Draft for review. This page has not been approved yet and may change.
Privacy notice
Last updated: 4 October 2026. Version: draft-2026-10-04.
This notice explains what The Hoodie Nook knows about you, why, and what you can do about it. We’ve kept it as short and plain as we can.
If anything isn’t clear, email us at hello@thehoodienook.com.
The short version
- You can look around and vote without giving us your name, your email address or any other personal details.
- We only get personal details if you choose to join. Even then, we only ask for a few.
- We only email or text you if you tick a box to say yes. You can stop at any time.
- We don’t track you. There are no adverts, no advertising or analytics cookies, and no tracking tools from other companies.
- We never sell your details.
- You can ask us to show you, correct or delete your details at any time.
For young people, and for parents and carers
The Hoodie Nook is for teens and young adults. So this part comes first.
If you’re under 16
- You can vote. Your vote is anonymous. It has no name on it.
- You can’t join by yourself. A parent or carer needs to sign up for you.
- If you tell us you’re under 16, we throw away the first name and age you typed. The only thing we keep is your anonymous vote.
- You can send a link to a parent or carer. The link has a code in it that points to your vote. The code doesn’t say who you are. If they sign up using your link, their sign-up is linked to your vote.
If you’re 16 or 17
- You can join by yourself. You choose which boxes to tick, and you can change your mind at any time.
- To enter the prize draw, you need a parent’s or carer’s permission. The prize draw terms explain this.
If you’re a parent or carer
- When you sign up for a young person, the details we hold are yours: your first name and your email address.
- We ask for the age band of the person who would wear the hoodie. We don’t ask for their name.
- Any optional answers you give, such as a usual size, may be about them. You can skip all of these.
- Anything we send goes to you, not to the young person.
- If you signed up from a young person’s link, your sign-up is linked to their anonymous vote.
Whatever your age
- You can ask us to delete your details at any time. You can ask us yourself, or ask a grown-up to ask for you. Email hello@thehoodienook.com.
- We don’t track you and we don’t show adverts.
- We never ask whether you are neurodivergent. We never ask about your health or any diagnosis. Please don’t tell us these things in the ideas box.
- You have the same rights over your details as an adult. They are listed under “Your rights” further down this page.
Who we are
The Hoodie Nook is a brand run by RoR Group Limited, a company registered in England and Wales (company number 10328686). Its registered office is 7 Wetherby Road, Leeds, LS8 2JU.
The Hoodie Nook was started by Rory and his daughter Emily. We’re designing sensory comfort hoodies for neurodivergent teens and young adults in the UK. Nothing is on sale yet.
In data protection law, RoR Group Limited is the “controller” of your details. That means it decides how they are used, and it is responsible for looking after them.
To contact us about your details, email hello@thehoodienook.com or write to us at RoR Group Limited, 7 Wetherby Road, Leeds, LS8 2JU.
To confirm: Rory is checking whether the ICO data protection fee applies to RoR Group Limited
What we collect and why
The law says we need a good reason to use personal details. This is called a “lawful basis”. The tables below show what we collect, why, and which lawful basis we rely on. The next section explains each lawful basis in plain words.
We get these details from you, or from the parent or carer who signs up.
When you vote
You don’t need to sign up to vote.
| What we collect | Why | Lawful basis |
|---|---|---|
| A random device id, made in your browser | So each device can vote once | Legitimate interests |
| Your ranking of the designs | To find out which two designs to make | Legitimate interests |
| The order the designs were shown in on your device | To check that the order on screen didn’t give any design an unfair advantage | Legitimate interests |
| The time you locked your vote | So we know when each vote was made | Legitimate interests |
| Who would wear the hoodie: Girl, Boy, Non-binary or Prefer not to say. You can skip this. | To help us understand who the hoodies are for | Legitimate interests |
A vote on its own doesn’t identify you. We don’t save a name, an email address or an IP address with it.
Once you lock your vote, it can’t be changed.
The results we show are bars that compare the designs with each other. We never show counts, totals or percentages.
If you join as a founding member
Joining is optional. You must be 16 or over to join for yourself.
| What we collect | Why | Lawful basis |
|---|---|---|
| Your first name and email address | To send you the updates you asked for. To run the prize draw, if you entered. | Consent for updates. Contract for the prize draw. |
| Whether you’re joining for yourself or as a parent or carer, and the age band of the person who would wear the hoodie | To make sure under 16s don’t sign up by themselves. To understand who our hoodies are for. | Legitimate interests |
| Your mobile number, if you choose to give it | To text or WhatsApp you about drops, if you ticked that box | Consent |
| Optional extras: your usual size, the features that matter most to you, your postcode or area, and how you heard about us | To help us plan what to make, and to see where our members are | Legitimate interests. You choose whether to give them. |
| A record of what you agreed to, the version of the wording, and when | So we can show what you agreed to | Legal obligation |
| The link between your sign-up and the vote made on the same device | So we know which designs our members voted for | Legitimate interests |
The age bands are: under 13, 13 to 15, 16 to 17, 18 to 21, 22 to 25, and 26 or over.
The features you can pick are: stress-ball cuffs, chew charms, warm scented neck insert, heavyweight feel, and tagless and seamless.
When you join, there are two separate boxes. One is for email updates. One is for the prize draw. Neither is ticked for you. You need to tick at least one to carry on. The box for texts and WhatsApp is separate again, and it is never ticked for you.
When you join, your sign-up is linked to the vote made on the same device. From then on, your vote is no longer anonymous to us.
We aren’t sending any emails or texts yet. Before we start, we’ll add a mailing tool, and we’ll update this notice first.
If you enter the prize draw
| What we collect | Why | Lawful basis |
|---|---|---|
| The fact that you entered, with the first name and email address from your sign-up | To enter you in the draw, and to tell you if you win | Contract |
| If you win: your full name, a UK delivery address, your size and your county. If you’re under 18, a parent’s or carer’s permission. | To check you can enter, to send your prize, and to show that the draw was real | Contract and legitimate interests |
The prize draw terms say more, including how you can object to your surname and county being shared if you win.
If you send us an idea
| What we collect | Why | Lawful basis |
|---|---|---|
| Your idea, up to 500 characters, and your device id | To get ideas for making our products better. The device id lets us limit how many ideas one device can send. | Legitimate interests |
Ideas are anonymous. Please don’t put names, contact details or anything private in an idea. Ideas are never shown publicly.
Whenever you visit this site
| What we collect | Why | Lawful basis |
|---|---|---|
| Your IP address and basic details of each request, such as the page asked for and the time | To send the site to your device and to keep it secure | Legitimate interests |
These details are held in server logs by Vercel, the company that hosts this site.
If you email us
| What we collect | Why | Lawful basis |
|---|---|---|
| Your email address and whatever you tell us | To answer you and deal with your request | Legitimate interests |
Our lawful bases, in plain words
Consent
This means you said yes. We rely on consent to send you marketing by email, and by text or WhatsApp. Each has its own box.
A separate law, the Privacy and Electronic Communications Regulations (PECR), also says we need your consent before we send you marketing by email, text or WhatsApp.
You can take your consent back at any time. See “Your rights” below.
Contract
When you enter the prize draw, you agree to the prize draw terms. We use your details to do what those terms say: enter you, pick the winners, tell them, and send the prizes. Where we need to, we also rely on legitimate interests to run the draw properly.
Legitimate interests
This means we have a fair reason to use the information, and that reason doesn’t outweigh your rights. Our reasons are:
- running a fair vote, where each device votes once
- making our products better
- understanding who our members are, so we make the right things
- keeping this site working and secure
- running the prize draw properly, and being able to show it was fair
- answering people who contact us
The vote, the device id and the ideas don’t identify anyone on their own.
You have the right to object to anything we do on this basis. See “Your rights” below.
Legal obligation
Data protection law says we must be able to show what you agreed to. So we keep a record of it.
To confirm: a qualified person should confirm the lawful bases in this notice
What we keep in your browser
This site doesn’t use advertising or analytics cookies. It keeps a few things in your browser’s local storage instead. Local storage is a small space in your browser where a website can save things. It stays on your device.
- Your device id. This is a random code made in your browser the first time you visit. It is not a fingerprint. It is not built from anything about your device. It is sent to us with your vote, and with any idea you send, so that each device can vote once.
- Your vote. Your ranking, the order the designs were shown in, whether you’ve locked your vote, and a code that points to your saved vote. This lets the site remember your vote when you come back.
- Your Calm or Playful choice. So the site looks the way you picked.
- A note that a one-off prompt has been shown. So you don’t see it twice.
The answers you type when you join, such as your name and email address, are never saved in your browser’s storage.
We use these only for the reasons above. We don’t use them to follow you around this site or any other site.
The law lets a site keep things like these without asking first, when they are needed for what you asked the site to do, or when they make the site look the way you chose.
How to clear it
You can delete all of this at any time. Clear the site data for this website in your browser settings. If you do, your device will count as a new device the next time you visit.
If you’d like help with this, or you don’t want the site to keep these things, email hello@thehoodienook.com.
Who we share your details with
We never sell your details.
We don’t share them with anyone except the companies that help us run this site. Those companies may only use your details to do that job for us.
- Supabase provides our database. The database is in London, in the UK.
- Vercel hosts this site. Its servers handle every request to the site, so it sees IP addresses in its server logs. The parts of the site that save your vote and sign-up run in London.
To confirm: the company that provides our hello@thehoodienook.com inbox, to add to this list
We aren’t using a mailing tool yet. When we add one, we’ll name it here before we send anything.
If you win the prize draw, we’ll give your name and address to a delivery company so your prize can reach you. If the Advertising Standards Authority asks us to prove the draw was real, we must give it the winners’ details.
We’ll also share details if the law says we must, for example if a court orders it.
Sending details outside the UK
Our database is in London. The parts of this site that save your vote and sign-up also run in London.
Supabase and Vercel are both American companies. So it is possible that some details are handled or seen outside the UK, including in the United States.
When that happens, UK law says your details must still be protected. This is done with safeguards that UK law recognises. Examples are the UK International Data Transfer Addendum, which is a set of contract terms issued by the UK’s data protection regulator, and the UK-US data bridge, which covers American companies that have signed up to an approved scheme.
To confirm: check Supabase’s and Vercel’s current terms, and name the safeguard each one uses
You can ask us for more detail about these safeguards, or for a copy of them. Email hello@thehoodienook.com.
How long we keep things
| What | How long |
|---|---|
| Your sign-up details: first name, email address, age band, mobile number and optional answers | Until you unsubscribe or ask us to delete them. If you haven’t engaged with us for 24 months, we delete them. To confirm: what counts as engaging with us |
| Your prize draw entry | Until the draw is over and the prizes have been delivered. If you unsubscribe from emails but are still in the draw, we keep what we need for the draw until then. To confirm: how soon after the draw we delete the details of people who only entered the draw |
| Prize draw winners’ details | To confirm: how long winners’ details are kept |
| The record of what you agreed to | For as long as you’re a member. After you leave: To confirm: how long consent records are kept after someone leaves |
| Votes | We keep votes, with no end date. A vote on its own doesn’t identify anyone. If you joined and later leave, we delete your sign-up, and with it the link between you and your vote. |
| Ideas | To confirm: how long anonymous ideas are kept |
| Server logs held by Vercel | To confirm: how long Vercel keeps server logs on our plan |
| Emails you send us | To confirm: how long emails sent to us are kept |
Your rights
You have rights over your details. You can ask us to:
- Show you what we hold about you, and give you a copy.
- Correct anything that is wrong or out of date.
- Delete your details.
- Pause our use of your details, for example while we check something for you.
- Move your details. You can ask for the details you gave us in a format you can take to another service.
You can object. You can object to anything we do on the basis of legitimate interests. We will stop, unless we have a strong reason to carry on that we can explain to you. You can always object to marketing, and we will always stop.
You can take back your consent at any time. If you ticked a box for emails, or for texts and WhatsApp, you can change your mind whenever you like. For now, email hello@thehoodienook.com and we’ll stop. Once we start sending emails, each one will have an unsubscribe link. Taking back your consent doesn’t change anything we did before you told us.
How to use your rights
Email hello@thehoodienook.com, or write to us at the address above. It’s free. We’ll reply within one month. If your request is complicated, we may need longer, and we’ll tell you if so.
We may need to check that the request really comes from you. For example, we may ask you to email from the address you joined with.
If you only voted and never joined, your vote has no name or email address on it. So we usually can’t tell which vote is yours. Email us and we’ll explain what we can do.
If you’re under 18, you have the same rights. You can use them yourself, or ask a parent or carer to help you.
How to complain
If you’re unhappy with how we’ve used your details, please tell us. Email hello@thehoodienook.com. We’ll let you know we’ve got your complaint within 30 days. We’ll look into it and tell you what we found without delay.
You also have the right to complain to the Information Commissioner’s Office (ICO). The ICO is the UK’s data protection regulator. You can go to the ICO at any time, but we’d like the chance to put things right first.
- Website: ico.org.uk
- Helpline: 0303 123 1113
- Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Do you have to give us your details?
No. You can vote without giving us any personal details. Joining is your choice.
If you do join, we need a first name, an age band, an email address and at least one ticked box. Everything else is optional, and you can skip it.
No law says you have to give us anything. If you enter the prize draw, we need your email address to run it, because that is how we tell the winners.
No decisions made by computer
We don’t use your details to make decisions about you by computer alone. We don’t build a profile of you.
Prize draw winners are picked at random. Nothing about you, and nothing about how you voted, changes your chance of winning.
Changes to this notice
We’ll update this notice when what we do changes. The date and version at the top of the page show which one you are reading.
If we make a big change, we’ll say so clearly on this site. If you’re a member, we’ll email you too. Before we start sending emails or texts, we’ll update this notice to name the mailing tool we use.