Last updated: June 8, 2026

At Lochhead, we manufacture high-quality goods and operate an e-commerce platform to serve our customers directly. We value your trust, which means we are fully committed to protecting your personal data and transparency regarding how it is collected, processed, and stored.

1. Information We Collect

We collect personal information directly from you when you interact with our store, and automatically through third-party services.

Identity & Contact Data: Name, email address, billing address, shipping address, and phone number.
Transaction Data: Details about products you have viewed, items placed in your cart, and purchases you have completed.
Technical & Usage Data: IP address, browser type, device identifiers, and data regarding how you browse and interact with our website.

2. How We Share Data with Third-Party Processors

To provide a functional shopping experience, run manufacturing fulfillment, and manage our marketing, we securely transmit specific data to trusted third-party services.

A. E-Commerce Platform (WooCommerce)

Our online storefront is built on WordPress utilizing the WooCommerce platform.

Data Processed: While you visit our site, we track products you’ve viewed (to show you recently viewed items), location/IP address/browser type (for tax estimation and shipping calculations), and shipping addresses (to quote shipping costs before you order).
Storage: When you buy from us, WooCommerce stores your order history, name, billing/shipping addresses, email, and phone number to fulfill future requests and manufacture custom items accurately.

B. Payment Processing (Stripe)

We do not store or directly handle your raw credit card numbers. All payments are securely routed directly through Stripe.

Data Processed: During checkout, your name, billing address, email, purchase total, and payment method details are securely passed directly to Stripe.
Security: Stripe processes this information in an encrypted sandbox according to Payment Card Industry (PCI-DSS) standards. You can read their data practices in the Stripe Privacy Policy.

C. Email Marketing (Mailchimp)

We use Mailchimp to handle our communications, email updates, and targeted marketing campaigns.

Opt-In: We only send you marketing emails if you have explicitly granted permission (e.g., ticking an un-checked newsletter box at checkout or using a signup form).
Data Processed: Your email, name, and purchase history (to send relevant manufacturer updates) are transferred to Mailchimp. Mailchimp utilizes tiny tracking pixels to detect email open rates and link clicks so we can improve our content.
Opt-Out: You can unsubscribe at any time by clicking the “Unsubscribe” link at the bottom of any email we send, or by contacting us directly.

D. Analytics & Advertising (Google Analytics & Google Ads)

We use Google Analytics (GA4) to monitor website performance and Google Ads to deliver target-based advertisements.

Data Processed: Google Analytics automatically collects pseudonymous data such as device type, location data, and onsite actions using tracking cookies. GA4 does not log or store full IP addresses.
Remarketing & Tracking: Through Google Ads, we use tracking tags (pixels) to perform “remarketing.” This means if you visit the Lochhead store, Google and other third-party vendors may display ads for our manufactured products to you when you browse other websites across the internet.
Opt-Out: You can control cookie preferences using our onsite banner, or opt out of Google’s use of cookies entirely by visiting the Google Advertising Opt-Out Page or using the Google Analytics Opt-Out Browser Add-on.

3. Cookies and Tracking Technologies

Our website uses first-party cookies (set by WooCommerce to keep track of your shopping cart contents while you browse) and third-party cookies (set by Google and Mailchimp for analytics and advertising performance).

When you first visit our site, you will see a cookie consent banner. You may choose to decline marketing and tracking cookies; doing so will not interrupt your ability to complete a purchase.

4. Retention of Your Data

We only retain personal data for as long as necessary to fulfill the purposes we collected it for:

Order Information: Kept indefinitely or as required by financial, tax, and manufacturing warranty regulations.
Marketing Data: Retained within Mailchimp until you explicitly opt out or request deletion.

5. Your Legal Rights

Depending on your location (such as the EU under GDPR, or various US states under CCPA/CPRA), you possess specific rights regarding your personal data:

The right to access the personal data we hold about you.
The right to rectification (correcting wrong information, such as an updated shipping address).
The right to erasure (“The right to be forgotten” from our marketing data streams).
The right to withdraw consent at any time for tracking or marketing activities.