Privacy Policy

1. Introduction

This Privacy Policy explains how Simple Cute Things ("we", "us", "our") collects, uses, shares and protects personal information when you visit this online store, create an account, place an order or otherwise use our services (the "Services"). This store is operated on the RexPos e-commerce platform. By using the Services you acknowledge that you have read this policy.

2. Who handles your data

• Simple Cute Things is the data controller for the personal information collected through this store, including your account, orders, delivery and customer-service data. We decide why and how it is used.
• Rex Pos SaaS provides the software that runs this store. It processes your data on our behalf and under our instructions as a data processor (service provider), and acts as an independent controller only for limited platform purposes such as security, fraud prevention, service operation and legal compliance.

Questions about this store's use of your data: menz@gmail.com. Questions about the platform: support@aknsystems.com.

3. Information we collect

3.1 Information you give us

• Account details: name, email address, phone number and password (stored hashed).
• Order details: items, variants (such as colour and size), quantities, SKU, order notes and pre-order status.
• Delivery and billing details: shipping address, billing address and contact number.
• Business details: company name, tax or registration number and minimum-order arrangements for wholesale buyers.
• Communications: messages to support, reviews and survey responses.

3.2 Information collected automatically

• Browsing activity: products, categories and brands you view, search terms, sort and filter choices, items added to your cart, and your recently viewed products.
• Device and technical data: IP address, browser type, operating system, language preference, referring page and time of access.
• Cookies and similar technologies: see Section 7.

3.3 Information from third parties

• Payment processors confirm payment status and give limited details such as card brand, last four digits and transaction reference.
• Delivery partners provide tracking and delivery status.

Payment card data. We do not store full card numbers or security codes. Payments are handled by PCI-DSS compliant processors: [PAYMENT PROVIDERS].

4. How we use your information

We do not sell your personal information.

5. How we share your information

• RexPos, which hosts and operates this store for us.
• Service providers for payments, delivery, email and SMS, analytics and support. They may only use your data to provide services to us or the platform.
• Legal and safety: where required by law or to protect rights, safety and property.
• Business transfers: in a merger, acquisition or sale of assets, with notice to you.
• With your consent or at your direction.

6. International transfers

Our platform and providers may be located outside your country. When data is transferred across borders we use safeguards appropriate to applicable law, such as contractual protections. [Add specific countries or regions.]

7. Cookies and browsing history

• Strictly necessary: sign-in, cart, form and checkout security (such as session and CSRF cookies), and language preference.
• Functional: remembering choices such as selected product options, filters, sorting and your recently viewed products.
• Analytics: understanding usage and performance. Google Analytics, Hotjar, etc.
• Marketing: only with your consent. Mailerlite, Klaviyo, Hubspot, Facebook, Instagram, TikTok, Google, etc.

You can delete your recently viewed history at any time using the "Clear history" button on the home page. Our pages may load third-party fonts and icon libraries, which can receive your IP address and browser details. You can control cookies in your browser settings; blocking necessary cookies may stop the cart and checkout from working.

8. How long we keep your information

• Account data: while your account is active, then deleted or anonymised within 30 days of closure.
• Order and transaction records: 7 years for tax, accounting and legal requirements.
• Recently viewed history: 30 days, or until you clear it.
• Support communications: 3 months after resolution.
• Marketing data: until you unsubscribe or withdraw consent.
• Logs and security data: 30 days.

9. Security

We and RexPos use reasonable technical and organisational measures, including encrypted connections (HTTPS), access controls, hashed passwords and secure payment processing. No system is completely secure. If a breach affects your data, we will notify you and the relevant authorities as required by law.

10. Your rights

Depending on where you live, you may have the right to access, correct or delete your information; object to or restrict processing (including direct marketing); withdraw consent; receive your data in a portable format; and lodge a complaint with your data protection authority. Contact menz@gmail.com to exercise these rights. We may need to verify your identity. If you contact RexPos directly about this store's data, it will pass your request to us.

Ghana: We process data in line with the Data Protection Act, 2012 (Act 843). You may contact the Data Protection Commission of Ghana about unresolved concerns.

EEA/UK: Where GDPR or UK GDPR applies, the legal bases and rights above apply.

California: We do not sell or share personal information for cross-context behavioural advertising. Residents may request access, correction and deletion.

11. Children's privacy

The Services are not directed to children under [16/18] and we do not knowingly collect their personal information. If you believe a child has given us data, contact us and we will delete it.

12. Pre-orders and wholesale

For pre-orders and wholesale orders, we use your contact and delivery details to confirm the order, share estimated arrival dates and arrange delivery, in line with this policy and our pre-order terms.

Pre-order policy: Preorder items shipped by sea typically arrive within 2 months after the order is completed, while air shipments arrive within 15 days.

13. Changes to this policy

We may update this policy from time to time. We will post the new version here with a new "Last updated" date and, for material changes, notify you by email or a notice on the site.

14. Contact us