Privacy policy

Privacy Policy

Last updated: September 9, 2026

This Privacy Policy describes how HMA CAPITAL LTD, trading as Out Of Line (“Out Of Line,” “we,” “us,” or “our”), collects, uses, stores, and shares personal information when you visit, use, or make a purchase from our website, communicate with us, or otherwise use our services.

Out Of Line is powered by Shopify, which provides the ecommerce platform that enables us to offer our products and services.

For the purposes of applicable data protection laws, HMA CAPITAL LTD is the data controller responsible for your personal information.

By using our website, you acknowledge that you have read this Privacy Policy. Where consent is required by law, we will request it separately before processing your information.

Personal Information We Collect

Depending on how you interact with our website, we may collect the following categories of personal information:

Contact information, including your name, email address, telephone number, billing address, and shipping address.
Order and transaction information, including products viewed, purchased, returned, exchanged, or added to your cart or wishlist.
Account information, including your login details, preferences, saved addresses, and account settings.
Payment information, including payment method, payment status, transaction identifiers, and billing details.
Customer service information, including messages, requests, reviews, complaints, photographs, or other information you provide when contacting us.
Device and technical information, including your IP address, browser type, device type, operating system, network information, cookie identifiers, and similar online identifiers.
Website usage information, including pages viewed, links selected, products viewed, referring pages, shopping activity, and interactions with our website and advertisements.
Marketing preferences, including whether you have agreed to receive promotional communications and your advertising or cookie preferences.
Fraud-prevention information, including information used to verify transactions, identify suspicious activity, and protect our customers and business.

Payment card information is processed securely by Shopify and our authorized payment providers. We do not directly store complete payment card numbers or card security codes.

How We Collect Personal Information

We may collect personal information:

Directly from you when you place an order, create an account, contact us, subscribe to marketing, submit a review, or complete a form.
Automatically through cookies, pixels, server logs, and similar technologies when you use our website.
From Shopify and our payment, fulfillment, shipping, analytics, advertising, fraud-prevention, and customer-service providers.
From advertising networks and social media platforms when permitted by your privacy settings and applicable law.
From publicly available sources or other parties where permitted by law.

How We Use Personal Information

We may use personal information to:

Process payments and complete orders.
Arrange packaging, fulfillment, delivery, tracking, returns, exchanges, and refunds.
Communicate with you about orders, deliveries, account activity, and customer-service requests.
Create and manage customer accounts.
Remember your preferences and shopping activity.
Improve our website, products, customer service, and shopping experience.
Recommend products that may interest you.
Send promotional emails or other marketing communications where permitted.
Measure the performance of our website and advertising campaigns.
Display advertising that may be relevant to your interests, subject to your consent where required.
Detect, investigate, and prevent fraud, abuse, security incidents, and unlawful activity.
Enforce our Terms of Service and other policies.
Maintain business, accounting, tax, and transaction records.
Comply with legal obligations, court orders, and lawful requests from authorities.
Establish, exercise, or defend legal claims.

We do not use personal information for purposes that are materially different from those described in this Privacy Policy without providing additional notice or obtaining consent where required.

Legal Bases for Processing

Where UK or European data protection law applies, we process personal information using one or more of the following legal bases:

Performance of a contract: Processing information necessary to accept payment, fulfill orders, deliver products, provide customer support, and handle returns, exchanges, or refunds.
Legal obligation: Processing information necessary to comply with tax, accounting, consumer-protection, fraud-prevention, and other legal requirements.
Legitimate interests: Processing necessary to operate and improve our business, protect our website, prevent fraud, understand website performance, provide customer service, and defend legal claims, provided these interests do not override your rights.
Consent: Processing based on your permission, including certain marketing communications, advertising cookies, analytics cookies, and personalized advertising where consent is required.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal will not affect processing that occurred before consent was withdrawn.

Information Required to Complete a Purchase

Certain information, including your name, contact details, delivery address, and payment details, is necessary to enter into and perform our contract with you.

If you do not provide the required information, we may be unable to accept payment, process an order, deliver products, or provide requested customer support.

Cookies and Similar Technologies

We and our authorized service providers may use cookies, pixels, tags, software development kits, and similar technologies to:

Operate essential website and checkout functions.
Keep the website secure.
Remember your preferences and cart contents.
Understand how visitors use the website.
Measure website and advertising performance.
Prevent fraud and unauthorized activity.
Provide relevant or personalized advertising.

Depending on the services enabled on our website, these providers may include Shopify, Google Analytics, Google Ads, Meta, TikTok, and other advertising or analytics providers.

Where required by law, non-essential analytics and advertising technologies will be used only after you provide consent through our cookie or privacy-preference controls.

You can manage applicable cookie preferences through the cookie banner or privacy controls available on our website. You may also configure your browser to block or delete cookies. Blocking essential cookies may affect website functionality or prevent you from completing a purchase.

Marketing Communications

Where permitted by law, we may use your contact information to send news, product information, special offers, and other promotional communications.

You may unsubscribe from promotional emails at any time by selecting the unsubscribe link contained in the email or by contacting us at support@outoflineclub.com.

If you unsubscribe from marketing, we may still send non-promotional communications relating to your orders, transactions, account, security, or customer-service requests.

Personalized Advertising

Subject to applicable law and your consent where required, we may work with advertising and analytics providers to measure advertisements and show you advertising based on your activity on our website or other websites.

This may involve the use of identifiers, cookie information, device information, IP addresses, website activity, and shopping interactions.

Depending on where you live, disclosure of information for cross-context behavioural or targeted advertising may be legally considered a “sale,” “sharing,” or targeted advertising, even if no money is exchanged for the information.

Where applicable, you may opt out through our cookie or privacy-preference controls or by contacting support@outoflineclub.com.

We do not sell customers’ contact information for monetary consideration.

How We Share Personal Information

We may share personal information only where reasonably necessary and for the purposes described in this Privacy Policy, including with:

Shopify, which hosts and operates our ecommerce platform.
Payment providers, which process and verify payments.
Fulfillment partners, suppliers, warehouses, and delivery companies, which prepare and deliver orders.
Customer-service and communication providers, which help us respond to customers and send transactional communications.
Analytics and advertising providers, which help us understand website activity and measure or deliver advertising, subject to applicable consent requirements.
Technology, hosting, security, and fraud-prevention providers, which support and protect our website and transactions.
Professional advisers, including accountants, lawyers, insurers, and auditors.
Government agencies, regulators, courts, or law-enforcement authorities, where disclosure is required or permitted by law.
Parties involved in a business transaction, such as a merger, financing, restructuring, acquisition, or sale of all or part of our business.

We require service providers acting on our behalf to process personal information only for authorized purposes and to protect it appropriately.

Shopify

Our store is hosted by Shopify. Shopify collects and processes personal information to operate the website, provide checkout and payment functions, protect transactions, improve its services, and provide other ecommerce features.

Information may be shared with Shopify and its service providers in countries other than your country of residence.

For more information about Shopify’s processing practices and available privacy rights, please review the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

International Transfers

We and our service providers may transfer, store, or process personal information outside the country where you live.

Where personal information is transferred outside the United Kingdom or European Economic Area, we use appropriate legal safeguards where required. These may include adequacy regulations or decisions, the UK International Data Transfer Agreement or Addendum, the European Commission’s Standard Contractual Clauses, or other legally recognized safeguards.

You may contact us for further information about the safeguards relevant to your personal information.

Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

The applicable retention period depends on the type of information, our relationship with you, legal and accounting requirements, fraud-prevention needs, potential disputes, and whether the information is needed to establish or defend legal claims.

Order, payment, and transaction records may ordinarily be retained for up to six years after the relevant transaction, or longer where required by applicable law or an unresolved dispute.

Customer-service communications are retained only for as long as reasonably necessary to resolve the request, maintain appropriate records, and protect our legal rights.

Marketing information is retained until you unsubscribe, withdraw consent, object to the processing, or until it is no longer reasonably necessary.

When information is no longer required, we will delete, anonymize, or securely dispose of it, subject to applicable technical and legal limitations.

Data Security

We use reasonable administrative, organizational, and technical measures designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

Our checkout is provided through Shopify and uses encrypted connections to process customer and payment information securely.

However, no electronic transmission or storage system can be guaranteed to be completely secure. You should avoid sending sensitive payment or account information through unsecure communication channels.

If you create an account, you are responsible for keeping your login credentials confidential.

Your Privacy Rights

Depending on where you live and subject to applicable legal limitations, you may have the right to:

Request access to personal information we hold about you.
Request correction of inaccurate or incomplete information.
Request deletion of your personal information.
Request restriction of certain processing.
Object to processing based on legitimate interests.
Object to direct marketing at any time.
Receive certain information in a portable format.
Withdraw consent where processing is based on consent.
Opt out of the sale or sharing of personal information or targeted advertising where applicable.
Submit a complaint to the relevant data-protection authority.

The right to object to direct marketing is unconditional. If you object, we will stop using your personal information for direct-marketing purposes.

To exercise a privacy right, contact support@outoflineclub.com. We may request information necessary to verify your identity and protect your information from unauthorized disclosure.

We will respond within the period required by applicable law. We will not discriminate against you for exercising an applicable privacy right.

An authorized agent may submit a request on your behalf where permitted by law. We may require evidence of the agent’s authority and may contact you directly to verify the request.

Automated Processing and Profiling

We may use automated tools to identify suspicious transactions, prevent fraud, recommend products, measure advertising, or personalize website content.

We do not ordinarily make decisions based solely on automated processing that produce legal or similarly significant effects for customers. Where applicable law provides rights relating to automated decision-making, you may contact us to request further information or human review.

Children’s Privacy

Our website and products are not directed at children under 16, and we do not knowingly collect personal information from children under 16.

If you are a parent or guardian and believe that a child has provided personal information to us, contact support@outoflineclub.com so that we can investigate and delete the information where appropriate.

We do not knowingly sell or share the personal information of individuals under 16 for targeted advertising.

Third-Party Websites

Our website may contain links to websites or services operated by third parties.

We are not responsible for the privacy, security, accuracy, or content of third-party websites. You should review their privacy policies before providing personal information.

The inclusion of a third-party link does not necessarily mean that we endorse or control that third party.

Complaints

If you have a question or complaint about how we process personal information, please contact us first at support@outoflineclub.com so that we can investigate and respond.

If you are located in the United Kingdom, you also have the right to submit a complaint to the UK Information Commissioner’s Office:

Information Commissioner’s Office
Website: https://ico.org.uk/make-a-complaint/
Telephone: +44 303 123 1113

If you are located in the European Economic Area, you may submit a complaint to the data-protection authority in your country of residence.

Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to our services, technologies, business practices, or legal obligations.

When we update the policy, we will publish the revised version on this page and change the “Last updated” date. We will provide additional notice or request consent where required by law.