Privacy Policy

1. Who we are

Casablanca Shirts (“we”, “us”, “our”) operates the website casablancashirts.org (the “Site”). We sell and showcase shirts inspired by contemporary resort aesthetics. This Privacy Policy applies to the Site and any services that link to it.

Controller: Casablanca Shirts, 145 Spring St, New York, NY 10012, United States. Email: [email protected].

2. Data we collect

• Identifiers and contact details: name, email address, billing and shipping address, phone number.
• Order and payment information: items purchased, order value, transaction identifiers, partial payment details handled by payment processors (we do not store full card numbers).
• Account information: username, password (hashed), preferences, wishlists.
• Device and usage data: IP address, browser type, device identifiers, pages viewed, referring/exit pages, date/time stamps, approximate location.
• Marketing data: communication preferences, engagement with emails, surveys, promotions.
• User‑generated content: product reviews, messages you send us.
• Inferences: preferences and interests derived from your interactions (e.g., preferred colors or fits).
• Sensitive data: we do not seek to collect sensitive personal information. Please do not share health, biometric, or other sensitive data with us.

3. Sources of data

• Directly from you: when you browse, create an account, place an order, contact support, or subscribe to communications.
• Automatically: through cookies, pixels, and similar technologies when you use the Site.
• From service providers and partners: payment processors, analytics providers, advertising platforms, and delivery carriers.
• From social networks: if you interact with our content or use social login features.

4. How we use your data

• Provide the Site and fulfill orders, payments, and deliveries.
• Customer support, returns, refunds, and warranty services.
• Personalize your experience, such as remembering preferences and recommending products.
• Marketing and promotions with your consent or as permitted by law.
• Analytics to understand performance and improve our products and Site.
• Fraud prevention, security, legal compliance, and enforcing our terms.

5. Legal bases (EEA/UK)

If you are in the European Economic Area or the United Kingdom, we process your personal data under these legal bases:

• Performance of a contract: to process orders and provide services you request.
• Consent: for certain cookies, email/SMS marketing, and where required by law. You may withdraw consent at any time.
• Legitimate interests: to secure our Site, prevent fraud, perform analytics, and personalize content (balanced against your rights).
• Legal obligations: to meet tax, accounting, and regulatory requirements.

6. Cookies and similar technologies

We use cookies, pixels, and local storage to operate the Site, remember your preferences, analyze traffic, and measure marketing. You can manage non‑essential cookies via the “Cookie settings” button or through your browser settings.

• Strictly necessary: required for core functionality such as security, cart, and checkout.
• Performance/analytics: help us understand usage to improve the Site.
• Functional: remember preferences and enhance features.
• Advertising/targeting: deliver and measure ads on our Site and third‑party platforms.

Browser controls: You may block or delete cookies in your browser. Doing so may affect Site functionality. To learn more, see allaboutcookies.org.

7. Analytics, ads & social tools

We may use analytics and advertising technologies such as Google Analytics, Google Ads, and Meta (Facebook/Instagram) pixels to measure performance and show relevant content. These partners may set cookies and collect information about your activity on our Site and other sites over time for analytics and targeted advertising.

• Opt‑out options: Google Analytics Opt‑out Browser Add‑on (link), Google Ad Settings (link), and Your AdChoices (link).
• You can also use our Cookie settings to disable analytics and advertising cookies on this Site.

8. How we share information

We share personal information with:

• Service providers: payment processors, fraud prevention, hosting, email service providers, analytics, ad platforms, and logistics partners who process data on our behalf under contracts.
• Business transfers: in connection with a merger, acquisition, financing, or sale of all or part of our business.
• Legal and safety: to comply with law, respond to lawful requests, protect rights, property, or safety.
• With your direction or consent: for example, when you post a review or connect a social account.

We do not sell personal information for money. For California and similar laws, “sale” or “sharing” can include targeted advertising. See “Your privacy rights” to opt out.

9. International data transfers

We are based in the United States and may transfer your information to the U.S. and other countries that may not provide the same level of data protection as your home country. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) to protect your data.

10. Data retention

We retain personal information only as long as necessary to fulfill the purposes outlined in this policy, including to comply with legal, accounting, or reporting obligations. For example, order records are typically kept for at least 7 years for tax and accounting compliance. Marketing data is retained until you unsubscribe or your consent is withdrawn, or after a period of inactivity.

11. Your privacy rights

Your rights depend on your location. Subject to applicable law, you may have the right to:

• Access: request a copy of the personal data we hold about you.
• Correction: request we correct inaccurate or incomplete data.
• Deletion: request we delete your personal data.
• Restriction/Objection: restrict or object to certain processing, including for direct marketing.
• Portability: receive your data in a portable format.
• Withdraw consent: where processing is based on consent.
• Opt out of targeted advertising, “sale,” or “sharing” of personal information (as defined by applicable laws).

EEA/UK: You also have the right to lodge a complaint with your local supervisory authority. UK: ICO; EEA: see EDPB members.

California (CCPA/CPRA): You have the right to know, delete, correct, opt out of sale/share, and limit use of sensitive information (we do not use sensitive personal information for inferring characteristics). You will not face discrimination for exercising your rights.

To verify your request, we may ask for information to confirm your identity. Authorized agents may submit requests by contacting us with proof of authorization.

12. Security

We employ administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is completely secure. Please keep your account credentials confidential and notify us if you suspect unauthorized activity.

13. Children’s privacy

Our Site is not directed to children. We do not knowingly collect personal information from individuals under 13 (or the minimum age required by your jurisdiction). If you believe a child has provided us with personal information, contact us to request deletion.

14. Third‑party links

Our Site may link to third‑party websites or services. We are not responsible for their privacy practices. We encourage you to review the privacy policies of those third parties.

15. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will post the updated policy on this page and update the effective date at the top.

16. Contact us

If you have questions or requests about this Privacy Policy or your personal information, contact us:

• Email: [email protected]
• Address: 145 Spring St, New York, NY 10012, United States
• Support hours: Mon–Fri 9:00–18:00 ET