Your information
Privacy notice
This notice explains what personal information FlipFlop collects through theflipflop.shop, why we use it, who we share it with, and the choices you have.
Last updated: 27 August 2026
How we use your information
| Purpose | Information | Lawful basis |
|---|---|---|
| Accounts and sign-in | Name, email address, account credentials, and sign-in provider details. | Contract, and our legitimate interest in keeping accounts secure. |
| Orders, delivery, and support | Contact details, delivery address, order and build details, messages, and support history. | Contract and legal obligation, including tax, accounting, and consumer-law requirements. |
| Payments and fraud prevention | Payment status, transaction references, and fraud-prevention signals. Card details are collected by Stripe, not stored by FlipFlop. | Contract, legal obligation, and our legitimate interest in preventing fraud. |
| Saved builds and site operation | Saved configurations, cart contents, session information, device/browser information, IP address, and technical logs. | Contract and our legitimate interest in providing, securing, and improving the service. |
| Marketing | Email address and your communication preferences, where you choose to hear from us. | Consent. You can withdraw it at any time. |
Who we are
FlipFlop is the controller of the personal information described in this notice. If you have a privacy question or want to exercise a data protection right, email mac@theflipflop.shop.
Information we receive
We receive information you give us when you create an account, sign in with Google or GitHub, save or configure a build, place an order, request support, or contact us. We also receive transaction information from payment providers and routine technical information when you use the site.
If you use a third-party sign-in service, that provider may send us basic profile and account information in line with the permissions shown during sign-in. Their own privacy notice also applies to their processing.
Who we share information with
We share only what is reasonably necessary with service providers that help us run the shop, such as Stripe for payments, hosting and infrastructure providers, Google or GitHub when you use their sign-in option, couriers and insurers for delivery, and professional advisers where needed.
We may also disclose information where required by law, to protect customers or the business, or as part of a sale or reorganisation of the business. We do not sell your personal information.
International transfers
Some providers may process information outside the UK. Where UK data protection law treats this as a restricted transfer, we use an applicable adequacy regulation or appropriate contractual and organisational safeguards. Contact us if you would like more information about the safeguards relevant to your information.
How long we keep information
We keep personal information only as long as needed for the purpose collected. Account and saved build information is generally kept while your account remains active. Order, payment, warranty, and support records may be kept longer where needed to provide support, resolve disputes, and meet tax, accounting, fraud-prevention, and legal obligations. Technical logs and abandoned browser sessions are kept for shorter periods unless needed for security or an investigation.
Your rights
Depending on the circumstances, you may ask for access to your information, correction, erasure, restriction, or a portable copy. You may also object to processing based on legitimate interests and withdraw consent at any time. Some rights have legal limits, and we may need to verify your identity before acting on a request.
Your right to objectYou have the right to object to processing based on our legitimate interests. You always have the right to object to direct marketing.
Please contact us first so we can help. You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk.
Browser storage and cookies
The site uses essential browser storage to keep you signed in, remember your cart, retain saved configuration choices, and complete checkout. Payment and sign-in providers may set their own essential cookies when you use those services. If we introduce optional analytics or advertising cookies, we will ask for consent where required and update this notice.
Security and children
We use appropriate technical and organisational measures to protect personal information, but no internet service can guarantee absolute security. Please use a strong, unique password and tell us promptly if you think your account has been compromised.
FlipFlop is not directed at children, and we do not knowingly collect personal information from children who cannot lawfully provide it. Please contact us if you believe a child has provided us with personal information.
Changes to this notice
We may update this notice when our services or legal obligations change. We will publish the new version here and change the date shown above; material changes may also be communicated directly where appropriate.