Privacy Policy

At SpotMind, we respect your privacy and are committed to handling personal information responsibly, transparently and securely.

This Privacy Policy explains how SpotMind collects, uses, stores, shares and protects personal information when customers:

• Visit or interact with the SpotMind website;
• Create an account;
• Place or attempt to place an order;
• Contact customer support;
• Subscribe to marketing communications;
• Submit a review, survey or other content;
• Interact with SpotMind advertisements or social media pages.

By using the SpotMind website or services, customers acknowledge the practices described in this Privacy Policy.

Nothing in this policy limits any privacy or consumer rights that cannot legally be waived under applicable law.

Information SpotMind Collects

The personal information collected depends on how customers interact with SpotMind.

Information Provided Directly

SpotMind may collect:

• Full name;
• Billing address;
• Shipping address;
• Email address;
• Telephone number;
• Account login information;
• Products ordered or viewed;
• Order, payment and transaction details;
• Delivery preferences;
• Discount or promotional code information;
• Customer support communications;
• Return, refund and warranty requests;
• Product reviews, photographs and survey responses;
• Marketing preferences;
• Any other information voluntarily submitted.

Customers are responsible for ensuring that the information they provide is complete, accurate and current.

Payment Information

Payments are processed by secure third-party payment providers.

SpotMind generally does not directly receive or store complete payment card numbers, security codes or full banking credentials. Payment providers may provide SpotMind with limited transaction information, such as:

• Payment status;
• Payment method type;
• Transaction reference;
• Billing verification result;
• Limited card details, such as the final digits;
• Fraud or risk indicators.

Payment providers process information under their own privacy policies and security standards.

Information Collected Automatically

When customers visit the website, SpotMind and its service providers may automatically collect:

• IP address;
• Device type;
• Browser type and version;
• Operating system;
• Language and regional settings;
• Approximate location derived from IP information;
• Pages viewed;
• Products viewed or added to a cart;
• Links clicked;
• Referring website or advertisement;
• Session duration;
• Checkout activity;
• Cookie identifiers;
• Device and advertising identifiers;
• Website performance and error information;
• Date and time of website interactions.

This information may be collected through cookies, pixels, tags, local storage, software development tools and similar technologies.

Information Received From Third Parties

SpotMind may receive information from:

• Payment processors;
• Shipping and fulfilment providers;
• E-commerce and website platforms;
• Analytics providers;
• Advertising platforms;
• Fraud-prevention providers;
• Customer support systems;
• Social media platforms;
• Referral and affiliate partners;
• Publicly available sources;
• Customers who purchase or send products on behalf of another person.

When a customer provides information about another person, the customer should have permission to provide that information.

How Personal Information Is Used

SpotMind may use personal information to:

• Process and confirm orders;
• Collect and verify payments;
• Arrange fulfilment and delivery;
• Provide order and shipping updates;
• Manage customer accounts;
• Respond to customer questions;
• Process returns, refunds, replacements and warranty claims;
• Prevent fraud, abuse and unauthorized transactions;
• Verify customer identity;
• Protect the website, customers and business operations;
• Maintain business and accounting records;
• Improve products, services and website performance;
• Personalize website content and shopping experiences;
• Analyze customer interests and purchasing activity;
• Measure advertising and campaign effectiveness;
• Display relevant advertisements;
• Manage promotional offers and loyalty activities;
• Request reviews or feedback;
• Send marketing communications where permitted;
• Enforce store policies and contractual terms;
• Establish, exercise or defend legal claims;
• Comply with legal, tax, regulatory and law-enforcement obligations;
• Complete business transactions such as a merger, sale or restructuring.

SpotMind will not use personal information for materially different purposes without providing appropriate notice or obtaining consent where required.

Legal Bases for Processing

Where applicable privacy law requires a legal basis, SpotMind may process personal information based on:

Performance of a Contract

Processing may be necessary to:

• Accept and fulfil an order;
• Process payment;
• Deliver products;
• Provide customer support;
• Manage returns, refunds and warranties.

Legitimate Business Interests

SpotMind may process information for legitimate interests such as:

• Preventing fraud and misuse;
• Improving the website and customer experience;
• Securing systems and transactions;
• Understanding business performance;
• Communicating with existing customers;
• Protecting legal and commercial interests.

SpotMind considers whether these interests are balanced against customers’ privacy rights.

Consent

SpotMind may rely on consent for:

• Certain marketing communications;
• Non-essential cookies;
• Personalized advertising;
• Other processing activities where consent is legally required.

Customers may withdraw consent at any time. Withdrawal does not affect processing that lawfully occurred before consent was withdrawn.

Legal Obligations

SpotMind may process and retain information to comply with:

• Tax and accounting rules;
• Consumer protection requirements;
• Court orders;
• Regulatory requests;
• Fraud-prevention obligations;
• Other applicable legal duties.

Sharing Personal Information

SpotMind may share personal information with trusted service providers that perform services on its behalf, including:

• Payment processing;
• Website and e-commerce hosting;
• Cloud storage;
• Order fulfilment;
• Warehousing;
• Shipping and logistics;
• Address verification;
• Customer support;
• Email and messaging services;
• Website analytics;
• Advertising and campaign measurement;
• Fraud prevention;
• Cybersecurity;
• Professional legal, accounting and insurance services.

These providers are permitted to process information only for authorized purposes and subject to appropriate contractual or legal obligations where required.

Shipping and Delivery Providers

Customer names, delivery addresses, telephone numbers, email addresses and order details may be shared with fulfilment centres, postal operators and delivery carriers when reasonably necessary to deliver an order, provide tracking information or resolve delivery problems.

Delivery providers may process information under their own privacy policies.

Advertising and Analytics Partners

SpotMind may work with analytics and advertising providers to:

• Measure website activity;
• Understand customer interactions;
• Evaluate advertisement performance;
• Limit repetitive advertising;
• Build or measure advertising audiences;
• Present advertisements that may be more relevant.

Depending on local law, some advertising activities may be classified as the “sale,” “sharing” or use of personal information for targeted or cross-context behavioural advertising.

Where required, SpotMind will provide customers with an appropriate method to opt out of those activities. California privacy law, for example, may provide a right to opt out of the sale or sharing of personal information for cross-context behavioural advertising.

SpotMind does not sell personal information in exchange for direct monetary payment.

Legal and Safety Disclosures

SpotMind may disclose personal information when reasonably necessary to:

• Comply with applicable law;
• Respond to a lawful government or regulatory request;
• Comply with a court order, subpoena or legal process;
• Investigate fraud, security incidents or policy violations;
• Protect the rights, property or safety of SpotMind, customers or others;
• Enforce agreements and store policies;
• Establish, exercise or defend legal claims.

SpotMind may object to requests that it reasonably believes are unlawful, excessive or invalid.

Business Transfers

Personal information may be transferred as part of a:

• Merger;
• Acquisition;
• Financing;
• Reorganization;
• Sale of assets;
• Insolvency process;
• Transfer of some or all business operations.

Any receiving organization may continue processing personal information subject to this Privacy Policy or a replacement policy communicated as required by law.

Cookies and Similar Technologies

The SpotMind website may use:

Essential Cookies

These cookies support core functions such as:

• Shopping-cart operation;
• Checkout processing;
• Account login;
• Fraud prevention;
• Website security;
• Remembering privacy preferences.

Disabling essential cookies may prevent parts of the website from functioning correctly.

Preference Cookies

These cookies may remember:

• Language;
• Region;
• Display preferences;
• Previous selections.

Analytics Cookies

These cookies help SpotMind understand:

• Website traffic;
• Popular pages and products;
• Customer navigation;
• Website errors;
• General performance.

Advertising Cookies

These cookies may be used to:

• Measure advertisement conversions;
• Create advertising audiences;
• Provide personalized advertisements;
• Limit repetitive advertising;
• Understand interactions across websites or devices.

Customers may manage cookies through available consent controls or browser settings. Removing or blocking cookies may affect website functionality and may not remove information previously collected.

Marketing Communications

SpotMind may send promotional emails or messages where permitted by law.

Customers may unsubscribe by:

• Using the unsubscribe option included in a marketing message; or
• Contacting support@spotmind.shop.

Unsubscribing from marketing does not prevent SpotMind from sending necessary service communications, including:

• Order confirmations;
• Shipping updates;
• Security notices;
• Refund information;
• Responses to support requests.

Advertising preferences managed through third-party platforms must generally be changed directly through those platforms.

International Data Transfers

SpotMind, its fulfilment partners and service providers may operate in different countries. Personal information may therefore be processed outside the customer’s country of residence.

Privacy and data-protection laws in another country may differ from those in the customer’s jurisdiction.

Where required, SpotMind will use appropriate measures for international transfers, which may include:

• Adequacy decisions;
• Standard contractual clauses;
• Contractual safeguards;
• Provider certifications;
• Other legally recognized transfer mechanisms.

International-transfer details are among the information commonly required in EU and UK privacy notices when personal information is processed outside the relevant jurisdiction.

Data Retention

SpotMind retains personal information only for as long as reasonably necessary for the purposes described in this policy.

Retention periods may depend on:

• The duration of the customer relationship;
• Whether an account remains active;
• Order fulfilment and delivery;
• Return, refund and warranty periods;
• Customer support requirements;
• Fraud and security risks;
• Tax and accounting obligations;
• Applicable limitation periods;
• Pending disputes or legal claims;
• Legal and regulatory requirements.

Different categories of information may be retained for different periods.

When information is no longer required, SpotMind may securely delete, destroy or anonymize it. Anonymized information that can no longer reasonably identify a customer may be retained for business analysis and statistical purposes.

Information Security

SpotMind uses reasonable administrative, organizational and technical measures designed to protect personal information against:

• Unauthorized access;
• Loss;
• Misuse;
• Alteration;
• Disclosure;
• Destruction.

These measures may include access restrictions, secure service providers, encrypted connections, monitoring and internal security procedures.

However, no website, transmission method or storage system can be guaranteed to be completely secure. Customers should protect their passwords, devices and account information and notify SpotMind promptly if they suspect unauthorized activity.

Customer Privacy Rights

Depending on applicable law and location, customers may have the right to request:

• Confirmation that SpotMind processes their information;
• Access to personal information;
• A copy of personal information;
• Correction of inaccurate or incomplete information;
• Deletion of eligible information;
• Restriction of certain processing;
• Objection to certain processing;
• Data portability;
• Withdrawal of consent;
• Opt-out of marketing;
• Opt-out of certain targeted advertising;
• Opt-out of the sale or sharing of personal information;
• Information about categories of information collected, used or disclosed;
• Review of certain automated decisions;
• Equal service and protection against unlawful discrimination for exercising privacy rights.

These rights are subject to applicable legal limitations and exceptions. EU data-protection rules include rights such as access, rectification, erasure, restriction, objection and portability.

Exercising Privacy Rights

Privacy requests may be submitted to:

support@spotmind.shop

The request should clearly describe:

• The right the customer wishes to exercise;
• The customer’s name;
• The email address associated with the order or account;
• Relevant order information, where applicable.

SpotMind may request additional information to reasonably verify the customer’s identity and protect information from unauthorized disclosure.

SpotMind may refuse or limit a request where:

• Identity cannot be verified;
• The request is fraudulent;
• A legal exception applies;
• Retention is required by law;
• The information is needed to complete a contract;
• The information is needed to establish, exercise or defend legal claims;
• The request would adversely affect another person’s rights.

Authorized representatives may submit requests where permitted by law, but SpotMind may require evidence of authorization and direct identity verification.

Automated Fraud and Risk Assessment

SpotMind and its service providers may use automated tools to evaluate transactions for fraud, security and payment risks.

These tools may consider information such as:

• Device information;
• IP address;
• Billing and shipping details;
• Order patterns;
• Payment verification results;
• Previous suspicious activity.

An order may be delayed, reviewed, cancelled or declined when a transaction presents a reasonable risk of fraud or unauthorized activity.

Customers may contact support@spotmind.shop if they believe an order was incorrectly affected by a risk assessment.

Children’s Privacy

The SpotMind website and products are not directed to children under 13 or the minimum age required by applicable local law.

SpotMind does not knowingly collect personal information directly from children where parental consent is legally required.

If a parent or guardian believes that a child has provided personal information without appropriate authorization, they should contact support@spotmind.shop so the information can be reviewed and, where appropriate, deleted.

In the United States, COPPA imposes specific obligations on covered websites and online services that collect personal information from children under 13.

Third-Party Websites

The SpotMind website may contain links to external websites, applications or services.

SpotMind does not control and is not responsible for the privacy, security or content practices of third parties. Customers should review the privacy policy of any external service before providing personal information.

Product Reviews and Public Content

When customers submit reviews, photographs, testimonials or other public content, the information they choose to publish may be visible to other users.

Customers should not include sensitive personal information, payment details, addresses or confidential information in public reviews.

SpotMind may moderate or remove content that violates store policies, applicable law or the rights of others.

Complaints

Customers who have concerns about how SpotMind handles personal information should first contact:

support@spotmind.shop

SpotMind will review the concern and attempt to provide an appropriate response.

Depending on the customer’s location, the customer may also have the right to submit a complaint to a national, regional or local privacy or data-protection authority.

Changes to This Privacy Policy

SpotMind may update this Privacy Policy when necessary to reflect:

• Changes to business practices;
• New services or technologies;
• Legal or regulatory requirements;
• Security improvements;
• Changes to service providers.

The updated version will be posted on the SpotMind website. Where required by law, SpotMind will provide additional notice or request renewed consent before materially changing how personal information is processed.

Contact Information

For privacy questions, access requests, correction requests, deletion requests, marketing preferences or other data-related concerns, contact:

Email: support@spotmind.shop