GDPR compliance.

Last updated: August 19, 2025

General Data Protection Regulation (GDPR) Compliance

Husttle is committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR). This page explains how we handle your personal data in accordance with GDPR requirements.

1. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract Performance: To fulfill our manufacturing services
• Legitimate Interest: To improve our services and communicate with clients
• Consent: For marketing communications and non-essential cookies
• Legal Obligation: To comply with applicable laws and regulations

2. Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

Right of Access (Article 15)

You can request access to your personal data and information about how we process it.

Right to Rectification (Article 16)

You can request correction of inaccurate or incomplete personal data.

Right to Erasure (Article 17)

You can request deletion of your personal data in certain circumstances.

Right to Restrict Processing (Article 18)

You can request limitation of processing of your personal data in specific situations.

Right to Data Portability (Article 20)

You can request transfer of your data to another service provider in a structured format.

Right to Object (Article 21)

You can object to processing of your personal data, particularly for direct marketing.

Rights Related to Automated Decision Making (Article 22)

We do not use automated decision-making or profiling that significantly affects you.

3. Data Processing Activities

We process personal data for the following purposes:

• Manufacturing and fulfilling custom apparel orders
• Customer service and support communications
• Quality control and improvement of services
• Marketing communications (with consent)
• Legal compliance and record keeping

4. Data Sharing and Transfers

We may share your data with:

• Manufacturing partners and suppliers (under strict confidentiality agreements)
• Service providers for logistics, payment processing, and analytics
• Legal authorities when required by law

For international transfers, we ensure appropriate safeguards are in place.

5. Data Retention

We retain personal data only as long as necessary for the purposes outlined above or as required by law. Typical retention periods:

• Customer records: 7 years after last transaction
• Marketing data: Until consent is withdrawn
• Website analytics: 26 months

6. Security Measures

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit and at rest
• Access controls and authentication
• Regular security assessments
• Staff training on data protection

7. Data Breach Notification

In case of a personal data breach that poses a risk to your rights, we will:

• Notify the supervisory authority within 72 hours
• Inform affected individuals without undue delay
• Take immediate steps to mitigate the breach

8. Cookie Consent

We use cookies in compliance with GDPR requirements:

• Essential cookies are used without consent (legitimate interest)
• Analytics and marketing cookies require your explicit consent
• You can withdraw consent at any time through cookie settings

9. Exercising Your Rights

To exercise any of your GDPR rights, please contact us through our website. We will:

• Respond within one month of your request
• Verify your identity before processing requests
• Provide information free of charge (unless requests are excessive)

10. Supervisory Authority

You have the right to lodge a complaint with your local data protection supervisory authority if you believe we have not handled your personal data appropriately.