Privacy policy

Privacy Policy

Chromako ("we," "us," or "our") operates the e-commerce website chromako.com. We are committed to protecting your privacy and personal data in strict compliance with global privacy standards, including the EU/UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA).

1. Information We Collect

We gather data necessary to process transactions, prevent fraud, and improve your shopping experience:

  • Account & Order Data: Full name, phone number, shipping address, billing address, and email address submitted during checkout.
  • Payment Data: Financial transactions are processed via PCI-DSS compliant payment gateways (including PayPal and credit card processors). Chromako does not store, process, or have direct access to your credit card numbers or PayPal security credentials.
  • Technical & Usage Data: Automatically collected device identifiers, IP address, browser parameters, referring pages, and browsing activity via cookies.
  • Communication Records: Inquiries, dispute communications, or support requests submitted via service@chromako.com.

2. Legal Basis & Purposes of Data Processing

We process your data strictly under valid legal grounds:

  • Fulfillment of Contract: To process orders, manage deliveries, handle returns/refunds, and provide transaction updates.
  • Fraud Prevention & Risk Mitigation: To detect and prevent unauthorized transactions, chargeback abuse, and fraudulent activity (shared with payment providers like PayPal).
  • Legal & Tax Compliance: To maintain accounting records and satisfy statutory legal obligations.

3. Data Sharing & Third-Party Vendors

We never sell or rent your personal data. Data is shared exclusively with authorized third-party infrastructure providers necessary to complete your order:

  • E-Commerce Infrastructure (Shopify Inc.): Our store is hosted on Shopify, which stores transaction data securely behind enterprise firewalls.
  • Payment Processors (PayPal Holdings, Inc. & Gateway Partners): Data is transmitted securely to authorize payments, verify buyer identity, and handle dispute resolution.
  • Logistics & Carriers: Name, address, and phone number are provided to international postal and courier services strictly for parcel delivery and tracking.

4. Cookies & Automated Tracking Technologies

Chromako utilizes essential cookies for shopping cart integrity and session security, as well as performance cookies for traffic analysis. You may manage or disable cookies through your browser settings, though certain site features may become unavailable.

5. International Data Transfers & Retention

As a global platform, your personal information may be transferred across international borders and stored on servers located outside your country of residence. Data transfers comply with standardized transfer mechanisms (such as Standard Contractual Clauses). We retain order records for up to 7 years to satisfy statutory tax, accounting, and dispute handling requirements.

6. Your Personal Data Rights (GDPR / CCPA)

Depending on your jurisdiction, you hold the following rights:

  • Access & Correction: Request a copy of your personal data or update incorrect details.
  • Erasure ("Right to be Forgotten"): Request deletion of your data, subject to legal retention mandates.
  • Opt-Out: Request that your data not be shared or used for targeted analytics.

To exercise your rights, submit a request to service@chromako.com. Requests will be verified and addressed within 30 days.

7. Contact Information

For inquiries regarding this privacy policy or data security concerns:

  • Official Support Email: service@chromako.com
  • Platform Operator: Chromako Official Team
  • Website: chromako.com