PRIVACY POLICY

The organisation responsible for deciding how and why personal information is used is [LEGAL ENTITY / DATA CONTROLLER], of [REGISTERED ADDRESS]. Privacy contact: info@uswaapparel.com. Add any required representative or DPO: [REPRESENTATIVE / DPO DETAILS].

Depending on how you use the website, information may include your name, email, phone, account credentials, billing and delivery details, order information, product choices, size and colour selections, company or organisation, custom-order specifications, quantity, artwork, logos, files, messages, support history, newsletter preferences and any other information you submit.

Confirm the precise fields used by the live account, checkout and forms: [VERIFIED DATA FIELDS].

WooCommerce may process cart, checkout, order, delivery, tax and account information needed to operate the store. Payment details are handled according to the configured payment method and provider. Identify whether USWA Apparel receives full payment-card data or only transaction references: [PAYMENT PROCESSOR AND DATA FLOW].

When you use the website, technical information may include IP address, device and browser details, operating system, referring pages, visited pages, timestamps, session information, cookie identifiers, approximate location derived from IP, security events, cart/session activity and interaction data.

Only include categories confirmed by the live website and server logs: [VERIFIED AUTOMATIC DATA].

Essential WooCommerce and website cookies may support login, cart, checkout, preferences and security. Analytics, advertising, social, video, map or other non-essential technologies must be listed only if active. See the Cookie Policy and configure [CONSENT PLATFORM / COOKIE SETTINGS LINK].

Information may come directly from you, automatically from your device or browser, from WooCommerce and confirmed website tools, or from authorised service providers involved in payment, delivery, security or communications. If data comes from advertising platforms, social networks or other third parties, list the source and categories here: [THIRD-PARTY SOURCES].

Subject to verification, purposes may include operating the website; creating and managing accounts; processing and delivering orders; handling payments; responding to enquiries and support requests; managing custom and bulk orders; preventing fraud and securing systems; maintaining records; complying with legal duties; improving products and website performance; and sending marketing where permitted.

Final purpose list: [VERIFIED PURPOSES].

Where applicable law requires a legal basis, each purpose must be mapped to the appropriate ground, such as performance of a contract, compliance with a legal obligation, legitimate interests assessed against individual rights, consent, or another lawful basis.

Insert the completed mapping: [PURPOSE AND LAWFUL-BASIS TABLE]. Consent must be withdrawable where relied upon.

Marketing emails or messages should be sent only where permitted. Identify the newsletter or marketing provider, sign-up method and legal basis: [MARKETING PLATFORM AND BASIS]. Every marketing message should provide the required opt-out method. Service messages about an order or account are separate from promotional marketing.

Personal information may be shared only as necessary with confirmed categories such as hosting and infrastructure providers, payment processors, delivery partners, form and email services, accountants or professional advisers, security and fraud-prevention providers, analytics or advertising providers where permitted, and authorities when legally required.

Publish the verified list or categories: [PROCESSOR / RECIPIENT LIST]. Do not name a provider that is not active.

State accurately whether personal information is sold, shared or used for cross-context behavioural or targeted advertising under applicable law: [SALE / SHARING / TARGETED ADVERTISING STATUS]. If required, provide the correct opt-out mechanism and honour recognised preference signals: [OPT-OUT LINK OR METHOD].

Website and service providers may process information in countries different from the customer’s country. Identify the actual destinations, recipients and safeguards used for restricted transfers: [TRANSFER COUNTRIES, RECIPIENTS AND SAFEGUARDS]. Do not claim a safeguard until the relevant contract and mechanism are verified.

Personal information should be kept only as long as needed for the stated purpose, legal obligations, accounting and tax records, disputes, fraud prevention and enforcement of agreements. Publish category-specific periods or clear criteria: [DATA RETENTION SCHEDULE]. Delete or anonymise information when no longer required, subject to lawful exceptions.

USWA Apparel should use reasonable organisational and technical safeguards appropriate to the information and risks. Describe only verified controls: [SECURITY MEASURES]. No internet transmission or storage method can be guaranteed completely secure. Add the approved incident and notification process: [DATA BREACH PROCESS].

Depending on where you live and which law applies, rights may include being informed; access; correction; deletion; restriction; objection; portability; withdrawal of consent; opting out of sale, sharing or targeted advertising; limiting certain uses of sensitive information; and protection from unlawful discrimination for exercising rights.

Applicable rights, exceptions and response timing: [JURISDICTION-SPECIFIC RIGHTS].

Send a request to info@uswaapparel.com with the subject “Privacy Request”. We may need proportionate information to verify identity and authority before acting. Define the request workflow, authorised-agent process, appeal route and response timing: [RIGHTS REQUEST PROCEDURE].

The website is not intended for children below [APPLICABLE AGE THRESHOLD] to provide personal information or place orders without the legally required involvement of a parent or guardian. Confirm the applicable age and process for suspected child data: [CHILDREN’S PRIVACY PROCEDURE].

State whether the website uses automated decision-making or profiling that produces legal or similarly significant effects: [AUTOMATED DECISION-MAKING STATUS]. If used, describe the logic, significance, consequences and available rights in plain language.

The website may link to third-party sites or social platforms. Their privacy practices are controlled by them. Review every live social link, embedded feed, video, map and sharing tool, and list any data transfer caused by the integration: [VERIFIED EMBEDS AND SOCIAL TOOLS].

Contact us first at info@uswaapparel.com. Where applicable, you may also complain to the relevant privacy or data-protection authority. Identify the correct authority or authorities: [SUPERVISORY AUTHORITY / REGULATOR].

This policy may be updated when data practices, services or legal requirements change. The revised page should display a new effective or last-updated date. Material changes should be communicated where required by applicable law.