GDPR Privacy Policy

Last updated: July 5, 2026

This page describes how Keal Cosplay collects, uses, and protects the personal data of visitors and customers from the European Economic Area (EEA) and United Kingdom, in accordance with the General Data Protection Regulation (GDPR).

1. Data Controller

The data controller responsible for your personal data is:

Keal Cosplay
Website: kealcosplay.com
Email: support@kealcosplay.com

2. What Data We Collect

We collect the following personal data when you use our website or place an order:

• Name and contact information (email address, phone number)
• Shipping and billing address
• Payment information (processed securely by our payment providers)
• Order history and purchase details
• Browsing data and cookies (see our Privacy Policy for details)

3. Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract performance: To process and fulfill your orders
• Legal obligation: To comply with applicable laws and regulations
• Legitimate interests: To improve our services and prevent fraud
• Consent: For marketing communications (you may withdraw consent at any time)

4. How We Use Your Data

• To process and fulfill your orders
• To communicate with you about your orders and inquiries
• To send marketing emails (only with your consent)
• To improve our website and services
• To comply with legal obligations

5. Data Sharing

We may share your data with:

• Shipping carriers: To deliver your orders
• Payment processors: To process payments securely
• Service providers: Such as email marketing platforms, analytics tools

We do not sell your personal data to third parties.

6. International Data Transfers

Your data may be transferred to and processed in countries outside the EEA. When this occurs, we ensure appropriate safeguards are in place in accordance with GDPR requirements.

7. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy, or as required by law. Order data is typically retained for 7 years for accounting and legal purposes.

8. Your Rights Under GDPR

As an EEA resident, you have the following rights:

• Right of access: Request a copy of your personal data
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your personal data
• Right to restriction: Request restriction of processing
• Right to data portability: Receive your data in a portable format
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent for marketing at any time

To exercise any of these rights, please contact us at: support@kealcosplay.com

9. Complaints

If you believe we have not handled your data appropriately, you have the right to lodge a complaint with your local data protection authority.

10. Contact Us

For any questions about this GDPR Privacy Policy or how we handle your data, please contact us:

📧 Email: support@kealcosplay.com
🌐 Website: kealcosplay.com
⏰ Business Hours: Monday to Friday, 9:00 AM – 6:00 PM (HKT)