Fashion knows no boundaries; style is defined by you.

Privacy Policy

Welcome to cinchandwrap (www.cinchandwrap.com). We are committed to protecting your personal data and upholding your privacy rights under European and international law.

1. Data Controller Information

This Privacy Policy governs the processing of personal data collected through www.cinchandwrap.com.

The data controller responsible for your personal information under the General Data Protection Regulation (GDPR – Regulation (EU) 2016/679) and applicable data protection legislation is cinchandwrap, a commercial entity operating out of Germany and serving customers exclusively within the United States and Europe.

For any inquiries or rights requests regarding your personal data, you may contact our designated Data Protection point of contact at:

  • Official Privacy Email: order@cinchandwrap.com

2. Information We Collect and Process

We collect personal information necessary to execute transactions, provide customer support, and fulfill our contractual and legal obligations. This information includes:

  • Identity & Contact Data: Full name, billing address, shipping address, and email address.
  • Transaction Data: Details regarding apparel products purchased, order numbers, pricing, and transaction history.
  • Technical & Usage Data: IP address, browser type, operating system, device details, and interaction details recorded during website visits.

3. Purpose and Legal Basis for Processing

We process personal data under the following legal bases pursuant to Article 6 of the GDPR:

  • Performance of Contract (Art. 6(1)(b)): To fulfill customer orders, manage account registration, process deliveries, and communicate essential updates regarding transactions.
  • Legal Compliance (Art. 6(1)(c)): To maintain precise commercial records, invoice details, and financial documentation required by German tax law and applicable trade regulations.
  • Legitimate Interests (Art. 6(1)(f)): To maintain website operational integrity, protect our infrastructure against fraudulent activity, and improve user experience across our digital store.

4. Payment Processing with Stripe

Payment transactions conducted on www.cinchandwrap.com are processed directly via our merchant partner, Stripe Payments Europe, Limited (“Stripe”).

  • Data Transmission: When an order is submitted, required checkout information (such as transaction amount, currency, billing name, and IP address) is securely transmitted directly to Stripe.
  • Card Security: cinchandwrap does not collect, store, or process raw credit card numbers, debit card numbers, or banking credentials on our local servers.
  • Regulatory Compliance: Stripe operates as an independent data controller for payment processing services and fraud monitoring under strict financial PCI-DSS Level 1 compliance standards. Payment processing is governed by Stripe’s privacy standards available at Stripe Privacy Policy.

5. Cookies and Tracking Technologies

Our website utilizes essential and functional cookies to support store performance:

  • Strictly Necessary Cookies: Essential for fundamental store functionality, shopping cart persistence, and secure checkout navigation.
  • Security Cookies: Utilized by payment networks (Stripe) for anti-fraud monitoring during transaction checkouts.
  • User Control: Users can adjust or disable cookie preferences through their web browser settings at any time.

6. Data Retention Periods

In compliance with statutory requirements, personal data is retained only for as long as necessary to satisfy the purpose for which it was collected:

  • Transaction & Billing Records: Retained for up to 10 years following the end of the fiscal year in which the transaction took place, in accordance with German commercial and tax legislation (Handelsgesetzbuch / Abgabenordnung).
  • General Account & Customer Support Data: Retained for the duration of the active customer relationship plus 3 years following the last transaction or communication, after which data is securely erased or anonymized.
  • Technical Log Data: Retained for up to 12 months for cyber defense and website integrity auditing.

7. Data Sharing, Third-Party Disclosures & International Transfers

Personal data is kept strictly confidential and is shared only with external service providers essential to operational delivery:

  1. Payment Processors: Stripe, for direct payment handling, checkout processing, and financial risk prevention.
  2. Logistics & Delivery Partners: International and regional courier/postal operations strictly for physical order delivery across the US and Europe.
  3. Legal Authorities: Regulatory agencies or statutory bodies when required under applicable law.

International Transfers: Where personal data of customers is processed by service partners outside the European Economic Area (EEA), such transfers are governed by EU-approved Standard Contractual Clauses (SCCs) to ensure statutory data protection levels.

8. Data Subject Rights Under GDPR

Under applicable data protection standards, consumers retain specific statutory rights regarding their personal data:

  • Right of Access: Request a copy of the personal data held about you.
  • Right to Rectification: Request correction of inaccurate or incomplete information.
  • Right to Erasure (“Right to be Forgotten”): Request deletion of data where processing is no longer required, subject to statutory retention obligations.
  • Right to Restrict Processing: Request suspension of processing under designated legal circumstances.
  • Right to Data Portability: Request structured transfer of submitted personal data in a machine-readable format.
  • Right to Object: Object to data processing based on legitimate business interests.

To exercise any of these statutory rights, please submit a formal request to order@cinchandwrap.com. You also maintain the right to lodge a complaint with your local supervisory authority or the German Federal Commissioner for Data Protection and Freedom of Information (BfDI).

9. Data Security Measures

We implement administrative and technical controls intended to protect personal information against unauthorized access, loss, or alteration. All electronic order details transmitted during checkout utilize industry-standard TLS/SSL encryption protocols.