PRIVACY POLICY

Clock In (“we”, “our”, “us”) respects your privacy and is committed to protecting the personal data you entrust to us when you use our website and services. This policy explains what personal data we collect, why we process it, how we store it, and your rights under the EU General Data Protection Regulation (GDPR) and the e‑Privacy Directive.

1. Data We Collect

• Contact information: name, email address, phone number (provided when you create an account, place an order or contact us).
• Order details: billing and shipping addresses, product selections, payment information (processed by our payment provider).
• Technical data: IP address, browser type, device information, cookies (see our Cookie Policy).
• Communications: any messages you send through our contact form or newsletter sign‑up.

2. How We Use Your Data

• To fulfil orders, process payments and arrange deliveries.
• To provide customer support and respond to enquiries.
• To send transactional emails (order confirmations, shipping updates).
• If used, to send marketing communications you have opted‑in to receive (e.g., newsletters).
• If used, to analyse website usage for improving the service, such as Google Analytics or similar tools, if used.

3. Legal Basis for Processing

We process personal data on the following lawful bases:

• Contract performance – to deliver the products and services you have ordered.
• Legal obligations – to comply with tax, customs and consumer‑protection laws.
• Legitimate interests – for fraud prevention, security and website optimisation (non‑essential cookies require consent).
• Consent – for any marketing communications or analytics cookies where you have actively given permission.

4. Third‑Party Disclosures

We share personal data with the following categories of service providers, each of which processes the data on our behalf and is contractually required to protect it:

• Payment processors (e.g., Stripe) to handle payment transactions.
• Hosting and CDN providers to keep the website online.
• Email service providers for order confirmations and optional newsletters.
• Shipping carriers and logistics providers for delivery of goods.
• Analytics providers (if used) for website performance analysis.

5. International Transfers

When we transfer data outside the European Economic Area (EEA) – for example, to a payment processor – we ensure appropriate safeguards are in place (Standard Contractual Clauses or equivalent).

6. Data Retention

We retain personal data only as long as necessary to fulfil the purposes described in this policy, or as required by law (e.g., tax records for 10 years). Order‑related data is kept for the duration required for accounting, warranty and statutory obligations.

7. Security

We implement reasonable technical and organisational measures to protect your data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your Rights

Under the GDPR you have the following rights, which you may exercise by contacting us at clockinsupport@gmail.com:

• Right of access – obtain a copy of your personal data.
• Right to rectification – correct inaccurate data.
• Right to erasure – request deletion where applicable.
• Right to restriction of processing.
• Right to data portability.
• Right to object to processing (including direct marketing).

We will respond within one month of receipt of your request, as required under GDPR, unless an extension applies.

9. Contact

If you have any questions about this Privacy Policy or wish to exercise your rights, please email us at clockinsupport@gmail.com.