Privacy Policy

Last updated: 05-20-2025

Privacy Statement

We at Pockiflo (referred to as “we”, “us”, or “our”) value your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, share, and process your personal data when you use our e-commerce website (the “Pockiflo”) and related services. It applies to all users globally, including those in the United States, the United Kingdom, Southeast Asia, and elsewhere. By using our Site, you agree to the terms of this Privacy Policy.

Collection and Use of Personal Data

Personal Data Definition: “Personal data” means any information that can be used to identify you, directly or indirectly. It does not include data that has been irreversibly anonymized or aggregated such that it can no longer be used to identify you.

What Personal Data We Collect: We collect several types of personal data to provide and improve our services to you:

• Data You Provide:When you create an account, place an order, or otherwise interact with our Site, you may provide us with personal data. This includes your name, email address, billing and shipping address, and contact details. If you make a purchase, our payment processor (e.g., PayPal) will collect payment details such as your credit card information or PayPal account details. (Note: We do not store your full payment card details; payments are handled securely by PayPal.)
• Account Credentials:To register and log in, you provide a username and password. We store these credentials (in an encrypted form) to allow your account access.
• Communications:If you contact customer support, participate in surveys, or use our live chat, you may provide additional information such as the content of your inquiry, feedback, or other details helpful to resolving your request.
• Data from Use of Our Services:When you visit and navigate our Site, we may automatically collect certain information about your device and usage of the Site. This data may include your IP address, browser type, device type, unique device identifiers, pages viewed, links clicked, and other browsing information. We collect this information through cookies and similar technologies (explained below) to understand how users interact with our Site, to fix issues, and to improve user experience.

How We Use Your Personal Data: Generally, we use the collected personal data for the following purposes:

• Providing and Improving Services:To process your orders, complete transactions, deliver products, and provide customer support. We use data to ensure our services function correctly and to improve and develop our products, services, and overall user experience.
• Account Management:To create and maintain your user account, authenticate your access, and provide you with features like order history and saved preferences.
• Communicating with You:To send you service-related communications (such as order confirmations, shipping notifications, and account alerts) via email or other contact information you provided. With your consent, we may also send you marketing communications such as newsletters, promotions, or special offers. You can opt out of marketing emails at any time by using the unsubscribe link provided or by contacting us.
• Personalization:To personalize content and product recommendations on our Site, such as suggesting products you might like based on your browsing or purchase history.
• Analytics and Improvements:To analyze usage of our Site, debug and improve website performance, and understand user trends. This helps us make informed decisions about new features and services.
• Promoting Safety and Security:To help verify accounts and user activity, detect and prevent fraud or other illegal activities, and enforce our terms and policies. This processing is based on our legitimate interest in helping ensure the integrity and security of our services.
• Legal Compliance:To comply with applicable laws and legal obligations. For instance, we may process and retain certain data for tax and accounting purposes, to satisfy regulatory requirements, or to respond to lawful requests by public authorities.

Cookies and Similar Technologies

What Are Cookies? Cookies are small text files stored on your browser or device by websites, applications, or advertisements. They are widely used to make websites work or to work more efficiently, as well as to provide information to the site owners. We also use related technologies like web beacons (small graphic images) and tracking pixels. In this Privacy Policy, we refer to all of these technologies collectively as “cookies.”

How We Use Cookies: We use cookies and similar technologies to provide, protect, and improve our Site and services, such as:

• Essential Cookies:These are necessary for the operation of our Site. For example, they enable core functionalities like account login, authentication, and keeping items in your shopping cart.
• Functional Cookies:These cookies remember your preferences and enhance your experience (e.g., remembering your language, region, or other settings).
• Analytics Cookies:We use these to understand how visitors use our Site. For instance, we might use Google Analytics or similar tools to collect information about website traffic and usage patterns. This data helps us improve site functionality and user experience. The information collected is generally aggregated and does not directly identify you.
• Advertising Cookies:(If applicable) If we display advertisements or use advertising partners, cookies may be used to deliver relevant ads to you and to measure the effectiveness of ad campaigns. Currently, we do not host third-party ads on our Site (if this changes, we will update this policy accordingly).

Your Choices (Cookie Preferences): You have the ability to accept or reject cookies. Most web browsers automatically accept cookies, but you can usually modify your browser settings to decline or delete cookies if you prefer. However, please note that if you disable cookies, some features of our Site (such as the ability to log in or place orders) may not function properly. If required by applicable law (for example, in the European Economic Area), we will obtain your consent before using non-essential cookies. We also honor certain browser settings or signals that indicate your preferences (such as the Global Privacy Control signal for California residents, which we treat as a valid opt-out of tracking for targeted advertising or “sale” of personal information).

Disclosure of Personal Data

We do not sell your personal data to third parties. We only share your personal data with third parties in the following circumstances, and always with appropriate safeguards and only to the extent necessary:

• Service Providers:We share personal data with trusted third-party service providers who perform services on our behalf to help run our business and the Site. This includes, for example, payment processors (like PayPal, to process your payments), shipping companies (to deliver your orders), email service platforms (to send you emails), analytics providers (to help us understand and improve usage of our Site), and customer support tools. These service providers are contractually obligated to protect your data and use it only for the specific services they are providing to us.
• Strategic Partners:In some cases, we may partner with other companies to offer joint products, services, or promotions (e.g., a collaboration with a brand on a giveaway or a discount for using a particular service). If you decide to participate in such offerings, we might share information with our partners with your consent or as necessary to fulfill the promotion (for example, to deliver a prize). Any such joint activity will have its own terms or notices so you can understand what data may be shared.
• Affiliates:If [Your Company Name] is part of a corporate group, we may share your personal data with our current or future affiliates (companies under common ownership or control) as needed for business operations or analysis, in accordance with this Privacy Policy. For instance, an affiliate might assist in processing data or storing information on our behalf.
• Legal Compliance and Security:We may disclose personal data when we believe in good faith that such disclosure is necessary to comply with a legal obligation, regulation, or legal request (e.g., in response to a court order or subpoena). We may also share data if we determine it is necessary to investigate or enforce our terms and conditions, to detect or prevent fraud or security issues, or to protect the rights, property, or safety of our company, our users, or others. This may include exchanging information with other organizations for fraud protection and credit risk reduction.
• Business Transfers:If we undergo a business transaction such as a merger, acquisition, reorganization, sale of assets, or in the unlikely event of bankruptcy or receivership, your personal data could be among the transferred assets. We would only transfer your data to the successor entity if the recipient agrees to handle your personal data in accordance with this Privacy Policy (or you are otherwise notified and consent to the transfer as required by law).

Importantly, we will never share your personal data with third parties for their own marketing or advertising purposes without your explicit consent.

International Data Transfers

Our business is based in the United States, but we serve customers around the world. This means your personal data may be transferred to, or accessed by, our team or service providers in countries other than your own. Specifically, information collected from users may be processed in and stored on servers located in the United States and possibly other countries.

If you are located outside the United States, be aware that we may transfer your personal data to the U.S. and other jurisdictions that may not have the same data protection laws as your home country. When we transfer personal data internationally, we take steps to ensure appropriate safeguards are in place to protect your information. For example, if you are in the European Economic Area (EEA) or United Kingdom, any transfer of your personal data outside of the EEA/UK will be governed by approved mechanisms such as the European Commission’s Standard Contractual Clauses or an adequacy decision (unless the transfer is otherwise permitted by GDPR). These legal contracts and measures are designed to ensure that your personal data receives a high level of protection wherever it is processed.

By using our Site or providing us with your information, you consent to the transfer of your personal data to other countries as described in this section. Regardless of where your data is processed, we will treat your information securely and in accordance with this Privacy Policy.

Your Privacy Rights

We respect your rights regarding your personal data. Depending on your location and applicable privacy laws, you may have some or all of the following rights with respect to your personal information:

• Right to Access (Know):You have the right to request confirmation that we are processing your personal data, and to access or receive a copy of the personal data we hold about you. This helps you understand what information we have and how we use it.
• Right to Rectification (Correction):You have the right to request that we correct or update any inaccurate or incomplete personal data about you. We encourage you to correct or update your information by logging into your account settings (where applicable), but you can also contact us for assistance.
• Right to Erasure (Deletion):You can request that we delete your personal data. Upon your request, we will erase or anonymize your personal information we hold about you, except to the extent we are required to retain it by law or for legitimate business purposes. For example, we might retain certain transaction records to comply with financial regulations or if deletion is technically infeasible.
• Right to Restrict Processing:You have the right to ask us to limit the processing of your personal data in certain circumstances — for example, if you contest the accuracy of the data (until we can verify it) or if you believe processing is unlawful but you prefer restriction over deletion.
• Right to Object:You have the right to object to our processing of your personal data in some cases. This includes if we are processing your data based on legitimate interests or for direct marketing. If you object, we will consider your request and stop or limit processing unless we have compelling legitimate grounds that override your interests or if continued processing is needed for legal reasons. Objections to direct marketing will be honored immediately.
• Right to Data Portability:You have the right to obtain your personal data from us in a structured, commonly used, and machine-readable format, and to have that data transmitted to another organization, where technically feasible. This right applies to personal data you provided to us and that we process by automated means, based on your consent or on a contract you have with us.
• Right to Withdraw Consent:If we rely on your consent to process any of your personal data (for example, for sending promotional emails), you have the right to withdraw that consent at any time. This will not affect the lawfulness of any processing that occurred before you withdrew consent. If you withdraw consent for a specific feature or service, we may not be able to provide that feature or service to you.
• Right to Non-Discrimination:We will not discriminate against you for exercising any of your rights. This means we won’t deny you our services, charge you different prices, or provide a different level or quality of services just because you exercised your privacy rights.

To exercise any of these rights, please contact us at super@pockiflo.shop. We may need to verify your identity (for example, by asking you to provide information we have on file or to log into your account) before fulfilling your request, to ensure we do not share or delete someone else’s information by mistake. We will respond to your request within a reasonable timeframe as required by law. For instance, if you are in the EEA, we will generally respond within 30 days (Your individual rights under GDPR | Chameleon Help Center), and if you are a California resident, within 45 days (with the possibility of a 45-day extension in certain cases) (California Consumer Privacy Act (CCPA) – EPIC – Electronic Privacy Information Center).

California Privacy Rights: If you are a resident of California, you are entitled to additional rights under the California Consumer Privacy Act (CCPA) and its amendments (including the CPRA). These include:

• Right to Know:You can request that we disclose to you the specific pieces and categories of personal information we have collected about you. You may also ask for information about the categories of sources of that information, the purposes for collecting it, and the categories of third parties with whom we share it.
• Right to Delete:You can request that we delete personal information we collected from you, subject to certain exceptions (such as if we need to keep it to comply with legal obligations or complete transactions you requested).
• Right to Opt-Out of Sale/Sharing:You can direct us not to sell your personal information or share it for cross-context behavioral advertising. (However, as noted above, we do not sell personal data as defined by the CCPA, and we currently do not share personal information for targeted advertising without consent.)
• Right to Correct:You can request that we correct inaccurate personal information that we hold about you.
• Right to Limit Use of Sensitive Information:If we ever collect “sensitive personal information” (as defined by law, e.g., precise geolocation, race/ethnicity, health data, etc.), you can instruct us to limit the use of that information to what’s necessary to perform the services or provide the goods you requested (we do not use sensitive data for any purpose that would trigger this right in a typical e-commerce context).
• Right to Non-Discrimination:As stated above, we will not discriminate against you for exercising any of these rights.

California “Do Not Sell” Disclosure: We do not sell or share your personal information as defined under the CCPA, and we have not sold any personal information in the past 12 months (Privacy policy – H&F GROUP). We also do not knowingly share personal information for cross-context behavioral advertising (targeted advertising across different services) without your consent. If our practices regarding selling or sharing personal data change in the future, we will update this Privacy Policy and provide a clear method for you to opt out.

To exercise your California privacy rights, you (or an authorized agent acting on your behalf) can contact us using the contact details provided in this Privacy Policy. We may need to verify your identity and residency before processing your request, for example by confirming information you have already provided to us or by having you log into your account. We will confirm receipt of your request within 10 days and respond within the timeframe described above. Any information we provide in response to your request will cover the 12-month period preceding your request, as required by law.

Third-Party Websites and Services

Our Site may contain links to external websites or services that are not operated by us, such as:

• Payment Processors:When you choose to pay for an order via PayPal, you will be redirected to PayPal’s website to complete the transaction. Any information you provide on PayPal’s site is governed by PayPal’s own privacy policy.
• Analytics or Advertisers:We may use third-party analytics services like Google Analytics. These services have their own privacy practices and may use cookies or similar technologies to collect data about your interactions with our Site.
• Social Media or External Links:Our Site might include links to our profiles on social media platforms (e.g., Facebook, Instagram) or other websites for informational purposes.

If you follow a link to any third-party website or service, please note that these have their own privacy policies and we do not control their content or privacy practices. We recommend that you review the privacy policy of any third-party site or service that you visit. We are not responsible for the privacy practices or content of such external sites. This Privacy Policy applies solely to data collected by Pockiflo through our Site and services.

Data Security, Integrity, and Retention

We take the security of your personal data very seriously. We implement reasonable technical, administrative, and physical security measures designed to protect your information from unauthorized access, disclosure, alteration, or destruction. These measures include, for example: encrypted connections (HTTPS) for all data transmissions on our Site, encryption of sensitive data (such as passwords and payment tokens) at rest, firewalls and network security controls to prevent unauthorized access, and internal policies and training for employees on data protection. While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure, so we cannot guarantee absolute security. We encourage you to protect your account by using a strong password and keeping your login credentials confidential.

We also maintain data integrity by taking reasonable steps to ensure that the personal data we have is reliable, accurate, and up-to-date. You can help us in this effort by keeping your profile information current and notifying us if any of your personal data changes.

Data Retention: We will retain your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. For example:

• We retain transaction records and certain financial information to comply with tax laws, accounting requirements, and anti-fraud measures.
• If you create an account, we retain your account information while your account is active and for a reasonable period thereafter in case you decide to reactivate your account, or as needed to comply with legal obligations.
• We may retain certain logs and security records for a short period to ensure the integrity and security of our systems.

Once personal data is no longer necessary for the purposes for which it was collected, we will either destroy it in a secure manner or anonymize it (so that it can no longer be associated with you) in accordance with applicable laws and regulations.

Children’s Privacy

Our Site is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you are under 13, please do not use or register on this Site. In the event we learn that we have collected personal data from a child under 13 without verified parental consent, we will promptly delete that information from our records. If you are a parent or guardian and believe that your child under 13 may have provided personal information to us, please contact us immediately so that we can investigate and delete any such information. (For teens in certain jurisdictions like the EU or UK, where parental consent may be required for users under 16, we similarly do not knowingly collect data from those individuals without proper consent.)

Changes to This Privacy Policy

We may update or revise this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make changes, we will update the “Last updated” date at the top of this Privacy Policy. If the changes are significant, we may also provide a more prominent notice (such as on our website homepage or via email, if we have your email on file).

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our Site after any changes to this Privacy Policy become effective will signify that you have read and understood the updated policy. If you do not agree with any updates or changes, you should stop using our services and may close your account (you can also contact us to remove your data as described above).

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us using the information below:

Email: super@pockiflo.shop

We are committed to working with you to resolve any privacy-related concerns. If you contact us with a privacy complaint, we will respond and attempt to address your concern promptly and in accordance with applicable law.