Privacy

We collect what an order needs and nothing we have no use for. We do not sell your data, we do not run advertising trackers, and we do not build a profile of you across other websites.

Your card number never reaches us. Payment happens on Stripe’s own page and we receive only the result.

When you make an account: your email address, a password (stored only as a scrypt hash — we cannot read it), your name if you give one, and, if you sign in with Google, the permanent account identifier Google issues so we can recognise you again.

When you order: your shipping name, address and phone number, what you bought, and what you paid. The address and phone are collected by Stripe on its checkout page and passed to us so we can ship the parcel.

If you choose to tell us: your shoe size and which size chart you read it on. This is optional, it is never asked for at sign-up, and there is a button on your account page that deletes it.

Automatically: a session cookie so you stay signed in, a cart cookie so your basket survives a refresh, and your chosen country, currency and language.

We do not ask your date of birth, your gender, or your income. We do not store card numbers, CVCs or bank details anywhere in our systems. We do not use advertising pixels or third-party tracking cookies.

Four companies process data on our behalf, each for one job:

Stripe takes the payment and collects the delivery address. Resend sends the order emails. Google only if you choose to sign in with it. Vercel and Amazon Web Services host the site and the database.

Nobody else receives your information, and none of them may use it for their own purposes.

The database and the site are hosted in the United States. If you are in the UK or the EU, that is a transfer outside your region, made under the standard contractual clauses our processors publish.

We ship to 63 countries, so this applies widely.

You can ask us for a copy of what we hold, ask us to correct it, or ask us to delete it. Email hello@shewv.com and we will answer within 30 days.

Deleting an account does not delete the orders attached to it — tax and accounting law requires us to keep a record of a sale. Those records keep the name and address the parcel went to, and nothing else about you.

In the UK and EU you also have the right to complain to your data protection authority.

We set three, all necessary for the shop to work: one that keeps you signed in, one that remembers your basket, and one that remembers which country you are shopping from. There are no analytics or advertising cookies, which is why this site has no cookie banner.

This page is accurate about how the software works and is not yet complete as a legal document. The registered company name and address, the data controller’s details, and exact retention periods still need to be filled in, and the whole should be reviewed by a solicitor before it is relied on.