PRIVACY POLICY

PRIVACY POLICY
Covylegs — AZEDEL LLC
==============================================================================

Last updated: [09/03/2026]

WHO IS RESPONSIBLE FOR YOUR DATA
--------------------------------

AZEDEL LLC, 1209 Mountain Place Northeast, Albuquerque, NM 87110, United
States, is the data controller for personal data collected through this
website. Contact us at contact@covylegs.com.

WHAT WE COLLECT
---------------

  - Order data: name, delivery and billing address, email address, phone
    number, order contents.
  - Payment data: handled by our payment providers. We receive confirmation of
    payment and the last digits of the card, never the full card number.
  - Account data: if you create an account, your login details and order
    history.
  - Support data: the content of messages you send us.
  - Usage data: IP address, device and browser, pages viewed, referring site.
    Collected through cookies and similar technologies — see our Cookie
    Policy.
  - Marketing data: your email address if you subscribe.

WHY WE USE IT, AND ON WHAT LEGAL BASIS
--------------------------------------

  - To process and deliver your order — performance of our contract with you.
  - To provide customer support — performance of our contract, and our
    legitimate interest in helping you.
  - To prevent fraud and keep the site secure — our legitimate interests.
  - To meet accounting and tax obligations — legal obligation.
  - To send marketing emails — your consent, or our legitimate interest where
    you are an existing customer buying similar goods. You can unsubscribe
    from any email.
  - To measure and improve our advertising — your consent, given through the
    cookie banner.

WHO WE SHARE IT WITH
--------------------

We share data only with the providers we need to run the shop: our e-commerce
platform (Shopify), payment providers, fulfilment partners and carriers, email
and support tools, and analytics and advertising platforms where you have
consented. Each processes data on our instructions.

We also share data where the law requires it.

We do not sell your personal data.

INTERNATIONAL TRANSFERS
-----------------------

We are based in the United States, and some of our providers operate outside
the UK and EEA. Where data is transferred, we rely on appropriate safeguards
such as the UK International Data Transfer Agreement, the EU Standard
Contractual Clauses, or an adequacy decision.

HOW LONG WE KEEP IT
-------------------

Order and transaction records are kept for as long as required for accounting
and tax purposes, typically [NUMBER] years. Support messages are kept for
[PERIOD]. Marketing data is kept until you unsubscribe.

YOUR RIGHTS
-----------

You have the right to access your data, to have it corrected or deleted, to
restrict or object to processing, to data portability, and to withdraw consent
at any time. Write to contact@covylegs.com and we will respond within one month.

If you are unhappy with how we handle your data, you may complain to the UK
Information Commissioner's Office (ico.org.uk) or to your local supervisory
authority.

CHILDREN
--------

This shop is not intended for children. We do not knowingly collect data from
anyone under 16.

CHANGES
-------

We may update this policy. The date at the top shows when it last changed.