Privacy policy

Last Updated: August 2026

Outcos ("we", "us", "our", or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our Services.

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our Services.

---

1. Information We Collect

We collect information in the following ways:

1.1 Information You Provide Directly

We collect information you voluntarily provide when you:

• Create an Account: Name, email address, password, phone number, date of birth
• Place an Order: Billing address, shipping address, payment card information, order history
• Contact Us: Messages, inquiries, feedback, and any other information you choose to share
• Subscribe to Communications: Email address for newsletters and marketing communications
• Submit Reviews or Comments: Product reviews, ratings, and user-generated content

1.2 Information Collected Automatically

When you visit our website or use our Services, we automatically collect certain information about your device and browsing behavior:

• Log Data: IP address, browser type, operating system, pages visited, time and date of visits, referring website
• Device Information: Device type, device identifiers, mobile network information
• Cookies and Similar Technologies: Information stored through cookies, web beacons, pixels, and similar tracking technologies
• Location Data: Approximate location based on IP address (not precise GPS tracking)
• Behavioral Data: Pages visited, products viewed, items added to cart, search queries, interaction time

1.3 Information from Third Parties

We may receive information about you from:

• Payment processors and financial institutions
• Shipping and logistics partners
• Marketing and analytics providers
• Social media platforms (if you link your social account to your Outcos account)
• Customer service providers

---

2. How We Use Your Information

We use the information we collect for the following purposes:

2.1 To Provide and Manage Services

• Process and fulfill your orders
• Provide customer support and respond to inquiries
• Manage your account and provide account access
• Send order confirmations, shipping updates, and delivery notifications
• Handle returns, exchanges, and refunds

2.2 For Marketing and Communication

• Send promotional emails and newsletters (with your consent)
• Notify you about product updates, sales, and special offers
• Personalize your shopping experience based on your preferences
• Conduct surveys and gather customer feedback

2.3 For Analytics and Improvement

• Analyze website traffic and user behavior
• Improve website functionality and user experience
• Identify trends and optimize our Services
• Monitor and prevent fraud, abuse, and security issues

2.4 For Legal and Compliance Purposes

• Comply with legal obligations and regulations
• Enforce our Terms of Service and other agreements
• Protect our legal rights and prevent fraud
• Respond to lawful requests from authorities

---

3. Legal Basis for Processing (GDPR)

For users in the European Union and United Kingdom, we process personal data on the following legal bases:

• Contract Performance: Processing necessary to provide services and fulfill orders
• Legal Obligation: Processing required by law or regulation
• Legitimate Interest: Processing for business purposes (fraud prevention, security, analytics)
• Consent: Processing based on your explicit consent (marketing communications, non-essential cookies)

---

4. How We Share Your Information

We do not sell, trade, or rent your personal information to third parties. However, we may share your information with:

4.1 Service Providers

We share information with trusted third parties who provide essential services:

• Shopify: Website hosting and e-commerce platform (see Shopify Privacy Policy)
• Payment Processors: Credit card processors and payment gateways for secure transactions
• Shipping Partners: Delivery and logistics companies for order fulfillment
• Email Services: Email delivery and marketing platforms
• Analytics Providers: Google Analytics and similar tools for website performance
• Customer Service Tools: Support and communication platforms

4.2 Legal Requirements

We may disclose your information if required by law or if we believe in good faith that such disclosure is necessary to:

• Comply with legal obligations and court orders
• Enforce our Terms of Service and other agreements
• Protect our rights, privacy, safety, or property
• Prevent fraud or other illegal activities

4.3 Business Transfers

If Outcos is involved in a merger, acquisition, bankruptcy, or asset sale, your information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your information with third parties if you explicitly consent to such sharing.

---

5. Cookies and Tracking Technologies

5.1 What Are Cookies?

Cookies are small data files stored on your device that help us recognize you, remember your preferences, and analyze your browsing behavior.

5.2 Types of Cookies We Use

Essential Cookies: Required for website functionality (login, checkout, security)

Performance Cookies: Analyze website usage and improve performance

Marketing Cookies: Track your interests for personalized advertising and retargeting

Third-Party Cookies: Set by external services like Google Analytics and social media platforms

5.3 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are being sent. However, blocking essential cookies may affect website functionality.

5.4 Other Tracking Technologies

We also use web beacons, pixels, and similar tracking technologies to monitor website activity and marketing effectiveness.

---

6. Data Retention

We retain your personal information for as long as necessary to provide our Services and fulfill the purposes outlined in this Privacy Policy:

• Account Information: Retained for the duration of your account and 12 months after account closure
• Order Information: Retained for 7 years (for tax and legal compliance)
• Payment Information: Not retained; processed and deleted after transaction completion
• Marketing Communications: Retained until you unsubscribe
• Log and Browsing Data: Retained for 12 months

If you request data deletion, we will delete your information unless we are required to retain it by law or for legitimate business purposes.

---

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• SSL/TLS Encryption: Your data is encrypted during transmission
• Secure Payment Processing: Payment card information is processed by PCI-compliant payment processors
• Access Controls: Only authorized employees can access your information
• Regular Security Audits: We conduct regular security assessments and updates
• Secure Servers: Data is stored on secure, password-protected servers

Important: No method of transmission or storage is completely secure. While we use industry-standard security measures, we cannot guarantee absolute security of your information.

---

8. Your Privacy Rights

8.1 EU/UK Users (GDPR Rights)

If you are located in the European Union or United Kingdom, you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete information
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Limit how we process your information
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Oppose processing of your information
• Right to Withdraw Consent: Withdraw consent for marketing communications

8.2 California Users (CCPA Rights)

If you are a California resident, you have the right to:

• Know what personal information is collected
• Know whether personal information is sold or shared
• Delete personal information
• Opt-out of the sale or sharing of personal information

8.3 How to Exercise Your Rights

To exercise any of these rights, please contact us at:

We will respond to your request within 30 days. We may request verification of your identity before processing your request.

---

9. International Data Transfers

Your information may be transferred to, stored in, and processed in countries other than your country of residence. These countries may have different data protection laws than your home country.

When we transfer data internationally, we implement appropriate safeguards, including:

• Standard contractual clauses approved by regulatory authorities
• Adequacy decisions recognizing equivalent data protection
• Your explicit consent to the transfer

By using our Services, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection rules.

---

10. Children's Privacy

Our Services are not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13.

If we become aware that we have collected personal information from a child under 13, we will promptly delete such information and terminate the child's account.

If you believe we have collected information from a child under 13, please contact us immediately.

---

11. Third-Party Links and Services

Our website may contain links to third-party websites and services. We are not responsible for the privacy practices of these external sites.

We encourage you to review the privacy policies of any third-party websites before providing your personal information.

---

12. Email Communications

12.1 Marketing Emails

We send promotional emails only to users who have opted in or consented to receive marketing communications.

You can unsubscribe from marketing emails at any time by:

• Clicking the "Unsubscribe" link in any marketing email
• Updating your account preferences
• Contacting us directly at support@outcos.com

12.2 Transactional Emails

We will continue to send transactional emails (order confirmations, shipping updates, support responses) even if you unsubscribe from marketing communications, as these are necessary to provide our Services.

---

13. California Privacy Rights (CCPA Compliance)

California residents have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected and how it is used
• Right to delete personal information
• Right to opt-out of the "sale" or "sharing" of personal information
• Right to non-discrimination for exercising CCPA rights

To submit a CCPA request, contact us at support@outcos.com.

---

14. Changes to This Privacy Policy

We may update this Privacy Policy at any time. Changes will be effective immediately upon posting to our website.

Your continued use of our Services after changes are posted constitutes your acceptance of the updated Privacy Policy.

We will notify you of material changes via email or prominent notice on our website.

---

15. Contact Information

If you have questions about this Privacy Policy or our privacy practices, please contact us:

16. Data Protection Officer (GDPR)

For GDPR-related inquiries, privacy concerns, or to exercise your data rights, you can contact us at the address above or email support@outcos.com with the subject line "GDPR Request".

---