Datenschutzerklärung

This Privacy Policy explains how irisselections.shop collects, uses, stores, discloses, and otherwise processes personal data when customers and visitors use our website, purchase products, communicate with us, or interact with our online services.

This policy is intended to provide transparency regarding our data-processing practices in accordance with applicable privacy and data-protection requirements, including the General Data Protection Regulation (“GDPR”) where applicable.

Privacy Contact: info@irisselections.shop

1. Scope of This Privacy Policy

This Privacy Policy applies to personal information processed in connection with:

The irisselections.shop website, customer accounts, online orders, checkout, customer-service communications, delivery, returns, refunds, fraud prevention, security, and permitted marketing activities.

2. Categories of Personal Data

Depending on your interaction with us, we may process information including:

Name, email address, telephone number, billing address, delivery address, account information, order history, products purchased, payment-related information, customer-service correspondence, return information, IP address, device information, browser information, cookie identifiers, website interactions, marketing preferences, fraud-prevention information, and other information reasonably necessary to provide our services.

3. Information You Provide Directly

Personal information may be provided when you:

Create a customer account; place an order; enter payment and delivery information; contact customer support; request a return or refund; exercise consumer rights; subscribe to marketing where available; or otherwise communicate with us.

Certain information is necessary for processing orders and fulfilling purchase contracts.

If required information is not provided, we may be unable to complete the relevant transaction.

4. Automatically Collected Information

When you visit our website, certain technical information may be collected automatically by our website, Shopify, or authorised technology providers.

This may include:

IP address, browser type, operating system, device type, session identifiers, pages viewed, product interactions, referral information, approximate location derived from technical information, and cookie-related information.

5. Purposes of Processing

We may process personal information to:

Operate our online store; process and fulfil orders; process payments; provide customer service; arrange delivery; communicate order information; process returns and refunds; maintain accounts; prevent fraud and abuse; secure our systems; comply with legal obligations; maintain financial and transaction records; improve our services; and provide marketing where legally permitted.

6. Legal Bases Under GDPR

Where the GDPR applies, we process personal data on an appropriate legal basis.

This may include processing necessary for the performance of a contract or steps requested before entering into a contract.

We may process information to comply with legal obligations, including accounting, taxation, consumer-law, and regulatory requirements.

Processing may also be based on legitimate interests where appropriate, including website security, fraud prevention, business administration, service improvement, customer support, and establishment or defence of legal claims.

Where legally required, we rely on consent, including for certain marketing communications or non-essential tracking technologies.

Consent may be withdrawn at any time for future processing.

7. Shopify

Our store operates using Shopify ecommerce technology.

Shopify may process information needed to provide hosting, checkout, customer-account, security, transaction, order-management, and related ecommerce services.

Our use of Shopify does not remove our responsibilities under applicable data-protection law.

8. Payment Processing

Payments may be processed by Shopify Payments or other payment providers available during checkout.

Payment providers may receive information required to authorise transactions, prevent fraud, and comply with legal obligations.

We do not intentionally request that customers send complete card information to info@irisselections.shop.

9. Shipping and Fulfilment

We may provide necessary customer information to carriers, fulfilment providers, warehouses, logistics companies, and other service providers responsible for delivering orders.

Information may include the customer's name, delivery address, telephone number, email address, and relevant order details.

10. Customer Service

When customers contact us, we may process correspondence and information necessary to respond.

This may include order numbers, photographs submitted concerning damaged products, descriptions of problems, return requests, refund information, and previous communications.

Customer-service information may be retained where necessary for legal, operational, and dispute-resolution purposes.

11. Marketing

Where permitted by applicable law, we may send commercial information concerning products, promotions, or services.

Where consent is legally required, marketing will only be sent after appropriate consent has been obtained.

Customers may withdraw marketing consent or unsubscribe at any time.

Contact:

info@irisselections.shop

Withdrawal of marketing consent does not prevent transactional communications necessary to administer existing purchases.

12. Cookies and Similar Technologies

Our website may use cookies and similar technologies to provide essential website functionality, maintain shopping carts, facilitate checkout, authenticate accounts, enhance security, remember settings, measure website performance, perform analytics, or support advertising.

Where applicable law requires consent for non-essential technologies, we will seek appropriate consent before such technologies are used.

Users may also manage cookies through available privacy controls or browser settings.

Blocking necessary technologies may interfere with website functionality.

13. Service Providers

We may use service providers for:

Ecommerce infrastructure, hosting, payments, fulfilment, delivery, cybersecurity, fraud prevention, communications, customer service, analytics, and other legitimate operational functions.

Service providers receive personal information only where appropriate for their role and subject to applicable legal requirements.

14. Legal Disclosures

We may disclose personal information where required by applicable law, a valid court order, regulatory requirement, or lawful governmental request.

Information may also be processed where necessary to establish, exercise, or defend legal claims or investigate fraud and security incidents.

15. International Data Transfers

Some technology or service providers may process personal information outside Germany or the European Economic Area.

Where GDPR restrictions on international data transfers apply, appropriate safeguards will be used, such as an applicable adequacy decision, Standard Contractual Clauses, or another recognised legal mechanism.

16. Data Retention

Personal information is retained only as long as reasonably necessary for the purpose for which it was collected and to comply with legal, tax, accounting, contractual, fraud-prevention, and dispute-resolution requirements.

Different categories of information may therefore have different retention periods.

When information is no longer required, it may be deleted or anonymised in accordance with applicable law.

17. Data Security

We use reasonable technical and organisational measures intended to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised access, or disclosure.

However, no internet-based system can guarantee absolute security.

Customers should protect passwords and account credentials and contact us if they suspect unauthorised account activity.

18. GDPR Data Subject Rights

Where applicable, individuals may have rights to:

Access their personal data; request correction; request deletion; request restriction of processing; receive qualifying data in a portable format; object to certain processing; and withdraw consent where processing is based on consent.

These rights may be subject to statutory conditions and exceptions.

19. Complaints

Individuals may have the right to lodge a complaint with the competent data-protection supervisory authority if they believe their personal data has been processed unlawfully.

We encourage customers to contact us first so that we can review privacy concerns.

20. Privacy Requests

To exercise applicable privacy rights, contact:

info@irisselections.shop

Please clearly explain your request.

We may request reasonable information to verify identity before providing, deleting, or changing personal information.

21. Children's Privacy

Our online store is not intended to encourage children without sufficient legal capacity to independently enter into purchase contracts.

We do not knowingly seek to collect children's personal data in a manner contrary to applicable law.

22. Third-Party Websites

Our website may contain links to third-party services or websites.

We do not control the privacy practices of independent third parties.

Visitors should review the privacy policies of external services before supplying personal information.

23. Changes to This Policy

We may update this Privacy Policy to reflect changes in law, technology, services, service providers, or our data-processing practices.

The current version will be published through irisselections.shop.

24. Privacy Contact

For questions concerning privacy or personal information:

irisselections.shop
Email: info@irisselections.shop