Privacy Policy

Last updated: August 2026

What personal data we collect, why we use it, who we share it with and the rights you have over it. Written to be read, not to be skipped.

Who we are

This website is operated by Thecoolgang ("we", "us", "our"), which acts as the data controller for the personal data described in this policy.

For any question about this policy or about your personal data, write to info@coolgangshop.com.

What data we collect

• Order data: name, billing and shipping address, email address, telephone number, order contents and payment status.
• Account data: if you create an account, your login details and order history.
• Communications: messages you send us through the contact form, email or chat.
• Marketing data: your email address and consent status, if you subscribe.
• Technical data: IP address, browser and operating system, date and time of access, referring page, and data collected through cookies and similar technologies.

We do not receive or store your full card number. Card data is handled directly by our payment provider.

Why we use it, and on what legal basis

Purpose	Legal basis
Processing and delivering your order, handling returns and refunds	Performance of a contract
Customer support and communications about your order	Performance of a contract
Accounting, invoicing and tax records	Legal obligation
Fraud prevention and site security	Legitimate interest
Marketing emails and newsletters	Consent
Analytics and advertising cookies	Consent
Product reviews	Consent

Where we rely on consent, you can withdraw it at any time. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

Who we share it with

We share personal data only with service providers that need it to deliver a service to us. Each acts under a data processing agreement.

• Shopify Inc. — e-commerce platform and hosting
• MONEI — payment processing
• Shipping carriers — delivery and tracking
• StatusPro — order status lookup
• Fera — product reviews
• Rapid Search — on-site search and filtering
• SendWILL — email marketing
• Shopify Inbox — customer messaging
• Instafeed — Instagram feed display

We do not sell your personal data.

How long we keep it

• Order and invoicing records: for the period required by applicable tax and accounting law.
• Customer accounts: for as long as the account remains active. You can ask us to delete it at any time.
• Marketing data: until you withdraw your consent or unsubscribe.
• Support messages: up to 12 months after the enquiry is closed.
• Cookie data: as set out in our Cookie Policy.

International transfers

Some of our service providers are located outside the European Economic Area, including in the United States. Where personal data is transferred outside the EEA, the transfer is made on the basis of an adequacy decision or of Standard Contractual Clauses approved by the European Commission, together with any additional safeguards required.

You can request more information about these safeguards by writing to info@coolgangshop.com.

Your rights

If you are in the European Economic Area or the United Kingdom, you have the right to:

• Access the personal data we hold about you
• Rectify data that is inaccurate or incomplete
• Erase your data, where there is no overriding legal reason to keep it
• Restrict how we process your data
• Object to processing based on legitimate interest, and to direct marketing at any time
• Data portability — receive your data in a structured, machine-readable format
• Withdraw consent at any time, where processing is based on consent

To exercise any of these rights, write to info@coolgangshop.com. We will respond within one month.

Right to complain

If you believe we have not handled your data correctly, you can lodge a complaint with the data protection authority of the country where you live or work. For example: the AEPD in Spain, the AZOP in Croatia, the BfDI or your regional authority in Germany, the Garante in Italy, the UODO in Poland or the ÚŘOO in Czechia.

Cookies

We use cookies and similar technologies. Full details, including the categories we use and how to change your choices, are in our Cookie Policy.

Security

We take reasonable technical and organisational precautions to protect your personal data. The site runs over an encrypted HTTPS connection, and payment data is handled by a PCI-DSS compliant provider. No system is completely secure, but we work to keep your data protected and to notify you and the relevant authority if a breach affecting your rights ever occurs.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed. Where the change is significant, we will let you know.