1. Data we collect
When you place an order we collect: name, email address, phone number (optional), shipping address, and the list of items purchased. We also collect your IP address and browser user agent to prevent fraud and abuse.
2. How we use it
- To process and ship your order.
- To contact you about the order status or refunds.
- To comply with tax and accounting obligations.
3. Legal basis (GDPR)
Processing is based on performance of the sales contract (Art. 6(1)(b) GDPR) and legitimate interest in preventing fraud (Art. 6(1)(f) GDPR).
4. Cookies
We use first-party cookies only for essential shopping cart functionality. We do not use advertising or tracking cookies on this site.
5. Data sharing
We share your shipping address with the carrier that delivers your order. We do not sell personal data.
6. Retention
Order records are retained for the period required by accounting law (typically 5-10 years). You can request deletion of data not required by law at any time.
7. Your rights
- Access, rectification, erasure of your data
- Data portability
- Restriction or objection to processing
- Lodging a complaint with a supervisory authority
8. Contact
For any data-protection request, email us at support@thepurplesystem.com.