What we collect
Information you provide directly may include your name, email, shipping address, order details, support messages, and newsletter preference. Card details are never collected or stored by XOE BOSAL; payments are processed by the payment provider.
Newsletter and consent
When email sign-ups open, we will use your email address only for XOE BOSAL drop announcements, limited releases, restocks, and brand stories after you actively check the consent box and confirm through a verification email.
We keep an auditable record of the consent source, consent time, policy version, confirmation state and time, unsubscribe state, and our email provider’s contact reference. An unconfirmed request does not become an active marketing subscription.
Newsletter consent is separate from order and service communications. SMS is not part of this program, and we do not collect a phone number for newsletter marketing.
Email service provider
Brevo acts as a service provider for newsletter contact management and email delivery. We share only the information needed to operate the email subscription, manage suppression, and deliver messages. Brevo may process this information on our behalf under its data-protection terms.
Retention, unsubscribe and deletion
Pending confirmation records and security logs are retained only as reasonably necessary to operate the verification process, prevent abuse, document consent, and meet legal obligations. Confirmed consent records are retained while the subscription remains active and afterward where required to demonstrate consent or honor suppression.
Every marketing email will include an unsubscribe link. Unsubscribing updates the local record and Brevo suppression status so future marketing messages are blocked. You may request access, correction, or deletion through the contact page. We may retain a minimal suppression record when needed to ensure an unsubscribe request continues to be honored.
Security and browser storage
Subscription requests are validated and protected with duplicate prevention, abuse limits, and bot checks. Verification secrets are stored only as one-way hashes. Your bag and saved pieces are stored locally in your browser.
Business contact
Privacy and deletion requests may be sent through the contact page or by mail to XOE BOSAL, 920 Hyde Park Avenue, Apt 1, Boston, MA 02136, USA.