Privacy policy

This policy explains what Ironhorse Outfitters ("we", "us") collects when you use HogRockers at www.hogrockers.com, why we collect it, who can see it, how long we keep it, and the choices you have. It applies to the website, your customer account, and the emails we send you.

What we collect

• Order details: your name, email address, phone number, shipping address, and the patches you order, including the text, size, and thread colors you choose.
• Account details: your email address and name, and if you turn it on, your authenticator-app settings and recovery codes.
• Google sign-in details: if you sign in with Google, the information described in the Google section below.
• Messages: anything you send us through the contact form or by email.
• Technical details: your IP address, browser type, the page you arrived on, and the site or search engine that referred you. We use these to keep the site secure, stop abuse, and understand how people find us.

Signing in with Google

You can create an account or sign in using your Google account. When you do, Google asks your permission to share your basic profile with us. We request only the basic profile and email permissions. We do not ask for, and cannot see, your contacts, calendar, Drive files, Gmail, photos, or anything else in your Google account.

What we receive from Google: your name, your email address, your Google account ID, and the web address of your profile picture.

How we use it: to create your HogRockers account or match you to an existing account with the same email address, to sign you in without a password, and to pre-fill your name at checkout. Your profile picture, if we show it at all, is only shown to you inside your own account.

What we do not do with it: we do not sell Google user data, share it with advertisers, use it for advertising of any kind, or use it to train artificial intelligence or machine learning models. We do not keep Google access or refresh tokens; the sign-in happens on Google's pages and we store only the details listed above.

Sharing: Google user data is not shared with anyone except the service providers listed under "Who has access", and only so they can host the site and deliver our emails to you.

Storage and protection: the details we receive from Google are stored in our database alongside your account and are only reachable over encrypted connections. Sensitive account settings such as authenticator secrets are encrypted at rest.

Retention and deletion: we keep your Google details for as long as your account exists. You can remove HogRockers's access at any time from your Google account permissions page, and you can ask us to unlink Google from your account or delete the account entirely by contacting us. We remove the Google details within 30 days of a deletion request, except where we must keep order records as described below.

HogRockers's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Payments

We never see or store your full card number. Payments are handled by Stripe and PayPal on their own secure pages; they send us confirmation that you paid, plus the last details needed to match the payment to your order. Their handling of your payment details is covered by their own privacy policies.

How we use your information

• To make, pack, and ship the patches you order, and to tell you when they are on the way.
• To email you receipts, sign-in codes, order updates, and answers to your messages.
• To keep your account secure, including two-factor authentication if you turn it on.
• To keep the site running, detect fraud and abuse, and fix problems.
• To understand which search terms, links, and sites bring people here, so we can spend our effort where it matters.

We only email you about your orders, your account, and messages you send us. We do not send marketing email unless you ask for it, and we do not sell or rent your information to anyone.

Who has access

Inside Ironhorse Outfitters, only the people who run the shop and fill orders can see customer information, and only as much as they need to do that work. Outside Ironhorse Outfitters, we share information with the following service providers, each of which handles it only to provide its service to us:

• Stripe and PayPal to process payments.
• Google to sign you in if you choose Google sign-in, and to serve the web fonts on this site.
• hCaptcha to tell people apart from bots on our forms.
• Our email delivery provider to send receipts, sign-in codes, and tracking emails.
• Our web host and Cloudflare to run the site and protect it from attacks.
• The postal carrier that delivers your package, which receives your name and shipping address.

We will also disclose information if the law requires it, or if it is needed to protect our rights, our customers, or the public.

How long we keep it

• Orders and payment records: for as long as tax and accounting rules require, which is normally seven years.
• Account details, including Google sign-in details: until you ask us to delete your account.
• Sign-in codes: minutes. Expired codes are deleted daily.
• Visit and referral logs: up to 400 days, after which they are deleted automatically.
• Contact messages: for as long as needed to answer you and keep a record of the conversation.

How we protect it

The whole site runs over encrypted connections. Passwords are not used for customer accounts; you sign in with a one-time code or with Google, and you can add an authenticator app for extra protection. Authenticator secrets, recovery codes, and our own service credentials are encrypted at rest. The admin area uses a separate staff login that supports authenticator-app two-factor authentication.

Cookies

We use cookies to keep your cart, keep you signed in, and protect forms from forgery. We do not run advertising trackers or third-party analytics cookies.

Your choices and rights

• You can view and update your name and phone number in your account, and view your order history there.
• You can ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it. We will answer within 30 days. Order records that we must keep for tax purposes are the only thing we will retain after a deletion request.
• You can revoke Google's access to your account from your Google account settings at any time.
• You can check out as a guest without creating an account at all.

Children

This site sells to adults and is not directed at children under 13. We do not knowingly collect information from children; if you believe a child has given us information, contact us and we will delete it.

Changes to this policy

If we change how we handle your information, we will update this page and the date at the top. Significant changes will also be announced on the site.

Questions

Use the contact page or email [email protected]. Ironhorse Outfitters operates HogRockers from the United States.