At Cotton Commando, we respect your privacy and are committed to protecting your personal information. This GDPR Policy explains how we collect, use, store, and protect your personal data when you visit our website, purchase our products, or interact with our services.
This policy is designed to comply with the requirements of the General Data Protection Regulation (GDPR) for customers located in the European Economic Area (EEA) and other applicable privacy regulations.
1. Information We Collect
We may collect the following types of personal information when you use our website:
Name and contact details.
Billing and shipping information.
Email address and phone number.
Account details when you create an account.
Order history and purchase information.
Payment-related information processed securely through third-party payment providers.
Website usage information, including cookies, device information, and browsing activity.
2. How We Use Your Information
We use your personal information to:
Process and deliver your orders.
Provide customer support and respond to inquiries.
Manage your account and order history.
Improve our products, website, and customer experience.
Send important updates related to your orders.
Provide marketing communications where you have given consent.
Prevent fraud, misuse, and unauthorized transactions.
Meet legal and regulatory obligations.
3. Legal Basis for Processing Data
Under GDPR, we process your personal data based on the following legal grounds:
Contractual necessity: To process orders and provide requested services.
Consent: When you subscribe to newsletters or marketing communications.
Legitimate interests: To improve our services, protect our business, and enhance customer experience.
Legal obligations: To comply with applicable laws and regulations.
4. Cookies and Tracking Technologies
Cotton Commando uses cookies and similar technologies to improve website functionality, analyze performance, and provide a better shopping experience.
Cookies may be used for:
Website functionality.
Shopping cart management.
Analytics and performance monitoring.
Personalized content and marketing.
You can manage or disable cookies through your browser settings. Some website features may not function properly if cookies are disabled.
5. Sharing Your Information
We do not sell or rent your personal information.
We may share your information with trusted third parties only when necessary, including:
Payment processors.
Shipping and delivery providers.
Website hosting and technology providers.
Analytics and marketing service providers.
Legal authorities where required by law.
All third-party providers are expected to handle your information securely and responsibly.
6. Data Security
We take appropriate technical and organizational measures to protect your personal information from:
Unauthorized access.
Loss or misuse.
Alteration or disclosure.
Security breaches.
While we take reasonable steps to protect your data, no online transmission method can be guaranteed to be completely secure.
7. Your GDPR Rights
Under GDPR, you have the right to:
Right of Access
Request a copy of the personal information we hold about you.
Right to Rectification
Request correction of inaccurate or incomplete information.
Right to Erasure
Request deletion of your personal data where legally permitted.
Right to Restriction
Request limits on how we process your information.
Right to Data Portability
Request your personal data in a commonly used format.
Right to Object
Object to certain types of data processing, including direct marketing.
Right to Withdraw Consent
Withdraw consent at any time where processing is based on consent.
8. Data Retention
We retain personal information only for as long as necessary to fulfill the purposes described in this policy, including legal, accounting, and business requirements.
When information is no longer required, it will be securely deleted or anonymized.
9. Children's Privacy
Cotton Commando does not knowingly collect personal information from children without appropriate parental or guardian consent. If you believe a child has provided personal information, please contact us so we can take appropriate action.
10. International Data Transfers
Your information may be processed or stored in countries outside your country of residence. Where required, we take appropriate safeguards to ensure your information receives adequate protection.
11. Changes to This GDPR Policy
We may update this GDPR Policy from time to time to reflect changes in our business practices, legal requirements, or privacy standards. Updated versions will be posted on this page.
12. Contact Us
If you have questions about this GDPR Policy, wish to exercise your privacy rights, or have concerns about how your information is handled, please contact our customer support team.
We are committed to protecting your privacy and providing a secure, transparent shopping experience.
