Placeholder text: replace everything in [square brackets] and have this page checked by a lawyer before the shop goes live.
1. Controller
[Company name], [address], email: [email address]. Data protection officer: [name and contact, if required].
2. Orders and customer account
When you order or create a customer account, we process your name, addresses, email address, phone number and order details to fulfil the contract (Art. 6 (1) (b) GDPR).
3. Payment
Card payments are processed by Stripe. Your card details go directly to Stripe; we do not store card numbers. [Stripe company and privacy policy link]
4. Delivery
To deliver your order we pass your name and address to the shipping company [shipping company].
5. Hosting and server log files
The website is hosted by [hosting company]. When you visit it, the server stores technical data such as IP address, date and time and the page requested (Art. 6 (1) (f) GDPR). [Storage period]
6. Cookies
Which cookies the shop uses is explained on the Cookie settings page.
7. Storage period
We delete your data when it is no longer needed, unless statutory retention periods apply. [Details]
8. Your rights
- Access to your data
- Correction or deletion
- Restriction of processing
- Data portability
- Objection to processing
- Complaint to a data protection supervisory authority
To exercise your rights, write to [email address].