Privacy Policy

1. Data controller

The data controller responsible for your personal data in connection with inchicme.com is InChicMe.

Privacy and data-protection enquiries: support@inchicme.com

We do not currently appoint a Data Protection Officer; for all GDPR requests, contact the email above.

2. Personal data we collect

Identity & contact: first name, last name, email address, telephone number (if provided), delivery and billing addresses.

Account data: login credentials (password stored in hashed form), account preferences, marketing opt-in status.

Order & transaction data: products ordered, prices, currency, payment status, order history, shipping and tracking information.

Payment data: we do not store full payment card numbers. Payments are processed by PayPal (or other providers shown at checkout). PayPal processes your payment data under its own privacy policy.

Communications: emails and messages you send to customer support, including attachments (e.g. photos for returns).

Technical data: IP address, browser type, device information, session identifiers, and cookies (see Section 8).

Marketing data: if you subscribe to our newsletter or opt in at registration, we store your email and consent record.

3. How we use your data

To register and manage your customer account.

To process, fulfil, ship, and invoice your orders.

To communicate about your order (confirmations, dispatch, delivery, returns).

To provide customer support and handle disputes or chargebacks.

To comply with legal obligations (tax, accounting, consumer law, fraud prevention).

To improve our website, security, and product offering (aggregated/anonymous analytics where used).

To send marketing communications only where you have given consent; you may withdraw consent at any time.

We do not sell your personal data. We do not use automated decision-making that produces legal effects concerning you.

4. Legal bases for processing (GDPR)

Performance of a contract (Art. 6(1)(b)): account, checkout, delivery, and post-sale support.

Legal obligation (Art. 6(1)(c)): tax records, responding to lawful authority requests.

Legitimate interests (Art. 6(1)(f)): fraud prevention, site security, enforcing our terms, and limited service improvement — balanced against your rights.

Consent (Art. 6(1)(a)): optional marketing emails and non-essential cookies where required by law.

5. Recipients and processors

We share data only as necessary to operate the store:

• PayPal — payment processing.

• Carriers and logistics partners — delivery and tracking.

• Email and hosting providers — transactional and support email, website hosting.

• Cloud infrastructure — secure storage of order and account data.

Processors act under contract and may only use data on our instructions. A list of categories of recipients is available on request at support@inchicme.com.

6. International transfers

Your data may be processed in the European Economic Area (EEA), the United Kingdom, and other countries where our partners operate (including China for fulfilment coordination).

Where personal data is transferred outside the EEA/UK without an adequacy decision, we implement appropriate safeguards such as Standard Contractual Clauses approved by the European Commission, supplemented by technical and organisational measures where required.

7. Retention

Account data: for the life of your account and up to 24 months after closure unless longer retention is required.

Order and invoice data: typically up to 7 years for tax and accounting compliance.

Support correspondence: up to 3 years after the case is closed.

Marketing consent records: for as long as you remain subscribed plus 3 years to demonstrate consent.

When data is no longer needed, we delete or anonymise it securely.

8. Cookies and similar technologies

Essential cookies: required for shopping cart, login session, region/currency selection, and security. These cannot be disabled if you wish to use the shop.

Non-essential cookies: where used (e.g. analytics), we request your consent via our cookie banner where required by law.

You can manage cookies in your browser settings. Blocking essential cookies may prevent checkout or account access.

For more detail on cookie types and retention, contact support@inchicme.com.

9. Your rights

If GDPR/UK GDPR applies, you have the right to: access your data; rectify inaccurate data; erase data (subject to legal exceptions); restrict processing; data portability (where processing is automated and based on contract/consent); object to processing based on legitimate interests or for direct marketing; and withdraw consent at any time (without affecting prior lawful processing).

To exercise your rights, email support@inchicme.com. We will respond within one month (extendable by two months for complex requests, with notice).

You may lodge a complaint with your local supervisory authority. EU users can find authorities at edpb.europa.eu.

10. Security

We use HTTPS, access controls, and industry-standard practices to protect personal data. No method of transmission over the Internet is 100% secure; we cannot guarantee absolute security.

11. Children

Our shop is not directed at children under 16. We do not knowingly collect data from children. Contact us if you believe we have collected a child's data.

12. Changes

We may update this policy. The "Last updated" date at the top will change. Material changes may be notified by email or site notice where appropriate.