Privacy policy

Privacy Policy

Who we are
C it all (“we”, “our”, “us”) is an online store. We are the controller for the personal data we collect and process in connection with your visit and purchases.

Contact
C it all Customer Service
citallshop@gmail.com

Personal data we collect
- Identity and contact data: name, email, phone, shipping/billing address
- Order and payment data: order contents, totals, transaction references (payment processors handle full payment details)
- Delivery data: shipping method, tracking, delivery status
- Support data: messages and attachments you send to our support
- Technical data: IP address, device/browser info, log data
- Usage and marketing data: pages viewed, cart activity, email/SMS marketing preferences
- Optional data: product reviews, survey responses

How we use your data (lawful bases)
- Process and deliver your orders, provide support, handle returns/refunds (contract)
- Fraud prevention, account and site security, abuse prevention (legitimate interests)
- Compliance with legal obligations (tax, accounting, consumer rights)
- Improve products, site performance and customer experience (legitimate interests)
- Send service messages about your orders (contract/legitimate interests)
- Send marketing emails/SMS if you opted in; you can unsubscribe anytime (consent/legitimate interests)

Cookies and tracking
- We use cookies and similar technologies for essential functions (cart, checkout), analytics, and marketing (including cart reminders if you opted into SMS or email).
- You can control cookies in your browser. Blocking some cookies may affect site functionality.
- See our Cookies Policy for details.

Sharing your data (processors and partners)
We share personal data with:
- Payment processors to take payments and handle refunds
- Fulfillment and shipping partners to pack, ship, and deliver orders
- Email/SMS and helpdesk providers to send communications and provide support
- Analytics/anti‑fraud and site performance tools
We require our processors to protect your data and only process it under our instructions. We do not sell personal data.

International transfers
Some partners may process data outside the EU/EEA. Where applicable, we rely on lawful transfer mechanisms (e.g., SCCs) and require appropriate safeguards.

Retention
- Orders, invoices, and refund records: retained to satisfy legal, tax, and accounting obligations
- Customer support: retained as needed to resolve issues and for our records
- Marketing data: retained until you unsubscribe or request deletion, or as required by law
We keep data only as long as necessary for the purposes above.

Your rights (EU/EEA and applicable local laws)
- Access: request a copy of your data
- Rectification: correct inaccurate data
- Erasure: request deletion when we no longer need it or where required by law
- Restriction: ask us to limit processing in certain cases
- Objection: object to processing based on legitimate interests, including direct marketing
- Portability: receive data you provided in a portable format where applicable
To exercise rights, email citallshop@gmail.com. We may need to verify your identity.

Marketing choices
- Emails: use the unsubscribe link in any message
- SMS: reply STOP or use instructions in the message
- You can also contact us to update your preferences

Security
We use appropriate technical and organizational measures to protect personal data. No method of transmission or storage is 100% secure, but we work to continuously improve our safeguards.

Children
Our store is not intended for children under 16. We do not knowingly collect data from children under 16.

Third‑party links
Our site may link to third‑party websites. We are not responsible for their privacy practices. Review their policies.

Updates to this policy
We may update this policy to reflect changes in law or our practices. Material changes will be posted here with an updated effective date.

Effective date
14 November 2025