Privacy Policy — Exclipse

Exclipse ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share personal data when you visit exclipse.com (the "Site"), purchase our products, or contact us. It applies to individuals in the European Economic Area (EEA) and the United Kingdom and is issued in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and the UK GDPR.

1. Data controller

Exclipse is the data controller responsible for your personal data. You can contact us at privacy@exclipse.com for any privacy-related questions or to exercise your rights described below.

2. Personal data we collect

Contact data — name, email address, company name, country, and any message you provide via our contact or wholesale enquiry forms.
Order data — billing and shipping address, items ordered, order value, and order reference.
Payment data — processed directly by Stripe Payments Europe, Ltd. We do not store full card details on our servers; we receive a transaction token and the last four digits of the card.
Technical data — IP address, browser type, device type, time zone, and pages visited, collected via standard server logs and limited first-party analytics.

3. How we use your data and legal bases

To process and ship your order, issue invoices, and provide customer support — performance of a contract (Art. 6(1)(b) GDPR).
To respond to contact and wholesale enquiries — legitimate interests (Art. 6(1)(f)) in answering business communications.
To meet tax, accounting, and product-safety obligations — legal obligation (Art. 6(1)(c)).
To send order-status emails and (where you have opted in) occasional updates about the 2026 eclipse and our products — consent (Art. 6(1)(a)), which you may withdraw at any time.
To secure the Site, prevent fraud, and improve our services — legitimate interests (Art. 6(1)(f)).

4. Sharing your data

We share personal data only with trusted third parties acting as processors:

Stripe Payments Europe, Ltd. — payment processing.
Shipping carriers (e.g. DHL, DPD, UPS, national postal operators) — order delivery.
Email service provider — transactional and (where applicable) marketing email delivery.
Cloud hosting and infrastructure providers — to operate the Site and store order records.
Accounting and tax advisors — to meet our legal obligations.

We do not sell your personal data. We may disclose data where required by law or to protect our rights.

5. International transfers

Where data is transferred outside the EEA or UK (for example to a US-based sub-processor of Stripe or our hosting provider), we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or the EU–US Data Privacy Framework where applicable.

6. Retention

Contact enquiries: up to 24 months after last contact.
Order and invoice records: 10 years, as required by EU and member-state tax law.
Marketing consent: until you withdraw your consent.
Server logs: typically 90 days.

7. Your rights

Under the GDPR you have the right to:

Access the personal data we hold about you;
Rectify inaccurate or incomplete data;
Request erasure ("right to be forgotten");
Restrict or object to certain processing;
Data portability — receive your data in a structured, machine-readable format;
Withdraw consent at any time, without affecting prior lawful processing;
Lodge a complaint with your local supervisory authority (e.g. the Irish DPC, the French CNIL, or the UK ICO).

To exercise any right, email privacy@exclipse.com. We respond within 30 days.

8. Cookies

The Site uses strictly necessary cookies to operate the cart and checkout. Any non-essential cookies (analytics, marketing) are loaded only after you give consent via our cookie banner. You can change your preferences at any time.

9. Security

We use TLS encryption, access controls, and reputable payment and hosting providers to safeguard your data. No system is perfectly secure, but we apply appropriate technical and organisational measures as required by Article 32 GDPR.

10. Changes to this policy

We may update this Privacy Policy from time to time. The "last updated" date at the top reflects the latest revision. Material changes will be communicated on the Site or by email where appropriate.

11. EU/EEA & UK GDPR Representatives (Article 27)

If you are located in the EU or UK, and have questions or concerns regarding your personal data, you may contact our GDPR representative:

EU Representative

Euverify Ltd (Ireland)
Unit 3D North Point House
North Point Business Park
New Mallow Road, Cork
T23 AT2P, Ireland
Email: gdpr@euverify.com

UK Representative

Euverify Ltd (UK)
3rd Floor, 86-90 Paul Street
London, EC2A 4NE
United Kingdom
Email: gdpr@euverify.com

To submit a Data Subject Access Request (DSAR), data deletion request, or any other GDPR-related inquiry, please use our secure portal.

Submit a GDPR Request

This link allows you to verify our appointed representative and submit GDPR requests directly. Requests submitted through this portal are logged and tracked to ensure timely response and compliance.

12. Contact

Exclipse — Privacy enquiries: privacy@exclipse.com. General enquiries: hello@exclipse.com.