Privacy policy.

1. Information we collect

We collect information that you provide directly to us, including:

Personal information:

• Name and contact details (email address, phone number)
• Billing and shipping addresses
• Payment information (processed securely by our payment providers)
• Account credentials if you create an account

Order information:

• Products purchased
• Order history and preferences
• Communications with our customer service

Automatically collected information:

• IP address and device information
• Browser type and operating system
• Pages visited and time spent on our website
• Referring website addresses
• Cookies and similar tracking technologies

When you type an address at checkout, the text you type and your IP address are sent to Google Maps Platform to suggest matching addresses. Google processes this data on our behalf.

When you pay by card, iDEAL, Bancontact, Revolut Pay, Apple Pay or Google Pay, your payment is processed by Stripe Payments Europe, Ltd. on our behalf. Card details and wallet payments are entered into secure fields provided by Stripe — either inside our checkout page or on a payment page hosted by Stripe. iDEAL, Bancontact and Revolut Pay take you to your own bank or app. We never see or store your card details. Stripe receives your name, email address, billing address, the order amount and order number. While you are on our checkout page, Stripe also receives technical information about your device and browser and sets its own cookies, which it uses to detect fraud (see Stripe's privacy policy). Your bank may ask you to confirm the payment (3-D Secure).

2. How we use your information

We use your personal information for the following purposes:

Order processing:

• Process and fulfill your orders
• Send order confirmations and shipping updates
• Handle returns and refunds

Communication:

• Respond to your inquiries and requests
• Send important service-related notifications
• With your consent, send marketing communications about products and promotions

Improvement and analytics:

• Analyze website usage to improve our services
• Personalize your shopping experience
• Detect and prevent fraud

Legal basis (GDPR):

• Contract performance: processing orders and providing services
• Legitimate interests: improving our services and preventing fraud
• Consent: marketing communications and non-essential cookies

3. Cookies and tracking

We use cookies and similar technologies to enhance your experience:

Essential cookies:

• Shopping cart functionality
• Session management
• Security features

These are necessary for the website to function and cannot be disabled.

Analytics cookies (with consent):

• Track website usage patterns
• Help us understand how visitors interact with our site
• Improve website performance

Marketing cookies (with consent):

• Deliver relevant advertisements
• Measure advertising effectiveness

Managing cookies: you can manage your cookie preferences through our cookie consent banner or your browser settings. Note that disabling certain cookies may affect website functionality.

4. Information sharing

We do not sell your personal information. We may share your information with:

Service providers:

• Payment processors to handle transactions securely
• Shipping carriers to deliver your orders
• Email service providers for order notifications
• Analytics providers to help improve our website

These providers are contractually obligated to protect your data and use it only for the purposes we specify.

Legal requirements: we may disclose your information when required by law, court order, or government request, or to protect our rights, property, or safety.

5. Data retention

We retain your personal data only for as long as necessary:

• Order data: we retain order information for 7 years for tax and legal compliance purposes.
• Account data: if you have an account, we retain your data until you request deletion.
• Marketing data: we retain marketing preferences until you unsubscribe or withdraw consent.
• Analytics data: aggregated, anonymized analytics data may be retained indefinitely for business analysis.

When data is no longer needed, it is securely deleted or anonymized.

6. Data security

We implement appropriate technical and organizational measures to protect your personal data:

Security measures:

• SSL/TLS encryption for all data transmission
• Secure payment processing through PCI-compliant providers
• Regular security assessments and updates
• Access controls and authentication
• Employee training on data protection

While we strive to protect your data, no method of transmission over the Internet is 100% secure. We encourage you to use strong passwords and protect your account credentials. In the event of a data breach that affects your personal information, we will notify you and the relevant authorities as required by law.

7. Your rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Right to access: request a copy of the personal data we hold about you.
• Right to rectification: request correction of inaccurate or incomplete data.
• Right to erasure: request deletion of your personal data ("right to be forgotten") in certain circumstances.
• Right to restrict processing: request that we limit how we use your data.
• Right to data portability: receive your data in a structured, machine-readable format.
• Right to object: object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent: withdraw consent at any time for processing based on consent.

To exercise these rights, please contact us through our Contact page. We will respond within 30 days.

8. Contact us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us.

Data controller: Amino House. Email: hello@aminohouse.store.