Privacy policy

Last updated: 10 October 2026

Who we are

Dress Code Violation operates dresscodeviolation.shop. Tiago Lemos, trading as Dress Code Violation is responsible for the personal information described in this policy. Contact us at hello@dresscodeviolation.shop or Praceta Casas de Sal, Verdemilho, 3810-418 Aveiro, Portugal.

This policy explains how we handle information when you browse, order, contact us or subscribe to our emails. Our store is hosted by Shopify.

Information we collect

  • Orders and customer service: your name, email, billing and delivery addresses, telephone number, items ordered, payment status, order history and messages you send us. A delivery telephone number is required at checkout. Additional information may be required for customs where applicable.
  • Payments: Shopify and the payment provider you choose process payment details. We receive the transaction information needed to administer your order, refunds and disputes; we do not receive your full card number or security code through our checkout analytics.
  • Email subscriptions: your email address, subscription preferences, consent records and interactions with our emails, such as link clicks.
  • Device and browsing information: IP address, approximate location, browser and device type, referring links, pages and products viewed, cookie or similar identifiers, and interactions with our store, subject to your privacy choices where applicable.

Information comes from you, your browser, Shopify, payment and fulfillment providers, and the analytics and advertising services described below.

How and why we use it

  • To fulfill your order: take payment, print and deliver your products, send order updates, and handle support, returns and refunds. Where the GDPR applies, this is necessary to perform our contract with you or take steps at your request before an order.
  • To meet legal obligations: maintain required transaction and accounting records and respond to lawful requests.
  • To protect the store: prevent fraud, secure our services and establish or defend legal claims. We rely on our legitimate interests in operating a secure business, balanced against your rights, or a legal obligation where applicable.
  • To send marketing emails: deliver the welcome offer and other offers or new-product updates when you subscribe. We rely on your consent where required. You can unsubscribe using the link in our marketing emails. Order and service messages are separate from marketing.
  • To understand and improve the store and measure advertising: analyse browsing, shopping and technical problems using the services below, subject to consent requirements and your privacy choices.

You can browse without subscribing to marketing. If you do not provide information necessary to fulfill an order, we may be unable to process or deliver it.

Who receives information

We share the information needed for the following services:

  • Shopify and payment providers: hosting the storefront and checkout, processing orders and payments, customer records, fraud prevention and sending service or marketing emails through Shopify Messaging. Shopify also processes certain information for its own purposes under its Privacy Policy.
  • Printify, print partners and delivery carriers: producing and delivering orders. Relevant information includes the recipient's name, delivery address, contact details and order contents. Printify Choice selects print partners from its network, so the printer and shipping origin can vary by order. Printify explains its role in its Privacy Policy. We remain your contact for order and privacy requests.
  • Google: store traffic and shopping analytics, described below.
  • PostHog: analytics, session replay and technical diagnostics, described below.
  • Meta: advertising measurement and customer matching through Meta Pixel and Conversions API, described below.
  • TikTok: browser pixel advertising measurement, described below.
  • Other service providers: email delivery, hosting and security providers, and professional advisers where necessary. We may also disclose information where required by law or necessary to protect legal rights.

Shopify Network Intelligence

Shopify Network Intelligence is enabled for our store. Shopify uses information about interactions with our store together with information from other Shopify merchants to improve services, advertising relevance and personalisation. Shopify is responsible for its own processing for these purposes. See Shopify’s Consumer Privacy Policy for its practices and available rights. You can also exercise rights relating to Shopify’s own processing through the Shopify Privacy Portal. Use our data-sharing opt-out controls for choices relating to this store.

Cookies, analytics and session replay

Shopify uses cookies and similar storage needed for functions such as the cart, checkout, security and remembering privacy preferences. Optional analytics and advertising technologies are governed by applicable consent requirements and the choices available in our cookie controls.

We use PostHog's EU cloud service to understand how visitors use the store and diagnose problems. Events can include product views, cart actions, checkout progress, welcome-offer interactions and technical errors. Session replay reconstructs browsing interactions such as clicks and scrolling. We configure replay to mask form inputs and designated sensitive elements. Persistent browser identifiers can connect visits and checkout activity; this information is pseudonymous, not necessarily anonymous.

Our PostHog integration starts when Shopify's privacy controls allow analytics. Our custom checkout diagnostics send limited error categories and shopping information, rather than raw error messages, contact-field contents, card details or checkout tokens. See PostHog's Privacy Policy.

We use Google Analytics through Shopify’s Google & YouTube integration to understand store traffic and shopping activity. Subject to applicable consent requirements and your privacy choices, Google receives page views, product and shopping events, browser and device information, and cookie or similar identifiers. This helps us measure how visitors find and use our store. You can manage optional tracking through our cookie controls. Learn how Google uses information from sites that use its services and see Google’s Privacy Policy.

Advertising measurement

We use Meta Pixel and Conversions API through Shopify's Enhanced data-sharing integration to measure shopping activity and support relevant advertising on Facebook and Instagram. Depending on your privacy choices and applicable requirements, this can share browsing, cart, checkout and purchase events, browser and device identifiers, and customer details such as name, email, telephone number and address with Meta for matching and measurement. Meta may associate this information with information it already holds. Use our cookie controls and data-sharing opt-out page to manage applicable choices. See Meta's Privacy Policy.

We use the TikTok browser pixel through Shopify's Standard data-sharing integration to measure activity associated with our advertising and improve campaigns. It can send browser identifiers, device and browsing information and shopping events to TikTok, subject to applicable privacy choices. Standard sharing does not mean that advertising data is anonymous. TikTok may associate information with information it already holds. See TikTok's Privacy Policy.

We do not sell customer lists for money. Depending on the law where you live, sharing information for targeted advertising may nevertheless be considered a sale or sharing of personal information. You can use our data-sharing opt-out page and available cookie controls to exercise applicable choices.

Where applicable, Shopify recognises Global Privacy Control signals as an opt-out request for the browser and device sending the signal. Other browser “Do Not Track” signals are not treated as equivalent opt-out requests.

International processing

Our service providers and fulfillment partners operate in different countries. Your information may therefore be processed outside your country, including outside the European Economic Area or the United Kingdom. Where required, transfers use an applicable adequacy decision or appropriate contractual safeguards, such as standard contractual clauses. Contact us for information about the safeguards relevant to your data. EU hosting for analytics does not mean that all store information remains in the EU.

How long we keep information

We retain information only as long as needed for its purpose and applicable legal obligations. Order and transaction records may need to remain for accounting, tax, guarantee and dispute requirements after delivery. Support records are retained as needed to resolve enquiries and related claims. Marketing information is retained while you subscribe, with limited suppression and consent records retained as necessary to respect opt-outs and demonstrate compliance. Analytics and replay information is subject to the retention settings of the relevant service. You can ask us about the retention applicable to your information.

Your rights and choices

Depending on your location, you may have rights to access, correct, delete or receive a portable copy of your information, restrict processing, object to processing based on legitimate interests, and opt out of targeted advertising or legally defined sale or sharing. You can object to direct marketing at any time. Where processing relies on consent, you can withdraw it without affecting the lawfulness of earlier processing.

Use our cookie controls for available browser choices, the unsubscribe link for marketing emails, or email hello@dresscodeviolation.shop for a privacy request. We may need proportionate information to verify a request. We will respond within the applicable legal period and explain any lawful limits, including records we must retain. Where applicable, an authorised agent can submit a request on your behalf and you can appeal a refusal by contacting us. We will not discriminate against you for exercising applicable rights.

You can also complain to your local data protection authority. In Portugal, this is the Comissão Nacional de Proteção de Dados (CNPD).

Children, security and changes

Our store is not directed at children and we do not knowingly collect children's information for marketing. Contact us if you believe a child has provided information that should be removed.

We use appropriate safeguards to protect information, but no internet service can guarantee absolute security. Other websites linked from the store have their own privacy practices. We may update this policy as the store or legal requirements change, and will provide additional notice where required.