Marks pressed into leather: what we do with your details
In force since November 2026, written under Brazil's Law 13.709/2018, the General Data Protection Law (LGPD).
Naming who answers for them
The controller is TOMAHAWK HATS LTDA, CNPJ 57.563.321/0001-11, based at Av. Pedro Monte Bezerra, 100, Distrito Industrial Jundi, Osvaldo Cruz, SP, 17706-240, Brazil.
Our data protection officer can be reached at contato@morningsinorder.com. Any question about this notice belongs in that inbox.
Collecting only what you write
There is no sign-up, customer area or shop on this site. Only what you decide to type reaches the bench when you write:
- the name you give, yours or your company's;
- the mailbox you write from;
- the kind of piece you pick and the description of the order;
- anything else you add yourself, such as a phone number or a city.
Our service is aimed at shop owners and adults. If a minor writes in, we ask a parent or guardian to pick up the thread.
Using them to answer your request
These details let us reply, put together a quote for a commission or a wholesale purchase, and keep a record of the deal. Two grounds in the law back this up: the back-and-forth before a contract you started yourself and, after a sale, the tax paperwork of the invoice.
We do not use your details for advertising, we do not build buying profiles and we never sell contact lists.
Keeping them as long as the talk needs
Each message rests in the workshop's mail while the order stays open. After that we keep only what tax and accounting rules require, for the period those rules set. Everything else is deleted once it stops being useful.
Mailbox access is limited to whoever handles orders, behind a password plus a second sign-in code at the mail provider.
Passing them on only when unavoidable
Details may reach the provider hosting the site and mail, the accounting office when a sale becomes an invoice, the carrier delivering an order, and authorities that demand them by law or court order. No other transfer takes place.
Links to outside sites, if any appear, lead to pages with their own rules, which we do not control.
Logging a visit without tracking you
These pages set no advertising cookies and run no analytics tools. The server keeps ordinary technical logs, such as IP address, date and browser, briefly, so the pages stay up and out of harm's way. The lettering is fetched from Google's type servers, which see the technical call your browser makes.
Using your rights
Write to the data protection officer whenever you like and ask for:
- word on whether any detail of yours has crossed the bench, plus a copy;
- repair of anything incomplete or swapped;
- anonymising, freezing or binning whatever is surplus;
- taking the details to another supplier, and learning who has seen them;
- pulling back a permission granted earlier.
Expect an answer inside 15 working days. Still unhappy afterwards? Brazil's National Data Protection Authority (ANPD) takes complaints at gov.br/anpd.
To be sure a request really is yours, we may reply only to the address it arrived from.
Updating this notice
When the site or the way we serve customers changes, this page changes too and the month printed under the title moves forward. Larger changes are also flagged on the home page for a while.
Earlier wordings are kept on file and can be requested from the data protection officer.
Back to the workshop