Privacy policy
1. Who is responsible
lane-a-w104b, [store.address], e-mail [store.email]. Data protection officer: [dpo.contact].
2. What we collect and why
| Purpose | Data | Legal basis | Kept for |
|---|---|---|---|
| Orders, payment and delivery | Name, addresses, e-mail, phone, items, payment data | Contract (GDPR Art. 6(1)(b)); tax law (Art. 6(1)(c)) | [retention.years] years for invoices and order records |
| Customer account | Login, order history, wish lists | Contract | Until you delete the account |
| Newsletter | E-mail address | Consent (Art. 6(1)(a)) | Until you unsubscribe |
| Security and fraud checks | IP address, device data | Legitimate interest (Art. 6(1)(f)) | Short periods, as needed |
| Statistics and marketing | Pseudonymous usage data | Consent | See the cookie policy |
3. Services that receive data
This list comes from the services installed in this store. It changes when the store adds or removes a service, and we then publish a new version of this policy.
| Service | Provider | Purpose | Data | Category | Location | Legal basis |
|---|---|---|---|---|---|---|
| This store | Session, bag, checkout, security and your cookie choices | Session ID, cart, cookie choices | Necessary | Contract / legitimate interest |
Some providers are in countries outside the EU. For the USA, we rely on the EU-US Data Privacy Framework or on standard contractual clauses.
4. Your rights (EU and UK)
You can ask for access to your data, a copy in a portable format, correction, deletion and restriction, and you can object to processing. You can withdraw a consent at any time with effect for the future. Use the Privacy center in your account or write to [store.email]. You can complain to a supervisory authority, for example: [supervisory.authority].
5. Your rights (United States)
If you live in a US state with a consumer privacy law, such as California, you can ask what personal information we collect, use and disclose, ask us to delete or correct it, and opt out of the sale or sharing of your personal information and of targeted advertising. Use the page "Your Privacy Choices". We honour the Global Privacy Control (GPC) signal of your browser as an opt-out. We do not discriminate against you for using your rights. We answer within 45 days.
6. Children
This store is not directed at children under 16. We do not knowingly collect data of children.
7. Changes
Version [doc.version], in effect since [doc.lastUpdated].