Privacy policy

At GwilLilt, we are committed to protecting your privacy and ensuring that your personal information is handled responsibly and in accordance with applicable international privacy laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). This Privacy Policy explains what information we collect, how we use it, and the choices you have regarding your data.

1. Information We Collect

We collect only the information necessary to process your orders, provide customer support, and improve your shopping experience. The types of data we may collect include:

  • Contact details: such as your name, shipping address, billing address, and email address.
  • Order information: including the products you purchase (Shirts, Pants & Trousers, Shorts), order history, and transaction details.
  • Payment data: payment method, billing information, and transaction identifiers. We do not store full credit card numbers; all payment processing is handled by secure third-party providers.
  • Technical data: such as IP address, browser type, device information, and cookies when you interact with our website.
  • Communication data: if you contact us via email at [email protected], we may retain a record of that correspondence.

2. How We Use Your Information

We use the information we collect for the following legitimate business purposes:

  • To process and fulfill your orders, including shipping and delivery.
  • To provide customer service and respond to your inquiries.
  • To send order confirmations, shipping notifications, and important updates regarding your purchases.
  • To improve our website, product offerings, and overall user experience.
  • To detect, prevent, and address fraud, security issues, or technical problems.
  • To comply with legal obligations, such as tax and accounting requirements.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Contract performance: processing is necessary to fulfill your order and deliver the products you purchased.
  • Legitimate interests: improving our services, ensuring website security, and preventing fraud.
  • Legal compliance: where we are required to retain or disclose information under applicable laws.
  • Consent: where you have explicitly agreed to receive non-essential communications, you may withdraw your consent at any time.

4. Data Storage and Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law. Specifically:

  • Order records are retained for a minimum of 5 years to comply with tax and accounting regulations.
  • Customer service correspondence is retained for 2 years after the last interaction.
  • Technical logs and analytics data are retained for up to 26 months.

Once the retention period expires, your data is securely deleted or anonymized.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit using SSL/TLS protocols.
  • Secure, access-controlled storage of all personal data.
  • Regular security audits and vulnerability assessments.
  • Restricted access to personal data to only those employees who require it to perform their duties.

While no method of transmission over the internet is 100% secure, we strive to protect your data and regularly review our security practices.

6. Sharing of Information

We may share your personal information with trusted third parties only to the extent necessary to operate our business, including:

  • Payment processors: to securely handle transactions.
  • Shipping carriers: to deliver your orders to your provided address.
  • IT service providers: who assist with website hosting, data storage, and analytics.
  • Legal authorities: if required by law or to protect our legal rights.

All third-party service providers are contractually obligated to protect your data and may not use it for any purpose other than the specific services they provide to us.

7. International Data Transfers

As an international online retailer, your personal information may be transferred to and processed in countries outside your country of residence. Where such transfers occur, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses or other recognized transfer mechanisms, to protect your data in accordance with applicable privacy laws.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Access: request a copy of the personal information we hold about you.
  • Correction: request that we correct any inaccurate or incomplete data.
  • Deletion: request that we delete your personal information, subject to legal retention obligations.
  • Restriction: request that we limit how we process your data in certain circumstances.
  • Data portability: request a machine-readable copy of your data in a structured format.
  • Objection: object to the processing of your data based on legitimate interests.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days, as required by applicable law.

9. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience, analyze site traffic, and understand how visitors interact with our pages. Cookies are small text files stored on your device. You can control or disable cookies through your browser settings; however, please note that some features of the website may not function properly if cookies are disabled.

We use the following types of cookies:

  • Essential cookies: required for the website to function, such as maintaining your shopping cart.
  • Analytics cookies: help us understand how visitors use our site so we can improve our services.
  • Preference cookies: remember your choices, such as language or currency preferences.

10. Children's Privacy

Our website and services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe that a child has provided us with personal data, please contact us at [email protected], and we will take steps to delete such information promptly.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Any updates will be posted on this page, and the revised version will become effective immediately upon posting. We encourage you to review this page periodically to stay informed about how we protect your information.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please do not hesitate to reach out to us:

Email: [email protected]

We are committed to addressing any privacy concerns you may have and will respond to all legitimate inquiries in a timely manner.