Privacy Policy

1. Data Controller

Spy-Supply is the data controller for personal data collected through this website and our services. We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR).

2. Information We Collect

We collect information you provide directly to us, such as when you:

• Contact us through WhatsApp or our contact form
• Request product information or quotes
• Schedule pickup appointments
• Subscribe to our newsletter or updates
• Browse our website (through cookies and analytics)

Types of Personal Data

• Contact Information: Name, email address, phone number
• Communication Data: Messages, inquiries, support requests
• Technical Data: IP address, browser type, device information
• Usage Data: Pages visited, time spent, interaction patterns

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: When you provide explicit consent (e.g., newsletter subscription)
• Contract Performance: To fulfill orders and provide services
• Legitimate Interest: For business operations, security, and website improvement
• Legal Obligation: To comply with applicable laws and regulations

4. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and fulfill orders
• Communicate with you about products and services
• Provide customer support and respond to inquiries
• Ensure security and prevent fraud
• Comply with legal obligations
• Analyze website usage and improve user experience

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share your data only in the following circumstances:

• With your explicit consent
• To comply with legal obligations or court orders
• To protect our rights, property, or safety
• With trusted service providers who assist in our operations (under strict confidentiality agreements)
• In case of business transfer or merger (with prior notice)

6. Your Rights Under GDPR

As a data subject, you have the following rights:

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request limitation of data processing
• Right to Data Portability: Request transfer of your data
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at privacy@spy-supply.com. We will respond within 30 days.

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against:

• Unauthorized access, alteration, disclosure, or destruction
• Accidental loss or damage
• Unlawful processing

Our security measures include encryption, access controls, regular security assessments, and staff training.

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce agreements. Specific retention periods:

• Contact inquiries: 3 years after last contact
• Order data: 7 years for tax and legal compliance
• Marketing data: Until consent is withdrawn
• Website analytics: 26 months maximum

9. International Transfers

Your data is primarily processed within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure adequate protection through appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

10. Cookies and Tracking

We use cookies and similar technologies to improve your browsing experience. You can control cookie settings through your browser preferences. Essential cookies are necessary for website functionality and cannot be disabled.

11. Contact Us & Complaints

If you have questions about this Privacy Policy or wish to exercise your rights, contact us:

You also have the right to lodge a complaint with your local data protection authority if you believe your data protection rights have been violated.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Continued use of our services after changes constitutes acceptance of the updated policy.