Privacy Policy

Summary

Above It All Tees ("we", "us") sells trend-driven print-on-demand apparel at aboveitalltees.com. This policy explains what information we collect when you visit the site or buy something, how we use it, and who we share it with. We don't sell your personal data.

What We Collect

• Order information — name, shipping address, email, and order contents you provide at checkout.
• Payment information — handled directly by Stripe; we do not store full card numbers. We receive a tokenized reference and the last four digits for customer service.
• Device and usage data — IP address, browser, pages visited, and referrer. We derive your country from your IP to decide whether advertising cookies should be active (see "Cookies" below).
• Advertising click identifiers — if you arrive from a paid ad on Meta, TikTok, or Google, those platforms append a click identifier (e.g. fbclid, ttclid, gclid) to the URL. We read it so the ad platform can credit the visit and so we can report on which ads drive sales.
• Communications — if you email us, we keep the message so we can reply.

How We Use It

• Fulfill your order — print, ship, and handle returns or support.
• Send transactional email about your order (receipts, shipping, delivery).
• Measure and improve our ads. We share conversion events with Meta and TikTok using their advertising APIs so they can optimize campaigns we run and attribute purchases back to the ads that drove them. Email addresses are hashed with SHA-256 before transmission.
• Understand site usage in aggregate via Google Analytics 4 (via Google Tag Manager).
• Detect and prevent fraud or abuse.

Cookies and Tracking Technologies

The site uses cookies and similar technologies in three categories:

• Functional — session, cart, order lookup, country detection. These are always active; the site can't work without them.
• Analytics — Google Analytics 4 via Google Tag Manager. We use these to understand which pages and products perform well. Denied by default if your IP resolves to a country in the EU-27, UK, Norway, Iceland, or Liechtenstein.
• Advertising — Meta Pixel and TikTok Pixel. These help Meta and TikTok measure whether an ad they showed you led to a purchase, and let us target ads to people similar to our customers. Denied by default in the same EU/EEA/UK geographies as analytics, above.

We use the "Conversions API" offered by both Meta and TikTok to send purchase events directly from our server (not from your browser). These server events use the same event ID as the browser pixel so your purchase is counted once, not twice.

Who We Share Data With

We share only the minimum necessary with these service providers:

• Stripe — payment processing. Stripe receives payment details and shipping address. See stripe.com/privacy.
• Printful and Printify — our print-on-demand fulfillment partners. They receive your shipping address and the items you ordered so they can print and ship them. See printful.com/policies/privacy and printify.com/legal/privacy-policy.
• Meta (Facebook / Instagram) — receives conversion events and advertising click identifiers for attribution and ad optimization. Email addresses are hashed with SHA-256 before being sent. See facebook.com/privacy/policy.
• TikTok — receives conversion events and TikTok click identifiers. Email addresses are hashed before being sent. See tiktok.com/legal/privacy-policy.
• Google — Google Analytics 4 via Google Tag Manager. See policies.google.com/privacy.
• Resend — transactional email delivery (receipts, shipping notifications, one-time login codes). See resend.com/legal/privacy-policy.
• Microsoft Azure — hosting infrastructure. Data is stored in US East. See microsoft.com/privacy.

We do not sell your personal information. We do not share it for unrelated marketing.

Your Choices

• Opt out of advertising cookies — you can block third-party cookies in your browser, or use a browser-level ad blocker. Advertising cookies are automatically disabled if your IP resolves to the EU, UK, or EEA.
• Access or delete your data — email hello@aboveitalltees.com and we'll respond within 30 days. We may need to retain certain records (e.g. order history for tax and accounting) to meet legal obligations.
• Unsubscribe from email — transactional email (order confirmations, shipping notices) can't be opted out of without canceling the order. Marketing email, if we add it, will always include an unsubscribe link.

Data Retention

Order records are retained for seven years for tax and accounting purposes. Analytics data is retained for 14 months in Google Analytics. Advertising conversion events are processed by Meta and TikTok under their own retention policies. Web server logs are retained for 30 days.

Children

This site is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us information, email hello@aboveitalltees.com and we'll delete it.

Changes

We may update this policy as the site evolves or as laws change. The "Last updated" date above reflects the most recent change. Material changes will be announced on the site.

Contact

Questions? Email hello@aboveitalltees.com.

Above It All Tees is operated by CU2, LLC, Ashland, OR.