AlpineCombatSystems

Privacy Policy for Alpine Combat Systems
Effective Date: September 01, 2025
Alpine Combat Systems (“we,” “us,” or “our”) operates an online shop on Etsy (the “Shop”) where we sell various products. We are committed to protecting your privacy and ensuring that your personal data is handled in compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and any applicable national data protection laws.
This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you interact with our Shop, including when you browse our listings, make a purchase, or communicate with us. If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, this policy outlines your rights under GDPR.
Please read this policy carefully. By using our Shop or providing us with your personal data, you acknowledge that you have read and understood this Privacy Policy.
1. Data Controller
Alpine Combat Systems is the data controller responsible for your personal data. Our contact details are:
• Shop Name: Alpine Combat Systems
• Platform: Etsy alpinecombatsystems.etsy.com
For any privacy-related inquiries, please contact via Etsy messages above.
If you believe we have not addressed your concerns adequately, you have the right to lodge a complaint with your local data protection authority (e.g., the Information Commissioner’s Office in the UK or the relevant supervisory authority in your EU country).
2. Personal Data We Collect
We collect personal data that you provide to us directly or that is shared with us through Etsy. This may include:
• Identity and Contact Data: Name, email address, phone number, and billing/shipping address.
• Transaction Data: Details of purchases, payment information (processed by Etsy or third-party payment providers; we do not store full payment details).
• Communication Data: Messages, reviews, or inquiries sent via Etsy or directly to us.
• Technical Data: IP address, browser type, device information, and usage data (collected automatically via Etsy analytics or if you visit linked sites).
• Marketing Data: Preferences for receiving marketing communications, if you opt in.
We do not collect sensitive personal data (e.g., racial or ethnic origin, health data) unless it is voluntarily provided in communications, in which case it will be handled with extra care.
3. How We Collect Your Personal Data
• Directly from You: When you place an order, send a message, leave a review, or subscribe to updates.
• Via Etsy: Etsy shares necessary data with us to fulfill orders, such as shipping details.
• Automatically: Through cookies or similar technologies on Etsy or our linked sites (see Section 9 for details).
• From Third Parties: Shipping providers or payment processors may share confirmation data.
4. Purposes and Legal Basis for Processing Your Personal Data
We process your personal data only for specified, explicit, and legitimate purposes. The legal bases under GDPR include:
• Performance of a Contract (Art. 6(1)(b) GDPR): To process and fulfill your orders, including shipping products and handling returns.
• Legitimate Interests (Art. 6(1)(f) GDPR): To improve our Shop, respond to inquiries, prevent fraud, and analyze shop performance (balanced against your rights).
• Consent (Art. 6(1)(a) GDPR): For marketing communications or non-essential cookies (you can withdraw consent at any time).
• Legal Obligation (Art. 6(1)(c) GDPR): To comply with tax, accounting, or regulatory requirements.
We do not use your data for automated decision-making or profiling that produces legal effects.
5. Sharing Your Personal Data
We may share your personal data with:
• Etsy: As our platform provider, they handle much of the data processing (see Etsy’s Privacy Policy for details).
• Service Providers: Shipping companies (e.g., USPS, DHL), payment processors (e.g., PayPal, Stripe), and IT tools for shop management.
• Legal Authorities: If required by law, such as for tax audits or subpoenas.
• Business Transfers: In the event of a sale or merger of our Shop.
All third parties are required to respect the security of your data and process it only in accordance with our instructions and GDPR requirements. We do not sell your data to third parties.
6. International Data Transfers
If you are in the EEA/UK/Switzerland and we transfer data outside these areas (e.g., to the US via Etsy), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission or adequacy decisions.
7. Data Security
We implement appropriate technical and organizational measures to protect your data, including:
• Secure access controls and encryption where feasible.
• Regular reviews of our processes.
• Limiting access to personal data to authorized personnel only.
However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but strive to protect your data.
In the event of a data breach, we will notify you and relevant authorities as required by GDPR (within 72 hours where feasible).
8. Data Retention
We retain your personal data only as long as necessary for the purposes outlined:
• Transaction data: Up to 7 years for tax and accounting purposes.
• Communication data: Up to 2 years or until resolved.
• Marketing data: Until you withdraw consent.
After this, data is anonymized or deleted securely.
9. Cookies and Tracking Technologies
Our Shop on Etsy may use cookies for functionality, analytics, and advertising. Etsy manages most cookies; please review their policy.
• Essential Cookies: Necessary for shop operation (no consent required).
• Non-Essential Cookies: For analytics or marketing (consent-based).
You can manage cookie preferences via your browser settings or Etsy’s tools. For more details, see our Cookie Policy (if separate) or contact us.
10. Your Rights Under GDPR
If GDPR applies to you, you have the following rights:
• Access: Request a copy of your data.
• Rectification: Correct inaccurate data.
• Erasure (“Right to be Forgotten”): Delete data in certain circumstances.
• Restriction: Limit processing.
• Objection: Object to processing based on legitimate interests or for direct marketing.
• Data Portability: Receive your data in a structured format.
• Withdraw Consent: At any time, without affecting prior processing.
To exercise these rights, contact us at [insert email]. We will respond within one month (extendable if complex). There is no fee unless requests are excessive.
11. Children’s Privacy
Our Shop is not intended for children under 16. We do not knowingly collect data from children. If we become aware of such data, we will delete it.
12. Changes to This Privacy Policy
We may update this policy to reflect changes in our practices or legal requirements. We will notify you via email or a prominent notice on our Shop. Continued use after changes constitutes acceptance.
13. Contact Us
For questions or to exercise your rights, message us via Etsy.
This policy is not legal advice. We recommend consulting a legal professional to ensure full compliance with GDPR for your specific circumstances