1) Controller & Contact

Controller: Gay Jock Underwear L.L.C., 6450 Sunset Blvd #1059, Hollywood, CA 90028, USA

Contact (privacy): legal@gayjockunderwear.com • (661) 509-0046

UK ICO Registration: Gay Jock Underwear L.L.C. is registered with the UK Information Commissioner’s Office (ICO) under registration number ZB994056.

2) Purposes & Legal Bases

• Contract (Art. 6(1)(b) GDPR / UK GDPR): order processing, payment, shipping, customer support.
• Legitimate interests (Art. 6(1)(f)): site operation, fraud prevention, analytics, security, limited direct marketing (balanced against your interests; you may object).
• Consent (Art. 6(1)(a)): non-essential cookies/ads, email/SMS marketing where required; you can withdraw at any time.
• Legal obligations (Art. 6(1)(c)): tax, accounting, compliance, law-enforcement requests.

3) Categories of Data

• Contact & order details (name, email, phone, addresses, items, totals); payment metadata (handled by payment providers; we do not store full card numbers).
• Account & support (login, preferences, messages).
• Technical/usage (IP, device/browser info, cookie/advertising IDs, logs).

4) Recipients (Processors & Third Parties)

We use service providers (e-commerce hosting, payment processors, fraud/security tools, analytics, fulfillment/shipping, support tools) under contracts that limit their use to our instructions and require safeguards. We may disclose data to other third parties where required by law or with your consent.

5) International Transfers & Dropship Fulfillment

We are a U.S. business and some suppliers are located outside the EU/EEA and UK (including in China).

Dropship Fulfillment & International Transfers. We share only the personal information necessary to fulfill your order (e.g., name, shipping address, phone for carrier notifications) with third-party dropship suppliers and third-party marketplaces, which may fulfill from the United States, China, or other countries worldwide. Where EU/UK personal data is transferred outside the EEA/UK, we rely on appropriate safeguards—such as the EU Standard Contractual Clauses (2021/914) and the UK International Data Transfer Addendum—and implement supplementary measures (e.g., encryption in transit, role-based access). Suppliers are contractually required to use the data solely to fulfill your order, keep it confidential, and delete it after fulfillment. We do not permit suppliers to use your data for their own marketing.

6) Retention

We retain personal data only as long as needed for the purposes above (e.g., order and tax records for applicable statutory periods), then securely delete or de-identify it.

7) Your Rights (EU/UK)

• Access, rectification, erasure, restriction, objection (including to direct marketing), and portability.
• Withdraw consent at any time (does not affect prior processing).
• Lodge a complaint with your data protection authority (EU) or the ICO (UK).

Use the request tools below or email legal@gayjockunderwear.com. We verify identity and respond within required timelines.

8) Cookies & Similar Technologies

We use essential cookies for core functionality and (with consent where required) analytics/advertising cookies. Manage preferences via your browser and our consent banner (where shown). Withdrawing consent will not affect the lawfulness of processing before withdrawal.

9) Children

Our Services are intended for individuals aged 18 and older. We do not knowingly collect personal data from anyone under 18. If we learn we have collected such data without appropriate consent, we will delete it promptly.

10) Representatives (Article 27)

EU: We do not currently appoint an EU representative under Article 27 GDPR because our EU processing is occasional, low-risk, and does not involve large-scale special-category data.

UK: We do not currently appoint a UK representative under Article 27 UK GDPR because our UK processing is occasional, low-risk, and does not involve special-category data.

Review of Article 27 Representative Requirement: We periodically reassess our need to appoint an EU/UK representative as our European activity evolves.

11) Security

• Transport security (HTTPS/TLS), access controls, logging, and fraud-prevention tools.
• Vendor due diligence and contractual safeguards.
• Staff confidentiality and basic security training.

12) Changes to this Policy

We may update this Policy from time to time. The “Last updated” date reflects the most recent change. Material updates will be posted here and, where appropriate, notified to you.