Privacy policy
Who is responsible
The controller of your personal data is [Company Name], [Registered Address], support@corduroycrow.com.
What we collect and why
| When | What | Why (legal basis) |
|---|---|---|
| You place an order | Name, delivery and billing address, email, phone (optional), order details | To fulfil the contract (Art. 6(1)(b) GDPR) and to keep accounting records (Art. 6(1)(c)) |
| You create an account | Name, email, password (stored encrypted), order history | To provide the account you asked for (Art. 6(1)(b)) |
| You write to us | Name, email, your message, order number | To answer you (Art. 6(1)(b) or our legitimate interest, Art. 6(1)(f)) |
| You join the Club | Email address and the date you joined | Your consent (Art. 6(1)(a)), which you can withdraw at any time |
| You browse the website | Pages viewed, how you reached the shop, device and browser type and approximate location, collected with Google Analytics | To understand and improve the shop (Art. 6(1)(f)); you can opt out at any time under Cookie settings |
| You browse the website | Technical data such as IP address and browser, in server logs | To keep the website secure and working (Art. 6(1)(f)) |
We do not use your data for automated decision-making or profiling, and we never sell it.
Who we share it with
- Our print and fulfilment partners, who print and ship your order: your name, delivery address and, where the carrier needs it, phone number and email.
- Our payment provider, who processes your card payment. We never see or store your full card details.
- Our hosting and email providers, who run this website and our mailboxes on servers in the EU.
- Carriers, who deliver your parcel.
- Google, which provides our website analytics.
Where a partner is based outside the EU, we only share data under safeguards approved by the European Commission, such as standard contractual clauses.
How long we keep it
Order and invoice data are kept for as long as tax law requires (usually up to 10 years). Account data are kept until you close your account. Messages are kept for up to 2 years. Club emails are kept until you unsubscribe.
Your rights
You have the right to access, correct or delete your data, to restrict or object to its use, to data portability, and to withdraw any consent at any time. Write to support@corduroycrow.com. You also have the right to complain to a data protection supervisory authority, in particular in the EU country where you live.
Cookies
This website uses the cookies it needs to work, such as keeping your bag, and Google Analytics cookies, which you can switch off under Cookie settings. See our cookie policy.