Privacy Policy

Last updated: 2 June 2026 · Data controller: ORANGE LEOPOLD LTD

This Privacy Policy explains how ORANGE LEOPOLD LTD ("we", "us", "StayLocked") collects, uses, stores and protects your personal data when you visit staylockedapparel.com or place an order. We comply with the EU General Data Protection Regulation (GDPR) and Cyprus data-protection law.

1. Who we are

Data controller: ORANGE LEOPOLD LTD
Registered address: Anthimou Panaretou, Pafos 8036, Cyprus
Cyprus Reg. (HE) 364800 · VAT (TIC) 10364800F
Contact: staylocked.apparel@gmail.com

2. What data we collect

• Order & contact data: name, delivery and billing address, email, phone number.
• Payment data: processed by our payment provider — we do not store full card numbers.
• Technical data: IP address, device, browser, and usage data collected via cookies (see our Cookie Policy).
• Communications: messages you send us by email or contact form.

3. How and why we use it (legal bases)

• To fulfil your order — processing, shipping, support (performance of a contract).
• To meet legal obligations — tax, accounting, consumer law (legal obligation).
• To improve the site and prevent fraud (legitimate interests).
• Marketing emails — only with your consent, which you may withdraw at any time.

4. Sharing your data

We share data only with processors who help us run the business: payment providers, shipping carriers, email and hosting services. They act on our instructions under data-processing agreements. We never sell your personal data.

5. International transfers

Where data is transferred outside the European Economic Area, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

6. How long we keep it

Order and tax records are kept for the period required by Cyprus law (typically up to 6–7 years). Marketing data is kept until you unsubscribe. Technical/cookie data is kept for the periods set out in our Cookie Policy.

7. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, object to processing, and data portability, and to withdraw consent at any time. To exercise any right, email staylocked.apparel@gmail.com. You may also lodge a complaint with the Office of the Commissioner for Personal Data Protection (Cyprus).

8. Security

We use appropriate technical and organisational measures, including HTTPS encryption and access controls, to protect your data. No method of transmission is 100% secure, but we work to protect your information at all times.

9. Changes

We may update this policy. The current version is always posted here with its "last updated" date.