We use your personal information to provide you with our services, which includes: listing products for sale, processing payments, shipping and delivering your order, and communicating new products, services and offers.
Legal basis
In accordance with the General Data Protection Regulation (“GDPR”), if you reside in the European Economic Area (“EEA”), we process your personal information on the following legal bases:
- Your consent;
- The execution of the contract between you and the website;
- Compliance with our legal obligations;
- The protection of your vital interests;
- The execution of a mission of public interest;
- Our legitimate interests, insofar as they do not infringe upon your fundamental rights and freedoms.
Data retention
When you place an order through the website, we retain your personal information in our records until you request its deletion. For more information about your right to erasure, please see the "Your Rights" section below.
Automated decisions
If you are a resident of the EEA, you have the right to object to processing based solely on automated decisions (including profiling), where it produces legal effects or significantly impacts your rights.
We do not make fully automated decisions with legal or significant effects using customer data.
Our service provider Shopify uses limited automated decision-making to prevent fraud, without legal or significant effect on you.
Services that include elements of automated decision-making include:
- Temporary blacklist of IP addresses associated with repeated failed transactions. This list persists for a few hours.
- A temporary blacklist of credit cards associated with blacklisted IP addresses. This list remains in place for a few days.