Skip to main content
The Real XO
Cart

← Back to home

Privacy Policy

This policy explains what the official THE REAL XO website collects, why, and what you can do about it. Plain version: we collect what the site needs to run, we never sell your personal data, and you can see, export, or delete your data.

What we collect

  • Account info: your name, email, optional Instagram handle, and a hashed password when you create an account.
  • Orders: your name, email, and shipping address, plus what you ordered. Your shipping address is shared with the print-on-demand vendor that makes and ships your item.
  • Carts: what you put in your cart, tied to a cookie in your browser so your cart is still there when you come back.
  • Visit counts: one anonymous visit is counted per browser session. It carries no name, no email, and no profile of you — it just helps count how many visits the site gets.
  • Messages: anything you send through the Contact, booking, or privacy forms, so we can answer you.
  • Fan list: your email (and name, if you give it) when you join the fan list.

Why we collect it

To run your account, fulfill and ship your orders, answer your messages and booking requests, send fan list emails you signed up for, and keep rough counts of site traffic. That's it.

Sharing

  • The print-on-demand vendor gets your name, shipping address, and order details so it can make and ship your merch.
  • The payment processor handles your payment at checkout. We never see or store your full card or bank numbers.
  • We never sell your personal data. Ever.

Retention

Account info is kept while your account exists. Orders and messages are kept as long as needed to run the store, answer follow-ups, and meet record-keeping duties. When you delete your account, your fan list signup and messages are removed and your bookings and orders are anonymized.

Your rights

You can access and export your data, correct it, delete it, and opt out of sharing. The Your Privacy Choices page explains how — account holders can do most of it self-serve on the Account page.

Security basics

Passwords are stored hashed, never in plain text. Sign-in and cart cookies are set so other sites can't read them. No system is perfect, but we take reasonable steps to protect your data and only keep what the site needs.

Changes to this policy

If this policy changes, the new version goes on this page and applies from then on. Questions about your data? Use the Your Privacy Choices page or the Contact page.