Normal Standard Club(“Company,” “we,” “our,” or “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information in compliance with the General Data Protection Regulation (GDPR).
1. Information We Collect
We may collect the following types of personal data:
-
Identity Data: Name, username, or similar identifiers.
-
Contact Data: Email address, phone number, billing/shipping address.
-
Transaction Data: Payment details, purchase history.
-
Technical Data: IP address, device identifiers, browser type, operating system, cookies.
-
Usage Data: How you interact with our Services (pages visited, time spent, actions taken).
2. Legal Basis for Processing
We process your data under one or more of the following lawful bases:
-
Consent — when you explicitly agree to processing.
-
Contract — when processing is necessary to provide services.
-
Legal Obligation — when required to comply with laws.
-
Legitimate Interests — when processing is necessary for our business needs, provided your rights are not overridden.
3. How We Use Your Data
We use your personal data to:
-
Provide and manage our Services
-
Process payments and fulfill orders
-
Improve security, performance, and user experience
-
Communicate updates, promotions, or customer support
-
Meet legal and regulatory obligations
4. Data Retention
We retain personal data for no longer than two (2) years, unless a longer period is required by law. After this period, personal data is securely deleted or anonymised.
5. Sharing of Information
We will never sell your personal data. We may share it with:
-
Service Providers: Hosting, payment processing, analytics, customer support
-
Legal Authorities: If required by law or in response to valid legal processes
-
Business Transfers: In case of merger, acquisition, or reorganisation
6. Data Subject Rights (GDPR)
Your rights under GDPR are not affected. If you wish to exercise any of them, please contact us at here. We will respond within 30 days.
7. International Data Transfers
If personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses).
8. Security of Your Information
We implement appropriate technical and organisational measures to protect your personal data, including encryption, secure servers, and restricted access. However, no online transmission is completely secure.
9. Children’s Privacy
We do not knowingly collect personal data from children under 16 years old. If you believe we have inadvertently collected such data, please contact us for immediate deletion.
10. Changes to This Policy
We may update this Privacy Policy as necessary. Updates will be posted on this page with a new Effective Date.
11. Contact Us
For questions or to exercise your rights under GDPR, please contact:
Here
Address: [Insert Business Address]