Privacy Notice

Effective Date: [16-06-2021]

Overview

This notice explains how we collect, use, and protect personal information from visitors and customers of our online store. It includes information collected during browsing, account registration, and purchase activities, and describes how sensitive data such as credit card details and contact information is secured.

Information We Collect

Personal Identifiers: Name, billing and shipping addresses, email, and phone number.
Account Details: Username, password (hashed), preferences, and purchase history.
Payment Information: Credit/debit card details, payment tokens, billing data, and transaction records.
Device & Usage Information: IP address, browser type, operating system, and browsing activity.
Customer Support Interactions: Support requests, chat transcripts, and attached files.
Optional Data: Reviews, survey responses, and voluntarily provided demographic or preference information.

How We Use Information

Process orders, returns, and exchanges.
Authorize and process payments while preventing fraud.
Maintain and manage user accounts.
Provide customer support and resolve issues.
Deliver personalized recommendations and marketing communications, where permitted.
Analyze website usage to improve services.
Comply with legal obligations and enforce policies.

Payment Data Security

All payment transactions are processed through PCI-DSS compliant third-party payment providers.
Card details are tokenized and not stored on our systems.
Data is encrypted during transmission and storage using industry-standard methods.
Access to payment information is restricted to authorized personnel with multi-factor authentication.
Regular security audits, monitoring, and penetration testing are performed to prevent unauthorized access.

Technical & Organizational Measures

HTTPS connections across the website.
Encryption of sensitive data in databases.
Role-based access controls with least-privilege enforcement.
Multi-factor authentication for administrative access.
Monitoring, logging, and alerts for suspicious activity.
Careful selection of third-party providers with privacy and security compliance.
Staff training and incident response planning.

Cookies & Tracking

Cookies and similar technologies are used to enhance site functionality, personalization, and analytics. Users can manage cookie preferences via browser settings, although disabling some cookies may affect site performance or checkout functionality.

Sharing & Disclosure

Service providers for payment processing, order fulfillment, analytics, and hosting.
Professional advisors for auditing, legal, or accounting purposes.
Authorities if legally required or to protect rights and safety.
Business transfers, such as mergers or acquisitions, with contractual safeguards.

International Data Transfers

Personal data may be processed outside your country. Appropriate safeguards, such as standard contractual clauses, are implemented to ensure data protection.

Data Retention

Information is retained only as long as necessary for business purposes, legal obligations, dispute resolution, and policy enforcement. Retention periods vary by data type and jurisdiction.

Your Rights & Choices

You may have rights to access, correct, delete, or restrict processing of your personal information depending on your jurisdiction. Consent for optional processing, including marketing, can be withdrawn without affecting prior processing. Requests can be submitted via account tools, with verification as required.

Children

The website is not intended for children under 16 (or the applicable local age). We do not knowingly collect information from children below this age and will delete such data if discovered.

Security Incidents

We maintain a response program for security incidents. Material breaches that risk personal data will be communicated to affected individuals and regulators in accordance with applicable laws.

Changes to This Notice

We may update this notice to reflect changes in practices or legal requirements. Significant updates will include a revised effective date and a notice on the website.