This Privacy Policy describes how we collect, use, and protect your personal data in accordance with the General Data Protection Regulation (GDPR).
1. Data Controller
We are the data controller responsible for your personal data. If you have any questions about this policy, please contact us.
2. Data We Collect
We may collect the following personal data: name, email address, shipping address, payment information, and browsing behaviour on our website.
3. How We Use Your Data
We use your data to process orders, provide customer support, send marketing communications (with your consent), and improve our services.
4. Legal Basis for Processing
We process your data based on: contract performance, legal obligations, legitimate interests, and your consent where applicable.
5. Your Rights
Under GDPR, you have the right to access, rectify, erase, restrict, or object to the processing of your personal data. You also have the right to data portability and to withdraw consent at any time.
6. Data Retention
We retain your personal data only as long as necessary to fulfil the purposes for which it was collected.
7. Third Parties
We may share your data with trusted third-party service providers who assist us in operating our store, subject to confidentiality agreements.
8. Contact Us
To exercise your rights or for any data-related queries, please contact us at [your email address].