Cruxplug LLC GDPR Compliance Statement & Privacy Policy

Effective Date: November 29, 2025

At Cruxplug LLC, located at 124 Bent St, Taos, NM 87571, US, we are committed to protecting your personal data and respecting your privacy. This GDPR Compliance Statement and Privacy Policy explains how Cruxplug LLC (“we,” “us,” or “our”) collects, uses, shares, and protects the personal information you provide to us through our website, https://cruxplug.shop. While Cruxplug LLC is based in the US, we are mindful of global data protection standards, including the General Data Protection Regulation (GDPR), especially if you are a resident of the European Economic Area (EEA) or the UK.

1. Data Controller

Cruxplug LLC is the data controller responsible for your personal data processed under this policy.
Company Name: Cruxplug LLC
Website URL: https://cruxplug.shop
Contact Email: support@cruxplug.shop
Contact Phone: +1 (513) 239-1055
Full Address: 124 Bent St, Taos, NM 87571, US
Customer Service Hours: Monday-Friday 9AM-5PM EST

2. What Information We Collect

We collect various types of information from and about you, including information that identifies you or could be used to identify you (“personal data”).

a. Information You Provide Directly To Us:

  • Identity and Contact Data: Name, billing address, shipping address, email address, and telephone number when you create an account, place an order, or contact customer service.
  • Transaction Data: Details about products you have purchased from us (e.g., Baby & Toddler > Car Seats).
  • Communication Data: Information you provide when you communicate with us via email, phone, or website contact forms.

b. Information We Collect Automatically:

  • Technical Data: Internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
  • Usage Data: Information about how you use our website, products, and services, including browsing patterns and pages viewed.
  • Cookies and Tracking Technologies: We use cookies and similar tracking technologies to track the activity on our website and hold certain information. You can manage your cookie preferences through your browser settings.

c. Payment Information:
When you make a purchase, your payment is processed by third-party payment providers like Afterpay and Klarna. We do not store your full payment card details on our servers. Instead, we receive confirmation from our payment processors once your transaction is complete. The payment methods displayed at checkout will include Afterpay and Klarna.

3. How We Use Your Information (Purposes and Legal Bases)

We use your personal data for the following purposes and rely on the indicated legal bases:

  • To Process and Fulfill Your Orders:
    • Purpose: To manage your purchases, process payments, deliver products (physical only, as we do not sell digital products), and provide you with related customer services.
    • Legal Basis: Performance of a contract with you.
  • To Manage Your Account:
    • Purpose: To manage your registration as a user on our website and provide you with account-related services.
    • Legal Basis: Performance of a contract with you.
  • To Communicate with You:
    • Purpose: To respond to your inquiries, provide customer support (Monday-Friday 9AM-5PM EST), and send you service-related announcements.
    • Legal Basis: Legitimate interests (to communicate with our customers) or performance of a contract (for order-related communications).
  • To Improve Our Website and Services:
    • Purpose: To analyze website usage, troubleshoot problems, and improve the user experience and our product offerings.
    • Legal Basis: Legitimate interests (to understand how our customers use our services and to improve them).
  • For Security and Fraud Prevention:
    • Purpose: To protect our website and operations from fraud, security breaches, and other illegal activities.
    • Legal Basis: Legitimate interests (to protect our business) and compliance with a legal obligation.
  • To Comply with Legal Obligations:
    • Purpose: To meet any legal or regulatory requirements that apply to us.
    • Legal Basis: Compliance with a legal obligation.

Cruxplug LLC does not sell digital products, offer subscriptions, sell age-restricted products, or offer gift cards, which simplifies the data types and processing activities involved. We also do not ship internationally, meaning all shipping-related data processing is confined to domestic operations.

4. How We Share Your Information

We may share your personal data with the following categories of recipients:

  • Service Providers: We engage third-party companies and individuals to facilitate our services, such as:
    • E-commerce Platform: WooCommerce powers our online store.
    • Payment Processors: Accepting credit and debit card payments.
    • Shipping Carriers: To deliver your orders (e.g., USPS, FedEx, UPS).
    • Analytics Providers: To help us understand website usage.
      These third parties have access to your personal data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
  • Legal Requirements: We may disclose your personal data if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).
  • Business Transfers: In connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.

5. Your Data Protection Rights (GDPR)

Under the GDPR, individuals located in the EEA or the UK have specific rights regarding their personal data. Cruxplug LLC extends these rights to all our customers, regardless of location, as a commitment to best privacy practices. You have the right to:

  • Right to Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request that we correct any inaccurate or incomplete personal data.
  • Right to Erasure (“Right to be Forgotten”): Request that we delete your personal data under certain conditions.
  • Right to Restrict Processing: Request that we restrict the processing of your personal data under certain conditions.
  • Right to Data Portability: Request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.
  • Right to Object: Object to our processing of your personal data under certain conditions.
  • Rights related to Automated Decision Making: Object to decisions based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
  • Right to Withdraw Consent: If we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. This will not affect the lawfulness of any processing carried out before you withdraw your consent.

To exercise any of these rights, please contact us at support@cruxplug.shop or +1 (513) 239-1055. We will respond to your request within a reasonable timeframe.

6. Data Security

We have implemented appropriate technical and organizational security measures to protect your personal data from accidental loss, unauthorized access, use, alteration, and disclosure. However, please remember that no method of transmission over the Internet or method of electronic storage is 100% secure.

7. Data Retention

We will retain your personal data only for as long as is necessary for the purposes set out in this Privacy Policy, including for the purposes of satisfying any legal, accounting, or reporting requirements. Generally, we keep your transaction data for a period necessary to fulfill the order, process returns (if applicable), and maintain financial records.

8. International Data Transfers

As Cruxplug LLC does not ship internationally and our operations are based solely in the United States, we generally do not transfer your personal data outside of the US. If, for any reason, data were to be processed by a third-party service provider outside the US, we would ensure adequate safeguards are in place as required by applicable data protection laws, such as standard contractual clauses.

9. Cookies

Our website uses cookies to enhance your browsing experience, analyze site traffic, and for other operational purposes. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly.

10. Children’s Privacy

Our products and services are not intended for children under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have inadvertently received personal data from a child under 16, we will delete such information from our records.

11. Third-Party Websites

Our website may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party’s site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

12. Changes to This Policy

We may update our GDPR Compliance Statement & Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the “Effective Date” at the top. We encourage you to review this policy periodically for any changes.

13. Contact Us

If you have any questions or concerns about this GDPR Compliance Statement & Privacy Policy, our data practices, or if you wish to exercise your data protection rights, please contact us:

Cruxplug LLC
Email: support@cruxplug.shop
Phone: +1 (513) 239-1055
Address: 124 Bent St, Taos, NM 87571, US