Last updated 12 October 2026. Loop DTF is a trading name of Humax Global Ltd (“we”, “us”), registered in England and Wales. This policy covers loopdtf.com and orders placed through it. It describes what the site actually does — if you find something here that does not match what you see, tell us and we will fix whichever one is wrong.

What we collect

Order details — name, email, shipping and billing address, phone if you give one, what you ordered and when.
Artwork — files you upload for printing, and the print file and layout the gang sheet builder produces.
Payment details — entered directly into Stripe’s fields. Card numbers never reach our server and we never store them.
Account details if you create an account. You do not need one to order.
Messages you send by form or email.
Technical data — IP address, browser, pages visited, and where you arrived from, through server logs and the cookies listed below.

What we use it for

Printing and shipping your order. Answering your messages. Preventing fraud. Keeping the site working and understanding how it is used. Meeting our accounting and legal obligations. Email marketing only if you opt in, and every marketing email carries an unsubscribe link that works.

Your artwork

Your files are yours. We use them to print your order and for nothing else — not for marketing, not for our own products, not shown to anyone else. Where they are kept depends on how you ordered.

Uploaded sheets and artwork — on access-controlled storage outside the public web root. We keep them for 90 days after your order ships so a reprint does not need a re-upload, then delete them. Ask and we will delete them sooner.
Sheets made in the gang sheet builder — the builder is run by DTFBuild and opens inside our product page. It arranges your designs in your own browser, then stores the finished print file, the layout and preview images on DTFBuild’s servers; our order holds a link to them so the press can download the file. DTFBuild does not receive your name, email or address from us. How long DTFBuild keeps those files is set by DTFBuild, not by us — if you want a builder file removed, email us and we will ask DTFBuild to delete it.

Who else sees it

We name these rather than hide them behind “our partners”:

Our production facility in Schaumburg, Illinois — receives your artwork, what you ordered and your shipping address, because that is where your order is printed and posted.
Carriers — name, address and phone, to deliver the parcel.
DTFBuild (dtfbuild.com) — runs the gang sheet builder and stores the print files made with it, as described above. It also receives technical information about the integration itself: our store’s address, which product pages use the builder, and how often it is opened — not who you are or what you paid.
Stripe — payment processing. You enter your card into Stripe’s own fields; they hold it, we do not. Stripe sets two cookies on our checkout for fraud prevention.
Google — Google Analytics 4 and Google Ads. See the next section, because this one goes further than most people expect.
Microsoft Clarity — records how pages are used: clicks, scrolling, mouse movement and how far you get, replayed as anonymous session recordings and heatmaps so we can see where the site gets in the way. Text you type into forms is masked before it leaves your browser, and card details are never visible to it — they sit in Stripe’s own fields. Clarity does not receive your name, email or order.
Hostinger — hosting and email, processing data on our behalf under contract.

We do not sell personal information for money. We do share browsing data with Google for advertising, as described below — under some US state laws, California’s included, that counts as “sharing”, and you can switch it off. We are a UK company and your order is produced in the United States, so your details are transferred to and stored in the US.

What we send to Google

Google Analytics records the pages you view, the products you look at, what you add to your cart, when you begin checkout and what you buy, with the amounts.

Google Ads uses the same tag to count which adverts led to visits and orders, and to build remarketing audiences: if you visit us, you may later see Loop DTF adverts on Google and on sites in Google’s network.

When you complete an order we also send Google a set of enhanced conversion signals: your email, phone number, name and address. Your browser converts each of these into an irreversible hash before it is sent — Google receives the hashes, not the plain text — and uses them to work out which advert led to which sale. If you would rather we did not, email us before you order and we will take your order by email instead.

Cookies

There is no consent banner on this site. Analytics runs from the moment you arrive, so we would rather tell you plainly what is set than ask you to click something. These are the cookies you will actually find. The gang sheet builder is served by DTFBuild from its own address, and anything it stores in your browser sits under that address and its terms.

woocommerce_cart_hash, woocommerce_items_in_cart, and a session cookie — keep your cart and your checkout working. The site cannot function without them.
_ga and _ga_WB8BZFHLHS — Google Analytics, 2 years, to count visitors and measure orders.
_gcl_au — Google Ads, 90 days, to connect an advert click to a visit or an order. Google may also set its own advertising cookies on its own domains.
_clck, _clsk — Microsoft Clarity, to tie the pages of one visit together (up to a year and one day respectively). Clarity may also set its own cookies on clarity.ms.
__stripe_mid, __stripe_sid — Stripe, fraud prevention on the checkout.
sbjs_* (seven of them) — WooCommerce order attribution: which search, advert or link brought you here. Session length.
dtf_embed_unit — not a cookie but a browser storage entry, set only if you open the gang sheet builder. It remembers whether you work in inches or centimetres.

Your privacy choices. You can switch off advertising sharing from this browser here — no remarketing, no ad personalisation. It is kept in a small cookie, lp_ads_optout, for a year; clearing your cookies resets it.

Global Privacy Control. If your browser sends a GPC signal, Google Analytics, Google Ads and Microsoft Clarity do not load at all — no measurement, no remarketing, no session recording — and nothing else about the site changes.

To opt out of the analytics ones, use your browser’s cookie controls, Microsoft’s privacy settings for Clarity, or Google’s opt-out add-on. Blocking them does not stop you ordering.

How long we keep it

Order records for seven years, for accounting and tax. Uploaded artwork for 90 days after shipping; builder files for as long as DTFBuild keeps them, or until you ask us to have them deleted. Account data until you delete the account. Server logs for 30 days. Analytics data for the retention period set in Google Analytics, currently 14 months; Clarity recordings for up to 30 days, heatmap data for up to 13 months.

Your rights

You can ask what we hold about you, ask for it to be corrected or deleted, ask for a copy, object to marketing, and opt out of advertising sharing — by email, or automatically with GPC. Residents of states with consumer privacy laws, including California, have these rights in law; we extend them to everyone, and to UK and EU residents under the UK GDPR. Email info@loopdtf.com and we respond within 30 days. We will not treat you differently for asking.

Children

This site is for business and adult customers. We do not knowingly collect information from anyone under 16.

Changes and contact

If this policy changes materially we update the date at the top and, for account holders, email a notice. Questions: info@loopdtf.com. Humax Global Ltd, registered in England and Wales, trading as Loop DTF.