GDPR Policy

This Privacy Policy describes how we collect, use, and protect your personal data in accordance with the General Data Protection Regulation (GDPR).

1. Data Controller

We are the data controller responsible for your personal data. If you have any questions about this policy, please contact us.

2. Data We Collect

We may collect the following personal data: name, email address, shipping address, payment information, and browsing behaviour on our website.

3. How We Use Your Data

We use your data to process orders, provide customer support, send marketing communications (with your consent), and improve our services.

4. Legal Basis for Processing

We process your data based on: contract performance, legal obligations, legitimate interests, and your consent where applicable.

5. Your Rights

Under GDPR, you have the right to access, rectify, erase, restrict, or object to the processing of your personal data. You also have the right to data portability and to withdraw consent at any time.

6. Data Retention

We retain your personal data only as long as necessary to fulfil the purposes for which it was collected.

7. Third Parties

We may share your data with trusted third-party service providers who assist us in operating our store, subject to confidentiality agreements.

8. Contact Us

To exercise your rights or for any data-related queries, please contact us at [your email address].