Last updated: November 5, 2026

Topped Hats (“Topped Hats,” “we,” “us”) runs this website, our online shop and our hat bar events. This policy explains what personal information we collect, how we use it, who we share it with and the choices you have. If you have a question about it, email us at dana@toppedhats.com.

The short version

We collect what you give us in our forms and at checkout, and a small amount of technical information our website and shop need to work.
We use it to answer you, plan your event, fill your order, review hat giveaway nominations and, if you sign up, send our newsletter.
We do not sell your personal information, and we do not use advertising or tracking pixels on this site.
You can ask us to show you, correct or delete your information at any time.

Information we collect

Information you give us

Event inquiries: your name, email, phone number, event type, date, location, approximate guest count, the details you share and how you heard about us.
Appointment requests: your name, email, phone number, the type of appointment, what you are interested in, your preferred date and time and anything else you tell us.
Contact form: your name, email, the reason you are writing, the product or order number it is about and your message.
Hat giveaway nominations: your name, email and phone number; if you nominate someone else, their name, your relationship to them and their email or phone number; the story you share; hat ideas; and where you or the person you nominate is in chemotherapy (going through it now, or finished). See “Health information” below.
Newsletter: your name and email address.
Orders: when you buy from our shop, checkout is handled by Shopify, which collects your name, contact details, shipping and billing addresses and payment information. We receive your order details; we do not see or store your full card number.
Reviews: if you leave a product review, the name, rating, text and any photos you submit.

Information collected automatically

Like most websites, our site and the services it uses receive basic technical information when you visit, such as your IP address, browser type, device type and the pages you view. This is used to deliver the site, keep it secure and make the shop and cart work. See “Cookies” below.

Health information

Our monthly hat giveaway is for people who are going through chemotherapy or have completed it. The nomination form asks where the person is in chemotherapy, and many nominations include personal stories. This is sensitive health information, and we treat it that way:

We collect it only when you choose to submit a nomination, and by submitting you consent to us using it to review the nomination.
Only Dana and the Topped Hats team who choose recipients read nominations.
We never sell it or use it for marketing.
We share a recipient’s story publicly only if the sharing box was checked and only after we confirm with the recipient.
If you nominate someone else, please make sure they are comfortable with you sharing their information with us. If you nominate someone under 18, you must be their parent or legal guardian.

You can ask us to delete a nomination at any time by emailing dana@toppedhats.com.

How we use your information

To reply to your inquiries, appointment requests and messages, and to plan and run your event.
To process, ship and support your orders, returns and exchanges.
To review hat giveaway nominations and contact recipients.
To send our newsletter and occasional offers if you signed up. Every email includes a link to unsubscribe.
To show product reviews and ask customers to review their purchase.
To keep our website and shop secure, prevent spam and fraud, and meet our legal obligations.

Who we share it with

We share personal information only with the service providers that help us run our business, and only so they can do that work for us:

Shopify runs our online store, cart and checkout, and processes payments.
Omnisend sends our newsletter and marketing emails.
Monday.com is where we organize event inquiries and follow-ups.
Judge.me collects and displays product reviews.
Kinsta hosts this website and stores the messages sent through our forms.
Google Fonts provides the typefaces on this site, which means your browser requests them from Google.
Shipping carriers deliver your orders.

We may also share information if the law requires it, to protect our rights or the safety of others, or as part of a sale or transfer of our business. We do not sell your personal information, and we do not share it with advertisers.

Cookies

This site does not use advertising cookies or tracking pixels. It uses only the cookies and similar storage needed to make it work: your cart and checkout (set by Shopify), reviews (Judge.me) and website security. You can block or delete cookies in your browser settings, but the cart and checkout may not work without them. Shopify’s checkout has its own privacy policy, which you can find on the checkout pages.

How long we keep it

We keep personal information only as long as we need it for the purpose we collected it for: for example, while we plan your event or handle your order, and afterwards as long as needed for our business records, taxes and legal obligations. Newsletter subscribers stay on our list until they unsubscribe. Nominations are kept while we review them and then deleted, unless the person is selected and agrees to us keeping their story.

How we protect it

We use secure, reputable services, encrypted (HTTPS) connections and limited access to protect your information. No system is perfectly secure, but we work to keep your information safe and will let you know if we learn of a breach that affects you, as the law requires.

Your rights and choices

You can ask us to:

tell you whether we have personal information about you, and give you a copy of it;
correct information that is wrong;
delete your information;
stop sending you marketing emails (or use the unsubscribe link in any email).

Depending on where you live, including Texas and other states with privacy laws, you may have these rights by law. To make a request, email dana@toppedhats.com. We will reply within 45 days and may ask you to confirm your identity first. If we turn down your request, you can ask us to reconsider by replying to our answer, and we will respond within 60 days. If you are still not satisfied, you may contact the attorney general of your state. We will never treat you differently for using your privacy rights.

Children

Our website is not meant for children under 13, and we do not knowingly collect personal information from them. If you believe a child has sent us personal information, email us and we will delete it.

Links to other sites

Our site links to other websites, such as our social media pages and press coverage. Those sites have their own privacy policies, and we are not responsible for how they handle your information.

Changes to this policy

We may update this policy from time to time. When we do, we will change the “Last updated” date at the top of this page.

Contact us

Topped Hats
Dallas, Texas
Email: dana@toppedhats.com
Phone: (214) 478-3169

All policies

Privacy policy