PRIVACY POLICY

At Clothlyra, your data belongs to you — not to us. Every decision we make about how we collect, use, share, or store your information starts from that principle.

How We Commit to Your Privacy

We process personal data only where it is necessary, lawful, and aligned with the purpose for which it was obtained. If you reside within the European Economic Area (EEA), our processing of your personal data is justified under Article 6(1) of the General Data Protection Regulation (EU) (“GDPR”) wherever consent is required. We do not treat privacy as optional — it is foundational to how we operate.

What Data Enters Our System

We collect personal data in two primary ways:

• Data you provide directly: account details, billing and shipping addresses, contact information, payment data (e.g., card number and expiry), and communications you send us — including support requests, survey responses, or chat interactions.
• Data generated by your use: device type, IP address, operating system, browser type, usage patterns, diagnostic logs, and approximate location (derived from IP or GPS where available).

Why and When We Process It

We process this data for specific, defined purposes — never broadly or indefinitely. These include:

• Providing, maintaining, and improving our products and services;
• Verifying accounts and detecting fraud or suspicious activity;
• Responding to your requests and supporting customer service;
• Administering promotions or contests you choose to enter;
• Personalizing content and measuring advertising effectiveness — but only where you have given prior express consent.

Where processing relies on consent, it applies only to those uses explicitly requiring your prior express consent — and you may withdraw that consent at any time.

Where and With Whom It May Go

We disclose personal data only when operationally necessary or legally required:

• To strategic partners who help us deliver, improve, or market our products and services — and only to the extent needed for those tasks;
• To affiliated companies, or in connection with corporate transactions such as mergers, acquisitions, or bankruptcy proceedings;
• To law enforcement or governmental authorities when required by law, legal process, or legitimate public interest;
• Never to third parties for their own marketing purposes without your prior express consent.

How Long We Keep It

We retain personal data only as long as it is necessary to fulfill the purposes outlined in this Privacy Statement. Where a longer retention period is required or permitted by law — for example, for tax, accounting, or regulatory compliance — we keep it no longer than necessary for that obligation.

How You Control It

You control key aspects of your personal data. You have the right to:

• Access, correct, or delete your personal data;
• Restrict or object to its processing;
• Receive it in a structured and standard format;
• Lodge a complaint with the competent data protection authority.

To protect privacy and security, we may ask for verification of your identity before fulfilling a request. There are limited exceptions: applicable laws or regulatory requirements may allow or require us to refuse to provide or delete some or all of the personal data you request.

What Happens If Something Changes

We update this statement to reflect operational, technological, or legal developments. Any material change will take effect on the date stated in the revised version. Continued use of our products and services after that date means you accept the updated terms. If you disagree with the revision, you may discontinue use and contact us to close your account.

How to Reach Us

If you’ve exercised a right, reported a concern, or need clarification — email cs@clothlyra.com. We’ll acknowledge your message within 24 hours and resolve your request within 30 days.