PRIVACY POLICY

Last updated: 24/06/2026

Ecom Khab, trading as Gilby's ("we," "us," or "our"), operates the website https://trygilbys.shop/ (the "Site"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Site and purchase our products.

Information We Collect

Personal Information You Provide:

  • Full name
  • Email address
  • Shipping and billing address
  • Phone number (optional)
  • Payment information (processed securely by our payment processor — we do not store card details)
  • Order history and purchase preferences

Information Collected Automatically:

  • IP address and approximate location
  • Browser type, device type, and operating system
  • Pages viewed, time spent on pages, and referring URL
  • Cookies and similar tracking technologies (see Cookie Policy below)

Information From Third Parties:

  • Shipping carriers (delivery status updates)
  • Payment processors (transaction confirmations)
  • Analytics providers (aggregated usage data)

How We Use Your Information

We use the information we collect to:

  • Process and fulfill your orders, including shipping and delivery
  • Send transactional emails (order confirmations, shipping updates)
  • Communicate with you about products, promotions, and updates (only with your consent)
  • Improve our website, products, and customer service
  • Comply with legal obligations, prevent fraud, and enforce our terms
  • Administer contests, promotions, or surveys

We will never sell, rent, or trade your personal information to third parties for their marketing purposes.

Legal Basis for Processing (UK/EU — GDPR)

If you are located in the United Kingdom or European Economic Area, our legal bases for processing your personal data are:

  • Contract performance: Processing necessary to fulfill your order
  • Legitimate interests: Improving our services, preventing fraud
  • Consent: Marketing emails, non-essential cookies
  • Legal obligation: Tax records, regulatory compliance

Your Rights

All Customers:

  • Access, correct, or delete your personal information
  • Opt out of marketing communications at any time
  • Request a copy of the data we hold about you

UK/EU Residents (GDPR):

  • Right to erasure ("right to be forgotten")
  • Right to data portability
  • Right to restrict or object to processing
  • Right to withdraw consent at any time
  • Right to lodge a complaint with the Information Commissioner's Office (ICO) or your local supervisory authority

California Residents (CCPA/CPRA):

  • Right to know what personal information is collected, used, and shared
  • Right to delete personal information
  • Right to opt out of the sale of personal information (we do not sell your data)
  • Right to non-discrimination for exercising your privacy rights

Canadian Residents (PIPEDA):

  • Right to access your personal information held by us
  • Right to challenge the accuracy and completeness of your data
  • Right to withdraw consent (subject to legal or contractual restrictions)

To exercise any of these rights, contact us at support@trygilbys.shop

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Order records are retained for [6 years / as required by tax law in your jurisdiction].

Data Security

We implement commercially reasonable technical and organizational measures to protect your personal information, including SSL encryption, secure payment processing, and restricted access to personal data.

International Transfers

Your information may be transferred to and maintained on servers located outside your country of residence. By using our Site, you consent to such transfers. We ensure appropriate safeguards are in place for international transfers in compliance with applicable data protection laws.

Children's Privacy

Our Site is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will take steps to delete such information.

Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by the "Last updated" date. We encourage you to review this policy periodically.