PRIVACY POLICY

This notice explains what personal data [ENTITY] collects when you browse this site, create an account or place an order, why we process it, how long we keep it, and the rights you hold over it.

The controller is [ENTITY], [ADDRESS]. Questions and rights requests: [DPO_EMAIL].

Identity and contact details you give us: name, email, telephone, billing and delivery addresses.

Order data: items, sizes, prices, payment method reference and order history. We never see or store full card numbers — those go directly to our payment processor.

Technical data: IP address, device and browser type, and pages visited, collected through cookies and similar technologies.

Correspondence: messages you send to client services, and our replies.

To perform the contract: taking, fulfilling and delivering your order, handling returns and repairs, and operating your account.

To meet legal obligations: retaining invoices and tax records for the statutory period.

On the basis of our legitimate interests: preventing fraud, securing the site, and understanding in aggregate how the site is used.

On the basis of your consent: marketing email, and any analytics or personalisation cookie that is not strictly necessary. You may withdraw consent at any time without affecting the lawfulness of earlier processing.

Processors acting on our instructions only: [PROCESSORS] — payment processing, delivery, hosting, email and analytics.

Public authorities where we are legally obliged to disclose.

We do not sell personal data, and we do not share it for third-party advertising.

Where a processor is located outside the European Economic Area, the transfer is covered by an adequacy decision or by Standard Contractual Clauses together with any supplementary measures required. A copy of the safeguards relied on is available on request.

Order and invoice records: for the statutory retention period applicable to [ENTITY].

Account data: for as long as your account is open, then deleted or anonymised.

Marketing consent records: until you withdraw consent, plus the period needed to evidence that withdrawal.

You may request access to your data, correction of it, erasure, restriction of processing, or portability, and you may object to processing carried out on the basis of legitimate interests.

Write to [DPO_EMAIL]. We respond within one month. You may also complain to your national supervisory authority.