CUSTOMER PRIVACY & COOKIE POLICY

Effective Date: February 2026

1. INTRODUCTION

At TSALOYS, the protection of your personal information is fundamental to our activities. This policy covers how we access, collect, store, and process your personal information in both paper and electronic form. This policy does not extend to services provided by third parties, such as social media platforms (WhatsApp, Facebook, Instagram, etc.) or franchisees acting on their own account.

2. DATA CONTROLLER

TSALOYS, an American LLC located in Camp Hill, Pennsylvania, acts as the “data controller”. This means we determine "why" and "how" your personal information is collected and used.

3. INFORMATION WE COLLECT

We collect several categories of information to provide you with a tailored experience:

Identifiers: Name, email, postal address, phone number, and online identifiers (IP address).
Transaction Data: Details of products purchased, prices, and payment information (processed via secured partners like Stripe).
Technical Data: Browser type, time zone, and interaction patterns on our website.
User-Generated Content: Photos from virtual try-ons or feedback you provide.

4. HOW WE USE YOUR DATA

We process your information based on the following legal grounds:

Performance of a Contract: To process payments, deliver orders, and manage returns.
Legitimate Interest: To improve our services, prevent fraud, and maintain your customer profile.
Consent: For marketing communications and certain types of cookies.

5. COOKIES & TRACKING

We use cookies to personalize content, analyze traffic, and provide social media features.

Strictly Necessary: Essential for the website to function (e.g., logging in, cart management).
Performance/Analytics: Helps us understand how visitors move around the site.
Targeting/Profiling: Used by advertising partners to show you relevant ads.
Managing Settings: You can adjust your preferences at any time via the ‘Cookie Settings’ button located on every page.

6. DATA RETENTION & SECURITY

We retain your personal information only as long as needed, generally for 7 years from your last interaction. We use industry-standard security measures, including SSL encryption and HTTPS, to protect your data during transmission.

7. YOUR RIGHTS

Depending on your jurisdiction, you may have the right to access, rectify, or erase your data, as well as the right to withdraw consent for marketing at any time.