What we know
about you.

The data controller is Wingenious Ltd (company number 16665789), trading as Just Conviction, of 128 City Road, London, EC1V 2NX, United Kingdom. Anything on this page, email orders@justconviction.co.uk.

• Your order. Name, email, delivery address, phone number if you give one, and what you bought. We need it to make the contract work — that is the lawful basis, and there is no opting out of it while still getting a hoodie.
• Your payment. The amount, the outcome, and the last four digits and card type. Never the full card number — it goes from your browser to Stripe and never touches our server.
• Your account, if you make one. Email, a hashed password, saved addresses and your order history. You can check out as a guest and we will collect none of it.
• Analytics, if you allow it. Which pages you looked at and what you added to your bag, tied to a random identifier rather than your name. We ask first, and if you say no, none of it loads at all.

We keep order records for six years, because HMRC requires it of any company. Account data lives until you ask us to delete it. Analytics data expires on the platform’s own schedule, at most 14 months.

Only the companies that have to, and only the part they need. None of them may use your data for their own marketing, and we do not sell, rent or share your details with anyone else — ever.

Where data leaves the UK it goes under the UK’s approved safeguards — adequacy for the EU, and the UK Addendum to the standard contractual clauses elsewhere. We will also hand data over if the law genuinely requires it, and not otherwise.

Two kinds, and the difference matters. The first keeps your bag, your session and your region — the site cannot function without them and they are set whatever you choose. The second is analytics and advertising measurement, which is optional.

If you accept, we use Google Analytics 4, the Meta pixel and the TikTok pixel to see which pages and posts actually lead to orders. Google Analytics runs in consent mode, and IP addresses are truncated before they are stored.

Ordering does not sign you up to anything. We will email you about the order you placed and nothing else, unless you separately and explicitly ask to hear about drops — and if you ever do, every email will carry a one-click unsubscribe that actually works.

Under UK GDPR you can ask us to show you the data we hold on you, correct it, delete it, hand it over in a portable format, restrict what we do with it, or object to it. Email orders@justconviction.co.uk and we will answer within one month. It costs nothing.

Deletion has one limit worth being honest about: we cannot delete an order record we are legally required to keep for six years. Everything else goes.

If we get it wrong you can complain to the Information Commissioner’s Office at ico.org.uk, or on 0303 123 1113. We would rather you told us first.

The site runs over HTTPS, card data never reaches us, passwords are stored hashed, and access to the order database is limited to the people who run the shop. No system is perfect; if one of ours is ever breached in a way that puts you at risk, we will tell you.

This shop is not aimed at children and we do not knowingly take orders from under-16s.