Privacy policy

This Privacy Policy explains how personal information is collected, used, disclosed, stored and otherwise processed in connection with caguuux.shop.

This policy applies when you:

• Visit caguuux.shop;
• Browse our products;
• Place or attempt to place an order;
• Create or use an account where available;
• Subscribe to marketing communications;
• Contact customer service;
• Participate in promotions or surveys; or
• Otherwise interact with our online store.

For privacy-related enquiries, contact:

Email: info@caguuux.shop

UK privacy notices generally need to explain the identity/contact details of the organisation, purposes and lawful bases of processing and other information required by the UK GDPR.

Personal Information We May Collect

Depending on how you interact with caguuux.shop, we may collect information including:

Identity Information

Such as:

• Name;
• Customer account information;
• Username or account identifier; and
• Other information necessary to identify an order or customer-service request.

Contact Information

Such as:

• Email address;
• Telephone number;
• Billing address; and
• Delivery address.

Order and Transaction Information

Such as:

• Products ordered;
• Order number;
• Purchase value;
• Order status;
• Shipping information;
• Returns;
• Refunds;
• Discounts;
• Transaction history; and
• Customer-service records.

Payment Information

Payment information may be collected and processed by payment service providers.

Depending on the payment method used, caguuux.shop may receive transaction identifiers, payment status and limited payment-related details rather than complete payment-card credentials.

Technical and Device Information

We or our technology providers may collect:

• Internet Protocol address;
• Browser type;
• Device type;
• Operating system;
• Language;
• Time zone;
• Cookie identifiers;
• Approximate location derived from technical information;
• Referring URLs;
• Website interaction information; and
• Security and fraud-prevention signals.

Usage Information

We may collect information concerning how customers use caguuux.shop, including pages viewed, products browsed, navigation activity, shopping-cart activity and interaction with website features.

Communications

If you contact us, we may process the content of your communication and information necessary to respond to your enquiry.

How We Collect Personal Information

We may collect personal information:

• Directly from you;
• Automatically when you use the website;
• Through Shopify and related ecommerce technology;
• Through payment processors;
• Through shipping and fulfilment providers;
• Through analytics providers;
• Through advertising or marketing providers where lawful; and
• From fraud-prevention and security providers.

Purposes for Which We Use Personal Information

We may process personal information for purposes including:

• Processing and fulfilling orders;
• Processing payments;
• Delivering products;
• Providing order confirmations and delivery information;
• Managing cancellations, returns and refunds;
• Providing customer support;
• Operating customer accounts;
• Preventing fraud and unauthorised transactions;
• Maintaining website security;
• Complying with legal obligations;
• Maintaining accounting and transaction records;
• Resolving disputes;
• Establishing or defending legal claims;
• Improving website performance;
• Understanding how our website is used;
• Personalising website functionality where lawful;
• Sending marketing communications where permitted; and
• Administering our ecommerce operations.

Lawful Bases for Processing

Where the UK GDPR applies, we process personal information only where an appropriate lawful basis is available.

Depending on the processing activity, this may include:

Performance of a Contract

We may process information where necessary to:

• Accept or administer an order;
• Process payment;
• Deliver products;
• Communicate about an order;
• Handle returns or refunds; or
• Take steps requested by you before entering into a contract.

Legal Obligation

We may process information where necessary to comply with legal obligations, including obligations relating to:

• Taxation;
• Accounting;
• Consumer rights;
• Fraud prevention where legally required;
• Regulatory compliance; and
• Lawful requests from public authorities.

Legitimate Interests

Where appropriate and subject to applicable balancing requirements, we may process information for legitimate interests such as:

• Protecting our website;
• Preventing fraud;
• Improving our services;
• Managing customer relationships;
• Understanding business performance;
• Establishing or defending legal claims; and
• Maintaining the security and integrity of our ecommerce operations.

Consent

Where consent is required, we may process information based on your consent, including for certain marketing or tracking activities.

Where processing is based on consent, you may withdraw that consent subject to applicable law.

Shopify

Our online store may be powered or supported by Shopify.

Shopify provides ecommerce infrastructure that can process information on behalf of merchants to enable functions such as transactions, order fulfilment, fraud screening, account functionality and ecommerce operations.

Shopify explains that, when individuals visit or purchase from a Shopify merchant, the merchant generally controls how and why the customer's information is used while Shopify processes relevant information in connection with its services.

Service Providers

We may disclose personal information to service providers where reasonably necessary for our operations.

These may include providers of:

• Ecommerce hosting;
• Payment processing;
• Fraud prevention;
• Website security;
• Order fulfilment;
• Warehousing;
• Shipping;
• Delivery tracking;
• Customer support;
• Email services;
• Analytics;
• Advertising;
• Consent management;
• Cloud storage;
• Information technology; and
• Professional advisory services.

Service providers are expected to process information in accordance with applicable contractual and legal requirements.

Legal and Regulatory Disclosures

We may disclose information when reasonably necessary to:

• Comply with applicable law;
• Respond to a valid legal process;
• Respond to a lawful request from a regulator, court or public authority;
• Investigate suspected fraud;
• Protect our legal rights;
• Protect customers or others;
• Enforce applicable agreements; or
• Establish, exercise or defend legal claims.

Business Transactions

If all or part of the business associated with caguuux.shop is reorganised, sold, transferred, merged or otherwise involved in a corporate transaction, relevant personal information may be transferred where lawful and reasonably necessary in connection with that transaction.

Cookies and Similar Technologies

caguuux.shop may use cookies and other storage/access technologies to support functionality such as:

• Remembering shopping-cart contents;
• Maintaining secure sessions;
• Fraud prevention;
• Remembering preferences;
• Measuring website performance;
• Analytics; and
• Advertising or marketing where permitted.

PECR applies not only to traditional cookies but also to technologies including tracking pixels, web storage, fingerprinting, scripts and similar methods that store or access information on a user's device. Some uses may be permitted under statutory exceptions, while other uses require valid consent.

Where consent is legally required, we aim to obtain appropriate consent before using the relevant technology.

Users may also be able to control cookies through our consent-management interface and browser settings.

Blocking certain technologies may affect website functionality.

Marketing Communications

Where permitted by law, we may send information about products, offers or other commercial matters.

Electronic marketing will be carried out in accordance with applicable UK GDPR and PECR requirements.

Where consent is required, we will seek appropriate consent.

Where another lawful route such as the applicable customer “soft opt-in” is available, we may rely on it only where its legal requirements are satisfied.

Marketing messages will provide an appropriate way to unsubscribe or opt out.

The ICO's April 2026 guidance continues to regulate direct marketing by electronic mail under PECR.

International Transfers

Some ecommerce and technology providers may process personal information outside the United Kingdom.

Where a transfer constitutes a restricted transfer under UK data-protection law, we will seek to ensure that an appropriate lawful transfer mechanism is used.

Depending on the circumstances, this may include:

• UK adequacy regulations;
• Appropriate safeguards such as an International Data Transfer Agreement or applicable Addendum; or
• A legally available exception.

ICO guidance confirms that restricted transfers must be covered by a permitted transfer mechanism.

Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and to satisfy applicable legal, accounting, tax, fraud-prevention, dispute-resolution and record-keeping requirements.

Different categories of information may therefore be retained for different periods.

When information is no longer reasonably required, it may be deleted, anonymised or otherwise securely disposed of in accordance with applicable requirements.

Information Security

We use reasonable technical and organisational safeguards designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or unauthorised access.

However, no method of transmission over the internet and no electronic storage system can be guaranteed to be completely secure.

Customers should use appropriate security practices, including protecting passwords and avoiding disclosure of account credentials.

Your Data-Protection Rights

Subject to applicable conditions and exemptions, individuals may have rights including:

• The right to be informed about processing;
• The right to request access to personal information;
• The right to request correction of inaccurate information;
• The right to request erasure in qualifying circumstances;
• The right to request restriction of processing;
• The right to object to certain processing;
• The right to data portability in qualifying circumstances;
• Rights concerning certain automated decision-making;
• The right to withdraw consent where processing is based on consent; and
• The right to complain to the applicable supervisory authority.

To exercise an applicable privacy right, contact:

info@caguuux.shop

We may request information reasonably necessary to verify identity before fulfilling a request.

Complaints

If you have concerns about our handling of personal information, please contact us first at:

info@caguuux.shop

Where applicable, individuals also have the right to raise a complaint with the Information Commissioner's Office (ICO).

Children's Privacy

caguuux.shop is intended as a general ecommerce store and is not designed to knowingly collect personal information from children in circumstances where parental consent or another legal basis is required.

If we become aware that personal information has been collected inappropriately from a child, we will take reasonable steps to address the matter.

Third-Party Websites

Our website may contain links to third-party websites or services.

Their privacy practices are governed by their own policies. We encourage users to review applicable third-party privacy notices before providing personal information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time because of changes in:

• Applicable law;
• Regulatory guidance;
• Our services;
• Ecommerce technology;
• Service providers; or
• Our data-processing practices.

The updated version will be published on caguuux.shop with an updated revision date where appropriate.

Contact Us

For privacy questions or requests:

caguuux.shop
Email: info@caguuux.shop