1. Introduction

Brewcrestmug respects your privacy and is committed to handling your personal information transparently and responsibly. This Privacy Policy explains how we collect, use, store, and protect personal data when you visit our website, purchase our products, or communicate with us.

This Privacy Policy applies to all customers and website visitors within European regions and is fully prepared in accordance with applicable data protection legislation, including the General Data Protection Regulation (GDPR) (EU) 2016/679.

2. Data Controller Information

The data controller responsible for processing your personal information on this website is:

Company:  [XXX]

Brand Name: Brewcrestmug

Address: [XXX]

Telephone: [XXX]

Email: coffee@brewcrestmug.com

Brewcrestmug determines the purposes and means of processing personal data in connection with our official website, order fulfillment, and customer support services.

3. Information We Collect

We collect personal information necessary to deliver our products and provide customer support. This includes information provided directly by you when you:

Place an order for physical products on our website;

Contact our customer service team via email or telephone;

Interact with our website features and communications.

Types of Data Collected:

Identity & Contact Data: Full name, shipping address, billing address, email address, and telephone number.

Order & Transaction Data: Products purchased, order status, transaction history, and communication records.

Technical & Usage Data: IP address, browser type, device information, and browsing activity collected automatically via essential website cookies.

4. Legal Basis & How We Use Personal Information

Brewcrestmug processes your personal information strictly based on valid legal grounds under GDPR Article 6:

Performance of a Contract: Processing is necessary to process, package, and deliver your orders, manage payments, and provide customer support.

Legal Obligations: Processing is necessary to comply with legal, accounting, tax, and consumer protection regulations.

Legitimate Interests: Processing is necessary to improve our website functionality, protect against fraud, and maintain effective customer communications.

Consent: Applied where you explicitly consent to specific non-essential cookie tracking or direct marketing.

5. Payment Processing & Transaction Security

All card payment transactions on our website are processed through Stripe, a certified PCI-DSS Level 1 payment service provider.

Payment Data Safety: Brewcrestmug does not collect, store, or process complete credit card numbers or banking credentials on our servers. All financial payment details are encrypted using Secure Sockets Layer (SSL/TLS) technology and transmitted directly to Stripe.

Stripe Processing: Payment information is handled by Stripe in strict compliance with international security standards and Stripe’s own privacy policies.

6. Sharing of Personal Information

To fulfill your orders and operate our store effectively, Brewcrestmug may share necessary personal data with verified third-party service providers acting as data processors:

Logistics & Delivery Partners: Dedicated postal and courier services to package and dispatch your order directly to your designated address.

Payment Processors: Stripe, for secure transaction execution and fraud prevention.

Technical Infrastructure Partners: Secure web hosting and server management providers.

We ensure all service providers adhere to strict data security standards. We do not sell, rent, or trade personal data to third parties under any circumstances.

7. Data Retention

Brewcrestmug retains personal information only for as long as necessary to fulfill the operational purposes described in this policy:

Order and Tax Records: Retained for the statutory period required under applicable European commercial and tax laws.

Customer Support Records: Retained for a reasonable period to resolve queries, manage returns, and ensure quality control.

When personal data is no longer needed, it is permanently deleted or anonymized securely.

8. Cookies and Website Analytics

Our website utilizes cookies and similar web technologies to enable fundamental shopping cart functions, secure checkout, and improve user navigation.

Essential Cookies: Necessary for order processing and secure site navigation.

Preference Settings: You may adjust or disable cookies through your web browser settings. Please note that disabling essential cookies may impact store functionality during checkout.

9. Your Data Protection Rights under GDPR

As a resident in Europe, you possess specific data protection rights regarding your personal information:

Right of Access: Request a copy of the personal data we hold about you.

Right to Rectification: Request correction of inaccurate or incomplete personal data.

Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data where legal obligations permit.

Right to Restrict Processing: Request the suspension of data processing under specific circumstances.

Right to Data Portability: Request the transfer of your structured data to another provider.

Right to Object: Object to data processing based on legitimate interests.

Right to Lodge a Complaint: You have the right to lodge a complaint with a competent Data Protection Supervisory Authority in your country of residence if you believe your data protection rights have been infringed.

To exercise any of these rights, please contact our privacy officer using the contact details below.

10. Data Security

Brewcrestmug implements appropriate technical and organizational security measures, including SSL/TLS encryption, restricted database access, and regular security reviews, to protect your personal information against unauthorized access, loss, or alteration.

11. International Data Transfers

When service providers process data outside the European Economic Area (EEA), Brewcrestmug ensures appropriate safeguards—such as Standard Contractual Clauses (SCCs) approved by the European Commission—are enforced to maintain a level of protection equivalent to GDPR standards.

12. Updates to This Privacy Policy

We may periodically update this Privacy Policy to reflect operational updates or legal changes. Any revised version will be published on our website with an updated revision date.

13. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

Company:  [XXX]

Brand Name: Brewcrestmug

Address: [XXX]

Telephone: [XXX]Email: coffee@brewcrestmug.com