1. Data Controller
GSP is the data controller for all personal data collected through this website. Our contact details: [business@gspotladies.com].
2. Personal Data We Collect
We collect the following personal data from you:
- Identity Data: Name, billing/shipping address, email, phone number
- Transaction Data: Order details, payment information (processed via PayPal/Stripe)
- Technical Data: IP address, browser type, device information, website usage data
- Marketing Data: Your preferences for receiving our yoga apparel promotions
3. Legal Basis for Processing
We process your personal data under the following legal bases:
- Consent: For marketing communications (you may withdraw consent at any time)
- Contract: To fulfill your order and provide our services
- Legitimate Interest: To improve our website, prevent fraud, and enhance customer experience
- Legal Obligation: To comply with tax, accounting, and legal requirements
4. Use of Your Data
We use your data to:
- Process and deliver your yoga apparel orders
- Provide customer support and after-sales service
- Send personalized product recommendations and promotions
- Analyze website performance and improve our offerings
- Comply with legal and regulatory obligations
5. Data Sharing & Transfers
We only share your data with trusted third parties (payment processors, shipping carriers, website hosts) who are bound by data protection obligations. We do not sell your data. For international data transfers outside the EEA, we ensure appropriate safeguards are in place.
6. Your GDPR Rights
As a data subject, you have the right to:
- Access your personal data
- Rectify inaccurate or incomplete data
- Erase your data (“right to be forgotten”)
- Restrict processing of your data
- Data portability
- Object to processing
- Lodge a complaint with a supervisory authority
7. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, and reporting requirements.