Swendo Shop

At Swendo Shop, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or make a purchase.

This policy is designed to comply with applicable data protection laws, including the General Data Protection Regulation (GDPR) for users in the European Union, the California Consumer Privacy Act (CCPA) for users in California, and other relevant privacy regulations.

For the purposes of this Privacy Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person.
• "Processing" means any operation performed on Personal Data, such as collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure, dissemination, or otherwise making available.
• "Data Controller" means the entity that determines the purposes and means of the Processing of Personal Data.
• "Data Processor" means the entity that Processes Personal Data on behalf of the Data Controller.
• "Data Subject" means the individual to whom the Personal Data relates.

3.1 Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Register for an account
• Sign in with Google (including profile photo, username, and email)
• Make a purchase
• Sign up for our newsletter
• Contact our customer support
• Participate in surveys or promotions
• Apply for a job with us

This information may include:

• Name and contact details (email, phone number, address)
• Profile photo (stored on our servers)
• Payment method information
• Account credentials
• Purchase history and digital product access
• Communication preferences
• Feedback and correspondence

3.2 Automatically Collected Information

When you visit our website, we automatically collect certain information about your device, including:

• IP address and device identifiers
• Browser type and version
• Operating system
• Pages visited and time spent on each page
• Referring websites or sources
• Cookies and similar tracking technologies

3.3 Data Retention for Banned Accounts

When an account is banned or terminated, we retain certain information for the following purposes:

• Legal Compliance: To comply with legal obligations and regulatory requirements.
• Fraud Prevention: To prevent fraudulent activities and protect our platform.
• Dispute Resolution: To address potential disputes or legal claims.
• Service Improvement: To analyze patterns of abuse and improve our security measures.

The retention period for banned account data varies based on the nature of the violation and applicable legal requirements. Users can request information about their data retention period through our support channels.

3.4 Google Sign-In Data Collection

When you sign in with Google, we collect and store the following information from your Google account:

• Profile Information: Your name, email address, and profile photo
• Account Data: Basic account information provided by Google

This data collection is necessary for:

• Account creation and management
• User authentication and security
• Personalization of your experience

We store this information on our secure servers and use it in accordance with our privacy policy and applicable data protection laws.

3.5 Content Moderation and Account Restrictions

We maintain strict content moderation policies to ensure a safe and appropriate environment for all users. Your account may be banned or restricted if you:

• Use Offensive Content: Upload or use profile photos, usernames, or other content containing:
  • Explicit or adult content
  • Hate speech or discriminatory content
  • Violent or threatening content
  • Illegal content or activities
• Violate Community Guidelines: Engage in behavior that violates our community standards or terms of service
• Attempt Fraud: Use fake or misleading information in your profile or account

When an account is banned:

• Access to the platform will be immediately restricted
• Any active subscriptions or services will be terminated
• Account data will be retained according to our data retention policies and legal obligations

We use the information we collect to:

• Process your orders and payments
• Communicate with you about your orders
• Send you marketing communications (with your consent)
• Improve our website and services
• Comply with legal obligations
• Prevent fraud and enhance security
• Personalize your experience
• Analyze usage patterns and trends

4.1 Legal Basis for Processing (GDPR)

Under the GDPR, we process your Personal Data on the following legal bases:

• Consent: When you have given us explicit consent to process your Personal Data for specific purposes.
• Contract: When processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
• Legal Obligation: When processing is necessary to comply with a legal obligation to which we are subject.
• Legitimate Interests: When processing is necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms.

Under applicable data protection laws, you have the following rights:

• Right to Access: You have the right to request copies of your Personal Data.
• Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
• Right to Erasure: You have the right to request that we erase your Personal Data, under certain conditions.
• Right to Restrict Processing: You have the right to request that we restrict the processing of your Personal Data, under certain conditions.
• Right to Object to Processing: You have the right to object to our processing of your Personal Data, under certain conditions.
• Right to Data Portability: You have the right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.
• Right to Withdraw Consent: If we rely on your consent to process your Personal Data, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us using the information provided in the "Contact Us" section below. We will respond to your request within the timeframes required by applicable law.

We retain your Personal Data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for Personal Data, we consider the amount, nature, and sensitivity of the Personal Data, the potential risk of harm from unauthorized use or disclosure of your Personal Data, the purposes for which we process your Personal Data, and whether we can achieve those purposes through other means, and the applicable legal requirements.

In some circumstances, we may anonymize your Personal Data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

We implement appropriate technical and organizational security measures to protect your Personal Data against unauthorized or unlawful processing, accidental loss, destruction, or damage. However, please note that no method of transmission over the internet or method of electronic storage is 100% secure.

Our security measures include:

• Encryption of data in transit and at rest
• Regular security assessments and audits
• Access controls and authentication mechanisms
• Employee training on data protection
• Incident response procedures

Our services are not intended for use by children under the age of 16. We do not knowingly collect Personal Data from children under 16. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us so that we can take necessary actions.

If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

If you believe that our processing of your Personal Data infringes data protection laws, you have a legal right to lodge a complaint with a supervisory authority responsible for data protection. You may do so in the EU member state of your habitual residence, your place of work, or the place of the alleged infringement.

For example, in the European Economic Area (EEA), you can lodge a complaint with your local data protection authority, such as the Information Commissioner's Office (ICO) in the UK or the Commission Nationale de l'Informatique et des Libertés (CNIL) in France.

If you have any questions about this Privacy Policy, please contact us at: