Privacy policy

Last updated: September 25, 2026

CatFat is operated by Joshua Martin. This policy explains how we collect, use and disclose personal information when you visit catfat.com, place an order, use our contact form, or communicate with us about the store.

Information we collect and where it comes from

We receive information directly from you, automatically through our website and its service providers, and from providers helping us process payments, fulfill orders, prevent fraud, and measure website activity.

• Contact and account information: your name, email address, telephone number, billing and delivery addresses, and information associated with an account if you create one.
• Orders and payments: products and sizes selected, purchases, payment status and transaction details, delivery information, returns and refund requests. Payment providers handle payment details during checkout. Please do not send payment-card details through email or our contact form.
• Communications: information you include in messages, photos supplied to resolve a product issue, and our replies.
• Website activity: IP address, browser and device information, pages and products viewed, referral information, interactions with the store, cookie identifiers and privacy choices. The information collected depends in part on your choices and the technologies involved.

How we use information

We use information to operate the store; process payments; produce and deliver orders; manage returns, refunds and customer service; maintain records; detect fraud and protect the store; meet legal obligations; and understand and improve the shopping experience.

We also use information for advertising and measurement subject to applicable law and your privacy choices. If you subscribe to promotional email, you can unsubscribe using the link in the message or contact us. Order updates and responses to your requests may still be sent after you unsubscribe from marketing.

Providers and other recipients

• Shopify hosts our store and provides commerce, checkout, security and related services. Its additional data uses are explained below.
• Payment providers process transactions and help address fraud, disputes and refunds.
• Printful and delivery providers receive the order, contact and delivery information needed to produce, ship and support your purchase.
• Google and Meta provide connected measurement and advertising technologies. These can involve device identifiers, website interactions and information about the effectiveness of advertising, subject to the applicable settings and choices described below.
• Communication providers help us receive and respond to support messages.
• Former Mailmunch integration: We previously used Mailmunch (Mailchimp Forms) for email-signup forms and removed that integration on September 25, 2026. Contact us with privacy requests concerning information you previously submitted through those forms.

We may also disclose information when necessary to comply with law or a lawful request, protect rights and security, or address a legal dispute.

Shopify and enhanced services

Our store is hosted by Shopify. Shopify collects and processes personal information from visits and purchases to provide the store and enhanced services powered by Shopify Network Intelligence. Those services can use information from interactions with CatFat, other merchants and Shopify for purposes such as personalization, analytics, fraud prevention and advertising.

Information submitted to the store is shared with Shopify and other service providers, which may process it in countries other than where you live. Read Shopify’s Consumer Privacy Policy for Shopify’s practices and use Shopify’s privacy portal to exercise applicable choices about Shopify’s processing. You can also use CatFat’s controls below.

Cookies, measurement and advertising choices

Cookies and similar technologies help the store function, remember choices, measure activity and support advertising. Use Cookie preferences in the website footer to accept or decline optional purposes or change your choices. Required technologies support functions such as checkout, security and remembering privacy choices.

The Google integration works with Shopify’s consent controls. Declining optional cookies does not stop every communication with service providers: information needed to process your order, secure the website or answer you is still processed. Cookie preferences and an opt-out of sale, sharing or targeted advertising address different uses of information; both controls are available on the website.

Some disclosures to advertising providers can be considered a “sale,” “sharing,” or use for targeted advertising under certain privacy laws, even without a payment for customer information. Visit Your privacy choices to submit an opt-out request. You may also contact us at catfatsupport@gmail.com for help with an opt-out or another privacy request.

Our Shopify privacy controls recognize Global Privacy Control (GPC) as an opt-out signal as described on the privacy-choices page. GPC is different from the older Do Not Track (DNT) browser setting; DNT by itself does not operate as our opt-out mechanism. Some choices apply to a particular browser or device, so you may need to repeat them when switching devices or clearing cookies. Opting out does not necessarily remove all advertising; you may still see general advertisements.

Your rights and requests

Depending on where you live and the laws that apply, you may have rights to access or obtain a copy of information, correct inaccuracies, request deletion, withdraw consent, restrict or object to certain processing, or opt out of sale, sharing or targeted advertising. Where applicable, you may authorize someone to act for you, appeal a decision on your request, or complain to your privacy regulator. We will not unlawfully discriminate against you for exercising applicable rights.

Contact catfatsupport@gmail.com or use the details on our Contact information page. Tell us what you are requesting. We may need information reasonably necessary to verify an access, correction or deletion request or an agent’s authority. Please do not send payment-card details or unnecessary identity documents. We respond within applicable legal deadlines and explain any applicable limitations or exceptions. To appeal a decision, reply to our response asking for a review.

Where European or UK data-protection law applies, our grounds for processing may include performing a contract with you, complying with legal obligations, consent where required, and legitimate interests such as operating, securing and improving the store where those interests are not overridden by your rights. Withdrawing consent does not affect processing that was lawful before withdrawal. Contact us about applicable international-transfer safeguards.

Retention

We retain personal information for as long as reasonably needed for the purposes described here. Relevant considerations include completing and supporting orders, tax and accounting obligations, resolving disputes, preventing fraud, maintaining privacy choices, and other legal requirements. A deletion request may not require immediate deletion of information we must or are otherwise legally permitted to retain. When information is no longer needed, we delete or de-identify it, subject to applicable obligations and backup processes.

Security and other websites

No internet transmission or storage system is completely secure. Avoid sending sensitive information through ordinary email or the contact form. Links to social networks and other external websites lead to services with their own privacy practices.

Children

If you believe a child has provided personal information to us, contact us so we can review and address it, including deleting information where required by applicable law.

Updates and contact

We may update this policy as our services, practices or legal obligations change. We will show the updated date and provide additional notice or obtain consent where required.

For privacy questions or complaints, email catfatsupport@gmail.com. Our telephone number and business correspondence address are on the Contact information page. That address is for correspondence only. Printful’s product-return facilities must not be used for privacy or legal correspondence.