Privacy policy
Last updated September 25, 2026
On The Hill is a Washington, D.C. cap label and a brand of 9990 Capital LLC, a Delaware limited liability company. This policy covers onthehill.shop, our checkout, which runs on Shopify, and the emails and texts we send. It says what we collect, what we do with it, who else touches it, and how to change your mind. We sell only in the United States, and this policy is written for US law.
The short version: we collect what you type into our forms and what Shopify needs to take your order. We use it to run the list and fill orders. We do not sell it, and nobody gets it for their own marketing.
What we collect
What you give us. On a signup form: your email, and, if you choose, your mobile number, your ZIP code, which side of the building you work on (House, Senate, or neither), and the cap you were looking at. At checkout, through Shopify: your name, email, shipping and billing addresses, phone number, payment details, and what you ordered. Card numbers go straight to Shopify Payments; we never see the full number. When you email or text us: whatever you send.
What we work out from it. From a ZIP code, the state and whether you are in the DC area, so we know whether to talk about pickup or shipping. Which form or page you signed up from, and, if you arrived through a link with a campaign tag on it (a flyer, a post, a friend's link), that tag, so we know what brought you in. If you tick the text box, a record of your consent: the exact wording you saw, its version, the date and time, and the number.
What your browser stores. onthehill.shop sets no cookies. It keeps a few things in your browser's local storage: the caps in your order in progress, whether you have already joined the list (so we stop asking), whether you closed the signup card, and the campaign tag from your first visit. This stays on your device and is not sent to us, except that the campaign tag travels with a signup. Clearing your browser's site data removes it. The Shopify checkout uses its own cookies, described in Shopify's privacy policy.
What our systems record. Our server sees your IP address and uses it to limit repeated form submissions. It is held in memory for a few minutes and not stored. Our hosting provider keeps standard request and error logs for a short time. As of the date above, onthehill.shop has no analytics, advertising pixels or trackers. If that changes, this policy changes first.
What we use it for
Running the list. Sending the pre-order link, drop alerts, last calls and session news by email, and by text if you asked for texts.
Sorting the list. Grouping people by the cap they wanted, House or Senate, where they are, and how they found us, so we send fewer, more relevant messages. Pickup details go to people near DC; shipping details go to everyone else.
Filling orders. Taking payment, shipping or arranging pickup, sending order and shipping updates, and handling returns and exchanges.
Reminders. If you start a checkout, enter an email address and leave, Shopify may send a reminder on our behalf.
Answering you. Replying when you write to us.
Keeping the shop safe. Fraud screening by Shopify, rate limits on our forms, and the records we need for taxes, accounting and the law.
We do not sell personal information. We do not share it with anyone for their own marketing. We do not use it to target ads to you on other sites or apps.
Email and texts
Email. Joining the list, or ticking the email box at checkout, subscribes you to our marketing emails. There is no confirmation step. Every marketing email has an unsubscribe link, and unsubscribing takes effect right away. Emails about an order you placed still arrive, because you need them.
Texts. Texts need their own consent: the box on the form, or the text box at checkout. The box tells you what you are agreeing to. We send up to 6 texts per drop from a toll-free number through Shopify. Message and data rates may apply. Reply STOP to any text to stop, and HELP for help. Consent to texts is never a condition of buying anything. The full SMS terms apply.
Who else touches it
These companies handle personal information for us, under contracts that limit what they can do with it:
Shopify hosts our customer list, checkout, orders and payments, and sends our emails and texts. Shopify Payments processes cards. Shopify also collects information about how you use our store to provide and improve its services, and for some of its features Shopify decides how that information is used. Shopify's consumer privacy policy explains this, and Shopify's privacy portal lets you exercise rights over what Shopify holds.
Railway hosts onthehill.shop and a small holding queue that keeps a signup for a few minutes if Shopify cannot be reached. Each record is deleted the moment it reaches Shopify.
Google Workspace runs our email inbox, so what you write to thestaff@onthehill.shop sits with Google.
Shipping carriers get your name, address and phone number to deliver your order.
Beyond that, we share personal information only with our accountants and lawyers when needed, with authorities when the law requires it, and with a buyer if On The Hill is ever sold, in which case this policy travels with the list.
How long we keep it
List signups: until you unsubscribe, reply STOP, or ask us to delete you. After that we keep only enough, an email address or a number on a do-not-contact list, to make sure we do not message you again.
Text consent records: for as long as we text you, and four years after, because the law may ask us to show them.
Orders: seven years, for tax and accounting.
The holding queue and server logs: minutes and weeks, respectively.
Your choices and rights
Unsubscribe from any email with the link at the bottom. Stop texts by replying STOP. To change what you told us, see what we hold, get a copy of it, or have it deleted, email thestaff@onthehill.shop from the address on file, or tell us the number on file. We answer within 45 days, and we never treat you differently for asking.
If you live in a state with a consumer privacy law, including California, Colorado, Connecticut, Maryland, Oregon, Texas and Virginia, your rights include access, correction, deletion, portability, and opting out of sale, sharing and targeted advertising. We do none of those last three, so there is nothing to opt out of. If we decline a request, we tell you why, and you can appeal by replying to that email. Shopify honors the Global Privacy Control signal at checkout.
You can also complain to your state attorney general. We would rather hear it first.
Children
onthehill.shop is not for anyone under 16, and we do not knowingly collect their information. If you think a child gave us theirs, email us and we delete it.
Security
onthehill.shop and the checkout run over HTTPS. Payments are handled by Shopify Payments, which is PCI compliant, and card numbers never touch our systems. Access to the customer list is limited to the people who run On The Hill. No system is perfect, so please do not send card numbers or other sensitive details by email or text.
Where it lives
In the United States. We sell only to US addresses and text only US numbers.
Changes
When this policy changes, the date at the top changes with it. If a change matters, for example a new kind of data or a new use for it, we email the list before it takes effect.
Contact
Email thestaff@onthehill.shop. Mail: 9990 Capital LLC, doing business as On The Hill, 500 North Capitol St NW, #210, Washington, DC 20001.