Privacy Policy

Last updated: June 2026

1. Data Controller

The data controller is the entity named above, responsible for deciding how and why your personal data is processed.

2. Your Rights

Depending on your location, you may have the right to:

• Request access to the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Request restriction of processing
• Request data portability
• Object to certain processing of your data
• Withdraw consent at any time, without affecting the lawfulness of prior processing
• Lodge a complaint with a data protection authority

3. Information We Collect When You Visit Our Website

When you visit our website, your browser automatically sends certain information to our server (server log files): IP address, date and time of the request, browser type and version, operating system, referrer URL.

Purpose: Ensuring the technical functionality and security of our website.
Retention: Server log files are stored for a maximum of 7 days and then automatically deleted.

4. Cookies and Tracking

Our website uses cookies — small text files stored on your device.

4.1 Strictly Necessary Cookies

Required for core store functionality (e.g. shopping cart, login, security).

4.2 Cookies Requiring Consent

Cookies used for marketing, analytics, or tracking purposes (e.g. Meta Pixel, Google Analytics) are only activated after you have given explicit consent via our cookie banner. You may withdraw your consent at any time via the cookie settings.

Retention: Necessary cookies until the end of your browser session; marketing cookies for a maximum of 13 months.

5. Orders and Order Fulfillment

When you place an order, we collect: name, shipping address, billing address, email address, phone number (optional), payment information, and order details.

Purpose: To process, fulfill, and ship your order.

To fulfill your order, we share your data with the following recipients as necessary:

• Shopify International Limited — our hosting and e-commerce platform provider
• Shipping carriers (e.g. DHL, courier partners) — to deliver your order
• Spocket Inc. and its connected suppliers — for order fulfillment and direct shipping (dropshipping) of certain products
• Payment processors (e.g. Shopify Payments, PayPal, Klarna) — to process your payment

Retention: Order and invoice data is retained for as long as required by applicable commercial and tax record-keeping obligations in the relevant jurisdiction (up to 10 years where German law applies).

6. Contacting Us

When you contact us by email or contact form, we process the information you provide in order to handle your inquiry.

Retention: Deleted once your inquiry is resolved, and no later than 3 years, unless a longer retention period is legally required.

7. Newsletter

We use Klaviyo to manage our newsletter. We use a double opt-in process: after signing up, you will receive a confirmation email and must actively confirm your subscription before receiving any newsletters.

Retention: Until you unsubscribe. You may unsubscribe at any time using the link included in every email.

8. Future Marketing Tools (Meta Pixel, Google Analytics)

9. Hosting

Our store is hosted by Shopify International Limited. As part of this, data may also be processed outside the EU/EEA, based on the EU Standard Contractual Clauses. More information: shopify.com/legal/privacy.

10. Data Security

We use SSL/TLS encryption to protect your data in transit. Despite appropriate technical and organizational measures, complete protection against third-party access cannot be guaranteed.

11. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in the law or our services. The current version is always available on this page.

12. Contact for Privacy Questions

For any privacy-related questions, please contact: ceo.luxorix(at)gmail.com