Datenschutzerklärung

This Privacy Policy explains how girlinmindx.shop collects, uses, stores, discloses, and otherwise processes personal information when individuals visit our Shopify store, purchase products, communicate with us, or otherwise interact with our services.

For customers and website visitors located in Germany or elsewhere in the European Economic Area, personal information is processed in accordance with applicable data protection requirements, including the General Data Protection Regulation ("GDPR").

Shopify provides merchants with privacy and GDPR-related functionality, but Shopify expressly states that merchants remain responsible for understanding and satisfying their own GDPR obligations.

1. Data Controller

For personal information processed in connection with this store, the store operator is:

girlinmindx.shop
Email: info@girlinmindx.shop

2. Personal Information We May Process

Depending on how you interact with the website, we may process information including:

Identity information, such as your name.

Contact information, such as email address, telephone number, billing information, and shipping information.

Order information, including products ordered, transaction dates, order numbers, returns, refunds, and customer-service history.

Payment-related information, including payment method and transaction information. Full payment credentials may be processed directly by Shopify, payment processors, banks, card networks, or other payment service providers rather than being stored directly by girlinmindx.shop.

Technical information, such as IP address, browser type, operating system, device identifiers, approximate location derived from technical information, referral information, and website interaction data.

Communication information, including messages you send to us and information contained in customer-service requests.

Preference and consent information, including cookie preferences, marketing preferences, and privacy choices.

3. How We Collect Personal Information

Personal information may be collected directly from you when you place an order, create or use an account, enter information at checkout, contact customer service, request a return, submit a withdrawal request, subscribe to communications, or otherwise interact with the website.

Information may also be generated automatically when you access our website through cookies and similar technologies where such processing is permitted.

We may additionally receive information from Shopify, payment service providers, logistics providers, fraud-prevention providers, and other service providers involved in completing transactions or operating the store.

4. Purposes and Legal Bases

Where the GDPR applies, we process personal information only where an appropriate legal basis exists.

We may process information because it is necessary to perform a contract or take steps requested before entering into a contract, including processing orders, accepting payment, delivering goods, providing order updates, and managing returns.

We may process information to comply with legal obligations, including tax, accounting, consumer-protection, fraud-prevention, regulatory, and record-keeping obligations.

We may process information on the basis of legitimate interests where those interests are not overridden by the individual's rights, including maintaining website security, preventing fraud, improving operations, managing customer relationships, and protecting legal rights.

Where required by law, we rely on consent for particular cookies, electronic marketing, advertising technologies, or similar processing. Consent may be withdrawn at any time, without affecting the lawfulness of processing carried out before withdrawal.

5. Shopify

Our online store is hosted and supported using the Shopify ecommerce platform.

Shopify may process personal data to provide hosting, checkout, security, order-management, analytics, payment, fraud-prevention, and related ecommerce services, depending on the services and settings enabled for our store.

Customers should also review applicable Shopify privacy information where relevant to understand how Shopify processes information in connection with its platform.

6. Payments

Payments may be processed through Shopify Payments or other payment providers made available at checkout.

Payment processors may independently process payment credentials and transaction information for authorization, fraud detection, regulatory compliance, refunds, dispute handling, and payment settlement.

We do not use payment information for unrelated purposes.

7. Delivery and Fulfillment

We may provide necessary customer information to fulfillment partners, warehouses, postal operators, carriers, and logistics providers so that orders can be packaged, transported, tracked, delivered, returned, or otherwise fulfilled.

Only information reasonably necessary for those services should be disclosed.

8. Service Providers

Personal information may be shared with service providers assisting us with areas such as:

website hosting and ecommerce functionality; payment processing; shipping and fulfillment; customer support; IT services; fraud prevention; security; analytics; communications; accounting; professional advice; and other operational services.

Where required, we use contractual and organizational measures designed to protect personal information processed by service providers.

9. Cookies and Similar Technologies

Our website may use cookies and similar technologies necessary for website functionality, security, shopping-cart operation, checkout, account functions, fraud prevention, customer preferences, analytics, or marketing.

Where German or EU law requires prior consent for non-essential technologies, such technologies should only be activated after the required consent has been obtained.

Users may manage available cookie choices through the consent controls provided on the website and may also configure browser settings.

10. Marketing Communications

Where legally permitted, we may send marketing communications to individuals who have provided the necessary consent or where another applicable legal basis exists.

Recipients may unsubscribe using an unsubscribe mechanism included in relevant communications or by contacting:

info@girlinmindx.shop

Withdrawal of marketing consent does not prevent us from sending non-marketing communications necessary to process an order, provide legally required information, or respond to a customer request.

11. International Data Transfers

Shopify and other service providers may operate infrastructure or provide services from countries outside Germany or the European Economic Area.

Where personal information protected by the GDPR is transferred internationally, appropriate transfer safeguards will be used where required, which may include an adequacy decision, approved contractual safeguards, or another lawful transfer mechanism.

12. Data Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and to satisfy contractual, tax, accounting, legal, consumer-protection, fraud-prevention, dispute-resolution, and regulatory obligations.

Retention periods may vary according to the type of information and the legal obligations applicable to it.

Once information is no longer required, we will delete, anonymize, or otherwise appropriately dispose of it, subject to technical and legal limitations.

13. Data Security

We use reasonable administrative, organizational, and technical measures designed to protect personal information against unauthorized access, loss, destruction, alteration, misuse, or disclosure.

No internet transmission or electronic storage system can guarantee absolute security. Customers should protect account credentials and contact us if they believe an account or transaction has been compromised.

14. GDPR Rights

Where the GDPR applies, individuals may have rights including:

the right of access; the right to rectification; the right to erasure; the right to restriction of processing; the right to data portability where applicable; the right to object to certain processing; the right to withdraw consent; and the right to lodge a complaint with a competent data protection supervisory authority.

The GDPR establishes transparency obligations concerning information provided when personal data is collected.

Requests concerning personal data may be submitted to:

info@girlinmindx.shop

We may need to verify the requester's identity before fulfilling a request where reasonably necessary to protect personal information.

15. Children's Privacy

Our store is not intended to knowingly solicit personal information from children who are legally unable to enter into the relevant transaction or provide valid consent under applicable law.

If we learn that personal information has been processed unlawfully in relation to a child, we will take appropriate action consistent with applicable law.

16. Legal Disclosure

We may disclose personal information where reasonably necessary to comply with a valid legal obligation, court order, regulatory request, law-enforcement requirement, or to establish, exercise, or defend legal claims.

17. Changes to This Privacy Policy

We may update this Privacy Policy when our services, technology, legal obligations, Shopify functionality, or data-processing practices change.

The latest version will be published on girlinmindx.shop with an updated effective date.

18. Contact

For privacy-related questions or requests:

girlinmindx.shop
Email: info@girlinmindx.shop