Privacy Policy
1. What personal data we collect
We collect only necessary information:
- Name, email, delivery address, phone number, order details when you place an order
- Payment information (processed by payment providers; we do not store full card details)
- Website log data: IP address, browser information, cookies
2. Purpose & legal basis for processing
- Order fulfilment (GDPR Art.6(1)(b)): Process your clothing orders, arrange delivery, handle customer service.
- Legal obligation (GDPR Art.6(1)(c)): Keep accounting and tax records as required by law.
- Legitimate interest (GDPR Art.6(1)(f)): Website security, fraud prevention, respond to your inquiries.
- Consent (GDPR Art.6(1)(a)): Send marketing emails, use non‑essential cookies. You may withdraw consent anytime.
3. Who we share your data with
We only share data with trusted third parties required to complete your order: payment processors, logistics/shipping providers, website hosting services. We will not sell your personal data to any third parties.
4. Data retention
We keep your personal data only as long as needed:
- Order data: retain for accounting and dispute period (normally 7 years after transaction)
- Marketing contact data: keep until you unsubscribe
- Website log/cookie data: stored for limited period
5. Your GDPR rights
If you are resident in the EEA, you have the right to:
- Access a copy of your personal data
- Rectify inaccurate information
- Request deletion (“right to be forgotten”)
- Restrict processing of your data
- Data portability
- Object to processing for legitimate interest / marketing
- Withdraw consent at any time
- Lodge a complaint with your local data protection authority
To exercise your rights, email us at [email protected]. We will respond within 1 month.
6. Data security
We implement reasonable technical and organisational safeguards to protect your personal data against unauthorised access, loss or misuse.
7. International data transfer
Your data may be transferred outside the EU/EEA for order processing. We ensure transfers comply with GDPR requirements.
8. Changes to this policy
We may update this privacy policy. Changes will be published on https://siongyoo.com.