Privacy policy

Who We Are

CAZOX is a streetwear brand operated from Belgium. CAZOX is the data controller for the personal information described in this policy. This policy explains what we collect, why we collect it, and the rights you have under the EU General Data Protection Regulation (GDPR) when you visit our website or place an order. Questions? Email us at info@cazox.eu.

Personal Information We Collect

• Order information — your name, shipping and billing address, email address, phone number, and the items you ordered. We collect this when you place an order.
• Payment information — payments are handled entirely by our payment processor Stripe. We never see or store your full card number, iDEAL or Bancontact credentials.
• Email signup — your email address when you join the CZX Family mailing list.
• Technical information — basic device and connection data (such as IP address and browser type) generated when you visit the site, used for security and to keep the site working.
• Local storage — your shopping cart and site preferences are stored in your own browser. See our Cookie Policy.

How and Why We Use It

We only process your data when we have a legal basis to do so:

• To fulfil your order (performance of a contract) — processing payment, shipping your items, and handling returns and customer service.
• To protect our store (legitimate interest) — screening orders for fraud and keeping the site secure.
• To send you CZX Family emails (consent) — news, early access and drops. You can unsubscribe at any time via the link in every email.
• To meet legal obligations — such as keeping order records for tax and accounting purposes.

Who We Share It With

We never sell your personal information. We share it only with service providers who need it to run our store, and only what they need:

• Stripe — secure payment processing.
• Sendcloud & carriers — creating shipping labels and delivering your order.
• Sender.net — sending CZX Family emails.
• Google Analytics — anonymous, aggregated visitor statistics, and only when you accept analytics cookies.
• Supabase & Vercel — hosting our website and order database.

These providers act as data processors under agreements that protect your data. Some are based in the United States; where data leaves the EU, it is protected by the EU–US Data Privacy Framework or EU Standard Contractual Clauses.

How Long We Keep It

Order information is kept for as long as needed to fulfil your order, handle returns and warranty claims, and to comply with Belgian tax and accounting law. Mailing-list data is kept until you unsubscribe. Technical logs are kept only briefly.

Your Rights

Under the GDPR you have the right to:

• Access the personal data we hold about you.
• Have incorrect data corrected.
• Have your data deleted ("right to be forgotten").
• Restrict or object to how we process your data.
• Receive your data in a portable format.
• Withdraw consent at any time (for example, unsubscribe from emails).

To exercise any of these rights, email info@cazox.eu — we respond within 30 days. You also have the right to lodge a complaint with the Belgian Data Protection Authority (gegevensbeschermingsautoriteit.be).

Security & Minors

All traffic to our site is encrypted (TLS) and access to order data is restricted. Our store is not directed at children under 16, and we do not knowingly collect their data.