Datenschutzerklärung

This Privacy Policy explains how personal information may be collected, used, disclosed, stored and otherwise processed when customers visit or make a purchase from ever-pretty.shop.

We respect the privacy of our customers and seek to process personal information responsibly and transparently.

Where the General Data Protection Regulation applies, personal data will be processed only where an appropriate legal basis exists.

For privacy-related questions, please contact:

info@ever-pretty.shop

Personal Information We May Collect

Depending on how you interact with ever-pretty.shop, we may process categories of information including:

Identity Information

This may include your:

• Name;
• Account information;
• Customer identification information; and
• Information associated with an order.

Contact Information

This may include:

• Email address;
• Delivery information;
• Billing information; and
• Other contact information voluntarily provided by you.

Order and Transaction Information

This may include:

• Products ordered;
• Product variations selected;
• Order numbers;
• Purchase dates;
• Transaction values;
• Shipping status;
• Returns;
• Refunds; and
• Customer-service history.

Payment Information

Payments may be processed by Shopify or third-party payment providers.

Depending on the payment method used, payment providers may collect payment-card, bank-account or other financial information.

ever-pretty.shop does not necessarily receive or store complete payment-card details.

Technical Information

When you use our website, technical information may be processed, including:

• IP address;
• Browser type;
• Device type;
• Operating system;
• Language settings;
• Approximate location derived from technical information;
• Website activity;
• Referring pages;
• Session information; and
• Security-related information.

Customer Communications

When you contact us, we may process the information contained in your communications, including messages concerning:

• Orders;
• Products;
• Shipping;
• Returns;
• Refunds;
• Complaints;
• Withdrawal requests; and
• General enquiries.

How We Use Personal Information

We may process personal data for purposes including:

• Providing and operating the website;
• Processing purchases;
• Providing checkout functionality;
• Processing and confirming payments;
• Fulfilling and shipping orders;
• Providing tracking information;
• Managing customer accounts;
• Providing customer support;
• Handling withdrawals, returns and refunds;
• Resolving disputes;
• Preventing fraud and abuse;
• Protecting the security of our systems;
• Complying with accounting, tax and legal obligations;
• Improving website functionality;
• Measuring website performance;
• Conducting analytics where lawful;
• Sending marketing communications where permitted; and
• Managing cookie and privacy preferences.

Legal Bases for Processing

Where the GDPR applies, our processing may rely on one or more appropriate legal bases.

Performance of a Contract

We may process personal information where necessary to enter into or perform a contract with you, including:

• Processing orders;
• Collecting payment;
• Arranging delivery;
• Communicating regarding an order;
• Managing returns; and
• Issuing refunds.

Legal Obligations

We may process information where necessary to comply with legal obligations, including applicable obligations relating to:

• Accounting;
• Tax;
• Fraud prevention;
• Consumer protection;
• Product safety; and
• Regulatory requirements.

Legitimate Interests

Where appropriate, we may process personal information on the basis of legitimate interests, provided those interests are not overridden by your fundamental rights and freedoms.

Such interests may include:

• Protecting the security of our website;
• Preventing fraudulent transactions;
• Defending legal claims;
• Improving customer service; and
• Maintaining the effective operation of our business.

Consent

Where consent is legally required, we may request consent before conducting the relevant processing.

This may include certain:

• Marketing activities;
• Advertising technologies;
• Analytics technologies; and
• Non-essential cookies or similar technologies.

Where processing is based on consent, consent may generally be withdrawn at any time without affecting the lawfulness of processing conducted before withdrawal.

Shopify and Service Providers

ever-pretty.shop may use Shopify and other service providers to operate the store.

Personal information may therefore be processed by companies assisting us with:

• Website hosting;
• Ecommerce functionality;
• Payments;
• Fraud prevention;
• Shipping;
• Order fulfilment;
• Email communications;
• Customer support;
• Analytics;
• Marketing;
• Advertising;
• Security; and
• Technical infrastructure.

We seek to disclose information only where reasonably necessary for the relevant service or where disclosure is otherwise legally permitted.

Cookies and Similar Technologies

ever-pretty.shop may use cookies, pixels, local storage and comparable technologies.

Some technologies are necessary for functions such as:

• Maintaining shopping-cart contents;
• Processing checkout;
• Fraud prevention;
• Security;
• Maintaining user preferences; and
• Providing services expressly requested by the user.

Other technologies, including certain analytics, advertising or marketing technologies, may require consent under applicable GDPR and German TDDDG requirements.

Where consent is required, such technologies should not be activated until the required consent has been obtained.

Users may be able to modify their preferences through the consent-management functionality made available on the website.

Marketing

Where legally permitted, we may send information concerning products, services, promotions or other commercial communications.

Where prior consent is legally required, marketing communications will be sent only after obtaining the required consent.

Marketing consent may be withdrawn through the unsubscribe mechanism contained in communications where available or by contacting:

info@ever-pretty.shop

International Data Transfers

Some service providers used in connection with ever-pretty.shop may process information in countries outside Germany or the European Economic Area.

Where GDPR restrictions on international data transfers apply, appropriate safeguards will be used where required, such as:

• An applicable adequacy decision;
• Standard Contractual Clauses; or
• Another legally recognized transfer mechanism.

Data Retention

Personal data will not be retained indefinitely merely because it was collected.

Retention periods may vary according to:

• The purpose for which information was collected;
• The duration of the customer relationship;
• Contractual requirements;
• Accounting and tax requirements;
• Consumer-protection requirements;
• Fraud-prevention needs;
• Applicable limitation periods; and
• The need to establish, exercise or defend legal claims.

When personal data is no longer required and there is no lawful basis for continued retention, it will be deleted, anonymized or otherwise handled appropriately.

Data Security

We seek to use reasonable technical and organizational safeguards designed to protect personal information against:

• Unauthorized access;
• Unlawful disclosure;
• Accidental loss;
• Misuse;
• Alteration; and
• Destruction.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

Your GDPR Rights

Where the GDPR applies, you may have rights including the right to:

• Request access to personal data concerning you;
• Request correction of inaccurate information;
• Request completion of incomplete information;
• Request deletion where the legal requirements for erasure are satisfied;
• Request restriction of processing where applicable;
• Object to certain processing;
• Receive certain personal information in a structured, commonly used and machine-readable format where the right to data portability applies;
• Withdraw consent where processing relies on consent; and
• Lodge a complaint with a competent data-protection supervisory authority.

These rights are subject to the conditions and exceptions established by applicable law.

Automated Processing

We or our service providers may use automated technologies for fraud detection, security, payment risk assessment or ecommerce functionality.

Where an automated decision produces legal effects or similarly significantly affects an individual and Article 22 GDPR applies, the legally required safeguards will be respected.

Children's Privacy

ever-pretty.shop is not intended to knowingly collect unnecessary personal information from children.

Where a customer must have legal capacity or parental authorization to enter into a transaction, applicable requirements will apply.

If you believe personal information concerning a child has been processed improperly, please contact:

info@ever-pretty.shop

Changes to This Privacy Policy

We may update this Privacy Policy where necessary to reflect:

• Changes in our services;
• Changes in technology;
• Changes in service providers;
• Changes in business practices; or
• Changes in legal obligations.

The current version will be published on ever-pretty.shop with an updated revision date.

Privacy Contact

For privacy questions or requests:

ever-pretty.shop
Email: info@ever-pretty.shop