Sweatgearhold respects the privacy of individuals who visit and use our website. This Privacy Policy explains how personal information is collected, used, stored and disclosed when you visit www.sweatgearhold.com, place an order or contact us.
1. Data Controller
For personal information collected directly through this website, the data controller is:
Sweatgearhold
Email: fitness@sweatgearhold.com
Company:
Address:
Telephone:
2. Personal Information We Collect
Depending on how you use our website, we may collect information such as:
- Name
- Email address
- Telephone number
- Billing and delivery address
- Order details
- Transaction details
- Customer service communications
- Information submitted through website forms
- Website usage information, including IP address and browser-related information where applicable
We collect information that is reasonably required to process orders, provide customer service, operate the website, maintain business records and comply with applicable legal obligations.
3. How We Use Personal Information
Personal information may be used to:
- Process and administer orders
- Communicate with customers regarding purchases and enquiries
- Provide customer service
- Arrange order fulfilment and delivery
- Process refunds where applicable
- Maintain business and transaction records
- Operate and improve the website
- Detect and address unauthorised or unlawful activity
- Comply with applicable legal and regulatory obligations
We do not use personal information for purposes that are incompatible with the purposes for which it was collected unless permitted or required by applicable law.
4. Payment Processing by Stripe
Payments made through our website are processed by Stripe.
Stripe may process information required to facilitate a transaction, which can include name, email address, billing or delivery address, payment method information, transaction amount, transaction date, payment status and relevant order information.
Stripe may act as a data processor or data controller depending on the particular processing activity and applicable arrangements. Stripe processes personal data in accordance with its own privacy practices and applicable legal requirements.
Stripe’s current Privacy Policy is available through its Privacy Centre.
5. Legal Basis for Processing
Where the GDPR applies, personal information may be processed on one or more of the following legal bases:
- Processing necessary to fulfil a contract with you
- Processing necessary to comply with a legal obligation
- Processing necessary for legitimate interests, where those interests are not overridden by your rights
- Consent, where consent is required by law
Where processing is based on consent, consent may be withdrawn subject to applicable legal or contractual requirements.
6. Cookies and Website Information
Our website may use cookies and similar technologies for functions such as maintaining website functionality, remembering preferences, understanding website usage and supporting relevant website operations.
Where consent is required for non-essential cookies, such cookies are used in accordance with the applicable consent requirements.
Further information is provided in our Cookie Policy.
7. Disclosure of Personal Information
Personal information may be disclosed where reasonably necessary to operate our business, process orders, provide requested services, process payments, administer the website, maintain records or comply with legal obligations.
Where service providers process personal information on our behalf, their processing is limited to the purposes for which they have been engaged and applicable contractual or legal requirements.
We do not sell personal information to third parties.
8. International Data Processing
Personal information may be processed or stored in countries outside the country in which you are located where required for website operation, payment processing, business administration or other purposes described in this Privacy Policy.
Where the GDPR applies and personal information is transferred outside the European Economic Area, appropriate safeguards required by applicable data protection law will be applied where required.
9. Data Retention
We retain personal information only for as long as it is reasonably required for the purposes for which it was collected, or for the period required by applicable law.
Our general retention periods are:
Order and transaction records: up to 7 years from the relevant transaction or the end of the applicable business relationship, where required for accounting, tax, contractual, legal or record-keeping purposes.
Customer service correspondence: generally up to 24 months after the matter has been resolved, unless a longer period is required to address an ongoing matter or legal obligation.
Account information: for as long as the customer account remains active and, following closure, for a period reasonably required for record-keeping and legal purposes.
Marketing preferences: until consent is withdrawn or the information is no longer required for the relevant purpose.
Website and technical records: generally for a period appropriate to the relevant operational, security and legal purpose.
Where personal information is no longer required and there is no legal reason to retain it, it will be deleted, erased or anonymised as appropriate.
This approach reflects the Canadian requirement to retain personal information only as long as necessary for the identified purposes and the GDPR storage limitation principle.
10. Your Privacy Rights
Where the GDPR applies, you may have the right to:
- Request access to your personal information
- Request correction of inaccurate or incomplete information
- Request erasure of personal information where applicable
- Request restriction of processing in applicable circumstances
- Object to certain processing
- Request data portability where applicable
- Withdraw consent where processing is based on consent
These rights are subject to applicable legal conditions and exceptions. The European Commission confirms that GDPR rights include access, rectification, erasure, restriction, portability and objection, and that requests should generally be answered within one month.
Under applicable Canadian privacy legislation, individuals may also have rights to access and request correction of personal information held about them.
11. Privacy Requests
To make a privacy-related request, please contact:
Email: fitness@sweatgearhold.com
We may request sufficient information to verify the identity of the person making a request before providing access to personal information or making changes to an account or record.
Requests will be handled within the time periods required by applicable law.
12. Protection of Personal Information
We maintain administrative and organisational measures appropriate to the nature of the personal information we handle and the purposes for which it is processed.
Access to personal information is limited to circumstances where it is required for legitimate business, contractual or legal purposes.
13. Changes to This Privacy Policy
This Privacy Policy may be updated when necessary to reflect changes to our business practices, applicable legal requirements or the way personal information is handled.
The updated version will be published on this page with the relevant revision date.
14. Contact Information
Sweatgearhold
Email: fitness@sweatgearhold.com
Company:
Address:
Telephone:
Website: www.sweatgearhold.com