Privacy Policy

Who we are

WITOKQ ([LEGAL ENTITY NAME], “we”, “us”, “our”) operates https://witokq.shop and sells apparel, footwear and accessories online. Our registered address is [REGISTERED ADDRESS]. For any privacy question, contact us at [SUPPORT EMAIL].

What we collect

We collect only what we need to process an order and run the store:

Order information — name, billing and shipping address, email address, phone number and the items you purchase.
Account information — if you create an account, your email address and password (stored as a one-way hash; we never see it).
Payment information — handled entirely by our payment providers. We receive a transaction reference and the last four digits of a card, never the full card number.
Technical data — IP address, browser type and device information, collected for security and fraud prevention.
Communications — messages you send us through the contact form or by email.

How we use your information

To process, pack and ship your order, and to send order confirmations and dispatch notifications.
To handle returns, exchanges and warranty claims.
To detect and prevent fraudulent transactions.
To answer your enquiries and provide customer support.
To send marketing emails — only if you opt in. Every marketing email contains a one-click unsubscribe link.

Payments

Card and wallet payments are processed by third-party payment providers. Your payment details are submitted directly to those providers and are never stored on our servers. Our providers process your data under their own privacy policies and are contractually required to protect it.

Shipping partners

We share your name, delivery address, phone number and email address with the carriers that deliver your parcel, and only to the extent needed to complete delivery. Carriers act as independent controllers of that data and may contact you about the delivery.

Cookies

We use a small number of cookies and similar technologies. They fall into three groups:

Strictly necessary — keep your cart and session working, and remember your consent choices. The store cannot function without these.
Functional — remember preferences such as currency or recently viewed items.
Analytics — aggregate, non-identifying statistics that tell us which pages are used.

You can block or delete cookies in your browser settings. Blocking strictly necessary cookies will prevent checkout from working.

Legal bases for processing (EEA, UK and Switzerland)

Where the GDPR or UK GDPR applies, we rely on the following legal bases:

Contract — to fulfil the order you placed and to handle returns.
Legitimate interests — fraud prevention, security, and improving our store, balanced against your rights.
Consent — marketing emails and any non-essential cookies. You may withdraw consent at any time.
Legal obligation — retaining tax and accounting records.

Who we share data with

We share personal data only with the service providers needed to run the store: payment processors, shipping carriers, email delivery services, fraud-prevention services and our hosting provider. We do not sell your personal information, and we do not share it with advertisers.

International transfers

Our service providers may process data outside your country. Where data leaves the EEA or the UK, we rely on Standard Contractual Clauses or an equivalent safeguard approved by the relevant authority.

How long we keep your data

Order and tax records: as long as required by tax and accounting law (typically 6 to 10 years).
Account data: until you ask us to delete the account.
Marketing preferences and consent records: until you withdraw consent.
Server and security logs: a rolling 12 months.

Your rights

Depending on where you live, you may have the right to access, correct, delete or receive a portable copy of your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise any of these rights, email [SUPPORT EMAIL]. We respond within 30 days, and we will never charge you for exercising a privacy right.

Notice to California residents

If you are a California resident, you have the right to know what categories of personal information we collect and why, to request deletion, to request correction, and to opt out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined by the CCPA/CPRA. We do not knowingly collect or sell the personal information of consumers under 16.

Security

The store is served over HTTPS and payment data is transmitted directly to our payment providers. Access to customer data is restricted to staff who need it to fulfil orders. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.

Children

Our store is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us with personal data, contact us and we will delete it.

Changes to this policy

We may update this policy to reflect changes in our practices or the law. The effective date at the top of this page always reflects the current version. Material changes will be announced on this page.

Contact us

Questions about this policy or your personal data: [SUPPORT EMAIL]. We aim to reply to every privacy enquiry within 5 business days.