PRIVACY POLICY

1. Who We Are

SOLKAST is operated by CogCore LLC, 30 N Gould St Ste R, Sheridan, WY 82801, United States. CogCore LLC is the data controller for personal data processed through solkast.com.

For any privacy questions, data requests, or to exercise your rights under GDPR, contact our data protection contact at hello@solkast.com.

2. Information We Collect

• Order Information: Full name, delivery address, email, phone number (optional), order items, variant sizing, and transaction history.
• Account Credentials: If you register an account — your email and securely hashed passwords. We never store or have access to plaintext passwords.
• Payment Processing: Transactions are securely handled by Stripe. We only receive payment authorization confirmation, card brand, and the last four digits of your card. We never access, transmit, or store full credit card numbers.
• Technical & Telemetry Data: IP address, device type, browser user-agent, pages viewed, and operational diagnostics to monitor storefront reliability and prevent abuse.

3. Purposes & Legal Bases for Processing

• Fulfilling & Shipping Orders: Transmitting shipping destinations to our print and carrier partners. Legal basis: Performance of a contract.
• Transactional Communications: Dispatching automated receipts, dispatch notifications, and tracking credentials. Legal basis: Performance of a contract.
• Returns & Customer Support: Handling size exchanges, refunds, and inquiries. Legal basis: Contractual obligation and consumer law compliance.
• Storefront Security & Performance: Ensuring site stability, error logging, and fraud prevention. Legal basis: Legitimate interests.
• Direct Communications: Newsletter updates only when you affirmatively opt in. Legal basis: Consent (revocable anytime via one-click unsubscribe links).

We do not sell, rent, or trade your personal data to data brokers or advertising networks.

4. Infrastructure & Processors

We work exclusively with vetted infrastructure providers bound by strict confidentiality and data protection agreements:

• Stripe: Encrypted payment handling and PCI-DSS compliance.
• Printful: On-demand garment printing and order fulfillment.
• Resend: Secure delivery of transactional order emails.
• PostHog (EU Cloud): Privacy-friendly product telemetry hosted strictly within the European Union.
• Cloudflare & Railway: Edge CDN, DDoS mitigation, and application hosting.
• Cloudinary: High-performance media and image delivery.

5. International Data Transfers

CogCore LLC is established in the United States. Where personal data of EU, EEA, or UK individuals is transferred internationally, we rely on the European Commission's Standard Contractual Clauses (SCCs) or equivalent adequacy safeguards to guarantee an equivalent level of protection.

6. Data Retention

• Order & Invoicing Records: Retained for statutory periods mandated by commercial, tax, and accounting law.
• Account Information: Maintained until you request deletion of your account.
• Product Analytics: Retained in aggregated, de-identified format.
• Marketing Consent: Retained until you opt out or unsubscribe.

7. Your Privacy Rights (GDPR & Global Standards)

Under GDPR and international privacy regulations, you have the right to access, rectify, or erase your personal data, restrict or object to processing, and request data portability. To submit a request, email hello@solkast.com. We review and process all verified requests within 30 days.

You also have the right to lodge a complaint with your national supervisory authority (such as the Swedish Data Protection Authority, Integritetsskyddsmyndigheten / IMY at imy.se).

8. Cookies & Telemetry

We employ strictly necessary session cookies required for authentication and shopping cart persistence. We do not deploy third-party advertising cookies, behavioural retargeting pixels, or invasive cross-site trackers.

9. Contact & Amendments

Questions regarding data handling can be directed to hello@solkast.com.

Last updated: October 2026.