Effective date: [DATE] | Last updated: [DATE]
This policy explains what we collect when you visit or buy from Moroji, why, who we share it with, and what you can do about it. We are based in the European Union, which means we apply the GDPR to everyone - a stricter standard than most US state laws require.
1. Who is responsible
[COMPANY NAME], [ADDRESS], France. Questions about privacy: contact@moroji.com.
2. Categories of information we collect
- Identifiers: name, billing and shipping address, email address, phone number.
- Commercial information: products you ordered, order history, amounts paid.
- Internet activity: IP address, browser and device type, pages viewed - collected through cookies.
- Payment information: handled directly by Stripe. We never receive or store your full card number.
We do not knowingly collect information from children under 13. [If your products target children, COPPA imposes additional obligations - take advice.]
3. Why we use it
- To process, ship and invoice your order, and to handle returns.
- To take payment securely and prevent fraud.
- To answer your messages.
- To meet our accounting and tax obligations.
- To send marketing emails only if you opted in - you can unsubscribe from any email.
4. Who we share it with
We do not sell your personal information. We share it only with the providers needed to fulfil your order:
- Stripe - payment processing.
- [CARRIER NAMES] - shipping and tracking.
- [HOSTING PROVIDER] - hosting of this website.
- [ANY ANALYTICS / EMAIL PROVIDER] - [name them; CalOPPA requires you to disclose the categories of third parties.]
International transfers: your data is processed in the European Union. If a provider transfers it outside the EU, we rely on the safeguards required by the GDPR (adequacy decision or standard contractual clauses).
5. How long we keep it
- Order data: for the duration of our relationship, then archived to meet accounting obligations ([X] years).
- Enquiries without a purchase: [X] years after our last exchange.
6. Your rights and choices
You can ask us to access, correct, delete or export your personal information, object to a use of it, or withdraw your consent to marketing. Email contact@moroji.com and we will respond within one month.
Reviewing and changing your information: you can also ask us at any time to review or update the details attached to your orders, by emailing us at the address above. (CalOPPA requires us to describe this process.)
[California residents: the CCPA/CPRA grants additional rights - including the right to know, delete, correct and opt out of sale or sharing - but it only applies to businesses meeting statutory thresholds (roughly $25M annual revenue, or personal information of 100,000+ California residents bought, sold or shared, or 50%+ of revenue from selling personal information). If you cross a threshold, this section must be expanded and a "Do Not Sell or Share My Personal Information" link added. Verify your status before publishing.]
If you are in the EU or the UK, you may also lodge a complaint with your data protection authority.
7. Cookies and "Do Not Track"
Cookies that are strictly necessary for the site to work (cart, session, language) are set without consent. Analytics and advertising cookies are set only after you agree via our cookie banner, and you can change your choice at any time.
Do Not Track: [CalOPPA requires an explicit statement here. State whether you honour browser "Do Not Track" signals. If you do not, say so plainly - that is permitted, but silence is not.]
8. Changes to this policy
If we change this policy we will update the "last updated" date above and, for significant changes, notify you by email or with a notice on the site.