Privacy Policy

Last updated: [Date]

Overview

This Privacy Policy explains what personal data we collect, how we use and share it, and your rights. We are committed to protecting your privacy and complying with data protection laws.

1. Controller Information

  • Company: [Your Company Name]

  • Address: [Company Address]

  • Contact: [support@example.com]

2. Information We Collect

We collect different types of information to operate our services effectively:

a. Personal Information You Provide

  • Name, email address, phone number, billing and shipping addresses, payment information (processed through gateways), order history, and customer service communications.

b. Technical & Usage Data

  • IP address, browser type, device identifiers, pages visited, referrer URL, time and date of visit, cookies, and analytics data.

c. Marketing Data

  • Preferences for receiving promotions and email subscription status.

3. How We Use Your Data

We use collected data to:

  • Process and fulfill orders; communicate order status and support inquiries.

  • Provide and improve our website and services.

  • Personalize user experience and recommend products.

  • Send marketing communications where consented.

  • Prevent fraud and comply with legal obligations.

4. Legal Bases for Processing (where applicable)

  • Performance of a contract (order fulfillment).

  • Consent (marketing emails).

  • Legitimate interests (fraud prevention, service improvement).

  • Legal compliance.

5. Cookies & Tracking Technologies

  • We use cookies and similar technologies for site functionality, analytics, performance, and advertising.

  • You can manage cookie preferences through browser settings; however, disabling certain cookies may affect site functionality.

6. Sharing Your Information

We may share personal information with:

  • Service providers: payment processors, shipping carriers, hosting providers, email platforms.

  • Legal & regulatory authorities: to comply with legal obligations or respond to lawful requests.

  • Business transfers: in the event of sale, merger, or asset transfer (with notice to users).

We do not sell your personal information.

7. Data Security & Storage

  • We implement reasonable technical and organizational measures (e.g., SSL/TLS encryption, access controls) to protect data.

  • Payment processing is handled by third-party gateways; we do not store full card numbers on our servers.

  • Data is retained only as long as necessary for business, legal, or tax purposes — typical retention ranges are 1–7 years depending on the data type and jurisdiction.

8. Your Rights (depending on jurisdiction)

You may have the right to:

  • Access your personal data.

  • Request correction or deletion.

  • Object to or restrict processing.

  • Request portability of your data.

  • Withdraw consent to marketing.

To exercise rights, contact [support@example.com]. We will respond within the statutory timeframe.

9. International Transfers

If your data is transferred outside your country (e.g., to the U.S.), we will take appropriate safeguards, such as standard contractual clauses, to ensure adequate protection.

10. Children’s Privacy

Our services are not directed to children under 16 (or applicable local age). We do not knowingly collect personal data from children. If we learn we have collected data from a child, we will take steps to delete it.

11. Changes to This Policy

We may update this Privacy Policy. When significant changes are made, we will notify users via the website or email.

12. Contact Us

Email: [support@example.com]

Address: [Company Address]