Privacy Policy
I. Who we are
This Privacy Policy applies to the operations of 冷z LLC (“Leng Z LLC”), doing business as “Chill Zone,” the entity responsible for determining the purposes and means of processing personal data in connection with https://chillzonecool.com. Processing described in this Policy is carried out either directly by us or by authorized service providers acting under our instructions.
For individuals located in the European Union or European Economic Area, 冷z LLC (“Leng Z LLC”) acts as the Data Controller within the meaning of applicable data-protection law.
II. What personal data we collect
We collect only the data necessary for legitimate and disclosed business purposes. This may include:
- Account & contact data: name, email address, billing and shipping addresses.
- Order & transaction data: purchase details, totals, currency, confirmations, and timestamps.
- Technical & device data: IP address, browser type, device model, operating system, approximate location, pages visited, and referral sources.
- Support communications: messages you send to us and our responses.
- Cookies & identifiers: essential security cookies, session tokens, cart identifiers, and—where legally permitted—optional analytics cookies.
III. How and why we use your data
We process personal data only for lawful, specific, and disclosed purposes, including:
- Providing access to Chill Zone services, Digital Goods, and Physical Goods.
- Processing and fulfilling orders, including shipping where applicable.
- Sending required transactional or service-related communications.
- Responding to support requests and providing customer service.
- Operating, securing, maintaining, and improving our website and systems.
- Detecting, preventing, and investigating fraud, misuse, or unauthorized activity.
- Complying with legal, tax, accounting, and consumer-protection obligations.
- Sending optional marketing communications only where legally permitted and with valid consent.
We do not sell personal data. We also do not share personal data for cross-context behavioral advertising or targeted advertising purposes as those terms are defined under applicable U.S. state privacy laws. Disclosures to service providers acting on our behalf for operational purposes do not constitute a sale or prohibited sharing under those laws.
IV. Legal bases for processing (EU/EEA/Germany)
For individuals subject to the GDPR, we rely on the following legal bases:
- Art. 6(1)(b) GDPR — processing necessary for contract performance (orders, downloads, service access).
- Art. 6(1)(c) GDPR — processing required to comply with legal obligations.
- Art. 6(1)(f) GDPR — legitimate interests, including ensuring site security, preventing fraud, maintaining service reliability, and performing limited, proportionate analytics necessary to operate and improve our services. These interests are balanced against your rights and expectations, and you may object to such processing as described below.
- Art. 6(1)(a) GDPR — your consent, where required (e.g., optional cookies or marketing).
V. Third-party processors & service providers
We share personal data only where necessary for legitimate business operations or order fulfillment. Key providers include:
- Stripe — payment processing. We do not store full payment card numbers.
- Printful — production and shipping of Physical Goods (limited order and address data).
- YouTube — embedded video content, subject to YouTube’s own privacy practices.
- Cloudflare — security, content delivery, and limited log processing.
Each provider processes data under its own privacy policy and applicable contractual safeguards.
VI. International transfers of personal data
Personal data may be processed in the United States, the European Union, or other jurisdictions where our service providers operate. Where required, we rely on appropriate safeguards, including European Commission– approved Standard Contractual Clauses under Art. 46 GDPR.
VII. Data retention
We retain personal data only for as long as reasonably necessary to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by law.
For example, order and transaction records may be retained for accounting and tax compliance, while support communications are retained for operational continuity and dispute resolution.
VIII. Your privacy rights
Depending on your jurisdiction, you may have the right to:
- Access your personal data.
- Correct inaccurate or incomplete data.
- Request deletion where legally permitted.
- Restrict or object to certain processing.
- Receive a portable copy of your data.
- Withdraw consent at any time where processing is based on consent.
We may deny or limit requests where retention is legally required or an applicable exception applies.
To exercise your rights, contact us exclusively at legal@chillzonecool.com.
EU/EEA residents also have the right to lodge a complaint with their local supervisory authority.
IX. Cookies & similar technologies
We use essential cookies required for site operation, security, and cart functionality. Optional analytics or preference cookies are used only where legally permitted and, where required, only with your consent. Additional details are provided in our Cookie Policy.
X. Children’s privacy
Our services are not directed to children under 16. We do not knowingly collect personal data from children under this age, and we will delete such data if we become aware it has been collected.
XI. Data security
We implement reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, alteration, or misuse. No system is completely secure, but we continuously evaluate and improve our safeguards.
XII. Changes to this Privacy Policy
We may update this Policy periodically. Updates take effect upon publication with a revised effective date. Continued use of our services after publication indicates acceptance of the updated Policy.
XIII. Contact method for all privacy matters
All privacy-related inquiries must be sent to:
legal@chillzonecool.com.
This Policy is provided as a structured, compliance-oriented document and does not constitute legal advice. Laws vary by jurisdiction and may change over time. Attorney review may be appropriate.