference. Stripe may use cookies or similar technologies where needed to secure and process checkout. Socks for John does not currently use advertising pixels or cross-site marketing trackers.

You can change or withdraw your statistics choice at any time: