Privacy Policy

When you contact us, request a quote, or place an order, we collect: your name and job title; company name and business address; email address and phone number; shipping and billing address; product requirements, order specifications, and design files; payment information (processed securely via third-party processors — we do not store card numbers); and any other information you choose to share in correspondence.

When you visit https://potatoapparel.com, we automatically collect: your IP address and approximate location; browser type, version, and operating system; pages viewed, time spent, and navigation paths; referring URL (how you found our site); device identifiers; and cookie and tracking technology data (see Section 4).

We may receive information about you from advertising platforms (Google Ads, Meta), analytics providers (Google Analytics), and business partners who refer clients to us. We use this information only for the purposes described in this policy.

To process and fulfill your orders; provide custom clothing manufacturing and sampling services; communicate order status, production updates, and delivery tracking; respond to inquiries, quotes, and support requests; and issue invoices and process payments.

To maintain our customer records and business relationships; comply with legal and regulatory obligations (export compliance, tax, accounting); detect and prevent fraud, abuse, and security threats; and improve our manufacturing processes and product quality.

With your consent or where we have a legitimate interest, we use your information to: send marketing emails about new products, promotions, and industry news; run targeted advertising campaigns on Google, Meta, and other platforms; and measure the effectiveness of our marketing activities. You may opt out of marketing communications at any time using the unsubscribe link in any email or by contacting us at sales@potatoapparel.com.

We use aggregated analytics data to understand how visitors use our website, which pages are most popular, and how to improve the user experience. This data does not identify individual users.

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data on the following legal bases:

• Contract performance — Processing necessary to fulfil orders and provide our services.

• Legitimate interests — Analytics, fraud prevention, and direct marketing to existing customers, where your interests and rights do not override ours.

• Consent — For marketing emails, cookies that are not strictly necessary, and remarketing advertising. You may withdraw consent at any time.

• Legal obligation — Processing required to comply with applicable laws (tax, export controls, accounting records).

Cookies are small text files stored on your device when you visit a website. They help us remember your preferences, measure traffic, and deliver relevant advertising.

Strictly Necessary Cookies — Required for the website to function (session management, security). Cannot be disabled.

Analytics Cookies — Google Analytics (_ga, _gid, _gat) to measure site traffic and user behaviour. Data is aggregated and anonymised.

Advertising & Remarketing Cookies — Google Ads conversion tracking and remarketing tags; Meta Pixel for Facebook/Instagram advertising. These allow us to show relevant ads to people who have visited our site and measure ad effectiveness.

Preference Cookies — Remember your language, currency, or other settings.

You can control cookies through your browser settings or a consent management tool. Disabling analytics or advertising cookies will not affect your ability to use our website, but may reduce the relevance of ads you see. For Google Analytics opt-out, visit: https://tools.google.com/dlpage/gaoptout

We do not sell your personal data. We share your information only in these circumstances:

• Service Providers — Shipping carriers (DHL, FedEx, UPS), payment processors, cloud storage, email service providers, and IT support, who are bound by data processing agreements.

• Advertising Platforms — Google LLC and Meta Platforms Inc. receive hashed email addresses and event data for advertising measurement. Both are certified under applicable data transfer frameworks.

• Legal Compliance — We may disclose your data to government authorities, courts, or regulators when required by law, to enforce our terms, or to protect the rights, property, or safety of Potato Apparel and others.

• Business Transfers — If Potato Apparel is involved in a merger, acquisition, or sale, your data may be transferred as part of that transaction. We will notify you before your data is subject to a different privacy policy.

• With Your Consent — For any other purpose, with your explicit consent.

Potato Apparel is based in China. When we process data from EEA or UK residents, we transfer personal data internationally. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, or reliance on the UK International Data Transfer Agreement where applicable. Google and Meta operate under the EU–US Data Privacy Framework and UK adequacy decisions where relevant.

We retain personal data for as long as necessary to fulfil the purposes described in this policy:

• Customer records & order history — 7 years (for tax and legal compliance)

• Marketing contact lists — Until you opt out or request deletion

• Analytics data — 26 months (Google Analytics default, after which data is aggregated)

• Website server logs — 90 days

• Job applicant data — 12 months after the position is filled

When data is no longer needed, we securely delete or anonymise it.

Depending on your location, you may have the following rights regarding your personal data:

• Access — Request a copy of the personal data we hold about you.

• Rectification — Ask us to correct inaccurate or incomplete data.

• Erasure ("Right to be Forgotten") — Request deletion of your data, subject to legal retention obligations.

• Restriction — Ask us to limit how we process your data in certain circumstances.

• Portability — Receive your data in a structured, machine-readable format.

• Object — Object to processing based on legitimate interests or for direct marketing.

• Withdraw Consent — Withdraw any consent you have given at any time, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us at sales@potatoapparel.com. We will respond within 30 days. If you are in the EEA or UK and believe we have not addressed your concern, you have the right to lodge a complaint with your local data protection authority.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These include: TLS/SSL encryption for data in transit; access controls limiting data to authorised personnel; regular security reviews; and secure deletion procedures.

No method of transmission over the internet is 100% secure. If you believe your data has been compromised, please contact us immediately at sales@potatoapparel.com.

Our services are intended for businesses and adults aged 18 and over. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

Our website may contain links to third-party websites (social media platforms, partner sites, carriers). We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before providing any personal information.

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with a revised "Last Updated" date. For material changes, we may also send an email notification. Your continued use of our website after changes are posted constitutes acceptance of the updated policy.