Who We Are
Our website address is: https://underdogscycling.cc. Underdogs Cycling is an ecommerce store providing cycling products worldwide. For privacy-related inquiries, please contact us at [email protected].

What Personal Data We Collect and Why We Collect It
We collect personal data to provide and improve our services, process transactions, and ensure compliance with legal obligations.

Information Collected During Checkout
While you visit our site, we track:

• • Products you’ve viewed to show recently viewed items.

• • Location, IP address, and browser type for estimating taxes and shipping.

• • Shipping address to process orders and provide delivery estimates.

When you purchase from us, we collect:

• • Name, billing address, shipping address, email address, and phone number.

• • Payment details (handled securely by Stripe, without storing credit card information on our servers).

• • Account information like username and password (if you create an account).

Cookies
We use cookies to enhance your shopping experience by:

• • Storing cart contents while browsing.

• • Saving login preferences.

• • Tracking site usage through analytics.

Comments
When visitors leave comments, we collect the data shown in the comments form, along with the visitor’s IP address and browser user agent string to help detect spam. An anonymized hash may be sent to the Gravatar service to check if you use it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/.

Media
If you upload images, avoid including embedded location data (EXIF GPS). Visitors can download and extract such data.

Analytics
We use Google Analytics to monitor website traffic and improve user experience. Google’s privacy policy is available here: https://policies.google.com/privacy. Users can opt out of analytics tracking by adjusting their browser settings or using the Google Analytics Opt-Out browser add-on.

Payments
We accept payments via Stripe and PayPal.

When processing payments, data such as purchase totals, billing information, and payment details are shared with the respective payment processor.

Stripe’s privacy policy is available here: https://stripe.com/privacy.
PayPal’s privacy policy is available here: https://www.paypal.com/us/legalhub/paypal/privacy-full and https://www.paypal.com/us/privacy-center/privacy-practices

Who Has Access to Your Data
Only administrators and shop managers can access:

• • Order details (products purchased, purchase date, and shipping information).

• • Customer information (name, email address, billing and shipping addresses).

How Long We Retain Your Data

• • Order information is retained for 7 years for tax and accounting purposes.

• • Contact form submissions are retained for 6 months.

• • Comments and their metadata are retained indefinitely.

• • Customer accounts are retained indefinitely unless requested otherwise.

What Rights You Have Over Your Data
You can request an exported file of the personal data we hold about you or request its deletion. This excludes data we must retain for administrative, legal, or security purposes.

Your Rights Based on Region

• • EU Residents (GDPR): You have the right to access, rectify, delete, or restrict the processing of your data. You can also object to processing and request data portability.

• • California Residents (CCPA): You have the right to know what personal data we collect, request deletion of your data, and opt out of the sale of your personal data (we do not sell personal data).

• • Canada Residents (PIPEDA): You have the right to access your personal data, challenge its accuracy, and request corrections.

• • Australia Residents: You can request access to your personal data and opt out of direct marketing communications at any time.

Where Your Data Is Sent
Visitor comments may be checked through an automated spam detection service. Data may be transferred outside the European Union, with safeguards such as Privacy Shield, contractual clauses, or other mechanisms ensuring compliance with GDPR.

How We Protect Your Data
We implement encryption, secure hosting, and limited access protocols. Our payment processing partners comply with PCI-DSS security standards.

Data Breach Procedures
In case of a data breach, we will notify affected users and authorities as required by law.

Third Parties We Share Data With

• • Payment processors: Stripe.

• • Analytics providers: Google Analytics.

• • Spam detection services: Akismet.

Do Not Sell My Personal Information
We do not sell personal information to third parties. California residents can submit requests regarding their data by contacting us at [email protected].

Cross-Border Data Transfers
Your data may be transferred to and processed in countries outside your residence, including countries that may not offer the same level of data protection. We use standard contractual clauses and other safeguards to ensure your data is protected.

Contact Information
For privacy concerns, please contact us at [email protected].

Changes to This Policy
We reserve the right to update this privacy policy at any time. Changes will be posted on this page, and significant updates will be communicated via email if applicable.