Privacy Policy

PRIVACY POLICY
Effective Date: July 25, 2025

At POSSEFIT, we value your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you visit our website, purchase our products, or interact with our services. By using our services, you agree to the practices described in this policy. We comply with applicable data protection laws, including the General Data Protection Regulation (GDPR) for users in the European Economic Area (EEA), United Kingdom, and Switzerland, and the California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA) for users in California, USA, as well as other relevant U.S. state and federal privacy regulations.

1. Information We Collect

We collect information when you visit our website, make a purchase, or interact with us, including:

Personal Information: Name, email address, phone number, shipping and billing addresses, payment details (e.g., credit card information, processed through third-party payment providers), and date of birth (if required for age-restricted purchases).
Order Information: Products purchased, order history, transaction details, delivery preferences, and communication related to your orders.
Device & Usage Information: IP address, browser type, operating system, device identifiers, browsing activity (e.g., pages visited, time spent on site, products viewed), and referral sources.
Cookies & Tracking Technologies: Data collected through cookies, web beacons, and similar tools (see Section 6 for details) to enhance user experience and analyze website performance.
Voluntary Information: Feedback, survey responses, or other information you choose to provide when contacting customer support or engaging with our services.

2. How We Use Your Information

We use the collected information for the following legitimate purposes (consistent with GDPR and U.S. privacy laws):

To process, fulfill, and track your orders, including shipping, delivery updates, and post-purchase support.
To personalize your shopping experience (e.g., remembering preferences, recommending products based on browsing history, and customizing website content).
To communicate with you: sending order confirmations, shipping notifications, and responding to inquiries; providing updates about our products, services, and promotions (with your consent where required by law).
To prevent fraud, unauthorized access, and enhance security: monitoring transactions, detecting suspicious activity, and protecting our website and users.
To improve our services: analyzing user behavior, optimizing website performance, developing new products, and refining our marketing strategies.
To comply with legal obligations (e.g., tax, accounting, or regulatory requirements) and protect our legal rights.

3. Sharing Your Information

We do not sell or rent your personal information to third parties for marketing purposes without your explicit consent. We may share your information with the following parties as necessary:

Trusted Service Providers: Third-party companies that assist with core business operations, including payment processing (e.g., Stripe, PayPal), shipping and logistics (e.g., UPS, DHL), customer support, email delivery, and website analytics. These providers are contractually obligated to protect your data and only use it to perform services on our behalf.
Legal Authorities & Regulators: If required by law, court order, or regulatory request, or to protect our rights, property, or safety, or the rights, property, or safety of others.
Business Transfers: In the event of a merger, acquisition, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring or successor entity, subject to the terms of this Privacy Policy.
With Your Consent: For other purposes explicitly disclosed to you at the time of collection.

4. Data Security

We implement appropriate technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction, including:

Encryption of data in transit (via SSL/TLS) and at rest.
Secure payment processing (compliant with PCI DSS standards).
Access controls limiting data access to authorized personnel only.
Regular security audits and updates to our systems and processes.

While we strive to protect your data, no online transmission or storage system is 100% secure. We encourage you to take precautions (e.g., using strong passwords, not sharing account credentials) to safeguard your information.

5. Your Rights & Choices

Rights Under GDPR (For EEA, UK, Swiss Users)

You have the following rights under the GDPR, which you can exercise by contacting us (see Section 9):

Right to Access: Request a copy of the personal information we hold about you.
Right to Rectification: Request correction of inaccurate or incomplete personal information.
Right to Erasure ("Right to be Forgotten"): Request deletion of your personal information, where we have no legal obligation to retain it.
Right to Restriction of Processing: Request that we limit how we use your personal information (e.g., if you dispute its accuracy).
Right to Data Portability: Request your personal information in a structured, machine-readable format for transfer to another controller.
Right to Object: Object to processing of your personal information for marketing purposes or based on legitimate interests.
Right to Withdraw Consent: Withdraw any consent you previously provided (without affecting the lawfulness of processing based on consent before withdrawal).
Right to Lodge a Complaint: File a complaint with a data protection authority (e.g., ICO in the UK, CNIL in France) if you believe we have violated your privacy rights.

Rights Under U.S. Privacy Laws (For U.S. Users)

For users in California (CCPA/CPRA) and other U.S. states with applicable privacy laws, you have the following rights:

Right to Know: Request details about the personal information we collect, use, and disclose about you.
Right to Delete: Request deletion of your personal information (subject to exceptions, e.g., legal obligations).
Right to Opt-Out of Sale/Sharing: Opt out of the "sale" or "sharing" of your personal information (as defined by CCPA/CPRA) to third parties for marketing purposes.
Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights (e.g., charging higher prices or providing lower-quality services).
Right to Correct: Request correction of inaccurate personal information (under CPRA).

How to Exercise Your Rights

To exercise any of the above rights, or to opt out of marketing communications, please contact us at service@possefit.com with your full name, email address, and details of your request. We may ask for additional information to verify your identity before processing your request.

You can also opt out of marketing emails by clicking the "unsubscribe" link in our promotional emails. Disabling cookies through your browser settings (see Section 6) will limit certain personalized features but not affect order processing.

6. Cookies & Tracking Technologies

We use cookies and similar tracking technologies (e.g., web beacons, pixel tags) to enhance your browsing experience and improve our services. Cookies are small text files stored on your device:

Necessary Cookies: Required for basic website functionality (e.g., remembering your shopping cart, enabling secure checkout). These cannot be disabled without affecting core services.
Functional Cookies: Help remember your preferences (e.g., language, shipping country) for a better experience.
Analytics Cookies: Track website traffic and user behavior to analyze performance and optimize our services (e.g., Google Analytics).
Marketing Cookies: Used to deliver targeted advertisements and measure the effectiveness of marketing campaigns (e.g., social media pixels).

Cookie Consent (For EEA/UK/Swiss Users)

When you first visit our website, we will ask for your consent to use non-necessary cookies. You can manage or disable cookies at any time through your browser settings, though disabling certain cookies may limit website functionality.

Do Not Track (For U.S. Users)

Most browsers offer a "Do Not Track" (DNT) feature. Our website does not currently respond to DNT signals, but you can manage tracking through cookie settings or by opting out of third-party analytics tools (e.g., Google Analytics’ Opt-Out Browser Add-on).

7. Third-Party Links

Our website may contain links to third-party websites (e.g., social media platforms, payment providers, shipping partners). This Privacy Policy does not apply to third-party sites, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party websites before providing personal information.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. For order-related information, we retain data for the duration needed to process your order, resolve disputes, and comply with tax/accounting obligations (typically 7 years). Marketing-related data is retained until you opt out or request deletion.

After retention periods expire, we securely delete or anonymize your data to prevent identification.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in laws, regulations, or our business practices. Any updates will be posted on this page with a revised "Effective Date." We encourage you to review this policy periodically.

If changes are material (e.g., significant updates to how we collect or share your data), we will notify you via email or a prominent notice on our website before the changes take effect, as required by law. Your continued use of our services after the revised policy is posted constitutes your acceptance of the changes.

10. Contact Us

For questions, concerns, or requests related to this Privacy Policy or your personal information, please contact us at:

Email: service@possefit.com

We will respond to your inquiry within a reasonable timeframe (typically 1-3 business days for general questions, and up to 45 days for data subject rights requests, as required by GDPR and CCPA/CPRA).

Thank you for trusting POSSEFIT with your personal information!