Privacy policy

At CrepeLoom, we are committed to safeguarding the privacy and security of every visitor to our online store. This Privacy Policy explains how we collect, use, store, and protect your personal information when you browse or make a purchase from our website, which offers blow dryers, cleansing brushes, and curling irons. We adhere to internationally recognized privacy standards, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), to ensure your data is handled with the highest level of care and transparency.

1. Information We Collect

We collect only the information necessary to process your orders, improve our services, and communicate with you effectively. The types of data we may collect include:

  • Order Information: When you place an order, we collect your name, shipping address, billing address, email address, and payment details (such as credit card numbers or other payment method data). Payment information is processed by our secure third-party payment providers and is never stored on our servers.
  • Device and Usage Data: We automatically collect certain technical information when you visit our site, including your IP address, browser type, operating system, referring URLs, pages viewed, and the dates and times of your visits. This data helps us optimize site performance and enhance your browsing experience.
  • Cookies and Similar Technologies: We use cookies, pixels, and similar tracking technologies to remember your preferences, understand how you interact with our website, and deliver relevant product recommendations. You can manage or disable cookies through your browser settings at any time.
  • Communications: If you contact us via email at [email protected], we retain the content of your messages and your email address to respond to your inquiries and provide ongoing support.

2. How We Use Your Information

We use the information we collect for the following legitimate business purposes:

  • Order Fulfillment: To process, ship, and deliver your purchased products, and to send you order confirmations, shipping updates, and delivery notifications.
  • Customer Support: To respond to your questions, resolve issues, and provide assistance regarding our blow dryers, cleansing brushes, curling irons, or any other product inquiries.
  • Improvement of Services: To analyze usage trends, monitor the effectiveness of our website, and develop new features or products that better meet your needs.
  • Marketing Communications: With your explicit consent, we may send you promotional emails about new arrivals, special offers, or product updates. You can opt out of these communications at any time by following the unsubscribe link in the email or contacting us at [email protected].
  • Legal Compliance: To comply with applicable laws, regulations, legal processes, or enforceable governmental requests, and to protect our rights, privacy, safety, or property, and those of our users.

3. Legal Basis for Processing (GDPR)

For users within the European Economic Area (EEA), we process your personal data based on the following legal grounds:

  • Performance of a Contract: Processing is necessary to fulfill our contractual obligations to you, such as delivering products you have ordered.
  • Legitimate Interests: We rely on our legitimate interests to improve our website, prevent fraud, and ensure network security, provided your rights and interests do not override these interests.
  • Consent: Where we rely on your consent for marketing activities or optional data collection, you have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
  • Legal Obligation: Processing is necessary to comply with our legal obligations, such as tax and accounting requirements.

4. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. We only share your data with trusted service providers who assist us in operating our business, under strict contractual obligations to protect your information. Categories of recipients include:

  • Payment Processors: To securely handle your payment transactions. These providers have their own privacy policies and are compliant with PCI DSS standards.
  • Shipping Carriers: To deliver your orders to your specified address. They receive only the necessary shipping details (name, address, and contact information).
  • IT and Analytics Providers: To host our website, manage our databases, and analyze user behavior to improve our services. These providers are bound by confidentiality agreements.
  • Legal Authorities: If required by law or in response to valid legal requests, we may disclose your information to government agencies or law enforcement, but only to the extent necessary to comply with such obligations.

5. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

  • Order Records: We keep order history and related transactional data for a period of 5 years to comply with tax and accounting regulations.
  • Communications: Email correspondence with our support team is retained for up to 2 years to ensure continuity of service and to address any future inquiries.
  • Analytics Data: Aggregated and anonymized usage data may be retained indefinitely for statistical purposes, but it no longer identifies you personally.

Once the retention period expires, your personal data is securely deleted or anonymized.

6. Data Security

We implement robust technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption: All data transmitted between your browser and our website is encrypted using Secure Socket Layer (SSL) technology.
  • Access Controls: Access to personal data is restricted to authorized personnel only, who are bound by confidentiality obligations.
  • Secure Storage: Your data is stored on secure servers with firewalls and intrusion detection systems.
  • Regular Audits: We conduct periodic security reviews to ensure our safeguards remain effective and up to date.

While no method of transmission over the internet is 100% secure, we strive to protect your data and encourage you to take precautions as well, such as not sharing your passwords and ensuring your device has up-to-date security software.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

  • Access: You have the right to request a copy of the personal data we hold about you.
  • Rectification: You can ask us to correct any inaccurate or incomplete information.
  • Erasure: You may request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or when you withdraw your consent.
  • Restriction of Processing: You can ask us to limit how we use your data in certain circumstances, such as when you contest its accuracy.
  • Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller.
  • Objection: You can object to the processing of your data for direct marketing purposes or where we rely on legitimate interests as the legal basis.
  • Withdrawal of Consent: Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days, as required by applicable law. We may need to verify your identity before processing your request to protect your privacy.

8. International Data Transfers

As a global online store, we may transfer your personal information to countries outside your country of residence, including to our servers or those of our service providers located in other jurisdictions. Where such transfers occur, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, or other equivalent mechanisms, to protect your data and maintain its security.

9. Cookies Policy

Our website uses cookies to enhance your shopping experience. Cookies are small text files stored on your device