PRIVACY POLICY

1. INTRODUCTION

SpicyEditions ("we", "our", or "us"), a trading name of Dadoum Labs (SIREN 934 519 265, 15 allée Darius Milhaud, 75019 Paris, France), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website spicyeditions.com and make purchases from us.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.

2. INFORMATION WE COLLECT

Personal Information

When you make a purchase, we collect information that you voluntarily provide, including:

• Name and contact information (email address, phone number)
• Shipping and billing address
• Payment information (processed securely by Stripe)
• Order history and preferences

Automatically Collected Information

When you visit our website, we may automatically collect certain information, including:

• IP address and browser type
• Device information and operating system
• Pages visited and time spent on site
• Referring website addresses

3. HOW WE USE YOUR INFORMATION

• Order processing and delivery — including payment, production, dispatch, returns, refunds, and customer support. Lawful basis: performance of a contract.
• Legal and accounting obligations — including tax, accounting, fraud prevention, and record keeping. Lawful basis: legal obligation.
• Website improvement — including analytics and performance monitoring, subject to your cookie choices. Lawful basis: consent where required for non-essential cookies, otherwise legitimate interests.
• Marketing communications — only where you have opted in or where otherwise permitted by law. Lawful basis: consent.

4. PAYMENT SECURITY

All payment transactions are processed through Stripe, a PCI-DSS compliant payment processor. We do not store your full credit card details on our servers. Stripe's privacy policy can be found at stripe.com/privacy.

5. COOKIES AND TRACKING

We use necessary cookies to operate core site features such as the shopping cart, checkout, and security. These are essential for the site to function and do not require consent.

We may also use optional analytics and marketing cookies to understand how the site is used and improve our services. These optional cookies will only be set where you have given your consent. You can change your cookie preferences at any time.

Disabling necessary cookies through your browser settings may affect your ability to use certain features of the website.

6. SHARING YOUR INFORMATION

We may share your information with third parties only in the following circumstances:

• Stripe — payment processing. Receives your payment card data and billing information. Privacy policy: stripe.com/privacy
• Printify — print production and fulfilment. Receives your name, shipping address, and order details to produce and dispatch your posters. Privacy policy: printify.com/privacy-policy
• Loops.so — transactional and marketing email delivery. Receives your name and email address to send order confirmations, shipping notifications, and (with your consent) marketing communications. Privacy policy: loops.so/privacy
• Neon — database infrastructure. Your order records, including name, email, shipping address, and order history, are stored on Neon's managed PostgreSQL platform. Privacy policy: neon.tech/privacy-policy
• Cloudflare — website hosting and content delivery. May process technical data such as IP addresses. Privacy policy: cloudflare.com/privacypolicy
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

7. DATA RETENTION

We retain your personal information for as long as necessary to fulfill the purposes outlined in this privacy policy, unless a longer retention period is required by law. Order information is retained for accounting and tax purposes for 7 years.

8. YOUR RIGHTS (GDPR)

If you are a resident of the European Economic Area (EEA) or the United Kingdom, you have certain data protection rights:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate personal data
• Erasure: Request deletion of your personal data
• Restriction: Request restriction of processing your personal data
• Portability: Request transfer of your data to another service
• Objection: Object to processing of your personal data
• Withdraw Consent: Withdraw consent for marketing communications

To exercise these rights, please contact us at [email protected]. We will respond within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with a supervisory authority. Our lead supervisory authority is the CNIL (Commission Nationale de l'Informatique et des Libertés) in France.

9. CHILDREN'S PRIVACY

Our website is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

10. INTERNATIONAL TRANSFERS

Some of our service providers may process personal data outside the UK or EEA. Where we transfer personal data internationally, we take steps to use appropriate safeguards required by applicable data protection law, such as standard contractual clauses or transfers to countries with an adequate level of data protection as determined by the European Commission or the UK government.

11. CHANGES TO THIS POLICY

We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last updated" date. We encourage you to review this privacy policy periodically.

12. CONTACT US

If you have any questions about this Privacy Policy, please contact us: