Privacy policy
At CoillWhisper, we are committed to safeguarding the privacy of every visitor and customer who engages with our online store. This Privacy Policy explains in clear terms how we collect, use, store, and protect your personal information when you browse or purchase Mice, Keyboards, and Headphones from our platform. We adhere to internationally recognized privacy standards, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), to ensure your rights are respected at all times.
1. Information We Collect
We collect only the information necessary to process your orders, improve our services, and communicate with you effectively. The types of data we may gather include:
- Order and Transaction Data: Your name, shipping address, billing address, email address, and payment details (processed securely by our payment partners; we never store full card numbers).
- Device and Usage Data: IP address, browser type, operating system, pages viewed, time spent on our site, and referring URLs. This helps us optimize your shopping experience.
- Communication Data: Any messages or inquiries you send to us via [email protected], including order-related questions or product feedback.
- Cookies and Similar Technologies: We use cookies to remember your preferences, track cart contents, and analyze site traffic. You may disable cookies in your browser, though some features may not function properly.
2. How We Use Your Information
Your personal data is used solely for legitimate business purposes, including:
- Processing and fulfilling your orders for Mice, Keyboards, and Headphones, including delivery and returns.
- Providing customer support and responding to your inquiries via email.
- Sending order updates, shipping confirmations, and important service notifications (we do not send marketing emails without your explicit consent).
- Improving our website functionality, product recommendations, and overall user experience through aggregated analytics.
- Preventing fraud, unauthorized transactions, and ensuring the security of our platform.
3. Legal Basis for Processing (GDPR)
For users within the European Economic Area (EEA), we process your data based on the following legal grounds:
- Contract Performance: Processing is necessary to fulfill your purchase and deliver the products you ordered.
- Legitimate Interests: We may analyze usage patterns to improve our store, provided your rights and freedoms are not overridden.
- Legal Obligation: We may retain certain records to comply with tax, accounting, or consumer protection laws.
- Consent: Where we request optional data (e.g., product reviews), you may withdraw consent at any time.
4. Data Sharing and Third Parties
We do not sell, rent, or trade your personal information to any third parties. However, we may share limited data with trusted service providers who assist us in operating our business, under strict data processing agreements:
- Payment Processors: To securely handle credit card and digital wallet transactions.
- Shipping Carriers: To deliver your purchased items to your provided address.
- IT and Analytics Providers: To host our website, manage databases, and analyze traffic patterns.
All third-party partners are contractually obligated to protect your data and may not use it for any purpose other than the services they provide to us.
5. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law. Specifically:
- Order records are kept for a minimum of 7 years to comply with tax and accounting regulations.
- Customer support correspondence is retained for 24 months after the last interaction.
- Analytics data is anonymized and retained for no more than 26 months.
Once the retention period expires, your data is securely deleted or anonymized.
6. Data Security Measures
We employ robust technical and organizational safeguards to protect your information from unauthorized access, alteration, disclosure, or destruction. These include:
- Encryption: All data transmitted between your browser and our servers is protected using SSL/TLS 256-bit encryption.
- Access Controls: Only authorized personnel with a legitimate need can access personal data, under strict confidentiality obligations.
- Secure Storage: Data is stored on servers with firewalls, intrusion detection systems, and regular security audits.
- Payment Security: We are PCI-DSS compliant, and payment details are tokenized by our payment gateway providers.
7. Your Privacy Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Right to Access: Request a copy of the personal information we hold about you.
- Right to Rectification: Correct any inaccurate or incomplete data.
- Right to Erasure: Ask us to delete your personal data, subject to legal obligations.
- Right to Restrict Processing: Limit how we use your data in certain circumstances.
- Right to Data Portability: Receive your data in a structured, machine-readable format.
- Right to Object: Object to processing based on legitimate interests or direct marketing.
- Right to Withdraw Consent: If processing is based on consent, you may revoke it at any time.
To exercise any of these rights, please email us at [email protected]. We will respond within 30 days of receiving your verified request.
8. International Data Transfers
As an international online store, your data may be transferred to and processed in countries outside your country of residence. When such transfers occur, we ensure they are protected by appropriate safeguards, such as Standard Contractual Clauses (SCCs) or adequacy decisions issued by the European Commission. By using our website, you acknowledge that your information may be processed in jurisdictions with different data protection laws, but we will always maintain the standards described in this policy.
9. Cookies and Tracking Technologies
Our website uses cookies to enhance your browsing experience. Specifically, we use:
- Essential Cookies: Required for core functionality, such as maintaining your shopping cart and remembering login preferences.
- Analytics Cookies: Help us understand how visitors interact with our pages, allowing us to improve layout and product offerings.
- Preference Cookies: Remember your language, currency, and display settings.
You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may limit your ability to complete purchases or access personalized features.
10. Children's Privacy
CoillWhisper does not knowingly collect personal information from children under the age of 16. Our products are intended for adult users. If you believe a child has provided us with personal data, please contact us immediately at [email protected], and we will take steps to delete such information promptly.
11. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or technological advancements. Any modifications will be posted on this page with a revised date. We encourage you to review this policy regularly to stay informed about how we protect your information. Significant changes will be communicated via email if we have your contact details on file.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out to our Privacy Officer at:
Email: [email protected]
We are committed to addressing your inquiries promptly and transparently. If you are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority.
Thank you for trusting CoillWhisper with your personal information. We are dedicated to providing you with a secure and seamless shopping experience for all your Mice, Keyboards, and Headphones needs.