// LEGAL DISCLOSURES

PRIVACY POLICY

LAST UPDATED: JULY 2026 | UK GDPR COMPLIANT

1. Overview

AT RISK CO ("we", "our", or "us") is committed to protecting the privacy and personal data of every individual who visits our website or purchases from our collection. This Privacy Policy outlines how your personal information is collected, used, stored, and protected in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data We Collect

When you visit AT RISK CO or complete a transaction, we collect personal information necessary to fulfill your order and provide seamless customer support, including:

  • Contact Information: Full name, email address, phone number.
  • Delivery Information: Shipping address, billing address.
  • Payment Information: All payment details are securely processed via encrypted PCI-DSS Level 1 compliant payment gateways. AT RISK CO never stores full credit or debit card numbers on our servers.
  • Technical Data: IP address, browser type, device identifier, and interaction metrics required for website functionality and fraud prevention.

3. How We Use Your Data

We process your personal information strictly for the following purposes:

  • Processing, printing, and delivering your custom order.
  • Sending order confirmation and shipment tracking notifications.
  • Calculating and processing our 5% pledge to UK youth mental health charity partners.
  • Preventing fraudulent transactions and maintaining store security.
  • Responding to customer support inquiries.

4. Data Sharing & Fulfillment Networks

AT RISK CO operates an on-demand, zero-waste production model. To fulfill and ship your garments, we share necessary delivery details (name, delivery address, and ordered items) with our certified production and logistics partners. We strictly mandate that all third-party processing partners process your data solely to execute your order and comply with UK data security standards.

5. Your Rights Under UK GDPR

As a UK resident, you hold the following rights regarding your personal data:

  • Right of Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Erasure: Request deletion of your personal data ("Right to be Forgotten").
  • Right to Restrict Processing: Request temporary suspension of data processing.

To exercise any of these rights, please contact our support team at support@atriskco.co.uk.

6. Security & Retention

We implement robust technical and organizational security measures, including 256-bit SSL encryption, restricted administrative access, and secure data tokenization. We retain order data only for as long as necessary to fulfill accounting, tax, and legal requirements.