Privacy Policy

Last updated: 21 October 2026

In short

We collect your email address when you join Wolfhead Division, so that we can email you about Wolfhead Division launches, drops and offers.
We only send these emails after you confirm your sign-up. You can unsubscribe at any time.
We never sell your data.
This website sets no cookies of its own and uses no analytics.

Who we are

In this notice, ‘we’ and ‘us’ mean Wolfhead Apparel Ltd, trading as Wolfhead Division. We are a company registered in England and Wales, company number 16779047. Our registered office is 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ.

We are the controller of your personal data. This means we decide how and why it is used.

For any question about your data, email manny@wolfheadofficial.com. We do not have a data protection officer.

What we collect

When you join Wolfhead Division

Your email address.
The date and time you signed up, and the page you signed up on.
Which version of our sign-up wording you agreed to. The current wording (version 2026-10-11) is: By joining you agree to receive emails from Wolfhead Apparel Ltd about launches, drops and offers. Unsubscribe at any time.
The date and time you confirmed, by clicking the link in our confirmation email. This step is called double opt-in.
Whether you open our emails or click links in them, if our email provider records this. It may record this with technical details, such as your IP address, rough location and the device or email app you use. We use this only to see whether our emails are working. We do not use it to build a profile of you.
Your IP address (the address your device uses on the internet). Cloudflare uses it briefly to limit repeated sign-up attempts. Our sign-up code does not store it, and does not send it to our email provider.

When you email us

Your email address, your message and anything else you choose to send us.

When you visit this website

This website receives your IP address and basic details from your browser, such as the page you asked for and the type of browser you use. Cloudflare, which hosts the site, uses them to deliver pages and keep the site secure, and keeps short-term technical logs. We do not use any of this to identify or track you.

Why we use it

We use your data only for the purposes below. Each one has a lawful basis under the UK General Data Protection Regulation (UK GDPR).

To email you about Wolfhead Division launches, drops and offers. Lawful basis: your consent (UK GDPR Article 6(1)(a)). The law on marketing emails also requires your consent (regulation 22 of the Privacy and Electronic Communications Regulations 2003, known as PECR). You can withdraw your consent at any time.
To keep a record of your consent, and to make sure we never email you after you leave. Lawful basis: legal obligation (UK GDPR Article 6(1)(c)). The law requires us to be able to show that you agreed, and to respect your choice when you leave.
To reply when you email us. Lawful basis: our legitimate interest in answering you (UK GDPR Article 6(1)(f)). If you are asking about your data or making a complaint, the basis is our legal duty to deal with it (Article 6(1)(c)).
To keep this website working and secure, and to stop misuse of the sign-up form. Lawful basis: our legitimate interest in keeping our website and systems secure (UK GDPR Article 6(1)(f)).

You do not have to give us your email address. There is no legal or contractual requirement to do so. Without it, we cannot send you our emails.

We do not use your data to profile you, and we do not make decisions about you by automated means.

We use three service providers, known as processors. They handle your data for us, under contracts that protect it. Where one of them also uses some data for its own purposes, we say so.

Cloudflare: Cloudflare, Inc. (USA). It hosts this website and manages our domain name settings (DNS). It protects the site from attacks and runs the code that passes your email address to our email provider. Cloudflare also uses some technical data, such as IP addresses, for its own purposes, for example to protect its network. See Cloudflare's privacy policy. Our contract: Cloudflare's Data Processing Addendum.
Klaviyo: Klaviyo, Inc. (USA). It keeps our list of members of Wolfhead Division. It sends the confirmation email and our marketing emails, handles unsubscribes and tells us when someone joins. Our contract: Klaviyo's Data Processing Agreement.
Google: Google Cloud EMEA Limited (Ireland). It provides Google Workspace, which runs our email. It holds emails you send us, and the alerts our email provider sends us when someone joins. Google LLC (USA) also processes this data to run the service. Our contract: Google's Cloud Data Processing Addendum.

We never sell your data. We do not share it with anyone else, unless the law requires us to.

Transfers outside the UK

All three providers are based in the USA, or work with companies there. Your data may be stored or accessed in the USA, and in other countries where they or their suppliers operate.

Each transfer is protected in one of these ways:

If the company receiving your data is in the European Economic Area, for example in Ireland, UK law approves the transfer.
If it is in the USA and certified to the UK Extension to the EU-US Data Privacy Framework, a scheme run by the US Department of Commerce, UK law also approves the transfer. The law is the Data Protection (Adequacy) (United States of America) Regulations 2023 (SI 2023/1028).
Otherwise, we rely on safeguards issued by the UK's data protection regulator, the ICO: the International Data Transfer Agreement, or the EU Standard Contractual Clauses with the ICO's UK Addendum.

For each provider:

Cloudflare: Certified to the UK Extension. Its contract also includes the EU Standard Contractual Clauses with the UK Addendum, as a back-up.
Klaviyo: Certified to the UK Extension. Its contract also includes the EU Standard Contractual Clauses with the UK Addendum, as a back-up.
Google: Google Cloud EMEA Limited is in Ireland, in the European Economic Area. Google LLC in the USA is certified to the UK Extension. Google's contract also includes the EU Standard Contractual Clauses with the UK Addendum, as a back-up.

You can check a US company's certification on the Data Privacy Framework List. For a copy of the safeguards, email manny@wolfheadofficial.com. They are also part of each provider's contract, linked above.

How long we keep it

Members of Wolfhead Division. We keep your details until you unsubscribe or ask us to delete them.
Inactive members. Every 24 months, we review members who seem inactive. We may ask you to confirm that you still want our emails, or remove you from the list.
After you unsubscribe. We keep only your email address, on a suppression list (a ‘do not email’ list), so that we never email you again.
Emails in our inbox. We keep your messages, and the alerts about new members, only as long as we need them. If you ask us to delete your details, we delete these too.
Technical logs. Cloudflare keeps these for a few days only.

Your rights

Your right to object to marketing

You can object to direct marketing at any time. This right is absolute. If you object, we will stop sending you marketing emails.

To object, use the unsubscribe link in any of our emails, or email manny@wolfheadofficial.com. It is free.

Your other rights

Access. You can ask for a copy of the data we hold about you.
Rectification. You can ask us to correct data that is wrong or incomplete.
Erasure. You can ask us to delete your data. We may keep your email address on our suppression list, so that we never email you by mistake.
Restriction. You can ask us to limit how we use your data.
Portability. You can ask for your data in a common, machine-readable format, or ask us to send it to another organisation.
Objection. You can ask us to stop using your data where we rely on our legitimate interests.
Withdrawing consent. You can withdraw your consent at any time. Use the unsubscribe link in any of our emails, or email us. This does not affect anything we did before you withdrew.

How to use your rights

Email manny@wolfheadofficial.com. It is free. We may ask you to confirm who you are. We will reply within one month. If your request is complex, or you make several requests, we may need up to two more months. If so, we will tell you within the first month.

Cookies and similar technologies

This website sets no cookies of its own. It uses no analytics, no tracking pixels and no local storage. Normally nothing is stored on your device when you visit, so you will not see a cookie banner.

The one exception is a security check. If Cloudflare's systems suspect that a visitor is a bot, Cloudflare may run a check in the browser and then store a security cookie called cf_clearance. It is used only to keep the site secure.

If our email provider records opens and clicks in our emails, it does so with a tiny image in the email and with links that pass through its servers. Most email apps let you block images.

If we ever add analytics to this website, we will update this notice first and give you a simple, free way to say no.

Age

You must be 13 or over to join Wolfhead Division. If you think a child under 13 has joined, email manny@wolfheadofficial.com and we will delete their details.

Complaints

Complain to us

If you are unhappy with how we have used your data, please tell us first. Email manny@wolfheadofficial.com. We will acknowledge your complaint within 30 days. We will then look into it without undue delay and tell you the outcome.

Complain to the ICO

You can also complain to the ICO (the Information Commission), the UK's data protection regulator:

Online: ico.org.uk/make-a-complaint
Helpline: 0303 123 1113
Post: ICO, 4th Floor, No.3 Circle Square, 5 Hawkshaw Street, Manchester M1 7BL

Changes to this notice

We will update this notice when anything changes, for example if we change providers. The date at the top shows when it last changed. If a change affects how we use your data, we will tell you before it applies. Email us if you would like a copy of an earlier version.