1. Information We Collect

We collect only the essential personal records necessary to process transactions, fulfill deliveries, and enhance your shopping journey:

2. Purpose & Legal Basis for Processing

We process your data strictly for legitimate commercial and operational purposes, including:

• Fulfillment & Logistics: Verifying order payments, transmitting shipping labels, routing packages to international postal carriers, and delivering transit tracking notices.
• Customer Experience: Optimizing storefront responsiveness, diagnosing technical errors, and tailoring catalog recommendations.
• Direct Communications: Replying to product inquiries, processing warranty claims, and delivering opt-in promotional releases.
• Fraud Mitigation: Monitoring anti-fraud risk indicators, detecting duplicate billing, and protecting against unauthorized access.

3. Payment Isolation & Data Encryption

We implement rigorous technical barriers to ensure your sensitive credentials remain secure:

• 256-Bit SSL/TLS Encryption: All sensitive communication passing between your browser and our servers is shielded using modern Secure Sockets Layer encryption protocols.
• Zero Payment Storage: TOPEACEWA does not store, log, or maintain full credit or debit card numbers on our local databases. All transactions are tokenized and processed directly by Level 1 PCI-DSS certified financial gateways.
• Restricted System Access: Customer profile records are stored behind authenticated cloud firewalls, accessible solely by authorized operations personnel subject to strict confidentiality agreements.

4. Third-Party Sharing & Marketing Infrastructure

We do not rent, sell, or trade your personal information to third-party data brokers. Data sharing is limited to trusted enterprise service providers supporting our operational ecosystem:

• E-Commerce Platform: Hosted via Shopify Inc., which supplies core catalog hosting and database management under strict global security protocols.
• Advertising & Attribution Partners: We deploy pixel tracking tools with vetted advertising networks (including Meta Ads and Google Marketing Platform) to evaluate campaign efficacy and deliver targeted promotions based on browsing history.

5. Cookie Technologies & Browser Controls

Cookies and local storage tags are small data identifiers transferred to your device to recognize recurring visitors:

• Essential Cookies: Critical for core functionality, such as retaining items in your shopping cart and maintaining checkout sessions.
• Performance & Analytics Cookies: Provide aggregated metrics regarding page response speeds, user navigation pathways, and visitor volume.
• Targeting Cookies: Assist marketing partners in serving relevant gear recommendations across third-party websites.

You may alter your cookie permissions or reject tracking through your browser preferences; however, disabling core cookies may impact checkout functionality.

6. California Privacy Compliance (CalOPPA & CCPA)

In accordance with California online privacy standards:

• Visitors may browse our public store catalogs anonymously without creating an account.
• Our Privacy Policy is permanently linked on all site headers and footers for straightforward review.
• California consumers maintain the right to request disclosure or deletion of collected personal records by emailing our privacy desk.
• Do Not Track (DNT) Signals: We respect standard automated DNT browser headers and do not deploy tracking cookies when a verifiable DNT signal is detected.

7. Children’s Online Privacy Protection (COPPA)

Our products and services are directed exclusively at individuals aged 18 and older. We do not intentionally solicit or collect personal records from children under 13 years of age. If you believe a minor has submitted personal information on our website, please notify us immediately at service@topeacewa.com, and we will purge the data from our active storage.

8. Security Incident Notification Protocol

In the event of a verified data compromise affecting customer records, our engineering team will initiate incident response actions and notify affected users via email within 7 business days, alongside posting an advisory notice on our site.

9. Commercial Email Standards (CAN-SPAM Act)

To uphold the provisions of the CAN-SPAM Act:

• We never deploy deceptive subject lines, misleading sender identities, or falsified domain routing.
• All marketing emails include a conspicuous, single-click "Unsubscribe" mechanism at the bottom of the message.
• Opt-out requests are processed automatically and honored across our marketing lists without delay.