This policy explains what personal data we collect when you visit shaderhaus.com or buy from us, why, and what rights you have under the EU General Data Protection Regulation (GDPR).
01Who is responsible
02What we collect and why
| Data | Purpose | Legal basis |
|---|---|---|
| Name, email, delivery address, ordered products, order number, payment status | To process, ship and confirm your order, and to handle returns and guarantee claims | Performance of the contract (Art. 6(1)(b) GDPR) |
| Order and invoice records | To meet our tax and accounting duties | Legal obligation (Art. 6(1)(c)) |
| Messages you send us | To answer your questions and complaints | Contract, or our legitimate interest in answering you (Art. 6(1)(b), (f)) |
| Technical data such as IP address and browser type | To deliver the website securely and protect it against abuse | Legitimate interest in a secure website (Art. 6(1)(f)) |
We do not see or store your card or bank details: the payment provider handles them. We do not use your data for automated decision-making or profiling.
03Cookies and storage in your browser
We do not use advertising or analytics cookies. The shop stores two things in your own browser (local storage): the contents of your cart and the language you chose. They are needed for the features you use, never leave your device unless you place an order, and you can delete them at any time by clearing your browser data.
If we add analytics or advertising tools in the future, we will ask for your consent first and update this policy.
04Who receives your data
We share data only as far as needed to run the shop:
| Recipient | Role | Data |
|---|---|---|
| Cloudflare, Inc. | Website hosting and order storage | All order data, technical data |
| Resend (Plus Five Five, Inc.) | Sending order emails | Name, email, order details |
| Payment processing | Name, email, order amount, payment data | |
| Our supplier in China | Packing and shipping your order | Name, delivery address, ordered products |
| Shipping and customs carriers | Delivery and customs clearance | Name, delivery address, parcel contents |
Hosting and email providers process data on our behalf under data processing agreements.
05Transfers outside the EU
Some recipients are located outside the European Economic Area: Cloudflare and Resend in the United States, and our supplier in China. For the United States we rely on the EU–US Data Privacy Framework where the provider is certified, and otherwise on the European Commission’s Standard Contractual Clauses. For our supplier in China we use the Standard Contractual Clauses. You can ask us for a copy of these safeguards.
06How long we keep it
- Order and invoice data: years, as required by accounting law.
- Emails with you: up to 3 years after your last message, or longer if needed for a guarantee claim.
- Technical logs: kept by Cloudflare for a short period for security.
07Your rights
You have the right to access your data, to have it corrected or deleted, to restrict or object to its processing, and to receive it in a portable format. Where processing is based on our legitimate interest, you can object at any time. To use these rights, email . We reply within one month.
You can also complain to a data protection authority, in particular in the EU country where you live or work. Our lead authority is .
08Do you have to give us data?
To place an order we need your name, email and delivery address. Without them we cannot deliver or confirm your order.
09Changes
We update this policy when our services or the law change. The date at the top shows the latest version.