Privacy Policy
Last updated: [Date]
The company ACE, based in San Francisco, is committed to protecting the privacy and security of the personal data of its customers and users. This Privacy Policy explains how we collect, use, disclose, and protect your personal information, in accordance with applicable laws, including the European General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) in the United States.
1. Data Controller
The Data Controller responsible for processing your personal data is:
Company: ACE [or ACE Apparel Inc.]
Address: [Full Head Office Address], San Francisco, CA [Zip Code], USA
Contact: [Dedicated Data Privacy Email Address, e.g., privacy@acetennis.com]
2. Collection of Personal Data
We collect different types of information about you when you use our website, place an order, or interact with us.
Data you provide directly to us:
Identity Data: Last name, first name, email address, date of birth.
Order Data: Billing and shipping address, telephone number.
Account Data: Username and password for your customer account.
Data collected automatically:
Browsing Data: IP address, browser type, operating system, pages visited, date and time of access.
Location Data: Approximate location information (based on IP).
Cookie Data: Information on the use of our site via cookies and tracking technologies (see section 5).
3. Use of Collected Data
Your personal data is used for the following purposes (legal basis in parentheses):
Order Fulfillment: Processing, shipping, and tracking your order (Contract).
Account Management: Managing your customer account and providing technical support (Legitimate Interest / Contract).
Service Improvement: Analyzing traffic and purchasing behavior to improve the website's usability and product offering (Legitimate Interest).
Marketing and Communication: Sending you information about our new products or promotions if you have consented (Consent).
Legal Obligations: Responding to any legal or regulatory requests (Legal Obligation).
4. Sharing and Recipients of Data
ACE commits never to sell your personal data. Data may only be shared with third parties essential for the execution of our services:
Payment Service Providers: For the secure processing of transactions.
Carriers: Colissimo, Chronopost, or other partners for the delivery of your order.
Technical Service Providers: Hosting services, data analysis (e.g., Google Analytics), or maintenance of our website.
Your data may be transferred and stored outside the European Union (to the United States). In this case, we ensure appropriate safeguards (e.g., via standard contractual clauses) to guarantee a level of protection equivalent to that of the GDPR.
5. Cookies and Similar Technologies
Our website uses cookies to enhance your experience, analyze site performance, and personalize content.
Essential Cookies: Necessary for the functionality of the shopping cart and the payment process.
Performance Cookies: Help us understand how visitors interact with the site.
Marketing Cookies: Used to personalize the advertisements you might see.
You can manage your cookie preferences at any time via [Link to Cookie Preference Center] or your browser settings.
6. Your Rights (GDPR and CCPA)
In accordance with GDPR regulations (for EU residents) and CCPA (for California residents), you have the following rights regarding your data:
Right of Access: Request a copy of the data we hold about you.
Right to Rectification: Request the correction of inaccurate data.
Right to Erasure ("Right to be Forgotten"): Request the deletion of your data.
Right to Object: Object to the processing of your data for direct marketing purposes.
Right to Data Portability: Receive your data in a structured, commonly used format.
To exercise any of these rights, please contact us at the following address: [Dedicated Data Privacy Email Address]. We will respond to your request within a maximum period of [Timeframe in days, e.g., 30 days].
7. Data Security
We implement appropriate technical and organizational measures (encryption, firewalls, access control) to protect your personal data against unauthorized access, disclosure, alteration, or destruction.
8. Data Retention Period
We retain your personal data only for the duration necessary to achieve the purposes for which it was collected, or to comply with our legal obligations (e.g., 10 years for invoices). Customer account data is retained until you request the deletion of your account.