Privacy
PRIVACY
Privacy policy
COMUN is a privacy company. We hold your data to the same standard our gear holds for your perimeter: collect the minimum, guard it hard, never sell it. This policy explains what we collect, why, and the control you keep over it.
Who we are
This site, comun.co, is operated by COMUN. For any privacy question, or to exercise your rights, contact us at privacy@comun.co.
What we collect
We collect only what an order or an account needs:
• Identity & contact — name, email, shipping and billing address, and phone if you give it.
• Order data — what you bought, order value, currency and delivery details.
• Payment data — handled by our payment processor STRIPE; we never see or store your full card number.
• Account data — if you create an account: login, saved addresses, order history and wishlist.
• Marketing data — your email, only if you opt in to the drop signal.
• Technical data — IP address, device and browser type, and site-usage data from cookies.
• Identity & contact — name, email, shipping and billing address, and phone if you give it.
• Order data — what you bought, order value, currency and delivery details.
• Payment data — handled by our payment processor STRIPE; we never see or store your full card number.
• Account data — if you create an account: login, saved addresses, order history and wishlist.
• Marketing data — your email, only if you opt in to the drop signal.
• Technical data — IP address, device and browser type, and site-usage data from cookies.
Why we use it, and our legal basis
• To process, ship and support your order — to perform our contract with you.
• To run your account and wishlist — your request and our contract.
• To send the drop signal — only with your consent, which you can withdraw anytime.
• To keep the site secure and prevent fraud — our legitimate interest.
• To meet tax and accounting duties — legal obligation.
• To measure and improve the site — only with your explicit consent where required.
• To run your account and wishlist — your request and our contract.
• To send the drop signal — only with your consent, which you can withdraw anytime.
• To keep the site secure and prevent fraud — our legitimate interest.
• To meet tax and accounting duties — legal obligation.
• To measure and improve the site — only with your explicit consent where required.
Who we share it with
We share data only with the providers that make an order happen, and only what they need:
• Payment processor — STRIPE
• Email provider — BREVO
• Shipping carriers
We never sell or rent your data. Where the law compels it we may disclose data to authorities — and we resist over-broad requests.
• Payment processor — STRIPE
• Email provider — BREVO
• Shipping carriers
We never sell or rent your data. Where the law compels it we may disclose data to authorities — and we resist over-broad requests.
International transfers
Some providers are located outside your country, including outside the EU/EEA. When data is transferred, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an equivalent mechanism.
How long we keep it
Order and accounting records are kept for as long as the law requires (commonly up to 10 years for invoices). Account data is kept while your account is open. Newsletter data is kept until you unsubscribe. Cookie data follows each cookie's lifetime.
Your rights
Depending on where you live, you can access, correct, delete, port, restrict or object to the processing of your data, and withdraw consent at any time. To exercise a right, email privacy@comun.co.
EU/UK readers: you can invoke your right to erasure directly — our PERIMETER tool walks you through it.
EU/UK readers: you can invoke your right to erasure directly — our PERIMETER tool walks you through it.
Cookies
We use cookies that are strictly necessary to run the cart, checkout and your account, and — only with your consent — analytics and preference cookies. You can accept, refuse or change your choice anytime from the cookie banner.
Security
We protect your data with appropriate technical and organisational measures, including HTTPS/TLS encryption across the whole site, and we keep access to personal data on a need-to-know basis.
Children
COMUN is not directed at children under 16, and we do not knowingly collect their data.
Changes
We may update this policy; the date above always reflects the version in force. Material changes are flagged on the site.
Contact
Questions, or want to exercise a right? Email privacy@comun.co