Privacy Policy – StepAid
Your privacy matters to us. This policy explains what personal data we collect, why we collect it, how we use it, and your rights under the General Data Protection Regulation (GDPR) as a European customer.

1. Data Controller

The data controller responsible for your personal information is Sigmon Global LLC, trading as StepAid, located at 30 N Gould St Ste N, Sheridan, WY 82801, USA. You can contact us regarding your data at support-support@sigmonglobal.com.

2. What Data We Collect

When you place an order or interact with our website, we may collect the following personal data:

  • Identity data: Full name
  • Contact data: Email address, phone number
  • Delivery data: Shipping address, country, postal code
  • Order data: Products ordered, prices, order history
  • Technical data: IP address, browser type, device type, pages visited
  • Communication data: Messages or emails you send us

We do not collect or store payment card information. All Cash on Delivery transactions are handled in person by the courier.

3. How We Use Your Data

We use your personal data for the following purposes:

  • To process and fulfil your order, including arranging delivery and Cash on Delivery collection
  • To communicate with you about your order status, shipping updates, and delivery
  • To respond to your customer service enquiries
  • To comply with our legal and regulatory obligations
  • To improve our website and product offerings (using anonymised analytics data)
  • To send you marketing emails, only if you have given your explicit consent

4. Legal Basis for Processing (GDPR)

For customers in the European Union, we process your personal data on the following legal bases:

  • Contract performance: Processing your order requires us to handle your name, address, and contact details.
  • Legal obligation: We are required to retain certain transaction records for tax and accounting purposes.
  • Legitimate interests: Website analytics and fraud prevention.
  • Consent: Marketing emails and cookies (where applicable).

5. How We Share Your Data

We do not sell, rent, or trade your personal data. We may share your data with the following trusted third parties only where necessary:

  • Courier and logistics companies: To deliver your order and collect Cash on Delivery payment
  • IT and platform service providers: Who host or support our website and order management systems
  • Legal authorities: Where required by law or court order

All third parties we work with are required to handle your data in accordance with applicable data protection laws.

6. Data Retention

We retain your personal data for as long as is necessary to fulfil the purpose for which it was collected, including for legal, accounting, or reporting requirements. Order and transaction data is typically retained for 7 years in line with standard accounting obligations.

7. Your Rights Under GDPR

As a European customer, you have the following rights regarding your personal data:

  • Right of access: Request a copy of the data we hold about you
  • Right to rectification: Ask us to correct inaccurate or incomplete data
  • Right to erasure: Request deletion of your personal data ("right to be forgotten")
  • Right to restrict processing: Ask us to limit how we use your data
  • Right to data portability: Receive your data in a structured, machine-readable format
  • Right to object: Object to processing based on legitimate interests or for marketing purposes
  • Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please email us at support-support@sigmonglobal.com. We will respond within 30 days.

8. Cookies

Our website may use cookies and similar tracking technologies to improve your browsing experience and gather analytical data. You can control cookie preferences through your browser settings. Essential cookies required for the website to function cannot be disabled.

9. International Data Transfers

As a US-based company serving European customers, your data may be transferred to and processed in the United States. We take appropriate safeguards to ensure your data is protected in accordance with GDPR requirements, including the use of Standard Contractual Clauses where applicable.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page with the date of the most recent update. We encourage you to review it periodically.

11. Contact & Complaints

If you have any questions or concerns about how we handle your data, please contact us at support-support@sigmonglobal.com.

If you are not satisfied with our response, you have the right to lodge a complaint with your national data protection authority. A list of EU supervisory authorities is available at edpb.europa.eu.