CP Hats makes custom caps, beanies and bucket hats for wholesalers, brands and teams. This page explains what information we collect when you use cphats.com, why we collect it, who else handles it, and what you can ask us to do with it. It describes the site as it works today.
Who we are
cphats.com is run by CP Hats, a headwear manufacturer in Zhejiang, China. We produce to order for business customers; we do not sell single hats through this website. For anything on this page — including a request about your own data — write to us on WhatsApp at +86 180 5790 6514, or send a note through the quote form and mark it as a data request.
What we collect
We collect two kinds of information, and nothing else.
What you send us. When you submit a quote request, the form records your name and email address, and — if you fill them in — your company, country or region, the hat type, quantity, logo method, the date you need the hats, your message, and any reference photo or logo file you attach.
What the site records on its own. Like any web server, ours logs the request itself: your IP address, browser type, the page you asked for and the time. The form also records the page you submitted from, and — if you arrived through a link carrying tracking parameters such as utm_source — those parameters, so we can tell which of our own channels a request came from.
Why we use it
- To read your request, ask the questions we need, and quote you a price and dates.
- To sample, produce and ship an order you place with us.
- To keep the site working and to block spam and automated submissions.
- To keep the records that bookkeeping, tax and customs rules require.
Our lawful basis, where the EU or UK rules apply, is that we need the information to answer a request you made and to perform a contract with you, plus our legitimate interest in keeping the site secure and our records complete.
What we do not do
- We do not sell your information, and we do not rent it.
- We do not send you a newsletter because you asked for a quote.
- We do not run advertising or remarketing trackers on this site, and we do not build a profile of your browsing. The one measurement tool here is Google Analytics, described below, and it starts only if you press Accept.
- We do not publish your artwork, your brand name or your order, and we do not show your designs to other customers.
Analytics
We use Google Analytics 4 (measurement ID G-6PGCD5XXSY) to count visits and see which pages are read, so we know which parts of the site are worth keeping and which hat types buyers actually look at.
It is off until you answer the bar at the bottom of the page, which offers two answers of one click each: Accept starts the analytics at once, and Essential only means no request reaches Google and no analytics cookie is written on any page you visit. Either answer is stored for 180 days, so the bar does not ask again, and either can be changed with the Cookie settings link in the footer of every page.
When it is on, Google receives the page you opened, the site you arrived from if your browser passes it, an approximate location derived from your IP address, the browser and device you use, and simple interactions such as reaching the end of a page. We read the result as counts and trends, never as a list of people, and we do not use it to identify you or to show you advertising. Google LLC processes this as our processor under its own terms — see Google’s privacy policy; you can also refuse it everywhere with Google’s Analytics Opt-out Browser Add-on. The cookies involved are named, with their durations, in our Cookie Policy.
Where the EU or UK rules apply, our lawful basis for this is your consent. You can withdraw it at any time: press Essential only through the footer’s Cookie settings, or simply delete this site’s cookies in your browser. After that no further analytics is collected there until you accept again.
Reference files and artwork
Files you upload — photos of a hat you like, a logo, a tech pack — are used to quote, sample and produce your order. They are stored privately with your request, reachable only by the people working on it, and never appear on this website. If we would like to show an example of our work, we ask you in writing first, and you can say no.
Who else handles it
We keep the list short, and each of these only receives what its job needs:
- The hosting and delivery network that serves this site.
- The platform that runs and versions the website itself.
- The email service that delivers a copy of your request to our inbox.
- Google, for the analytics described above — from the moment you accept.
- A freight forwarder or customs broker, if an order ships and they need the consignee and contact details.
- Our accountant or auditor, where the law requires records to be kept or checked.
Some of these providers process data outside your country, including in China and the United States. Where that happens we rely on the providers’ standard contractual terms for international transfers.
How long we keep it
A request that does not become an order is kept while it might still be useful to you or us, and is deleted when it clearly is not. Records of an order are kept for as long as Chinese bookkeeping and tax rules require. Server logs are rotated and dropped on the host’s normal schedule, and the analytics data in Google Analytics is kept for fourteen months. If you ask us to delete something and no rule obliges us to keep it, we delete it and tell you when it is gone.
Your rights
You can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, or ask us to stop using it for a particular purpose. Write to us on WhatsApp or through the quote form, saying what you want; we answer within 24 hours and finish the request as quickly as we can verify it is really you. If you are in the EU or the UK you also have the right to complain to your national data protection authority, and if you are in California you have the right not to be discriminated against for exercising these rights.
How we protect it
The site is served over HTTPS. Access to quote requests and uploaded files is limited to the people who work on them, behind individual logins. No system is perfect, so if you ever find something that looks wrong on our side, tell us and we will look at it immediately.
This is a business site
cphats.com is aimed at businesses buying hats to resell or to brand. It is not intended for children, and we do not knowingly collect information about anyone under 16. If you believe a child has sent us something, tell us and we will delete it.
Cookies and local storage
This site sets a small number of strictly necessary cookies, and it stores one record in your browser’s session storage so a quote request can carry the page you started from. If you accept the analytics, it also sets two Google Analytics cookies; unless you accept, they are never written. Each cookie is set out, name by name and with its duration, in our Cookie Policy.
Changes to this page
When what we do changes, this page changes with it and the date at the top moves. If a change materially affects what we hold about you, we tell the people concerned rather than relying on them to re-read the site.