1. General Information

This Privacy and Cookies Policy defines the rules for processing personal data and using cookies on the OctoClassic website (hereinafter: the “Website”).
The data controller is OctoClassic (hereinafter: the “Controller”).
For privacy-related matters, please contact: contact@octoclassic.com.

2. Scope of Collected Data

As part of using the Website, we may process the following categories of data:

• Identification data (e.g., first name, last name),
• Contact data (e-mail address),
• Transactional data,
• Technical data (IP address, device type, browser information),
• Website activity data,
• Marketing and analytical data.

3. Purposes of Data Processing

Personal data may be processed for the following purposes:

• Order fulfillment and provision of services,
• User account management,
• Payment processing,
• Customer communication and support,
• Marketing and remarketing activities,
• Statistical analysis and service improvement,
• Ensuring the security and proper operation of the Website.

4. Legal Basis for Processing (GDPR)

Personal data is processed on the basis of:

• Article 6(1)(b) GDPR – performance of a contract,
• Article 6(1)(c) GDPR – compliance with a legal obligation,
• Article 6(1)(f) GDPR – legitimate interests of the Controller,
• Article 6(1)(a) GDPR – consent (including marketing activities and optional cookies).

5. Cookies

The Website uses cookies and similar technologies, including:

• Necessary cookies (required for website operation),
• Analytical cookies (traffic measurement and statistics),
• Marketing cookies (advertising and remarketing),
• Functional cookies (saving user preferences).

Cookies may originate from third-party providers, including Google, Meta, Shopify, and other technology partners.

6. Consent to Cookies

The user provides consent to the use of non-essential cookies through the cookie consent banner displayed on the Website.
Consent may be withdrawn at any time through the privacy or cookie settings available on the Website.

7. Managing Cookie Preferences

Users have the right to:

• Change cookie preferences,
• Withdraw previously granted consent,
• Review consent history (where available),
• Restrict the processing of marketing-related data.

8. Data Retention Period

Personal data is retained:

• For the duration necessary to perform the contract,
• Until consent is withdrawn (where processing is based on consent),
• For periods required by applicable laws and regulations,
• Until the expiration of limitation periods for potential claims.

9. Data Sharing

Personal data may be shared with trusted third parties, including:

• IT service providers,
• Payment service providers,
• Courier and logistics companies,
• Providers of analytical, marketing, and advertising tools,
• Professional advisors where required by law.

10. Transfers Outside the EEA

Personal data may be transferred outside the European Economic Area (EEA), including to countries such as the United States or the United Kingdom.
In such cases, appropriate safeguards are implemented in accordance with GDPR requirements, including the use of Standard Contractual Clauses (SCCs) or other legally approved transfer mechanisms.

11. User Rights

Users have the right to:

• Access their personal data,
• Rectify inaccurate data,
• Request erasure of personal data,
• Restrict processing,
• Receive their data in a portable format,
• Object to processing,
• Withdraw consent at any time where processing is based on consent.

12. Profiling and Automated Decision-Making

Personal data may be used for profiling and personalized marketing activities, including the display of tailored advertisements.
Users have the right to object to profiling and direct marketing activities at any time.

13. Data Security

The Controller implements appropriate technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, disclosure, alteration, or destruction.

14. Contact Information

For any questions regarding personal data processing, privacy matters, or the exercise of your rights under applicable data protection laws, please contact:

Octoclassic Ltd.

Email: contact@octoclassic.com

15. Changes to This Policy

The Controller reserves the right to amend, update, or modify this Privacy and Cookies Policy at any time.
Any changes will be published on the Website and become effective upon publication unless otherwise stated.

16. Third-Party Services

The Website may use third-party services and tools provided by external partners, including but not limited to:

• Shopify (e-commerce platform),
• Google Analytics,
• Google Ads,
• Meta Pixel and Meta advertising services,
• Payment service providers,
• Courier and logistics providers,
• Customer review and feedback services.

These providers may process personal data in accordance with their own privacy policies and applicable data protection laws.

17. Right to Lodge a Complaint

If you believe that your personal data is being processed in violation of applicable data protection laws, you have the right to lodge a complaint with the competent supervisory authority responsible for data protection in your country of residence or within the European Economic Area.
You may also contact the Controller directly before submitting a complaint, and we will make reasonable efforts to resolve your concerns.