What we collect, why we use it, and what you can do about it.

Scope of this policy

This policy applies to personal information collected through the Next Year Club website, sign-in and account experiences, direct brand communications that reference this policy, and future ecommerce features connected to the storefront. It does not apply to third-party websites, services, or platforms that Next Year Club does not control, even if the site links to them or relies on them operationally.

Categories of personal information we may collect

Depending on how you interact with the storefront, Next Year Club may collect the following categories of personal information:

• Identifiers and contact details such as name, email address, account ID, shipping address, billing address, or similar contact information.
• Account and authentication data such as sign-in status, user profile details, authentication provider identifiers, and security or session information associated with account access.
• Commerce and order information such as product selections, size and variant choices, order history, shipping details, refund or replacement records, and customer-service information connected to a purchase when live checkout is enabled.
• Payment-related information such as payment status or limited transaction metadata. Payment card numbers and similar full financial credentials are generally expected to be processed directly by payment processors rather than stored by Next Year Club in raw form.
• Communications and submissions such as messages you send, waitlist or email capture submissions, survey responses, and future reviews, photos, or comments if those features are added.
• Device, browsing, and network data such as IP address, browser type, operating system, referrer information, pages viewed, timestamps, session state, and related technical log data.
• Cookie and browser storage data such as essential cookies, consent state, and other browser-side settings used to keep the site functioning.
• Inferences or preferences such as sizing preferences, product interest, or engagement patterns inferred from your interactions with the storefront, if and when those features become part of the live experience.

How we collect personal information

Personal information may come from several sources:

• Directly from you when you sign in, contact the brand, join a list, or later place an order.
• Automatically from your browser or device through logs, cookies, and similar technologies used to deliver and secure the site.
• From service providers and partners that help operate the site, such as authentication, hosting, payment, fraud-prevention, email, analytics, or fulfillment providers.
• From transaction or fulfillment events if a payment provider, carrier, or print-on-demand partner needs to share status, exception, or delivery information with us.
• From public or platform-based interactions if you contact Next Year Club through social or community channels.

Why we use personal information

Next Year Club may use personal information for the following business and commercial purposes:

• to operate, render, maintain, and secure the site and account features;
• to authenticate users and prevent fraud, abuse, or unauthorized access;
• to process, prepare, fulfill, ship, support, refund, or document orders when commerce is live;
• to communicate with you about account activity, orders, launches, policy updates, or support matters;
• to improve site usability, product merchandising, and launch operations;
• to debug, monitor, and protect the reliability and security of the storefront;
• to comply with legal obligations, enforce terms, and defend rights or claims; and
• to send marketing or editorial updates where you have opted in, where the site offers that choice, or where applicable law otherwise permits.

Next Year Club aims to collect and use information in a proportionate way. Just because a type of data could be useful someday does not mean it should be collected now.

When we disclose personal information

Next Year Club may disclose personal information to the following categories of recipients when needed for legitimate business purposes:

• Service providers and contractors that support hosting, infrastructure, authentication, site security, email delivery, order operations, analytics, payment processing, fraud prevention, customer communications, and print-on-demand fulfillment.
• Fulfillment and logistics partners when an order needs to be produced, packed, shipped, tracked, replaced, or investigated.
• Professional advisors such as legal, accounting, audit, or insurance partners when reasonably necessary.
• Authorities and counterparties when required to comply with law, respond to valid legal process, protect the site, investigate fraud, or enforce the brand's rights.
• Successors or transaction counterparties in the event of a merger, financing, acquisition, reorganization, asset sale, or similar business transaction.
• Other parties at your direction when you ask us to share information or clearly authorize a disclosure.

As of April 9, 2026, Next Year Club does not intend to sell personal information or share personal information for cross-context behavioral advertising. If that changes, this policy and the site controls will be updated before the change is relied on in production.

Service providers and current operational posture

The storefront is designed to use specialized providers rather than build every operational layer in-house. Depending on the live features enabled, that may include providers for authentication, hosting and infrastructure, payment processing, database operations, email delivery, and made-to-order fulfillment. Current or planned workflows may involve providers such as Clerk for authentication, Vercel for hosting and deployment infrastructure, Supabase for application data, Stripe or another payment processor for checkout, and Printful or another fulfillment partner for production and shipping. Those providers should receive only the information reasonably necessary to perform their role.

Cookies, local storage, and online tracking

Next Year Club uses a conservative cookie posture today. Essential cookies or similar browser storage may be used to support session continuity, security, consent choices, and core site functionality. The site includes a live cookie-awareness control so visitors can accept or deny optional cookie use if broader optional tooling is added later. For more detail about the site's current browser-storage behavior, see the Cookies page. The site does not currently appear to be configured as a broad ad-tech property. Core providers involved in hosting, authentication, security, and content delivery may still automatically receive technical information when your browser connects to the site. Because there is no universally applied Do Not Track standard and the site is currently in a limited-tracking posture, Next Year Club does not presently describe a separate site-wide response to browser Do Not Track signals. If the storefront later engages in activities that trigger legally required opt-out signal handling, this section will be updated.

Retention

Next Year Club retains personal information only for as long as reasonably necessary for the purposes described in this policy, including to operate the site, complete transactions, maintain business records, comply with legal obligations, resolve disputes, and protect the brand from fraud or misuse.

• Account data may be kept while the account remains active and for a reasonable period afterward.
• Order and transaction records may be retained for accounting, tax, chargeback, and operational reasons.
• Communications and support records may be retained as needed to respond to issues or document resolutions.
• Security and technical logs may be retained for shorter operational windows unless longer retention is justified.

When information is no longer reasonably needed, Next Year Club will delete, deidentify, or otherwise reduce it in a manner appropriate to the data and the system involved.

Security

Next Year Club uses administrative, technical, and organizational measures intended to protect personal information against unauthorized access, misuse, alteration, and loss. Those measures may include access controls, provider-based security tooling, and encryption in transit where appropriate. No website, database, or transmission channel can be guaranteed to be completely secure. Visitors should use the site carefully and avoid sending sensitive information through informal channels unless asked to do so through an appropriate secure workflow.

Your choices and controls

You may have choices about how personal information is handled, including the ability to:

• decline to provide optional information;
• use the live cookie control to accept or deny optional cookie use;
• unsubscribe from marketing emails if and when those communications are offered;
• review or update account information available through sign-in features; and
• contact Next Year Club with privacy questions or requests.

California and other U.S. privacy rights

Depending on where you live and whether a particular privacy law applies to Next Year Club, you may have rights to request access to personal information, know the categories and sources of information collected, correct inaccurate information, request deletion, obtain a portable copy, opt out of certain disclosures or targeted advertising uses, limit certain uses of sensitive personal information, or appeal a denied request. Next Year Club will not discriminate against you for exercising privacy rights that apply under law. At the same time, some services may require certain information to function, so deleting or limiting data can affect the availability of account or order-related features. To make a privacy-related request, contact privacy@nextyearclub.com and include enough detail for the request to be understood and verified.

Children's privacy

Next Year Club is not directed to children under 13 and does not knowingly collect personal information from children under 13 without authorization recognized by applicable law. If you believe a child has provided personal information to the site inappropriately, contact privacy@nextyearclub.com so the issue can be reviewed.

International visitors

Next Year Club is a U.S.-oriented brand and the site is operated from the United States. If you access the site from another country, your information may be transferred to and processed in the United States or other locations where service providers operate, subject to the safeguards and contractual arrangements that may apply.

Changes to this policy

Next Year Club may update this Privacy Policy as the storefront, legal requirements, providers, and brand operations evolve. When that happens, the updated version will be posted here with a revised effective date. Material changes will be reflected before the new data practice becomes a routine part of the live site.

Contact

Questions, concerns, or requests about this Privacy Policy may be sent to privacy@nextyearclub.com. This inbox is intended to be the primary privacy contact channel for the storefront.