Privacy Policy – chriseahernandez.com

Effective Date: [Date]

1. Information We Collect

We process:
• Personal Data (name, address, email, phone)
• Order Details (purchase history, preferences)
• Technical Data (IP address, device info, cookies)
• Payment Information (processed securely via encrypted gateways)

2. How We Use Your Data

Your information helps us:
✔ Process orders and payments
✔ Deliver products and manage returns
✔ Improve website functionality
✔ Prevent fraud and enhance security
✔ Send marketing (with your consent)

Under GDPR, we rely on:
• Contractual necessity (order fulfillment)
• Legal compliance (tax/accounting)
• Legitimate interest (website optimization)
• Consent (for newsletters & cookies)

4. Data Sharing

We may disclose information to:
• Payment processors (Stripe, PayPal)
• Shipping carriers (DHL, FedEx)
• IT/cloud service providers
• Legal authorities (when required)

5. International Transfers

Data may be transferred outside the EU with appropriate safeguards under GDPR Article 46.

6. Your Rights

You have the right to:
• Access your personal data
• Request correction or deletion
• Restrict processing
• Data portability
• Withdraw consent
• Lodge complaints with supervisory authorities

7. Cookies

We use:
• Essential cookies (shopping cart functionality)
• Analytics cookies (Google Analytics)
• Marketing cookies (only with consent)
Manage preferences via browser settings or our cookie banner.

8. Data Security

We implement:
• SSL encryption
• Regular security audits
• Access controls
• PCI-DSS compliance for payments

9. Data Retention

We retain data:
• For active customer relationships
• As required by law (typically 5-7 years for orders)
• Until consent withdrawal (marketing data)

Our site may contain external links not governed by this policy.

11. Children’s Privacy

We do not knowingly collect data from children under 16.

12. Policy Updates

Current version always available at:
chriseahernandez.com/privacy-policy