Privacy Policy

1. Overview

This Privacy Policy (“Policy”) explains how cygrass.cyscratia.net (“Company”, “we”, “us”, or “our”) collects, uses, discloses, and processes your personal information when you access or use our website and services (collectively, the “Services”).

By using our Services, you agree to the practices described in this Policy. If you do not agree, please do not use our Services.

We act as the **data controller** of your personal information and are responsible for its processing and protection.

2. Legal Basis for Processing

We process your personal data based on the following legal grounds:

* Performance of a contract (e.g., order processing and delivery)
* Compliance with legal obligations
* Legitimate business interests (e.g., improving services, fraud prevention)
* Your consent, where applicable (e.g., marketing communications)

3. Information We Collect

We collect personal information that you voluntarily provide when using our Services, including but not limited to:

* Name
* Email address
* Shipping address
* Phone number
* Payment-related information (processed securely via third-party providers)

You may also browse our website anonymously.

We define:

* Personal Data: Information that can directly or indirectly identify an individual
* Pseudonymized Data: Data that cannot identify an individual without additional information
* Anonymous Data: Data that has been irreversibly anonymized and cannot identify an individual

4. How We Use Your Information

We may use your personal information for the following purposes:

* To process and fulfill orders
* To provide customer support
* To improve our website, products, and services
* To manage promotions, surveys, and marketing activities
* To send marketing communications (you may opt out at any time)

5. Data Sharing and Disclosure

We do not sell personal data for monetary consideration.

We may share your information with trusted third-party service providers who assist in:

* Payment processing
* Order fulfillment and shipping
* Website analytics (e.g., Google Analytics)
* Customer communication services

These third parties are only permitted to process your data on our behalf and are required to maintain confidentiality and security.

We may also disclose personal information where required to:

* Comply with legal obligations
* Respond to lawful requests
* Protect our legal rights and prevent fraud or abuse

6. International Data Transfers

Your personal information may be transferred to and processed in countries outside your country of residence, including the United States.

Where required by applicable law, we implement appropriate safeguards for such transfers, including **Standard Contractual Clauses (SCCs)** or equivalent legal mechanisms.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to:

* Remember shopping cart items
* Store user preferences
* Analyze website traffic and performance
* Improve user experience

You may manage or disable cookies through your browser settings at any time. However, some features of the website may not function properly if cookies are disabled.

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required by law (including tax, accounting, fraud prevention, or legal compliance obligations).

9. Data Security

We implement reasonable technical, administrative, and physical safeguards to protect your personal information against unauthorized access, loss, misuse, or disclosure.

However, no system can guarantee absolute security, and you acknowledge that you use the Services at your own risk.

10. Your Rights

Depending on your location, you may have the following rights:

* Access your personal data
* Correct or update your data
* Request deletion of your data
* Restrict or object to processing
* Data portability
* Withdraw consent (where applicable)

We may require identity verification before processing your request.

We will respond to your request within a reasonable timeframe and no later than 30 days where required by law.

11. Marketing Communications

You may receive marketing emails or messages from us. You may opt out at any time using the unsubscribe link included in our communications.

12. Data Retention After Account Closure

If you request account deletion, we may retain certain information where required by law or for legitimate business purposes, including fraud prevention, dispute resolution, and compliance obligations.

13. Third-Party Services

Our Services may contain links or integrations with third-party websites. We are not responsible for the privacy practices of such third parties and encourage you to review their privacy policies separately.

14. Google Analytics

We use Google Analytics to understand how users interact with our website. Google may collect and process data such as IP addresses and usage behavior.

Where required, international data transfers involving Google are protected using appropriate safeguards such as Standard Contractual Clauses (SCCs).

You may opt out of Google Analytics using available browser tools or Google’s opt-out mechanism.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised effective date.

16. Contact Us

If you have any questions or wish to exercise your privacy rights, please contact us at:

cygrass@cyscratia.net