1. Principles of Data Stewardship
KOLOSSAL operates on a strict principle of data minimization. We only gather and retain information necessary to deliver exceptional streetwear garments, process global commerce transactions securely, and provide personalized client assistance.
We do not sell, rent, monetize, or broker your personal information to third-party data brokers under any circumstances.
2. Information We Collect
Depending on your interaction with the KOLOSSAL platform and services, we collect information across three primary categories:
A. Client Identity & Order Details
Full name, shipping destination, billing address, contact phone number, email address, and order customization preferences.
B. Transactional & Payment Security
Payment details are tokenized and processed directly by our PCI-DSS Level 1 certified partners (such as Stripe). KOLOSSAL never stores full credit card numbers or CVV codes on our servers.
C. Technical & Diagnostic Information
IP address, regional location (country code), browser user-agent, operating system, and anonymized interaction paths across the storefront to ensure optimal performance.
3. Legal Bases & Processing Purposes
Under Regulation (EU) 2016/679 (GDPR) and related global frameworks, we process your personal data under the following lawful bases:
- Contractual Performance: Processing checkout orders, dispatching shipments with couriers, notifying delivery progress, and servicing returns.
- Legitimate Business Interests: Fraud detection, storefront cybersecurity, enhancing garment fit recommendations, and analyzing site diagnostics.
- Explicit Consent: Sending the private KOLOSSAL editorial newsletter, lookbook drops, and invitations to private showroom events (revocable at any moment).
- Legal Obligation: Tax reporting, customs declarations, and audit records mandated by fiscal authorities in France, Portugal, and international delivery destinations.
5. Storage & Retention Periods
Personal data is maintained only for the duration necessary to satisfy the purposes outlined in this policy:
- Completed Orders: Retained for 7 to 10 years strictly for fiscal, statutory audit, and tax compliance.
- Client Accounts: Retained until the client requests closure or after 36 months of account inactivity.
- Newsletter Subscriptions: Retained until an unsubscribe request is received via 1-click header link.
6. Your Statutory Privacy Rights
Regardless of your country of residence, KOLOSSAL extends global privacy rights to all clients:
8. Contact the Concierge DPO
If you have questions, complaints, or wish to exercise your data protection rights, our dedicated Data Protection Officer and Client Concierge are available:
Industrial Area, Chandigarh 160002, India