Privacy Policy
1. Data Controller
Rage Fight Gear is the data controller responsible for your personal data.
- Business Name: Rage Fight Gear
- Email: support@ragefightgear.com
- Shipping Origin: Bangkok, Thailand
If you are in the EU/EEA or UK, you have the right to contact our data controller regarding any data protection concerns.
2. Information We Collect
We collect information you provide directly, including:
- Name, email address, and phone number when creating an account or placing an order
- Shipping and billing addresses
- Order history and product preferences
- Communications you send us (contact forms, support tickets, emails)
- Newsletter subscription preferences and consent records
We also automatically collect:
- IP address and approximate geolocation
- Browser type, device information, and operating system
- Pages visited, referring URLs, and interaction data
- Cookie identifiers (see Section 7 below)
3. Legal Basis for Processing (GDPR)
Under the General Data Protection Regulation (GDPR) and UK GDPR, we process your personal data on the following legal bases:
- Performance of a Contract (Art. 6(1)(b)): Processing necessary to fulfill your order, manage your account, and provide customer support.
- Consent (Art. 6(1)(a)): Marketing emails and newsletters are sent only with your explicit opt-in consent. You may withdraw consent at any time.
- Legitimate Interests (Art. 6(1)(f)): Fraud prevention, site security, and improving our products and services, where these interests do not override your fundamental rights.
- Legal Obligation (Art. 6(1)(c)): Retaining order and transaction records as required by tax and accounting regulations.
4. How We Use Your Information
- To process and fulfill your orders
- To send order confirmations, shipping updates, and delivery notifications
- To respond to your inquiries and provide customer support
- To send promotional emails and newsletters (only with your explicit consent)
- To improve our products, website, and services
- To prevent fraud and ensure site security
- To comply with legal and regulatory obligations
5. Third-Party Service Providers
We share your personal data with the following trusted third-party processors, who act on our behalf and under our instructions:
- Stripe — Payment processing. Your payment information is handled directly by Stripe and is never stored on our servers. See Stripe's Privacy Policy.
- DHL Express — Shipping and delivery. We share your name, shipping address, email, and phone number with DHL to fulfill and deliver your order. See DHL's Privacy Notice.
- Resend — Transactional emails (order confirmations, shipping updates). See Resend's Privacy Policy.
- Hosting & Infrastructure — Our website and database are hosted on cloud infrastructure. Data may be processed in data centers located outside your country of residence (see Section 6).
We do not sell, rent, or trade your personal data to any third party for their own marketing purposes.
6. International Data Transfers
As we operate from Thailand and serve customers in the USA, UK, Canada, Australia, and the EU/EEA, your personal data may be transferred to and processed in countries outside your country of residence, including countries that may not provide the same level of data protection.
Where we transfer data outside the EU/EEA or UK, we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Adequacy decisions where applicable
- Data processing agreements with all third-party providers
8. Data Retention
We retain your personal data only as long as necessary for the purposes described in this policy:
- Order & transaction data: 7 years from the date of transaction (required by tax and accounting regulations)
- Account data: For as long as your account is active, plus 2 years after account deletion
- Marketing & newsletter data: Until you unsubscribe or withdraw consent
- Support ticket data: 3 years from resolution
- Cookie consent records: 12 months (then re-consent is requested)
9. Data Security
We implement industry-standard security measures including SSL/TLS encryption, secure authentication, role-based access controls, and regular security reviews. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
10. Your Rights Under GDPR (EU/EEA & UK Residents)
If you are located in the European Economic Area (EEA) or United Kingdom, you have the following rights under GDPR / UK GDPR:
- Right of Access: Request a copy of the personal data we hold about you
- Right to Rectification: Request correction of inaccurate or incomplete data
- Right to Erasure: Request deletion of your personal data ("right to be forgotten")
- Right to Restriction: Request limitation of processing of your data
- Right to Data Portability: Receive your data in a structured, commonly used, machine-readable format
- Right to Object: Object to processing based on legitimate interests or for direct marketing
- Right to Withdraw Consent: Withdraw consent at any time for consent-based processing
To exercise any of these rights, contact us at support@ragefightgear.com. We will respond within 30 days.
Right to Lodge a Complaint: You have the right to lodge a complaint with your local data protection authority. For UK residents, this is the Information Commissioner's Office (ICO).
11. Your Rights Under CCPA/CPRA (California Residents)
If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with additional rights:
- Right to Know: Request what personal information we collect, use, disclose, and sell
- Right to Delete: Request deletion of your personal information
- Right to Correct: Request correction of inaccurate personal information
- Right to Opt-Out: Opt out of the sale or sharing of your personal information
- Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights
Do Not Sell My Personal Information: We do not sell your personal information to third parties. We do not share your personal information for cross-context behavioral advertising.
To exercise your CCPA rights, contact us at support@ragefightgear.com.
12. Canadian Anti-Spam Legislation (CASL)
In compliance with Canada's Anti-Spam Legislation (CASL), we only send commercial electronic messages (CEMs) to Canadian recipients who have provided their express consent. Each marketing email includes:
- Clear identification of Rage Fight Gear as the sender
- Our contact information
- A functional unsubscribe mechanism that is processed within 10 business days
You may withdraw your consent at any time by clicking the unsubscribe link in any marketing email or by contacting us at support@ragefightgear.com.
13. Children's Privacy
Our site and products are intended for individuals aged 18 and over. We do not knowingly collect personal information from anyone under the age of 18. If you believe a minor has provided us with personal data, please contact us immediately and we will delete it.
14. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. For material changes, we will notify you via email or a prominent notice on our website. Your continued use of the site after changes constitutes acceptance of the revised policy.
15. Contact Us
For privacy-related inquiries, data requests, or to exercise any of your rights, contact us at:
- Email: support@ragefightgear.com
- Subject Line: "Privacy Request" or "Data Subject Request"
We aim to respond to all data protection requests within 30 days.