Privacy Policy

1) Who we are

Casablanca Tshirt (“we,” “us,” “our”) operates the website located at https://casablancatshirt.org/ and provides curated apparel and accessories. For privacy questions, see Contact us below.

2) Information we collect

Information you provide

• Account and identity: name, email, password, phone
• Order and fulfillment: shipping/billing address, items purchased, sizing, gift messages, returns
• Communications: support requests, reviews, survey responses

Information collected automatically

• Device and usage: IP address, device type, browser, operating system, pages viewed, time on page, links clicked, referring/exit pages, approximate location
• Cookies, pixels, and similar technologies (see Cookies & tracking)
• Campaign data: UTM parameters and ad identifiers where applicable

Information from third parties

• Payment providers (e.g., details about payment status; we do not receive full card numbers)
• Delivery partners (shipping status and tracking)
• Advertising and analytics partners (aggregated or pseudonymous insights)

3) How we use your information

• Provide and fulfill services: process orders, payments, shipping, returns
• Account management and support: confirmations, updates, and responding to inquiries
• Personalization: remember preferences, tailor content and recommendations
• Marketing: send offers and updates with your consent where required; you may opt out at any time
• Analytics and improvement: measure performance and enhance our site and products
• Fraud prevention and security: detect, prevent, and investigate fraud or misuse
• Legal and compliance: tax, accounting, and regulatory obligations

4) Cookies & tracking

We use first‑party and third‑party cookies and similar technologies:

• Essential: required for core site functionality (authentication, cart, checkout)
• Analytics: help us understand site performance and usage
• Marketing: measure campaign effectiveness and show relevant offers

Manage your preferences anytime via Cookie preferences below. You can also control cookies at the browser level; disabling some cookies may affect site functionality.

5) Legal bases for processing (EEA/UK)

• Performance of a contract: to process and fulfill orders
• Legitimate interests: to secure, improve, and market our services in a proportionate way
• Consent: for non‑essential cookies/marketing where required; you may withdraw consent at any time
• Legal obligation: to meet tax, accounting, and regulatory requirements

6) How we share information

• Service providers: payment processing, hosting, storage, analytics, customer support, and marketing providers bound by contractual confidentiality
• Logistics and delivery partners: to ship and return orders
• Advertising and analytics partners: for measurement and personalization according to your preferences
• Business transfers: in connection with a merger, acquisition, or asset sale
• Legal: to comply with law or protect rights, property, or safety

7) Payments

Payments are processed by compliant third‑party processors. We do not store full payment card numbers. We may receive limited payment details such as a token, card brand, expiration month/year, or last four digits for receipts, refunds, and fraud prevention.

8) International data transfers

We operate from the United States. If you are located outside the US, your information may be transferred to and processed in the US or other countries that may have different data protection laws. Where required, we use appropriate safeguards such as Standard Contractual Clauses.

9) Data retention

• Orders and invoices: up to 7 years (tax/accounting)
• Customer support: up to 3 years after last interaction
• Marketing data: until you opt out or withdraw consent
• Cookie identifiers: typically 13 months (varies by cookie type)
• Security logs: typically 90 days unless needed for investigation

10) Your privacy rights

Depending on your location, you may have rights including:

• Access: request a copy of your data
• Correction: fix inaccurate or incomplete data
• Deletion: request deletion of certain data
• Restriction: limit how we process your data
• Portability: receive your data in a portable format
• Objection: object to processing based on legitimate interests or to direct marketing
• Withdraw consent: where processing is based on consent

To exercise rights, see Contact us. We may verify your identity to protect your information.

11) California privacy (CCPA/CPRA)

California residents have the right to:

• Know the categories and specific pieces of personal information we collect, use, disclose, and “sell” or “share” (as defined by CPRA)
• Delete personal information, subject to exceptions
• Correct inaccuracies
• Opt out of “sale” or “sharing” of personal information for cross‑context behavioral advertising
• Limit the use and disclosure of sensitive personal information where applicable
• Non‑discrimination for exercising these rights

To submit a request or opt out, see Contact us or use Cookie preferences to control advertising cookies. Authorized agents may submit requests on your behalf with proof of authorization.

12) Do Not Track

Your browser may offer a Do Not Track (DNT) signal. There is currently no consistent industry standard for responding to DNT signals, and we do not respond to them. We honor consent settings made through our Cookie preferences tool.

13) Security

We implement technical and organizational measures designed to protect your information, including transport encryption (HTTPS), access controls, and regular reviews. No method of transmission or storage is completely secure; please use strong, unique passwords and protect your account.

14) Children’s privacy

Our services are not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided personal information, contact us to request deletion.

15) Third‑party sites and services

Our site may link to third‑party websites or services. Their privacy practices are governed by their own policies. We encourage you to review them.

16) Changes to this policy

We may update this Privacy Policy to reflect operational, legal, or regulatory changes. We will post the updated date at the top of this page and, where appropriate, notify you by email or site notice.

17) Contact us

18) Cookie preferences

Use the controls below to manage non‑essential cookies.