PRIVACY POLICY

1. DEFINITIONS

• Personal Data: Any information that can be used to directly or indirectly identify an individual, including but not limited to name, postal address, email address, phone number, payment details, IP address, device identifiers, browsing behavior, and user-generated content. This includes anonymized data that can be re-linked to an identifiable individual, and excludes data that has been irreversibly anonymized or aggregated such that it can no longer identify any individual, whether alone or in combination with other information.
• Sensitive Personal Data: A subset of Personal Data subject to heightened legal protection, including payment card information, financial details, precise geolocation data, health information (if applicable), and any other data protected under applicable local privacy laws.
• Processing: Any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, restriction, deletion, and analysis.
• Third-Party Service Providers: External companies, organizations, or individuals that process Personal Data on our behalf, or with whom we share your Personal Data as described in this Policy.
• Cookies: Small text files, web pixels, beacons, and similar tracking technologies stored on your device when you visit the Website, as further described in Section 5 of this Policy.

2. PRINCIPLES OF DATA PROCESSING

3. PERSONAL DATA WE COLLECT

3.1 Data You Voluntarily Provide to Us

• Account & Registration Data: When you create an account with us, we collect your first and last name, username, email address, phone number, password, and any other optional information you choose to add to your account profile.
• Transaction & Purchase Data: When you make a purchase through the Services, we collect payment details (credit/debit card numbers, card security information, billing address, and other payment method details), shipping and delivery address, order number, purchase history, return/refund records, and communications related to your order or customer service inquiries.
• Communications Data: When you contact us via email, contact form, live chat, social media, phone, or other channels, we collect your name, contact information, and the full content of your communications with us, including any attachments or supporting materials you provide.
• Voluntary Submission Data: When you participate in surveys, contests, promotions, loyalty programs, or leave product reviews, comments, or other user-generated content, we collect the information you submit in connection with these activities.
• Marketing Consent Data: When you opt in to receive marketing communications from us, we collect your email address, phone number, and marketing preference details.

3.2 Data We Collect Automatically When You Use the Services

• Device & Technical Data: Device type, unique device identifiers, IP address, operating system, browser type and version, language settings, screen resolution, referral URL, access times and dates, pages visited, clickstream data, crash reports, and system activity information.
• Usage & Analytics Data: Browsing history, search queries, time spent on pages, cart abandonment data, interaction with products, features, and content on the Services, engagement with marketing emails and advertisements, and other behavioral data related to your use of the Services.
• Location Data: Approximate geolocation data derived from your IP address. If you enable location permissions on your device, we may collect precise geolocation data to provide location-specific features of the Services.
• Server Log Data: Like most websites, our servers automatically record page requests, access times, browser language, and unique cookie identifiers when you visit the Website.

3.3 Data We Collect From Third Parties

• Payment Service Providers: Payment verification details, fraud risk scores, and transaction status information to process your orders and prevent fraudulent activity.
• Logistics & Shipping Partners: Delivery status, address verification data, and return tracking information to fulfill your orders.
• Analytics & Advertising Partners: Anonymized usage data, advertising engagement metrics, and audience insights to improve the Services and our marketing campaigns.
• Identity Verification & Fraud Prevention Services: Data to verify your identity, prevent unauthorized account access, and combat fraudulent transactions.
• Social Media Platforms: If you sign up or log in to the Services via a social media account, we receive the data you authorize the platform to share with us (e.g., name, email address, profile photo).
• Credit Reference & Debt Collection Agencies: Where necessary to recover outstanding payments owed to us, as permitted by applicable law.

4. HOW WE USE YOUR PERSONAL DATA

1. To Fulfill Our Contractual Obligations to You
    
   • Process and fulfill your orders, including payment processing, shipping, delivery, and returns/exchanges;
   • Create and manage your user account, verify your identity, and provide account-related support;
   • Respond to your customer service inquiries, support tickets, and requests;
   • Administer contests, promotions, loyalty programs, or surveys you choose to participate in.
      
     Legal Basis (GDPR): Article 6(1)(b) GDPR – performance of a contract with you.
    
2. For Our Legitimate Business Interests
    
   • Improve, optimize, and develop the Services, products, features, and user experience;
   • Analyze usage trends, website performance, and customer behavior to inform our business decisions;
   • Prevent, detect, and investigate fraud, unauthorized access, cyberattacks, and other illegal or malicious activity;
   • Enforce our Terms of Service and other agreements with users;
   • Ensure the security and stability of our IT systems and infrastructure;
   • Personalize your experience on the Services, including product recommendations and content customization;
   • Conduct internal audits, compliance checks, and risk management activities.
      
     Legal Basis (GDPR): Article 6(1)(f) GDPR – our legitimate business interests, balanced against your privacy rights.
    
3. With Your Consent
    
   • Send you marketing communications, including emails, SMS messages, and promotional offers about our products and services (you may withdraw this consent at any time);
   • Share your Personal Data with third-party partners for their own marketing purposes, only where you have explicitly opted in to such sharing;
   • Use precise geolocation data from your device, where you have enabled location permissions;
   • Use non-essential Cookies and tracking technologies, as described in Section 5 of this Policy;
   • Use your user-generated content for commercial marketing purposes, where required by applicable law.
      
     Legal Basis (GDPR): Article 6(1)(a) GDPR – your explicit consent.
    
4. To Comply With Legal Obligations
    
   • Retain and disclose Personal Data to comply with tax, accounting, and commercial record-keeping requirements;
   • Respond to court orders, subpoenas, legal process, or enforceable governmental requests;
   • Meet regulatory reporting and compliance obligations;
   • Protect the vital interests of you or another individual, including in emergency situations.
      
     Legal Basis (GDPR): Article 6(1)(c) and 6(1)(d) GDPR – compliance with a legal obligation, protection of vital interests.
    

5. COOKIES & TRACKING TECHNOLOGIES

5.1 What Are Cookies?

5.2 How We Use Cookies

1. Strictly Necessary Cookies: These Cookies are essential for the basic functionality of the Website, such as enabling page navigation, cart functionality, secure login, and fraud prevention. These Cookies cannot be disabled, as they are required for the Services to operate.
2. Functional Cookies: These Cookies remember your preferences (e.g., language, region, login details) to provide a personalized and enhanced user experience. These Cookies are only enabled with your explicit consent.
3. Performance & Analytics Cookies: These Cookies collect data about how users interact with the Website, to help us improve performance, functionality, and user experience. We use these Cookies from third-party analytics providers, including Google Analytics. 
4. Advertising & Targeting Cookies: These Cookies are used to deliver personalized advertisements, measure the performance of our marketing campaigns, and limit repeated ad impressions. We use these Cookies from our advertising partners, including Google Ads, Meta (Facebook) Ads, and Microsoft Bing Ads. These Cookies are only enabled with your explicit consent.

5.3 Your Cookie Choices

5.4 Do Not Track (DNT) Signals

6. DISCLOSURE & TRANSFER OF YOUR PERSONAL DATA

6.1 Third-Party Service Providers

• Payment processors and financial service providers;
• Logistics, shipping, and delivery partners;
• Website hosting, e-commerce platform, and IT service providers;
• Analytics and advertising partners;
• Customer relationship management (CRM) and customer service providers;
• Legal, accounting, audit, and compliance service providers;
• Fraud prevention, identity verification, and debt collection agencies;
• Contest, promotion, and loyalty program administrators.

6.2 Corporate Affiliates

6.3 Legal Disclosures & Business Transactions

1. Comply with a legal obligation, court order, subpoena, or enforceable governmental request;
2. Enforce our Terms of Service, including investigation of potential violations;
3. Detect, prevent, or address fraud, security, or technical issues;
4. Protect against harm to the rights, property, or safety of our company, our users, or the public, as required or permitted by law.

6.4 Cross-Border Data Transfers

7. DATA RETENTION

• Account Data: Retained for the lifetime of your active account, plus 12 months after account closure or inactivity, to resolve disputes, enforce our agreements, or comply with legal requirements.
• Transaction & Financial Data: Retained for 7-10 years from the date of the transaction, to comply with tax, accounting, and commercial law retention requirements.
• Marketing Data: Retained until you withdraw your consent to marketing communications, or until 24 months of continuous inactivity, after which we will delete or anonymize your data.
• Technical & Analytics Data: Retained for 12 months from collection, after which it is anonymized or deleted. Anonymized statistical data may be retained indefinitely for internal business purposes, with no ability to identify individual users.
• Customer Service Data: Retained for 12 months from the resolution of your inquiry, or longer if required for ongoing dispute resolution.
• Legal Compliance Data: Retained for as long as required by applicable law, regulation, or court order.

8. DATA SECURITY

• Industry-standard SSL/TLS encryption for all data transmitted between your browser and our Website;
• Tokenization and encryption of sensitive payment data, with no full payment card details stored on our active servers;
• Role-based access restrictions, with Personal Data only accessible to authorized personnel on a strict need-to-know basis;
• Regular security audits, vulnerability scans, and penetration testing of our systems;
• Mandatory data protection and security training for all employees and contractors;
• Secure offline backup and disaster recovery protocols;
• A formal incident response plan to address data security breaches in a timely manner.

9. YOUR RIGHTS AS A DATA SUBJECT

9.1 Core User Rights

1. Right to Access: The right to request confirmation that we are processing your Personal Data, and to request a copy of the Personal Data we hold about you.
2. Right to Rectification: The right to request that we correct inaccurate, incomplete, or out-of-date Personal Data we hold about you.
3. Right to Erasure: The right to request that we delete your Personal Data, where the data is no longer necessary for the purposes it was collected, you withdraw your consent, you object to the processing, the processing is unlawful, or deletion is required to comply with a legal obligation.
4. Right to Restrict Processing: The right to request that we restrict the processing of your Personal Data, where the accuracy of the data is contested, the processing is unlawful, we no longer need the data but you require it for legal claims, or you have objected to the processing.
5. Right to Data Portability: The right to receive the Personal Data you have provided to us, in a structured, machine-readable, commonly used format, and to request that we transfer this data to another data controller, where technically feasible.
6. Right to Object: The right to object to the processing of your Personal Data that is based on our legitimate interests, including processing for direct marketing purposes.
7. Right to Withdraw Consent: Where we process your Personal Data based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.
8. Right to Lodge a Complaint: The right to lodge a complaint with a competent data protection supervisory authority if you believe our processing of your Personal Data violates applicable law.

9.2 How to Exercise Your Rights

9.3 California Privacy Rights (CCPA/CPRA)

• The right to opt out of the “sale” or “sharing” of your Personal Data for cross-context behavioral advertising. We do not sell your Personal Data for monetary consideration. We may share your data with our advertising partners for personalized advertising, which may be deemed a “sale” or “sharing” under CCPA/CPRA. You can opt out of this sharing via our Cookie Consent Banner, or by emailing us at the address listed in Section 12.
• The right to non-discrimination: We will not discriminate against you for exercising your CCPA/CPRA rights, including by denying you goods or services, charging different prices, or providing a different level of service.

10. CHILDREN’S PRIVACY

11. THIRD-PARTY WEBSITES & SERVICES

12. LIMITATION OF LIABILITY

13. GOVERNING LAW & JURISDICTION

14. CONTACT US