Privacy Policy

The 00s Version(“we”, “us”, “our”) is the data controller responsible for your personal data. We operate the website the00sversion.com and are committed to protecting and respecting your privacy in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable national data protection laws.

Contact: privacy@the00sversion.com

We collect and process the following categories of personal data:

• —Identity Data: First name, last name, username or similar identifier.
• —Contact Data: Billing address, delivery address, email address, phone number.
• —Financial Data: Payment card details (processed securely by Stripe — we do not store card numbers).
• —Transaction Data: Details of products and services purchased, order history.
• —Technical Data: IP address, browser type/version, time zone, browser plug-in types, operating system and platform.
• —Usage Data: Information about how you use our website and products.
• —Marketing Data: Preferences for receiving marketing communications from us.
• —Cookie Data: As described in Section 8 below.

We process your personal data on the following legal bases under Article 6 GDPR:

• —Contract performance: To fulfil orders, process payments, and deliver products to you.
• —Legal obligation: To comply with applicable accounting, tax, and consumer protection laws.
• —Legitimate interests: To improve our website, prevent fraud, and administer our business.
• —Consent: To send you marketing emails where you have opted in. You may withdraw consent at any time.

We use your personal data to:

• ·Process and fulfil your orders, including sending order confirmations and dispatch notifications.
• ·Manage your account and provide customer support.
• ·Process payments securely via our payment processor (Stripe).
• ·Comply with legal and regulatory obligations.
• ·Send you marketing communications where you have given consent.
• ·Improve our website, products, and services through analytics.
• ·Detect and prevent fraud and other illegal activities.

We do not sell your personal data. We share it only with trusted third parties who help us operate our business, each bound by data processing agreements:

• —Stripe: Payment processing. Privacy policy at stripe.com/privacy
• —Resend: Transactional email delivery. Privacy policy at resend.com/legal/privacy-policy
• —Vercel: Website hosting and infrastructure.
• —Analytics providers: Aggregated, anonymised website analytics.

Where we transfer data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission.

We retain your personal data only as long as necessary for the purposes for which it was collected:

• ·Order and transaction data: 7 years (tax and accounting obligations under EU law).
• ·Account data: for the duration of your account plus 2 years.
• ·Marketing data: until you unsubscribe or withdraw consent.
• ·Technical/cookie data: as described in our Cookie Policy (Section 8).

Under the GDPR, you have the following rights regarding your personal data. To exercise any of these rights, contact us at privacy@the00sversion.com:

• —Right of access: Request a copy of the personal data we hold about you.
• —Right to rectification: Request correction of inaccurate or incomplete data.
• —Right to erasure: Request deletion of your personal data ('right to be forgotten'), subject to legal retention obligations.
• —Right to restriction: Request that we restrict processing of your data in certain circumstances.
• —Right to data portability: Receive your data in a structured, commonly used, machine-readable format.
• —Right to object: Object to processing based on legitimate interests, including direct marketing.
• —Right to withdraw consent: Where processing is based on consent, withdraw it at any time without affecting prior processing.
• —Right to lodge a complaint: File a complaint with your national supervisory authority (e.g. the Data Protection Commission in Ireland or ICO in the UK).

We will respond to all requests within 30 days. Requests are free of charge, except where manifestly unfounded or excessive.

We use cookies and similar tracking technologies to enhance your experience on our site. Cookies are small text files stored on your device.

• —Strictly necessary: Essential for the website to function (e.g. cart contents, session tokens). Cannot be disabled.
• —Functional: Remember your preferences (e.g. cookie consent settings).
• —Analytics: Anonymised data on how visitors use our site. Only placed with your consent.
• —Marketing: Track visitors across websites for advertising purposes. Only placed with your consent.

You can change your cookie preferences at any time by clearing your browser's local storage or adjusting browser settings. Most browsers allow you to refuse cookies via their settings.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include SSL/TLS encryption for data in transit, secure payment processing via Stripe (PCI-DSS compliant), and restricted access to personal data within our organisation.

In the event of a personal data breach, we will notify affected individuals and the relevant supervisory authority within 72 hours where required by law.

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on our website. The “Last updated” date at the top of this page reflects the most recent revision.

For any questions, concerns, or data rights requests, please contact our Data Protection contact: