Still Standing is the controller of personal information collected through this store, unless another party is clearly identified as the controller. Our current contact details appear at the end of this policy.

We may collect identification and contact details, order and payment-related records, delivery information, account information, customer-service messages, marketing preferences, device and browsing information, and information voluntarily included in community or story submissions.

Payment card details are normally processed by Shopify and the selected payment provider rather than stored directly by Still Standing.

Recovery stories may contain health, addiction, criminal-history or other highly personal information. Only share information that you are comfortable providing. Private submissions are reviewed before publication, and publication requires separate approval. Do not submit information about another person without their permission.

We use personal information to process orders, deliver products, manage accounts, provide customer support, operate and moderate the Members’ Circle, review story submissions, prevent fraud and abuse, improve the store, meet legal obligations and send marketing where permitted.

Depending on the activity, we rely on performance of a contract, compliance with legal obligations, legitimate interests, consent, or another lawful basis available under applicable data-protection law. Where consent is relied upon, it can be withdrawn without affecting earlier lawful processing.

Information may be shared with Shopify, payment processors, fulfillment and print partners, delivery carriers, customer-service providers, community and moderation platforms, analytics or advertising providers, professional advisors and public authorities when legally required. Each provider should receive only what is reasonably needed for its role.

Some service providers may process information outside the United Kingdom. Where required, appropriate safeguards should be used, such as adequacy regulations or approved contractual protections.

We keep information only for as long as reasonably necessary for orders, customer support, legal and tax records, fraud prevention, community safety, consent records and dispute handling. Retention periods vary by record type and legal requirement.

We send email marketing only where permitted. Every marketing email should provide a simple unsubscribe method. Transactional messages about an order or account are not marketing and may still be sent when necessary.

Strictly necessary technology supports functions such as security, account access and the cart. Optional analytics, personalization and advertising technology should be used only in accordance with the choices made through Shopify’s customer-privacy controls. Read the Cookie Policy for more detail.

Depending on the law that applies, you may have rights to access, correct, delete, restrict or object to processing, receive a portable copy, withdraw consent and complain to a regulator. We may need to verify identity before responding.

The Members’ Circle is intended for people aged at least the minimum age shown in the store’s legal settings, currently 18. The store is not designed to knowingly collect sensitive community submissions from children.

We may update this policy when services, suppliers or legal requirements change. The latest version will be published here. UK customers can also raise concerns with the Information Commissioner’s Office after contacting us.