This sample policy describes how a phone case store handles personal data. The shop owner must review and adapt it, including the legal entity name and the data processors in use, before the store goes live.
Who is responsible
The shop owner named on the Contact us page is the controller.
What we collect and why
- Order data: name, email, phone, billing and shipping address, order contents. Needed to make, ship and invoice your order.
- Designs and uploads: the text and pictures you place in the designer or upload. Needed to print your case. We use them for nothing else, and we do not publish them.
- Account data: email and a password hash if you create an account. Needed for your order history.
- Technical data: IP address, browser and pages visited, kept in server logs for security and to keep the shop working.
Cookies
The store uses cookies needed for the cart and checkout, and for your design while you work on it. If you add analytics or advertising cookies you must ask for consent first.
Who receives your data
Payment provider, shipping carrier, email delivery service and hosting provider, each only for the purpose above.
How long we keep it
Order and invoice records for the period tax law requires. Designs and uploads are deleted 12 months after the order unless you ask for earlier deletion. Server logs are kept for 30 days.
Your rights
You can ask for a copy of your data, a correction, deletion, restriction, or to move it to another service, and you can object to processing based on our legitimate interest. Write to us from the Contact us page. You can also complain to your data protection authority.