Privacy Policy
PhantomPocket
Privacy Policy
Last Updated: June 9, 2025
This Privacy Policy describes how PhantomPocket ("we," "us," or "our") collects, uses, and shares your personal information when you visit our website or make a purchase. It is designed to comply with the General Data Protection Regulation (GDPR) for customers in the European Union and the California Consumer Privacy Act (CCPA) for California residents.
1. Information We Collect
Information You Provide
- Contact information (name, email address, phone number)
- Billing and shipping address
- Payment information (processed securely via third-party payment processors — we do not store full card numbers)
- Account credentials if you create an account
- Communications you send us (support inquiries, feedback)
Information Collected Automatically
- Device information (browser type, operating system, IP address)
- Usage data (pages visited, time spent, referring URL)
- Cookies and similar tracking technologies
- Purchase history and browsing behavior on our site
Information from Third Parties
- Social media platforms (if you interact with our TikTok or Instagram content)
- Analytics providers (e.g., Google Analytics)
- Advertising partners
2. How We Use Your Information
We use your personal information to:
- Process and fulfill your orders
- Send order confirmations, shipping updates, and receipts
- Respond to your questions and provide customer support
- Send marketing communications (only with your consent where required by law)
- Improve our website, products, and services
- Detect and prevent fraud or other illegal activity
- Comply with legal obligations
Legal basis for processing (GDPR): We process your data on the grounds of (a) contract performance, (b) legitimate interests, (c) compliance with legal obligations, and (d) your consent where required.
3. Sharing Your Information
We do not sell your personal information. We may share your information with:
- Payment processors (e.g., Stripe, PayPal, Shop Pay) to complete transactions
- Shipping and logistics providers to fulfill your order
- Email and marketing platforms to send communications
- Analytics providers to understand site usage
- Legal authorities if required by law, court order, or to protect our rights
All third-party service providers are contractually required to handle your data securely and only for the purposes we specify.
4. Cookies
We use cookies and similar technologies to enhance your experience, remember preferences, analyze traffic, and support marketing. You can control cookie settings through your browser. Note that disabling cookies may affect site functionality.
Types of cookies we use:
- Essential cookies — required for the site to function
- Analytics cookies — help us understand how visitors use the site
- Marketing cookies — used to deliver relevant ads
5. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes outlined in this Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Order and transaction records are typically retained for 7 years for tax and legal purposes. You may request deletion of your data subject to our legal retention requirements.
6. Your Rights
For EU/EEA Residents (GDPR)
Under the GDPR, you have the following rights:
- Right to access — request a copy of the personal data we hold about you
- Right to rectification — request correction of inaccurate or incomplete data
- Right to erasure — request deletion of your personal data ("right to be forgotten")
- Right to restriction — request we limit how we use your data
- Right to data portability — receive your data in a structured, machine-readable format
- Right to object — object to processing based on legitimate interests or for direct marketing
- Right to withdraw consent — where processing is based on consent, you may withdraw it at any time
- Right to lodge a complaint — with your local data protection authority
For California Residents (CCPA)
Under the CCPA, California residents have the following rights:
- Right to know — request disclosure of the categories and specific pieces of personal information we have collected about you
- Right to delete — request deletion of personal information we have collected (subject to certain exceptions)
- Right to opt-out of sale — we do not sell personal information
- Right to non-discrimination — we will not discriminate against you for exercising your privacy rights
Categories of personal information collected in the last 12 months: identifiers, commercial information, internet or other electronic network activity, and geolocation data.
To exercise any of these rights, please contact us using the information in Section 9. We will respond within 30 days (GDPR) or 45 days (CCPA) of receiving a verifiable request.
7. International Data Transfers
PhantomPocket is based in the United States. If you are located in the EU/EEA, your personal data may be transferred to and processed in the United States or other countries that may not have the same level of data protection as your home country. Where required, we use Standard Contractual Clauses or other approved transfer mechanisms to ensure your data is adequately protected.
8. Children's Privacy
Our website is not directed to children under the age of 16. We do not knowingly collect personal information from children. If we learn that we have inadvertently collected information from a child under 16, we will promptly delete it. If you believe we have collected such information, please contact us immediately.
9. Contact Us
For privacy-related requests, questions, or complaints, please contact us at:
PhantomPocket
Email: [example email]
Website: www.phantompocket.com
EU residents may also contact your national data protection authority. A list of EU data protection authorities is available at: https://edpb.europa.eu
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. We encourage you to review this Policy periodically. If changes are material, we will provide a more prominent notice (such as an email notification). Your continued use of our website after any changes constitutes your acceptance of the updated Policy.