Privacy Policy
Effective Date: [2026.3.12]
Welcome to baddyfoxx shop. This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you use our Website, purchase our products, or interact with us. We comply with the General Data Protection Regulation (GDPR) for users in the European Economic Area (EEA) and the California Consumer Privacy Act (CCPA) for users in California, USA.
1. Information We Collect
We collect personal data that you voluntarily provide to us, as well as data automatically collected when you use our Website. This includes:
-
Personal Identification Data: Name, email address (e.g., baddyfox@foxmail.com for communication), phone number, shipping/billing address, and payment information (e.g., credit card details, which are processed by third-party payment providers and not stored by us).
-
Usage Data: IP address, browser type, device information, operating system, pages visited, time spent on the Website, and browsing history. This data is collected automatically via cookies and similar technologies (see our Cookie Policy for details).
-
Communication Data: Content of messages you send to us via email (baddyfox@foxmail.com), contact forms, or live chat, as well as our responses.
-
Marketing Data: Your preferences for receiving marketing communications, and your interaction with such communications (e.g., opens, clicks).
2. How We Use Your Data
We use your personal data for the following legitimate purposes, in compliance with GDPR and CCPA:
-
To process and fulfill your orders (e.g., ship products, process payments, send order confirmations).
-
To communicate with you: Respond to your inquiries, provide customer support, and send important updates (e.g., order status, policy changes) via email (baddyfox@foxmail.com) or other channels you provide.
-
To improve our Website and services: Analyze usage data to optimize user experience, fix technical issues, and develop new products.
-
To send marketing communications: Share promotions, new products, and special offers, but only if you have opted in to receive such communications. You may unsubscribe at any time (see Section 5).
-
To ensure compliance with legal obligations: Comply with tax laws, fraud prevention, and other regulatory requirements.
3. Data Sharing and Disclosure
We do not sell, rent, or share your personal data with third parties for their own marketing purposes, except as follows:
-
Third-Party Service Providers: We share data with trusted providers who assist us in operating the Website and fulfilling orders (e.g., payment processors, shipping carriers, email service providers). These providers are contractually obligated to protect your data and only use it for the purposes we specify.
-
Legal Requirements: We may disclose your data if required by law, court order, or government authority, or to protect our rights, property, or safety, or the rights of others.
-
Business Transfers: In the event of a merger, acquisition, or sale of all or part of our business, your data may be transferred to the new owner, who will be bound by this Privacy Policy.
4. Your Data Rights (GDPR/CCPA)
Under GDPR (for EEA users) and CCPA (for California users), you have the following rights regarding your personal data:
-
Right to Access: Request a copy of the personal data we hold about you.
-
Right to Correction: Request correction of inaccurate or incomplete personal data.
-
Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data, subject to legal obligations.
-
Right to Restriction: Request that we restrict processing of your data in certain circumstances.
-
Right to Data Portability: Request a copy of your data in a structured, machine-readable format, or have it transferred to another controller.
-
Right to Opt-Out: Opt out of marketing communications and (under CCPA) opt out of the sale of your data (we do not sell data, but you may still exercise this right).
-
Right to Withdraw Consent: If you provided consent for data processing, you may withdraw it at any time (this does not affect processing done before withdrawal).
To exercise any of these rights, please contact us at baddyfox@foxmail.com. We will respond to your request within 30 days (or within the timeframe required by law).
5. Data Security
We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. This includes SSL encryption for data transmission, secure servers, and regular security audits. However, no method of data transmission or storage is 100% secure, and we cannot guarantee absolute security.
6. Data Retention
We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, or as required by law. For example, we retain order data for tax and accounting purposes (typically 7 years) and marketing data until you opt out.
7. Children’s Privacy
Our Website is not intended for children under the age of 13 (or 16 under GDPR). We do not knowingly collect personal data from children. If we learn we have collected data from a child, we will delete it immediately. Contact us at baddyfox@foxmail.com if you believe a child has provided data to us.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the updated policy on the Website and updating the "Effective Date" above. Your continued use of the Website after the changes take effect constitutes your acceptance of the new policy.
9. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at: baddyfox@foxmail.com