Effective date: August 2025
Who we are.
DUUM Professional (“we”, “us”, “our”) — boxing & fight gear brand.
Website: https://www.duum.pro
Contact: info@duum.pro
Mailing address: 100 King Street West, Toronto, ON M5X 1C9, Canada
1. What data we collect
Account & order data: name, email, phone (optional), billing/shipping address, items purchased, order notes.
Payments: we use Stripe / PayPal / Revolut to process payments. We do not store full card details. Those providers store and process them securely.
Support & contact forms: message content and your contact details.
Device & usage data: IP address, browser/OS, pages viewed, approximate location, referral source (for security, analytics and site performance).
Marketing (optional): your email and preferences if you subscribe.
2. Why we use your data (legal bases)
To fulfil a contract – create account, process orders, deliver products, handle returns.
Legitimate interests – prevent fraud, secure our site, respond to requests, improve UX.
Consent – send marketing emails (you can unsubscribe anytime).
Legal obligations – tax, accounting, regulatory requirements.
3. Cookies
We use:
Essential cookies – cart, checkout, login, security.
Analytics cookies (e.g., Google Analytics) – understand site usage.
Marketing cookies (only if you accept) – measure campaigns.
You can control cookies in your browser and via the cookie banner on our site.
4. Sharing your data
We share data only with trusted providers as needed:
Payment processors: Stripe, PayPal, Revolut.
E-commerce & hosting: WordPress/WooCommerce and our hosting provider.
Analytics / email: tools we use for stats and newsletters (if subscribed). All vendors are bound by contracts and process data on our instructions.
5. Data storage & security
We use technical and organizational measures (encryption in transit, restricted access, backups).
Retention: orders & invoices – up to 6 years (tax/accounting); support messages – up to 24 months; analytics – typically 14 months; marketing data – until you opt out. We delete or anonymize when no longer needed.
6. International transfers
We may transfer data to providers outside your country (e.g., EU ↔ Canada/US/UK). Where required, we rely on Standard Contractual Clauses or equivalent safeguards.
7. Your rights
Depending on your location (e.g., EU/EEA/UK GDPR, Canada (PIPEDA), California (CPRA)), you may:
access, correct, or delete your data;
object or restrict processing;
withdraw consent (for marketing);
request data portability. To exercise rights: info@duum.pro. We may need to verify your identity.
8. Children
Our site isn’t directed to children under 13 (or 16 in the EU). We don’t knowingly collect their data.
9. Third-party links
We aren’t responsible for privacy practices of external sites we link to.
10. Changes
We may update this policy from time to time. We’ll post the new version with a new effective date.
Contact us: info@duum.pro