Privacy Policy

01 What we collect

We collect only what we need to run the store and fulfil your orders:

• Order & contact details — name, email, phone, and shipping address you provide at checkout.
• Transaction details — items purchased and order history. Payment is handled by our payment provider; we do not store your full card number.
• Messages — anything you send us via the contact form, LINE, or social channels.
• Usage data — basic technical information such as device, browser, and pages viewed, collected through cookies and similar tools.

02 How we use your data

• To process, fulfil, and deliver your orders and handle returns.
• To respond to your questions and provide customer support.
• To improve our products, website, and service.
• To send updates or offers where you have agreed to receive them — you can opt out at any time.
• To meet legal, tax, and accounting obligations.

03 Legal basis

We rely on performing our contract with you (to fulfil orders), your consent (for marketing and non-essential cookies), our legitimate interests (to improve and secure the service), and compliance with legal obligations.

04 Who we share it with

We do not sell your personal data. We share it only with service providers who help us operate, such as our payment provider, shipping and courier partners, and IT/hosting services — and only as far as needed to carry out their work. We may also disclose data where required by law.

05 Cookies

When you first visit our site, a cookie banner lets you accept or reject non-essential cookies. Your choice is stored in your browser and applied on every page. Here is exactly what we use:

• Necessary (always on) — Cloudflare, our hosting and security provider, sets cookies needed to serve the site securely and protect it from abuse (e.g. bot and DDoS protection). Google Fonts also loads from Google's servers to display our typefaces, which shares your IP address with Google as part of that request. These cannot be switched off, as the site cannot function or stay secure without them.
• Analytics (only with your consent) — Google Analytics (GA4), to understand how visitors use the site and improve it. Currently inactive on our site; if enabled, it will only load after you click "Accept" on the cookie banner.
• Marketing (only with your consent) — Meta Pixel, to measure the effectiveness of our Facebook/Instagram ads. Currently inactive on our site; if enabled, it will only load after you click "Accept" on the cookie banner.

You can change your choice at any time by clearing your browser's site data for csidescrubs.com, which will show the cookie banner again on your next visit.

06 How long we keep it

We keep personal data only as long as needed for the purposes above — for example, to complete your order, support you afterwards, and meet accounting and legal requirements — after which it is deleted or anonymised.

07 Your rights

Subject to applicable law, you may request to access, correct, delete, or receive a copy of your personal data, object to or restrict certain processing, and withdraw consent at any time. To exercise these rights, contact us using the details below; we will respond within the timeframe required by law.

08 Security

We use reasonable technical and organisational measures to protect your data. No method of transmission or storage is completely secure, but we work to keep your information safe and to act promptly if an issue arises.

09 Children

Our store is intended for adults. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will remove it.

10 Changes to this policy

We may update this policy from time to time. The current version is the one published on this page, with the "last updated" date shown above.

11 Contact us

To ask about this policy or exercise your rights, reach us through our contact page or on LINE at @cside.