Privacy Policy

Last Updated: [Insert Date]

At Costaa Clothing Shop (“we”, “us”, or “our”), we’re committed to protecting your privacy as passionately as we design our adventure-ready apparel. This Privacy Policy explains how we collect, use, and safeguard your personal information when you visit our website www.costaaclothing.com or make a purchase from us.

1. Information We Collect

To provide our global customers with seamless service, we collect:

• Personal Identification: Name, email address, shipping/billing address, phone number
• Payment Information: Card details (processed securely via PCI-compliant services), PayPal email (never stored on our servers)
• Transaction Data: Purchase history, order details, product preferences
• Technical Data: IP address, browser type, device information, cookies (see Section 6)
• Communication Records: Customer service inquiries, feedback

2. How We Use Your Information

Your data fuels our mission to deliver adventure gear with security and precision:

• Process and fulfill your orders with 256-bit SSL encryption
• Provide customer support for your adventure needs
• Improve our products and website functionality
• Prevent fraudulent transactions through real-time monitoring
• Send order confirmations and shipping notifications (no marketing emails unless you opt-in)
• Comply with UK and international legal obligations

3. Data Sharing & Disclosure

We treat your data like essential expedition gear – keeping it secure and only sharing when necessary:

• Service Providers: Trusted partners for payment processing (Visa/MasterCard/PayPal), shipping carriers, and IT security
• Legal Compliance: When required by UK law or to protect our rights
• Business Transfers: In case of merger or acquisition, with confidentiality protections

We never sell your personal information to third parties.

4. International Data Transfers

As we ship globally (excluding Asia and certain remote areas), your data may be transferred outside the UK/EEA. We ensure all transfers comply with GDPR requirements through:

• Standard Contractual Clauses
• Privacy Shield certification (for US providers)
• Other approved transfer mechanisms

5. Data Security

We protect your information with the same vigilance as our payment systems:

• 256-bit SSL encryption on all transactions
• PCI-DSS compliant payment processing
• Regular security audits and vulnerability testing
• Limited employee access to sensitive data
• Secure data storage with reputable UK/EU cloud providers

While we implement robust measures, no system is 100% secure. We encourage customers to use strong passwords and monitor account activity.

6. Cookies & Tracking Technologies

Our website uses essential and functional cookies to enhance your shopping experience:

• Strictly Necessary: Session cookies for cart functionality and checkout
• Performance: Google Analytics (anonymized data) to improve our site
• Functional: Preference cookies for currency/language settings

We don’t use intrusive tracking or targeted advertising cookies. You can manage preferences via your browser settings.

7. Your Rights (GDPR & UK Data Protection)

As our valued customer, you have the right to:

• Access your personal data we hold
• Request correction of inaccurate information
• Request deletion of your data (where no legal requirement exists)
• Object to or restrict certain processing
• Receive your data in a portable format
• Withdraw consent (where processing is consent-based)

To exercise these rights, contact us at [email protected]. We respond within 30 days.

8. Data Retention

We retain your information only as long as necessary:

• Order records: 6 years for tax/compliance purposes
• Customer accounts: Until deletion request or 3 years of inactivity
• Marketing data (if opted-in): Until unsubscribe

9. Children’s Privacy

Our adventure gear is designed for adults. We don’t knowingly collect data from children under 16. If we become aware of such collection, we’ll take steps to delete the information.

10. Policy Updates

We may update this policy to reflect changes in our practices or legal requirements. Significant changes will be notified via our website or email.