Privacy policy

At GealWhisper, your privacy is a cornerstone of how we operate. This policy explains in plain language what information we collect when you visit our online store (which sells Mice, Keyboards, and Headphones), why we collect it, how we use it, and the rights you have over your personal data. We process all personal information in accordance with applicable international privacy laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), where they apply to you.

1. Information We Collect

We limit our data collection to what is necessary for the smooth operation of our store and the fulfillment of your orders. We do not operate a user account system, and we do not require you to register or log in to make a purchase. The categories of information we may collect are:

  • Order and Transaction Data: When you place an order, we collect your name, shipping address, billing address, email address, and payment confirmation details. We do not store full credit card numbers; payment processing is handled by our secure third-party payment providers.
  • Contact Data: If you reach out to our support team via email at [email protected], we collect your email address and the contents of your message, including any information you voluntarily provide.
  • Technical Usage Data: When you browse our site, we may automatically collect certain technical information such as your IP address, browser type, operating system, device identifiers, pages viewed, and the dates/times of your visits. This data is collected via cookies and similar technologies (see Section 5).

2. How We Use Your Information

We use the information we collect solely for the following legitimate business purposes:

  • To process and deliver your orders for Mice, Keyboards, and Headphones, including sending you shipping notifications and delivery updates.
  • To respond to your customer service inquiries and provide support via email.
  • To process refunds, returns, or exchanges in accordance with our return policy.
  • To prevent fraud, unauthorized transactions, and other prohibited activities.
  • To analyze aggregate, non-identifiable usage trends to improve our website layout, product offerings, and overall shopping experience.
  • To comply with legal obligations, such as tax, accounting, or record-keeping requirements.

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. We do not use your data for automated decision-making or profiling that produces legal effects.

3. Legal Bases for Processing (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, we rely on the following legal bases to process your personal data:

  • Performance of a Contract: Processing your order data is necessary to fulfill the purchase contract we have with you.
  • Legitimate Interests: We use technical usage data and fraud prevention measures based on our legitimate interest in operating a secure and efficient online store.
  • Consent: Where we use non-essential cookies or similar technologies, we will ask for your consent before placing them on your device.
  • Legal Obligation: We may process data where required by applicable law or regulatory authorities.

4. Data Storage and Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law. Specifically:

  • Order records (including name, address, and purchase details) are retained for a period of 5 years to comply with tax and accounting regulations.
  • Customer support emails are retained for 24 months after the last contact, after which they are securely deleted.
  • Technical usage logs are retained in an aggregated, anonymized form for 12 months.

All data is stored on secure servers located within the European Union and the United States. We take appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit (TLS), hashed payment data, and restricted access controls for our personnel.

5. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience and to understand how our store is used. We use the following categories of cookies:

  • Strictly Necessary Cookies: These are required for the website to function correctly, such as remembering items in your cart and maintaining security during checkout.
  • Performance and Analytics Cookies: These help us understand how visitors interact with our site (e.g., which pages are most popular) so we can improve our layout and product descriptions. We use privacy-friendly analytics tools that do not track you across other websites.
  • Functionality Cookies: These remember your preferences, such as currency or language selection, to make your visit more convenient.

We do not use advertising or targeting cookies on our site. You can control or delete cookies through your browser settings at any time. However, if you disable strictly necessary cookies, parts of the website may not function properly.

6. Sharing and Disclosure of Data

We do not share your personal information with third parties except in the following limited circumstances:

  • Service Providers: We engage trusted third-party companies to perform functions on our behalf, such as payment processing, order fulfillment, shipping carriers, and email delivery. These providers have access only to the personal information needed to perform their functions and are contractually obligated to keep it confidential and secure.
  • Legal Compliance: We may disclose your information if required to do so by law, regulation, or legal process, or if such disclosure is reasonably necessary to protect our rights, the safety of our users, or to enforce our terms of service.
  • Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction. We will notify you via email at least 30 days before any such transfer takes effect.

We never share your data with third parties for their independent marketing or advertising purposes.

7. International Data Transfers

As an international online store, we may transfer your personal information to countries outside your country of residence. When we transfer data from the EEA or the UK to other countries, we ensure that appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses or an adequacy decision by the relevant authority. By placing an order with us, you acknowledge that your data may be processed in countries where data protection laws may differ from those in your jurisdiction.

8. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

  • Right of Access: You can request a copy of the personal data we hold about you.
  • Right to Rectification: You can ask us to correct any inaccurate or incomplete data.
  • Right to Erasure: You can request that we delete your personal data, subject to legal retention obligations.
  • Right to Restrict Processing: You can ask us to limit how we use your data in certain circumstances.
  • Right to Data Portability: You can request a structured, machine-readable copy of the data you provided to us.
  • Right to Object: You can object to our processing of your data based on legitimate interests.
  • Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
  • Right to Non-Discrimination (CCPA): We will not discriminate against you for exercising any of your privacy rights.

To exercise any of these rights, please email us at [email protected]. We will respond to your request within 30 days. We may need to verify your identity before processing your request, and we will never charge a fee for exercising your rights unless the request is manifestly unfounded or excessive.

9. Children's Privacy

Our website and products are not directed to children under the age of 16. We do not knowingly collect personal information from children