Privacy
policy

1. Who is responsible

The legal operator trading as Second Language is the controller of personal data collected through this storefront. That means the operator decides why and how that information is used.

You can use that address for any privacy question or request. You do not need special wording or a form.

2. What we collect

When you browse

Our hosting provider receives the technical information needed to send the site to your device and protect it, such as an IP address, request time, requested page, browser or device information, and security logs. We do not run advertising pixels or cross-site tracking on this storefront.

If you accept anonymous analytics

Vercel Web Analytics records aggregated page views and a short list of shop actions: shirt filters selected, shirts opened, items added to or removed from the bag, and checkout started. Event details contain only the relevant product identifier, item count, or page location. We do not send names, email addresses, shirt sizes, payment information, delivery details, free-typed text, or bag contents as a list.

Vercel says Web Analytics does not use third-party cookies or retain an IP address with an analytics event. It may process the page path, referrer, approximate location, device type, operating system, and browser to produce aggregated reports. We use those reports only to understand which shirts interest people and where the shop is confusing.

When you use the bag or size tools

The site can save your bag contents, bundle choices, selected sizes, theme and motion preferences, and whether the first-order code has been issued. This information is stored in local storage on your device. It does not contain your name, email, payment details, or delivery address, and the storefront does not send it to us merely because it is saved.

When you place an order

Shopify’s checkout collects the information needed to take payment and fulfil the order. Depending on the order, that can include your name, email, telephone number, billing and delivery addresses, order contents, size choices, discount information, payment status, transaction identifiers, and messages about the order. Payment providers handle card or account details; Second Language does not receive your full card number.

When you contact us or return something

We receive the information in your message and anything you attach, such as an order number, photographs of a damaged item, delivery information, or the details needed to handle a return, complaint, access request, or refund. The online withdrawal form sends us your name, order number, email address, goods concerned, and submission time.

3. Why we use it

We use personal data only where there is a legal reason to do so:

• To perform a contract: take payment, confirm and fulfil an order, provide delivery updates, handle returns, issue refunds, and answer order-related questions.
• With your consent: run anonymous site analytics if you accept it. You can withdraw that consent at any time.
• For legitimate interests: keep the site secure, prevent fraud, fix faults, respond to non-order enquiries, and protect or establish legal claims. We balance those interests against your rights.
• To meet legal obligations: keep required transaction and accounting records, respond to lawful requests, and honour consumer, tax, and data-protection duties.

We do not sell personal data. We do not use it to build advertising profiles, run behavioural ads, or make decisions about you solely by automated means that have legal or similarly significant effects.

4. Cookies and local storage

The storefront itself sets no advertising or analytics cookies. It uses local storage for functions you ask it to remember: your bag, bundle, sizes, display preferences, first-order code, and whether you accepted or rejected anonymous analytics. Local storage stays on your device until the site removes it or you clear it through your browser settings.

Analytics does not load until you press “Accept anonymous analytics.” Pressing “Reject analytics” leaves the shop fully usable. Use Cookie choices in the homepage footer to change your decision. If you withdraw after accepting, the page reloads without the analytics script.

Local storage is not sent automatically with every web request as a cookie would be. When you proceed to Shopify checkout, the products, variants, quantities, and discount needed to create that checkout are included in the checkout link.

Shopify’s hosted checkout is a separate service and may use cookies or similar technology required for checkout, fraud prevention, payment, and security. Its notices and controls appear in that checkout environment.

5. Who receives information

We disclose only what is needed for the relevant job:

• Vercel hosts the storefront, serves its files, protects the service, and provides anonymous web analytics only after you accept it.
• Resend sends the immediate email acknowledgement when you use the online withdrawal form.
• Shopify provides the hosted checkout, order processing, and related commerce systems.
• Payment providers available through checkout authorise and process payment.
• Printify and the selected print provider receive the order and delivery details required to print, pack, and dispatch the shirt.
• Delivery carriers receive the recipient and delivery details needed to deliver the parcel and, where the chosen service provides it, make tracking available.
• Professional advisers or public authorities may receive information where necessary to obtain advice, protect legal rights, comply with law, or respond to a valid request.

These providers process data under their own legal duties and, where they act for us, under arrangements requiring them to protect it and use it only for the agreed service.

6. Processing outside your country

Some providers operate internationally, so personal data may be processed outside your country and, in some cases, outside the European Economic Area. Where EU law requires a transfer safeguard, the relevant provider or controller must rely on a recognised mechanism such as an adequacy decision or approved contractual clauses, together with any necessary supplementary protection.

Contact us if you want more information about the safeguard used for a particular service or transfer.

7. How long we keep it

• Order, payment, invoice, and accounting records: 10 years where Belgian accounting or tax law requires that period. A legal retention duty can override an erasure request for that record.
• Customer-service messages: 2 years after the matter is closed, unless a longer period is needed for an active dispute or a legal duty.
• Security and hosting logs: for the limited period set by the hosting provider and needed for security, troubleshooting, and abuse prevention.
• Local storage: on your device until you clear it or the site removes the relevant entry.

When information is no longer needed, it is deleted or anonymised unless the law requires it to be kept.

8. Your data rights

Depending on where you live and the circumstances, you may have the right to ask for access to your personal data, correct it, delete it, restrict its use, receive a portable copy, or object to processing based on legitimate interests. Where processing relies on consent, you can withdraw consent at any time without affecting earlier lawful use.

Email contact@wearsecondlanguage.com and say what you want us to do. We may ask for enough information to confirm your identity and find the relevant record. We normally respond within one month, subject to any lawful extension for a complex or numerous request.

You can clear the storefront’s saved bag and preferences through your browser’s site-data settings.

You also have the right to complain to the data-protection authority where you live, work, or believe an infringement happened. We would still like the chance to fix the issue directly.

9. Security and children

We use appropriate technical and organisational measures for the nature of the information involved. The storefront is delivered over HTTPS, payment is handled in hosted checkout rather than by this site, access to service accounts should be restricted, and providers are chosen for the specific functions described above.

No online system is perfectly secure. If a personal-data breach creates a risk that requires notice, we will notify the relevant authority and affected people as required by law.

The shop is not directed at children, and we do not knowingly collect a child’s personal data for marketing. A parent or guardian can contact us if they believe a child has submitted information.

10. Changes and questions

We will update this policy if the shop’s data use, providers, or legal duties change. A material change will be made clear on the site where appropriate. The effective date at the top shows the current version.

Questions, objections, deletion requests, and everything else go to contact@wearsecondlanguage.com.