Effective date: September 17, 2026

1. Information We Collect

Information you provide:

• Identity & contact data — name, email, phone number, shipping and billing address.
• Account credentials — your password (stored in hashed form).
• Order & transaction data — items purchased, order value, and order history.
• Communications — messages you send us through the contact form or email.

Information collected automatically:

• Device & usage data — IP address, browser type, device identifiers, pages viewed, and referring URLs.
• Cookies and similar technologies (see Section 6).

Payment information: We do not collect or store full payment card numbers or CVV codes on our servers. Card payments, where offered, are processed by third-party payment providers that are responsible for handling card data in accordance with the PCI-DSS standard.

2. How We Use Your Information

We process personal information to:

• Process, fulfil, and ship your orders and provide order status and support.
• Create and manage your account.
• Operate, maintain, and improve our website and services.
• Send transactional communications (order confirmations, shipping updates).
• Send marketing communications where you have consented, which you may withdraw at any time.
• Detect, prevent, and address fraud, security, and technical issues.
• Comply with legal obligations and enforce our terms.

3. Legal Bases for Processing (EEA/UK Visitors)

If you are located in the EEA or UK, we rely on the following legal bases: performance of a contract (to fulfil your orders), your consent (for marketing and non-essential cookies), our legitimate interests (to operate and secure our business), and compliance with legal obligations.

4. How We Share Information

We do not sell your personal information for money. We share information only as described here:

• Service providers — payment processors, shipping carriers, email and hosting providers, and analytics providers, who process data on our behalf under contract.
• Legal & safety — when required by law, subpoena, or to protect the rights, property, or safety of PlugCove, our customers, or others.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

5. Data Retention

We keep personal information only for as long as necessary for the purposes described in this Policy, including to satisfy legal, accounting, tax, or reporting requirements. Order and transaction records are typically retained for the period required by applicable law. When information is no longer needed, we delete or de-identify it.

6. Cookies and Tracking

We use cookies and similar technologies to keep items in your cart, remember preferences, secure the site, and understand how it is used. Categories include strictly necessary cookies (required for the site to function), preference cookies, and analytics cookies. You can control non-essential cookies through your browser settings or, where provided, our cookie banner. Disabling some cookies may affect site functionality.

7. Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to: (a) know the categories and specific pieces of personal information we collect; (b) request deletion of your personal information; (c) request correction of inaccurate information; (d) opt out of the "sale" or "sharing" of personal information; and (e) not be discriminated against for exercising your rights. We do not sell personal information. To exercise these rights, email privacy@plugcove.com or call 1-800-555-0199. We will verify your request before responding, and you may use an authorized agent.

8. Your EEA/UK Rights (GDPR)

If you are located in the EEA or UK, you have the right to access, rectify, erase, restrict, or object to processing of your personal information, the right to data portability, and the right to withdraw consent at any time. You also have the right to lodge a complaint with your local data protection authority. To exercise these rights, contact privacy@plugcove.com.

9. Data Security

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. International Transfers

We are based in the United States and process information there. If you access our website from outside the United States, you understand your information may be transferred to and processed in the United States, which may have different data-protection laws than your country.

11. Children's Privacy

Our website is not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Effective date" above and, where required, by additional notice.