Privacy Policy

Last updated: June 4, 2026

At Pemagear, we respect your privacy and are committed to protecting your personal information. Pemagear is a brand operated by Pemadova LLC, a limited liability company registered in the State of New Mexico, United States (“we”, “us”, “our”). This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you visit our website www.pemagear.com or make a purchase, and outlines your rights regarding your information.

1. Information We Collect

Information you provide directly (when registering, ordering, or contacting us):

• Identity data: full name
• Contact data: email address, shipping and billing addresses, phone number
• Transaction data: order details, items purchased, order history, preferences
• Payment data: payment method type, partial card information (full card data is processed and stored by our payment processors, not by us)
• Communication data: messages you send via contact form, email, or chat

Information collected automatically when you visit our Site:

• Technical data: IP address, browser type and version, operating system, device identifiers, referring URLs
• Usage data: pages visited, time spent on pages, click behavior, search terms used on our Site
• Location data: approximate geographic location (country/region) derived from IP address
• Cookies and similar tracking technologies (see Section 6)

2. How We Use Your Information & Legal Basis

We process your personal data for the following purposes, on the following legal bases under GDPR (where applicable):

• Order fulfillment — to process payments, produce, ship, and track your order, and provide customer support. Legal basis: performance of a contract.
• Account management — to create and maintain your account. Legal basis: performance of a contract.
• Customer communication — to send order confirmations, shipping updates, and respond to inquiries. Legal basis: performance of a contract / legitimate interest.
• Marketing — to send promotional emails about new designs, sales, and offers (only with your consent; you can unsubscribe at any time). Legal basis: consent.
• Site improvement & analytics — to understand how visitors use our Site and improve user experience. Legal basis: legitimate interest / consent (for non-essential cookies).
• Fraud prevention & security — to detect, investigate, and prevent fraudulent transactions, abuse, or violations of our Terms. Legal basis: legitimate interest / legal obligation.
• Legal compliance — to comply with tax, accounting, consumer protection, and other applicable laws. Legal basis: legal obligation.

3. Data Sharing & Third Parties

We do not sell your personal information. We share your data only with trusted third parties strictly as necessary to operate our business:

• Payment processors: Stripe, Inc. and PayPal Holdings, Inc. — to securely process payments. They handle full card details under their own privacy policies and PCI-DSS compliance.
• Print-on-demand & fulfillment partners located in the United States, China, and Vietnam — your name, shipping address, phone number (when carrier requires), and order details are shared solely to produce and ship your order.
• Shipping carriers: USPS, Canada Post, Royal Mail, Australia Post, YunExpress, Yanwen, and local last-mile carriers — to deliver your order and provide tracking.
• Analytics & advertising tools: Google Analytics, Google Tag Manager, Google Ads, and Meta (Facebook) Pixel — to measure Site performance and the effectiveness of our marketing. These tools use cookies and may process IP addresses and device identifiers.
• Email and communication tools — to send order updates and (where you have opted in) marketing emails.
• Hosting and infrastructure providers — to host our website and databases.
• Legal authorities or professional advisors — when required by law, court order, or to protect our legal rights.

4. International Data Transfers

Because our fulfillment partners are located in the United States, China, and Vietnam, your personal data may be transferred to and processed in countries outside your country of residence — including outside the European Economic Area (EEA) and the United Kingdom. These jurisdictions may have data protection laws that differ from those in your country.

When we transfer personal data outside the EEA or UK, we rely on appropriate safeguards as required by GDPR, including:

• European Commission Adequacy Decisions (where applicable);
• Standard Contractual Clauses (SCCs) approved by the European Commission;
• UK International Data Transfer Agreements (IDTA) for UK data subjects.

We share only the minimum data necessary (name, shipping address, phone if required by carrier, and order content) and require partners to apply appropriate technical and organizational security measures.

5. Data Retention

We retain personal information only as long as necessary for the purposes set out above:

• Order and transaction records: 7 years (for tax, accounting, and audit purposes as required by U.S. law).
• Customer support communications: up to 3 years after the last interaction.
• Account data: until you delete your account, or after 3 years of inactivity.
• Marketing data: until you withdraw consent or unsubscribe.
• Analytics data: typically up to 14 months (Google Analytics default).

After the retention period, data is deleted or fully anonymized.

6. Cookies & Tracking Technologies

We use the following categories of cookies and similar technologies:

• Strictly necessary cookies — required for the Site to function (cart, login, checkout, security). These cannot be disabled.
• Performance & analytics cookies — Google Analytics, Google Tag Manager. Help us understand how visitors use our Site.
• Advertising & marketing cookies — Google Ads, Meta Pixel. Used to deliver relevant ads and measure campaign effectiveness.
• Functional cookies — remember your preferences (language, region, cart contents).

You can manage or disable non-essential cookies via our cookie consent banner (where available) or your browser settings. Disabling certain cookies may affect Site functionality. We respect “Global Privacy Control” (GPC) signals where required by law.

7. Security

We use industry-standard safeguards including SSL/TLS encryption, PCI-DSS compliant payment processors, restricted access controls, and secure hosting. While we take strong measures to protect your data, no method of online transmission or storage is 100% secure. In the event of a personal data breach affecting your rights, we will notify you and the relevant authorities as required by applicable law.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

General rights (all users):

• Access — request a copy of your personal data;
• Correction — ask us to correct inaccurate information;
• Deletion — ask us to delete your data (subject to legal retention requirements);
• Opt out of marketing — unsubscribe from emails at any time via the link in any marketing message.

For EEA / UK residents (GDPR / UK GDPR):

• Right to data portability (receive your data in a structured, machine-readable format);
• Right to object to processing based on legitimate interest;
• Right to restrict processing;
• Right to withdraw consent at any time;
• Right to lodge a complaint with your local Data Protection Authority (e.g., ICO in the UK, CNIL in France).

For California residents (CCPA / CPRA):

• Right to know what personal information we collect, use, share, and the sources;
• Right to delete personal information we hold about you;
• Right to correct inaccurate personal information;
• Right to opt out of the “sale” or “sharing” of personal information (note: we do not sell your data, but advertising cookies may qualify as “sharing” under CPRA — you may opt out via our cookie banner or browser GPC signal);
• Right to limit the use of sensitive personal information;
• Right to non-discrimination for exercising your privacy rights.

To exercise any of these rights, email us at support@pemagear.com. We will respond within 30 days (GDPR) or 45 days (CCPA). We may need to verify your identity before fulfilling your request.

9. Automated Decision-Making

We do not engage in automated decision-making or profiling that produces legal or similarly significant effects on you. Fraud detection systems may flag suspicious transactions for human review, but no order is canceled solely by an automated decision without staff oversight.

10. Children’s Privacy

Our Site and products are not directed to children. We do not knowingly collect personal information from children under 13 years of age (United States — COPPA) or under 16 years of age in the European Economic Area and the United Kingdom (or the applicable minimum age in your country). If you believe a child has provided us with personal information, please contact us immediately and we will delete such information.

11. Third-Party Links

Our Site may contain links to third-party websites or social media platforms (Facebook, Instagram, X, Pinterest). We are not responsible for the privacy practices of these third parties. Please review their privacy policies before providing any information.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Material changes will be posted on this page with an updated “Last updated” date and, where required, notified to you by email.

13. Contact Us

For any questions, concerns, or requests regarding your privacy or this Policy, please contact us at:

Pemagear is a brand operated by Pemadova LLC. The address above is for registered business correspondence only — we do not accept walk-in visits, in-person returns, or package drop-offs at this location.

Thank you for trusting Pemagear.