Privacy Policy (GDPR)
- What personal data we collect (name, email, address, payment info via payment processor, order history)
- Why we collect it (order fulfilment, customer service, marketing with consent)
- Legal basis for processing (contract performance, consent, legitimate interest)
- Data retention periods
- Your rights under GDPR (access, correction, deletion, portability, objection, complaint to a supervisory authority)
- Third parties data is shared with (payment processor, shipping/logistics from South Africa, Shopify as platform provider)
- Cookie policy (linked to Shopify's built-in cookie/consent banner)
- Contact details for data protection queries