Privacy Policy

If you have questions or requests about your personal data, contact us at privacy@champsons.example or use the contact form under Contact.

1. Scope

This policy applies to information collected on our website and through services we operate, including ordering, customer accounts, marketing, and support. It does not apply to information collected offline or by third parties that link to or from our site.

2. Information We Collect

We collect information necessary to operate the store and provide our services. Categories of information include:

• Account & profile data: name, email, phone, shipping and billing addresses, password (hashed).
• Transaction data: order history, invoice details, payment confirmations (we do not store full card numbers on our servers — see Payments).
• Communications: messages you send us (support, enquiries), and our replies.
• Device & usage: IP address, browser type, device identifiers, pages visited, referral source, and analytics events.
• Marketing preferences: whether you opted in to email/SMS marketing.
• Third-party data: information we obtain from service providers (shipping carriers, payment processors, analytics vendors) to complete transactions.

3. How We Collect Information

We collect data in three ways:

• Directly from you — when you create an account, place an order, subscribe to newsletters, or contact support.
• Automatically — via cookies, pixels and server logs when you browse our site.
• From third parties — providers that assist with payments, shipping, fraud checks, and analytics.

4. How We Use Your Information

We use personal information to:

• Process and fulfil orders, manage returns and refunds.
• Communicate about orders, account activity, and support requests.
• Provide, improve and personalise our services (product recommendations, saved preferences).
• Prevent fraud and abuse and comply with legal obligations.
• Send marketing communications with your consent and respect your marketing choices.

5. Sharing & Disclosure

We may share personal data with:

• Service providers (payment processors, shipping carriers, cloud hosting, email providers) who act on our behalf.
• Professional advisers (legal, audit) when required to comply with laws or protect our rights.
• Authorities when required by law (e.g. tax, court orders) or to respond to lawful requests.
• Business transfers — in case of a merger, sale, or acquisition, personal data may be transferred as part of corporate assets; we will notify you where required by law.

6. Cookies & Tracking

We use cookies and similar technologies to operate the site, remember preferences, and deliver analytics and advertising.

• Essential cookies — required for cart, login, security and checkout.
• Performance & analytics — help us understand site usage (e.g. Google Analytics or similar).
• Marketing & advertising — used to show relevant ads and measure campaigns.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect site functionality (for example, staying logged in or completing checkout).

7. Payments & Security

We use reputable third-party payment processors (e.g. Stripe, Razorpay, PayU — depending on the region) to process card payments. We do not store full payment card data on our servers. When you enter card details, those details are sent directly to the payment provider under their secure, PCI compliant systems.

We use TLS (HTTPS) to encrypt data in transit. Access to production data is restricted and logged; administrative access is protected by strong passwords and MFA where available.

8. Data Retention

We retain personal data as long as necessary to provide services, comply with legal obligations (e.g. tax and accounting), resolve disputes, and enforce our agreements. When data is no longer needed, we will securely delete or anonymise it.

9. International Transfers

Your information may be processed or stored in countries other than your residence where our service providers operate. When transferring data across borders we use appropriate safeguards (standard contractual clauses, approved frameworks) to protect your information.

10. Your Rights

Depending on your jurisdiction, you may have rights including:

• Access — request a copy of personal data we hold about you.
• Correction — request correction of inaccurate or incomplete data.
• Deletion — request erasure of personal data, subject to legal obligations.
• Portability — request a machine-readable copy of your data.
• Restriction / Objection — restrict or object to certain processing, including direct marketing.

To exercise these rights, contact us at privacy@champsons.example. We may need to verify your identity before fulfilling requests. Where required by law we will respond within applicable statutory timeframes.

11. Children

Our services are not intended for children under 13 (or a higher local age where applicable). We do not knowingly collect personal information from children. If you believe we have collected data from a child, contact us to remove it.

12. Links to Other Sites

Our site contains links to third-party sites and services. This Privacy Policy does not apply to those sites — review their privacy notices before submitting data.