What we know about you, and why.

MM Commerce USA LLC, trading as SCRUBS Clothing, of 1309 Coffeen Avenue STE 1200, Sheridan, Wyoming 82801, United States. Email hello@scrubsclothing.co.uk.

We decide what data is collected and why, which makes us the controller under the UK GDPR and the EU GDPR. If you want to raise anything in this notice, that email reaches a person, not a queue.

When you order: your name, email, delivery address, what you bought and what you paid. Your card number never reaches us — Stripe takes it directly.

When you give us your email for the welcome offer, or apply as a creator, or enquire for a team: that email and whatever you typed in the form.

When you verify as a healthcare worker or a student: the registration number or work email you give us, used once to check eligibility and then kept only as a yes or no against your account.

When you browse: your IP address and basic request information, in short-lived server logs. If, and only if, you pressed Allow on the cookie banner, also a Meta advertising cookie.

To perform the contract: everything needed to take an order, take payment, ship it, and handle a swap or a refund. Without this we cannot sell you anything.

Legitimate interests: keeping the site up, preventing fraud, and answering you when you write to us. We have weighed this against your interests and think it is what you would expect.

Consent: the advertising cookie, and marketing email. Both are optional, both are a real choice, and you can withdraw either at any time without losing anything else.

Legal obligation: keeping records of sales for tax and accounting.

Only the companies that make the shop work, each doing one job:

Stripe — Takes the payment and holds the card details. We never see your full card number. Processes data in Ireland and the United States.

Supabase — Stores the order: what you bought, the delivery address, your name and email. Processes data in the European Union.

Vercel — Serves the website. Keeps short-lived request logs that include an IP address. Processes data in the European Union and the United States.

Meta — Measures which adverts bring people here. Only ever loads if you press Allow on the cookie banner. Processes data in Ireland and the United States.

Our manufacturer and the courier receive the delivery label so the parcel can reach you. Nobody buys your data from us, because we do not sell it.

MM Commerce USA LLC is a United States company and some of the services above process data in the United States, so your data does leave the UK and the EEA.

Where it does, the transfer relies on the UK International Data Transfer Addendum and the EU Standard Contractual Clauses in our contracts with those providers. You can ask us for the detail of any particular one.

Order records: seven years from the end of the tax year they fall in, because tax law requires it.

Marketing email addresses: until you unsubscribe, then a suppression record so we do not email you again by accident.

Form enquiries that do not become orders: two years.

Server logs: thirty days.

Ask for a copy of what we hold. Correct it. Delete it. Restrict what we do with it. Object to it. Take it elsewhere in a portable format. Withdraw consent you have given.

Email hello@scrubsclothing.co.uk and we will do it within one month, free. We will not ask you why.

If you think we have handled it badly you can complain to the Information Commissioner at ico.org.uk, or to your own national supervisory authority if you are in the EU. We would rather you told us first, but it is your right either way.

The shop is not aimed at under-16s and we do not knowingly collect their data. If a child has given us something, tell us and it goes.

Last updated 1 November 2026. If we change anything that matters we will say so on this page rather than quietly reissue it.