Privacy Policy

What personal data we collect, why, who we share it with, and your rights.

Who we are

This website, [store-domain], is operated by [LEGAL ENTITY NAME] ([STORE NAME]), [Street address], [Postcode City, Country] — the data controller for the personal data described here. Contact for privacy matters: support@example.com.

What data we collect and why

Orders: name, delivery and billing address, email, phone, the products ordered and the payment method used (never your full card number). Needed to fulfil the contract, deliver the order, issue invoices and handle returns and warranty claims.
Account: email, password (stored hashed), saved addresses and order history — to provide the customer account you asked for.
Contact form and email: the details and message you send us — to answer your request.
Newsletter: your email address, only if you subscribe. You can unsubscribe at any time via the link in every email.
Technical data: IP address, browser type and pages visited, recorded in server logs for security and to keep the site working.

Legal bases (GDPR art. 6): performance of a contract (orders, account), legal obligations (invoicing, tax records), consent (newsletter, non-essential cookies) and our legitimate interest in running and securing the site.

Who we share your data with

Payment service providers that process card and PayPal payments at checkout. They receive the data needed to take the payment and are PCI DSS compliant.
Delivery companies that receive your name, address, phone and email to deliver the parcel and send tracking updates.
Hosting and email providers that store the website, its database and our mailbox within the EU or under EU-approved safeguards.
Newsletter service ([provider]), only if you subscribe to our newsletter.
Public authorities, when required by law (for example tax authorities).

We do not sell or rent personal data. Where a provider is located outside the EU/EEA, transfers are covered by the EU Standard Contractual Clauses or an adequacy decision.

Cookies

The site uses strictly necessary cookies to run the shop: your cart, login session, cookie preferences and security checks. These cannot be switched off.

We do not currently use analytics or advertising cookies. If we introduce them (for example Google Analytics, Google Ads or Meta Pixel), they will be set only with your consent through a cookie banner, and this policy will be updated.

How long we keep your data

Order and invoice data: as long as required by the tax and accounting law of {JURISDICTION} (generally {RETENTION_YEARS} years).
Account data: until you delete your account or ask us to delete it.
Contact requests: up to 2 years after the request is closed.
Newsletter: until you unsubscribe.
Server logs: up to 12 months.

Your rights

Under the GDPR you can ask us to access, correct, delete or export your personal data, to restrict or object to its processing, and to withdraw consent at any time. Email support@example.com; we answer within one month. You also have the right to lodge a complaint with the supervisory authority of {JURISDICTION} ({DPA}) or the supervisory authority of your country.

Security

The site is served over HTTPS. Payments are handled by our payment providers; we never store full card numbers. Access to order data is limited to the people who need it to process your order.

Changes to this policy

We update this policy when our processing changes. The current version is always available on this page. Last updated: {LAST_UPDATED}.

Contact

[STORE NAME] — [LEGAL ENTITY NAME]
[Street address]
[Postcode City, Country]
Phone: +353 00 000 0000
Email: support@example.com