Privacy Policy

1. Introduction
Cross & Co. ("we", "us", "our") respects your privacy. This policy explains what personal data we collect when you visit our website or buy from us, how we use it, and your rights. The data controller is [LEGAL NAME / ADDRESS]. Contact: crossandcohelp@outlook.com.

2. What we collect
Information you give us when you place an order, create an account, sign up for emails or contact us:
- Name, email address, phone number, and shipping and billing addresses
- Order details and history
- Account login details
- Messages you send us
Payments are handled by our payment providers. We never see or store your full card details.

Information collected automatically when you browse:
- IP address, browser and device type
- Pages you visit, how long you stay, and the site you came from
- Cookie and similar tracking data (see section 6)

3. How we use it, and the legal basis
- To process and deliver your order and handle returns (to perform our contract with you)
- To send order and shipping updates (to perform our contract)
- To answer your questions and give support (contract and legitimate interest)
- To prevent fraud and keep the site secure (legitimate interest)
- To send marketing emails or texts, only if you've opted in (consent, which you can withdraw at any time)
- To improve our site and show relevant ads (consent, where cookies require it)
- To meet tax and accounting obligations (legal obligation)

4. Who we share it with
We don't sell your personal data for money. We share it only as needed to run the store, with:
- Shopify, which hosts our store
- Payment providers that process your payment
- Our fulfilment partners and carriers, to deliver your order
- Email and SMS platforms, if you've subscribed
- Analytics and advertising platforms (such as Google and Meta), based on your cookie choices
- Authorities, where the law requires it

Some of these providers are outside the EEA. Where that happens, transfers are protected by safeguards such as the European Commission's Standard Contractual Clauses.

5. How long we keep it
We keep order records for as long as tax and accounting law requires (in Spain, generally up to 6 years). Other data is kept only as long as needed for the purposes above, or until you ask us to delete it where the law allows.

6. Cookies
We use cookies to keep your cart working, remember your preferences, measure site traffic and, with your consent, show relevant ads. You can change your choices through our cookie banner or your browser settings. Turning off some cookies may affect how the site works.

7. Your rights
Depending on where you live, you can ask us to:
- Give you a copy of your data
- Correct inaccurate data
- Delete your data
- Restrict or object to how we use it
- Send your data to you or another service in a portable format
- Stop sending you marketing (use the unsubscribe link, or email us)
To use any of these rights, email crossandcohelp@outlook.com. We'll reply within one month. EU residents can also complain to their local data protection authority. In Spain, that's the Agencia Española de Protección de Datos (www.aepd.es).

8. Children
Our site isn't aimed at children under 16 and we don't knowingly collect their data. If you think a child has given us their information, contact us and we'll delete it.

9. Security
We use reasonable technical and organisational measures to protect your data. No online system is completely secure, but we work to protect your information and will act quickly if a problem occurs.

10. Other websites
Our site may link to other websites. We aren't responsible for how they handle your data, so please read their privacy policies.

11. Changes
We may update this policy. Changes are posted on this page with a new "last updated" date.

12. Contact
Cross & Co.
Email: crossandcohelp@outlook.com