Privacy Policy

1. Information We Collect

1.1 Personal Information

We collect personal information that you voluntarily provide to us when you:

• Create an account on our website
• Place an order or make a purchase
• Subscribe to our newsletter
• Contact our customer service
• Participate in surveys or promotions
• Leave reviews or comments

This information may include:

• Name and contact details (email address, phone number, postal address)
• Billing and delivery addresses
• Payment information (processed securely through our payment providers)
• Account credentials (username and password)
• Purchase history and preferences
• Communication preferences

1.2 Automatically Collected Information

When you visit our website, we automatically collect certain information about your device and browsing behavior:

• IP address and geographical location
• Browser type and version
• Operating system
• Referring website URLs
• Pages viewed and time spent on pages
• Date and time of visits
• Device identifiers

1.3 Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to enhance your browsing experience and collect usage data. For more information, please see our Cookie Policy section below.

2. How We Use Your Information

We use the collected information for the following purposes:

• Order Processing: To process and fulfill your orders, arrange delivery, and provide customer support
• Account Management: To create and manage your account, verify your identity, and maintain your preferences
• Communication: To send order confirmations, shipping updates, invoices, and respond to your inquiries
• Marketing: To send promotional emails, newsletters, and special offers (with your consent)
• Website Improvement: To analyze website usage, improve functionality, and enhance user experience
• Personalization: To provide personalized product recommendations and tailored content
• Security: To detect and prevent fraud, unauthorized access, and other illegal activities
• Legal Compliance: To comply with legal obligations, resolve disputes, and enforce our agreements

3. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill our contract with you (e.g., order processing and delivery)
• Consent: You have given explicit consent for specific processing activities (e.g., marketing communications)
• Legitimate Interests: Processing is necessary for our legitimate business interests (e.g., fraud prevention, website analytics)
• Legal Obligations: Processing is required to comply with legal requirements (e.g., tax and accounting obligations)

4. Cookie Policy

Our website uses cookies to distinguish you from other users and provide a better browsing experience. Cookies are small text files stored on your device.

4.1 Types of Cookies We Use

• Essential Cookies: Required for website functionality, shopping cart, and secure areas
• Performance Cookies: Collect anonymous data about how visitors use our website
• Functionality Cookies: Remember your preferences and personalize your experience
• Targeting Cookies: Track your browsing to deliver relevant advertisements

4.2 Managing Cookies

You can control and manage cookies through your browser settings. However, disabling cookies may affect website functionality and your user experience. Most browsers allow you to:

• View and delete cookies
• Block third-party cookies
• Block cookies from specific websites
• Block all cookies
• Delete all cookies when closing your browser

5. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share your information with:

5.1 Service Providers

• Payment Processors: To securely process your payments
• Shipping Companies: To deliver your orders
• Email Service Providers: To send communications on our behalf
• Web Hosting and IT Services: To maintain and secure our website
• Analytics Providers: To analyze website performance (e.g., Google Analytics)

5.2 Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or if necessary to:

• Protect our legal rights and property
• Prevent fraud or security threats
• Protect the safety of our customers and employees
• Comply with legal proceedings

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal information may be transferred to the acquiring entity.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for data transmission
• Secure server infrastructure and firewalls
• Regular security audits and vulnerability assessments
• Access controls and authentication protocols
• Employee training on data protection
• Secure payment processing through PCI DSS compliant providers

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Retention periods vary depending on the type of data:

• Account Information: Retained until you request account deletion or account is inactive for 5 years
• Order Information: Retained for 7 years for tax and accounting purposes
• Marketing Data: Retained until you unsubscribe or withdraw consent
• Website Analytics: Anonymized and retained for 26 months

After the retention period expires, we will securely delete or anonymize your personal information.

8. Your Rights Under GDPR

If you are located in the European Economic Area (EEA), you have the following rights regarding your personal data:

• Right of Access: Request copies of your personal information
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Request transfer of your data to another service provider
• Right to Object: Object to processing based on legitimate interests or direct marketing
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
• Right to Lodge a Complaint: File a complaint with your local data protection authority

To exercise any of these rights, please contact us using the information provided in the "Contact Us" section below.

9. International Data Transfers

Your information may be transferred to and processed in countries outside your country of residence, including countries that may not have the same data protection laws. When we transfer your data internationally, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions recognizing equivalent data protection
• Binding Corporate Rules for intra-group transfers

10. Children's Privacy

Our website is not intended for children under the age of 16. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will delete such information from our systems.

11. Third-Party Links

Our website may contain links to third-party websites, services, or applications. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

12. Marketing Communications

With your consent, we may send you promotional emails about new products, special offers, and other information we think you may find interesting. You can opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Updating your preferences in your account settings
• Contacting us directly using the information below

Please note that even if you opt out of marketing communications, we will still send you transactional emails related to your orders and account.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated policy on this page with a new "Last Updated" date
• Sending an email notification to registered users
• Displaying a prominent notice on our website

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

15. Data Protection Authority

If you are located in the EEA and have concerns about our data processing practices that we have not adequately addressed, you have the right to lodge a complaint with your local supervisory authority.