Personal data processing policy
1. Information Collection
In order to fulfill your order, "Wow Bag", represented by Gulchenko Ekaterina ("Seller" or "We"), collects certain information from you, including your name, email address, postal address, and details of the product you are ordering. Additionally, you may choose to provide us with additional personal information when contacting us directly.
2. Purpose and Use of Information
We rely on various legal bases to collect, use, and share your information, which include:
2.1. Service Provision: We use your information to provide the services you have requested, such as fulfilling your order, resolving disputes, and offering customer support.
2.2. Consent: If you have provided your affirmative consent, such as subscribing to our mailing list, we may use your information accordingly. You have the right to revoke your consent at any time.
2.3. Legal Obligations: We may use and disclose your information as necessary to comply with a legal obligation, court order, or in connection with a legal claim, such as retaining information about your purchases as required by tax law.
2.4. Legitimate Interests: We may use your information for our legitimate interests, provided they are not overridden by your rights or interests.
3. Information Sharing and Disclosure
We understand the importance of your personal information and limit its disclosure as follows:
3.1. Service Providers: We engage trusted third-party service providers, such as delivery companies, to perform specific functions and services on our behalf. We may share your personal information with these parties to the extent necessary for them to provide the requested services.
3.2. Business Transfers: In the event of a business transaction, such as a merger, acquisition, or sale of assets, your information may be disclosed as part of the transaction to the extent permitted by law.
3.3. Compliance with Laws: We may collect, use, retain, and disclose your information in good faith if we have a reasonable belief that it is necessary to: (a) respond to legal processes or government requests; (b) enforce our agreements, terms, and policies; (c) prevent, investigate, or address fraud, illegal activities, security, or technical issues; or (d) protect the rights, property, and safety of our customers or others.
4. Data Retention
5. International Data Transfers
We may store and process your information through third-party hosting services in the United States and other jurisdictions. Therefore, your personal information may be transferred to a jurisdiction with different data protection laws and government surveillance practices than your own. If we transfer information about you outside the European Union (EU), we rely on Privacy Shield as the legal basis for the transfer, as Google Cloud is Privacy Shield certified.
6. Your Rights
If you reside in certain territories, including the EU, you have certain rights regarding your personal information. While some rights apply generally, others are limited in specific cases. If we transfer your information outside the EU, we rely on Privacy Shield as the legal basis for the transfer, as Google Cloud is Privacy Shield certified. We outline these rights below:
6.1. Access: You have the right to access and receive a copy of the personal information we hold about you by contacting us using the contact information provided below.
6.2. Change, Restrict, Delete: You may also have the right to change, restrict, or delete your personal information. Unless exceptional circumstances apply (such as legal obligations requiring data retention), we will generally delete your personal information upon request.
6.3. Object: You have the right to object to (i) the processing of your information based on our legitimate interests and (ii) receiving marketing messages from us after providing your express consent. In such cases, we will delete your personal information unless we have compelling and legitimate grounds to continue using the information or if it is needed for legal reasons.
6.4. Complaints: If you reside in the EU and wish to raise a concern about our use of your information (without prejudice to any other rights you may have), you have the right to do so with your local data protection authority.
7. Contact Information