Privacy Policy

Last updated: January 13, 2026.

This Privacy Policy describes how Caomou ("Website," "we," "us," or "our") collects, uses, and discloses your personal data when you visit our website, use our services, make a purchase at Caomou (collectively "Services"), or otherwise communicate with us.

For the purposes of this Privacy Policy, the terms "You" and "Your" refer to the user of the Services, whether a customer, website visitor, or another person whose personal data we process.

We encourage you to carefully read this Privacy Policy.

Geographical scope of our Services

Caomou offers its products and services exclusively to customers in Poland. Orders and deliveries are possible only within Poland. If you access our website from outside Poland, please note that our Services are not intended for users outside Poland. Orders placed from outside Poland cannot be fulfilled.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for operational, legal, or regulatory reasons. The updated Privacy Policy will be posted on the Website, the "Last updated" date will be changed accordingly, and if necessary, we will take additional actions required by law.

How we collect and use your personal data

To provide our Services, we collect personal data from various sources. The type of information collected and used depends on how you interact with us.

In addition to the specific purposes described below, we use your personal data to communicate with you, provide and improve our Services, fulfill legal obligations, enforce applicable terms, and protect our rights as well as the rights of our users or third parties.

What personal data we collect

Information provided directly by you

Personal data you provide to us through the Services may include:

Contact details, including name and surname, address, phone number, and email address. Order information, such as billing address, delivery address, payment confirmation, and contact details. Account information, such as username, password, security questions, and other login data. Communication with customer service, including messages sent to us via the contact form or email.

Some features of our Services require providing certain personal data. You may choose not to provide them, but this may limit access to some features.

Information about using the website

We automatically collect certain information about your interaction with the Services ("Usage Data"), for example through cookies, pixels, or similar technologies. This may include:

Behavior related to site access and usage Device information Browser information Network connection and IP address Technical interactions with our Services

Information from third parties

We may also receive personal data from third parties such as:

Service providers supporting our website and Services (for example, Shopify) Payment providers processing your payment information (such as bank or credit card data) Marketing and tracking providers when you visit our website, open emails, or interact with ads

All data from third parties is treated in accordance with this Privacy Policy. See also the "Third-party websites and external links" section below.

How we use your personal data

To provide products and services

We use your personal data to fulfill our contract with you, including processing payments, managing orders and returns, account administration, shipping, notifications, and customer service. Shopify may combine information about your account to enhance shopping experiences.

For marketing and advertising purposes

We use your personal data to send promotional communications via email, SMS, or traditional mail, only as permitted by EU law or with your explicit consent. Your user behavior may also be analyzed to present tailored offers.

For security and fraud prevention

We analyze personal data to detect and prevent fraud, abuse, or security threats. If you register an account, you are responsible for securing your login details. Any suspected unauthorized activity should be reported immediately.

For communication and improving our Services

We use personal data to respond to inquiries, improve our Services, and maintain customer relationships.

Cookies

Like many other websites, we use cookies. Detailed information about the cookies used by Shopify can be found here: https://www.shopify.com/legal/cookies

We use cookies to operate and improve our website and Services (including saving preferences and activity), analyze how the site is used, and better understand user behavior, in accordance with EU cookie and consent regulations.

Third parties may also use cookies to personalize products, services, and advertisements.

Disabling cookies

Most browsers automatically accept cookies. You can set your browser to delete or block cookies. Please note that this may limit the functionality and convenience of using the Website. Blocking cookies does not necessarily prevent data sharing with advertising partners.

Sharing Personal Data

We may share personal data with third parties under certain circumstances, always in accordance with this Privacy Policy and Article 6 of the GDPR and only when there is a legal basis.

This may include:

Service providers acting on our behalf (e.g., IT, payments, analytics, customer service, data storage, and shipping) Marketing and business partners to offer services or advertisements (where consent is required and has been obtained) With your consent, for example, to fulfill product deliveries or integrate with social media Within our corporate group, related to our legitimate interest in conducting effective business operations In connection with business transactions (such as mergers or insolvency) or to fulfill legal obligations, enforce terms, or protect our rights

Data Categories and Recipients

Category	Recipient
Identifiers, such as name, contact details, order and account information	Service providers and third parties, e.g., hosting providers, payment operators, shipping and customer support partners
Commercial information, such as order and purchase data, customer service inquiries	Marketing and Business Partners
Internet or network data, such as user behavior and IP address	Affiliated companies, analytics, and security partners
Geolocation data, e.g., determined based on IP address	Technology and Security Providers

Third-Party Websites and External Links

Our Website may contain links to websites or platforms operated by third parties. By using such links, you leave our Website. We recommend reviewing the privacy and security policies of those sites, as we are not responsible for their content, accuracy, or privacy practices.

Any information you share publicly, for example through social media or comment sections, is visible to other users. Posting links to such sites does not imply endorsement or affiliation on our part.

Children's Data

Our Services are not directed at children, and we do not knowingly collect personal data from individuals under the age of 16, in accordance with GDPR. If you are a parent or guardian and find out that your child has provided us with personal data, please contact us immediately so that we can delete it.

Data security and retention period

We apply appropriate technical and organizational measures to protect your personal data in accordance with Article 32 of the GDPR. However, please remember that no system is completely secure. Therefore, do not send confidential information via unsecured channels such as email.

The period of personal data retention depends on:

Having an active account Legal requirements for data retention under EU and Polish law The need to use data for inquiries, warranties, or legal proceedings

Your rights

Under GDPR, you have the following rights:

Right of access to data Right to delete data Right to rectify data Right to data portability Right to restrict processing Right to withdraw consent (if processing is based on consent) Right to object (if processing is based on legitimate interest) Right to lodge a complaint with the supervisory authority

Communication preferences

You can unsubscribe from marketing messages at any time by clicking the unsubscribe link included in the email. Transactional messages (such as order confirmations) are not subject to this option.

How to exercise your rights

You can exercise your rights by contacting us using the contact details below. To verify your identity, we may request additional information (such as your email address or customer account details). In some cases, you may appoint an authorized representative to act on your behalf.

Complaints

If you have concerns about how we process your personal data, please contact us first. If you are not satisfied with our response, you have the right to file a complaint with the Polish supervisory authority (UODO – Personal Data Protection Office).

International data transfers

We may transfer, store, and process your personal data in countries outside the European Economic Area (EEA). Such transfers are made in accordance with GDPR, applying appropriate safeguards such as standard contractual clauses or adequacy decisions.

Contact information

Store name: Caomou

Company name: Brightwear

Company address: Kalf 196 1509 BC Zaandam Netherlands

Warehouse address: 80-298 Gdańsk Poland

Email address: info@caomou.com

Phone number: +31620244762

KVK number (Dutch Chamber of Commerce): 67243053

VAT number (Netherlands): NL002381707B61

Customer service hours (GMT+1/CET): Monday – Friday: 09:00 – 17:30 Saturday and Sunday: 10:00 – 15:00

We strive to respond to all inquiries within 24 hours.

Thank you for choosing Caomou.