Comme Des Garcons (“we,” “us,” or “our”) operates the website commedessgarcon.com. We are an online retailer offering apparel and accessories, including hoodies, shirts, cardigans, footwear, and related items. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our website or make a purchase from us.

Information You Provide Directly

• Account Information — name, email address, and password when you create an account
• Order Information — billing address, shipping address, phone number, and payment details when you place an order
• Communications — messages, emails, or inquiries you send to our support team
• Newsletter Signup — your email address when you subscribe to our mailing list

Information Collected Automatically

• Device Information — IP address, browser type, operating system, and device identifiers
• Usage Data — pages visited, time spent on site, items viewed, items added to cart, and referring URLs
• Location Data — general geographic location based on your IP address
• Cookies & Tracking Data — see Section 04 for full details

Payment Information

We do not store your full credit card or payment details on our servers. All payment processing is handled by secure third-party payment processors (see Section 05). We only retain the last four digits of your card number and your billing address for order verification purposes.

We use cookies and similar tracking technologies to improve your browsing experience, analyze site traffic, and personalize content:

We share your personal data only with trusted third parties who help us operate our business. We do not sell your personal information to any third party.

We retain your personal data only as long as necessary for the purposes outlined in this policy:

• Order Records — 7 years (required for tax and accounting compliance)
• Account Information — until you delete your account, plus 30 days for recovery
• Marketing Email Lists — until you unsubscribe, or after 3 years of inactivity, whichever comes first
• Customer Support Records — 2 years after your last interaction
• Analytics Data — up to 26 months
• Cookie Data — as specified in Section 04

After the applicable retention period, your data is securely deleted or anonymized.

Our business is based in the United States. If you’re accessing our website from the European Union (EU), United Kingdom (UK), or another region with data protection laws that differ from US law, please be aware that your information may be transferred to and processed in the United States.

We implement commercially reasonable technical and organizational measures to protect your personal information, including:

• SSL/TLS Encryption — all data transmitted between your browser and our website is encrypted
• Payment Security — we are PCI-DSS compliant and do not store full card details
• Access Controls — limited employee access to personal data on a need-to-know basis
• Regular Security Audits — ongoing monitoring and testing of our systems
• Password Protection — account passwords are hashed and never stored in plain text

Despite our best efforts, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security. In the event of a data breach affecting your rights, we will notify you and relevant authorities as required by law, within 72 hours where GDPR applies, or as soon as reasonably practicable otherwise.

If you are a resident of the European Union or United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR) and UK GDPR:

• Right to Access — request a copy of all personal data we hold about you
• Right to Rectification — correct inaccurate or incomplete personal data
• Right to Erasure — request deletion of your personal data (“right to be forgotten”)
• Right to Restriction — request that we limit how we process your data
• Right to Object — object to processing based on legitimate interests or for direct marketing
• Right to Portability — receive your data in a structured, machine-readable format
• Right to Withdraw Consent — withdraw consent at any time where processing is based on consent
• Right to Complain — lodge a complaint with your local supervisory authority

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), grants you the following rights:

• Right to Know — request disclosure of what personal information we collect, use, disclose, or sell about you
• Right to Delete — request deletion of personal information we’ve collected from you, subject to certain exceptions
• Right to Correct — request correction of inaccurate personal information we hold about you
• Right to Opt-Out of Sale/Sharing — we do not sell your personal information, though advertising cookies may qualify as “sharing” under CCPA; you can opt out via our cookie preferences
• Right to Limit Sensitive Information — limit our use of sensitive personal information to necessary business purposes
• Right to Non-Discrimination — we will not discriminate against you for exercising any of your CCPA rights

To opt out of data sharing for advertising purposes, email us at support@commedessgarcon.com with the subject line “CCPA Opt-Out Request,” or adjust your cookie settings. To submit a CCPA rights request, email us — we’ll verify your identity and respond within 45 days, extendable by an additional 45 days when reasonably necessary.

Our website and services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you are under 13, please do not submit any personal information through our website.

If you are a parent or guardian and believe your child under 13 has provided personal information to us, please contact us immediately at support@commedessgarcon.com and we will take steps to delete that information promptly. For users between 13 and 18 years of age, we encourage parental involvement in any online activities.

With your consent, we may send you promotional emails about new products, special offers, discounts, and other updates.

• Opting In — you opt in to marketing emails by subscribing via our newsletter form or checking the marketing checkbox at checkout
• Opting Out — you can unsubscribe at any time via the “Unsubscribe” link in any marketing email, or by emailing support@commedessgarcon.com
• Transactional Emails — even after unsubscribing from marketing, you’ll still receive essential emails related to your orders (confirmations, shipping updates, refund notifications)
• Processing Time — unsubscribe requests are processed within 10 business days

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the “Last Updated” date at the top of this page, post a prominent notice on our website, and where appropriate, notify registered users by email.

We encourage you to review this policy periodically. Your continued use of our website after the effective date of any changes constitutes your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please reach out. For EU/UK residents, if you’re not satisfied with our response, you have the right to lodge a complaint with your national data protection authority.