Privacy policy

At AtaahuaCove, your privacy is a fundamental part of how we operate. This Privacy Policy explains what information we collect, how we use it, and the choices you have regarding your personal data when you visit or make a purchase from our online store, which specialises in Mice, Keyboards, and Headphones. We are committed to handling your information transparently and in accordance with applicable international privacy laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

1. Information We Collect

We collect only the information necessary to process your orders, provide customer support, and improve your shopping experience. The types of data we collect include:

Order Information: When you place an order, we collect your name, billing and shipping address, payment details (processed securely by our payment provider), email address, and phone number (optional).
Device and Usage Data: We automatically collect certain technical data such as your IP address, browser type, operating system, pages viewed, and the dates/times of your visits. This helps us understand how our site is used and to maintain security.
Communication Data: If you contact us via email at [email protected], we retain the content of your messages and your email address to respond to your inquiries and maintain a record of our correspondence.
Cookies and Similar Technologies: We use cookies to remember your preferences (such as currency or language) and to analyse site traffic. You can control cookie settings through your browser, but disabling them may affect certain functionalities.

2. How We Use Your Information

We use the collected data for the following legitimate business purposes:

To process and fulfil your orders, including shipping, payment confirmation, and delivery updates.
To provide customer service and respond to your requests or concerns sent to [email protected].
To improve our website, product selection, and user experience through aggregated analytics.
To detect, prevent, and address fraud, security issues, or technical errors.
To comply with legal obligations, such as tax and accounting requirements, or to enforce our terms of service.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

3. Legal Bases for Processing (GDPR)

If you are located in the European Economic Area (EEA), we rely on the following legal bases to process your personal data:

Performance of a Contract: Processing your data is necessary to fulfil our agreement with you when you place an order.
Legitimate Interests: We may use your data for our legitimate interests, such as improving our services, preventing fraud, and ensuring network security, provided your rights do not override these interests.
Legal Obligation: We may process data to comply with applicable laws and regulations.
Consent: Where we rely on consent (e.g., for non-essential cookies), you may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

4. Data Sharing and Third Parties

We share your personal information only with trusted service providers who assist us in operating our business, under strict data processing agreements. These categories include:

Payment Processors: To securely handle credit card or other payment transactions. We do not store your full payment card details on our servers.
Shipping Carriers: To deliver your ordered products to your provided address.
IT and Analytics Providers: To host our website, manage our databases, and analyse usage patterns.
Legal Authorities: If required by law, or to protect our rights, safety, or property, we may disclose information to competent authorities.

All third parties are obligated to protect your data and may only use it for the specific services we engage them for.

5. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes described in this policy, unless a longer retention period is required or permitted by law. Specifically:

Order Records: Retained for a minimum of 5 years to comply with tax and accounting regulations.
Customer Communications: Emails sent to [email protected] are kept for up to 3 years to maintain a history of interactions.
Analytics Data: Aggregated, anonymised data may be retained indefinitely for statistical purposes.

When data is no longer needed, we securely delete or anonymise it.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These include:

SSL/TLS encryption for all data transmitted between your browser and our website.
Secure, encrypted storage of databases with restricted access controls.
Regular security audits and vulnerability assessments of our systems.
Internal policies requiring our staff and contractors to maintain confidentiality.

While no method of transmission over the internet is 100% secure, we strive to use commercially acceptable means to protect your data.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Access: Request a copy of the personal information we hold about you.
Rectification: Correct any inaccurate or incomplete data.
Erasure: Ask us to delete your personal data, subject to legal obligations.
Restriction: Limit how we process your data in certain circumstances.
Data Portability: Receive your data in a structured, machine-readable format.
Objection: Object to processing based on legitimate interests or for direct marketing.
Withdraw Consent: If processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please email us at [email protected]. We will respond within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority.

8. International Transfers

As an international online store, we may transfer your personal data to countries outside your country of residence, including to our servers or third-party service providers located in other jurisdictions. Where such transfers occur, we ensure they are protected by appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission, or other equivalent mechanisms, to maintain the same level of data protection.

9. Cookies and Tracking

Our website uses cookies and similar tracking technologies to enhance your browsing experience. Specifically, we use:

Essential Cookies: Required for the website to function, such as maintaining your session and remembering cart items.
Analytics Cookies: Help us understand how visitors interact with our site, allowing us to improve layout and product offerings.
Preference Cookies: Remember your settings, such as language or currency preferences.

You can manage or disable cookies through your browser settings. However, please note that some parts of the site may become inaccessible if essential cookies are blocked.

10. Children's Privacy

Our website and services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us at [email protected], and we will promptly delete such information from our records.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Any updates will be posted on this page with a revised date. We encourage you to review this policy periodically to stay informed about how we protect your information. Significant changes will be communicated via email if we have your contact details.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your