International Scope: Notice for US and European (GDPR) Users

BareBlue respects the privacy of every client and maintains data protection practices compliant with both United States regulations and the legal framework of the European Union.

• Data Controller: The data controller is BareBlue. For any privacy inquiries or to exercise your rights, please reach out to us at: [insert email, e.g., info@bareblue.com].

• European Union Residents (GDPR - EU Regulation 2016/679):

  • Legal Basis for Processing: Personal data collected (such as contact information, shipping address, and payment details) is processed solely for:

    • Fulfilling and shipping your orders (contractual necessity);

    • Explicit user consent (e.g., voluntary newsletter subscriptions);

    • Legitimate business interests (website security and fraud prevention).

  • Your GDPR Rights: EU residents have the right to access, rectify, restrict, port, or request the erasure of their personal data ("right to be forgotten"). You also retain the right to lodge a complaint with your local Data Protection Authority (DPA).

  • International Data Transfers: Information may be hosted and processed on secure servers provided by our e-commerce platform (Squarespace) and accredited global payment gateways (e.g., Stripe/PayPal) in full compliance with European Commission Standard Contractual Clauses (SCCs) and the EU-U.S. Data Privacy Framework.

• United States Residents:

  • We process personal data in compliance with applicable federal and state privacy statutes (including rights granted under the CCPA/CPRA). BareBlue does not sell or share personal customer information with third parties for cross-context behavioral advertising.