Privacy Policy
1. Introduction
At The Cat’s Pyjamas (accessible via the-cats-pyjamas.com), your privacy is of paramount importance to us. We are firmly committed to safeguarding all personal data entrusted to us and to processing such data in a transparent, secure, and lawful manner. Our practices adhere closely to international privacy regulations, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). This Privacy Policy outlines how we collect, use, disclose, store, and protect your personal information when you interact with our website.
2. Scope of Policy and Data Controller Role
This Privacy Policy applies to all personal data collected by or on behalf of The Cat’s Pyjamas via our website, the-cats-pyjamas.com, and related digital services. The Cat’s Pyjamas acts as the data controller in relation to the personal data processed. As data controller, we determine the purposes and means by which your personal data is processed.
Should you have any questions or concerns regarding this policy or our data handling practices, please contact us at [email protected].
3. Categories of Data Processed
We process various categories of personal data in the course of your interaction with our services:
a) Usage Data
Includes information collected through cookies and similar technologies such as your IP address, browser type, browsing actions, session duration, location, and referring URLs.
b) Account Data
Comprises your full name, email address, telephone number, billing and shipping address, and login credentials where applicable.
c) Profile Data
Includes your preferences, historical purchases, ratings, wishlists, and behavioral patterns related to product interaction.
d) Communication Data
Encompasses records of contact via email or contact forms, customer support requests, and related correspondence history.
e) Technical Data
Details the devices used to access the website (e.g., operating system, screen resolution, device model), system configurations, and identifiers such as device IDs.
f) Transaction Data
Relates to the payment method, order amounts, purchase history, delivery tracking data, and transaction confirmations.
g) Preference Data
Includes your expressed choices in relation to marketing communications, product recommendations, wishlist content, and interest-based advertising preferences.
4. Legal Bases for Processing
We process personal data strictly in accordance with the legal bases set out in applicable data protection laws:
– Legitimate Interests: Where processing is necessary for our or a third party’s legitimate interests, provided such interests are not overridden by your rights, particularly in improving our offerings, website analytics, and fraud prevention.
– Contractual Necessity: Where processing is necessary to fulfill a service you have requested, such as completing transactions or managing your account.
– Consent: Where you have explicitly consented to certain uses, such as receiving marketing emails or permitting cookie tracking.
– Legal Obligation: Where we are required to comply with statutory or regulatory obligations.
5. Your Rights
You have the following rights in relation to your personal data, subject to the conditions and limitations set out in applicable law:
– Right of Access: You can request a copy of the personal data we hold about you.
– Right to Rectification: You may request correction of inaccurate or incomplete personal data.
– Right to Erasure: You may request deletion of your personal data, subject to lawful retention exceptions.
– Right to Restrict Processing: You may request to limit the use of your personal data under specified circumstances.
– Right to Data Portability: Where applicable, you may request that we provide your data in a machine-readable format or transmit it to another data controller.
To exercise any of your rights under this clause, please contact [email protected].
6. Security Measures
We adopt and enforce industry-standard safeguards to protect the confidentiality, integrity, and availability of your personal data, including:
– Use of encryption technologies for data in transit and at rest;
– Access controls with role-based permissions and authentication mechanisms;
– Regularly scheduled data backups and disaster recovery protocols;
– Ongoing staff training in security and data protection best practices.
Despite these controls, we advise all users that no internet-based platform can guarantee absolute data security.
7. International Transfers
Where personal data is transferred outside the European Economic Area (EEA) or similar jurisdictions, such transfers are made only:
– To countries recognized by the European Commission or other competent authorities as providing an adequate level of protection; or
– Pursuant to appropriate safeguards such as Standard Contractual Clauses (SCCs), Binding Corporate Rules, or similar lawful mechanisms.
8. Data Retention
We retain personal data only as long as is reasonably necessary and proportionate to the purpose for which it was collected. Retention periods vary by data category:
– Usage and Technical Data: retained up to 18 months;
– Account and Transaction Data: retained for 7 years for tax and legal compliance;
– Profile and Preference Data: retained until deleted by the user or after 2 years of inactivity;
– Communication Data: retained for 3 years for service quality and legal traceability.
Once data is no longer required, it is securely deleted or anonymized.
9. Cookie Policy
Our website uses cookies and similar technologies to enhance user experience and deliver services. The categories of cookies deployed include:
– Essential Cookies: Required for basic website functionality, such as session control and shopping cart use.
– Functional Cookies: Remember your choices to enhance convenience, such as language or regional preferences.
– Analytics Cookies: Collect anonymized data for performance measurement, user behavior, and site improvement.
– Performance Cookies: Monitor technical performance, such as load times and responsiveness.
10. Cookie Management and Compliance with GDPR & CCPA
Users are prompted to manage their cookie preferences upon visiting the-cats-pyjamas.com via a cookie banner consistent with GDPR transparency and consent requirements. At any time, you can modify your cookie settings through your browser or our cookie control panel.
Under both the GDPR and CCPA, you may opt-out of non-essential cookies or data “sales” (as broadly defined under CCPA). The site does not sell personal data in any traditional commercial sense, but cookie-based ad tracking may fall under the scope of “sale” for CCPA purposes. You may use the provided Do Not Sell My Personal Information mechanism to opt out.
11. Children’s Privacy
Our services are not intended for children under the age of 13, and we do not knowingly collect personal data from individuals under this age. If we become aware that a child under 13 has provided us with personal information, such data will be promptly deleted. Parents or guardians who believe such information may have been collected can contact us at [email protected].
12. Policy Updates and User Notifications
We reserve the right to amend this Privacy Policy to remain compliant with changing legal, technological, or operational standards. Substantial changes will be communicated prominently on the website or notified to you directly when required by applicable law. Continued use of our services following such changes constitutes your acceptance of the revised Privacy Policy.
13. Contact
For questions, clarifications, or to exercise any of your legal privacy rights, you may contact our privacy team at:
Email: [email protected]
We are committed to full regulatory compliance and the responsible stewardship of your data. Please do not hesitate to reach out with any privacy-related inquiries or requests.