Privacy Policy
Information on the processing of personal data under Regulation (EU) 2016/679 (GDPR).
Data controller
[Company name] — [registered address] — VAT [number]. For any request about your data write to [contact email].
Data we collect
Data you give us directly: name, shipping and billing address, email, phone and the content of your messages to support. Data collected automatically: IP address, browser and device type, pages visited and technical browsing data.
Purposes and legal bases
- Managing orders, payments and shipping — performance of the contract.
- Customer support and returns — performance of the contract.
- Tax and accounting obligations — legal obligation.
- Newsletter and marketing messages — consent, withdrawable at any time.
- Site security and fraud prevention — legitimate interest.
Data recipients
Data is processed by the providers needed to run the store: the Shopify e-commerce and payment platform, the couriers handling delivery, and our email and hosting providers. We do not sell your data to third parties.
Retention
We keep order and invoicing data for the period required by tax law, newsletter contact data until consent is withdrawn, and browsing data for the period stated in the Cookie Policy.
Your rights
You can at any time request access, rectification, erasure, restriction and portability of your data, object to processing and withdraw consent by writing to [contact email]. You also have the right to lodge a complaint with the competent supervisory authority.
This text is a starting draft and does not constitute legal advice. Complete the missing company details and have it reviewed by a professional before selling.
