Privacy policy
This Privacy Policy explains how alloyapparel.shop collects, uses, stores, shares and otherwise processes personal information when customers visit our website, purchase products, communicate with us or otherwise use our services.
For privacy questions or requests:
Email: info@alloyapparel.shop
We seek to process personal data responsibly and in accordance with applicable data-protection law, including the General Data Protection Regulation where applicable.
Shopify notes that merchants are generally controllers of their customers' personal data and must identify an appropriate legal basis for processing.
Data Controller
For personal data processed in connection with the operation of this online store, the responsible store operator is:
alloyapparel.shop
Privacy contact:
Personal Data We May Collect
Depending on how you interact with the website, we may process information such as:
- Name;
- Email address;
- Telephone number;
- Billing information;
- Shipping information;
- Delivery address;
- Order information;
- Products purchased;
- Returns and refund information;
- Customer-service communications;
- Account information;
- Payment transaction information;
- IP address;
- Browser information;
- Device information;
- Cookie identifiers;
- Website usage information;
- Marketing preferences;
- Consent records;
- Fraud-prevention information; and
- Other information voluntarily provided by you.
We seek to collect only data reasonably relevant to the purposes for which it is processed.
Information You Provide Directly
You may provide personal information when you:
- Place an order;
- Create an account;
- Enter billing or shipping details;
- Contact customer service;
- Request a return;
- Exercise a withdrawal right;
- Submit a privacy request;
- Sign up for marketing;
- Participate in a promotion; or
- Otherwise communicate with us.
Customers should provide accurate information where necessary for order fulfilment.
Automatically Collected Information
When you visit our website, certain technical information may be collected automatically by Shopify, our website infrastructure or other authorized service providers.
This may include:
- IP address;
- Device type;
- Operating system;
- Browser;
- Language;
- Referring pages;
- Pages viewed;
- Dates and times of interactions;
- Cookie identifiers; and
- Similar technical information.
Purposes of Processing
We may process personal information to:
- Operate the website;
- Provide requested products and services;
- Process orders;
- Process payments;
- Verify transactions;
- Fulfil orders;
- Arrange delivery;
- Provide tracking;
- Communicate about orders;
- Manage cancellations and withdrawals;
- Process returns and refunds;
- Respond to enquiries;
- Provide customer support;
- Prevent fraud;
- Protect account and transaction security;
- Maintain records;
- Comply with legal obligations;
- Resolve disputes;
- Improve website functionality;
- Analyze store performance;
- Manage customer preferences; and
- Conduct marketing where lawfully permitted.
Legal Bases
Where the GDPR applies, processing may rely on one or more lawful bases, depending on the circumstances.
These may include:
Performance of a Contract
We may process information because it is necessary to:
- Process your order;
- Take payment;
- Deliver products;
- Handle returns;
- Provide customer support; or
- Perform other contractual obligations.
Legal Obligation
We may process or retain information where necessary to comply with legal requirements, including tax, accounting, consumer-protection, fraud-prevention or regulatory obligations.
Legitimate Interests
Where permitted, information may be processed for legitimate business purposes such as:
- Website security;
- Fraud prevention;
- Service improvement;
- Business administration; and
- Establishment or defence of legal claims,
provided such interests are not overridden by applicable data-protection rights.
Consent
Where consent is legally required, such as for certain marketing or non-essential tracking technologies, processing will be based on consent.
Consent may be withdrawn in accordance with applicable law.
Cookies and Similar Technologies
Our website may use cookies and similar technologies.
Some technologies are technically necessary for services such as:
- Shopping-cart operation;
- Checkout;
- Security;
- Authentication;
- Fraud prevention; or
- User-requested functionality.
Other cookies may support:
- Analytics;
- Advertising;
- Personalization; or
- Marketing.
Under Germany's TDDDG, storing or accessing information on a user's terminal device generally requires informed consent unless the technology is strictly necessary for transmission or for providing a digital service expressly requested by the user.
Where legally required, non-essential cookies or similar technologies will not be activated until appropriate consent has been obtained.
Cookie Preferences
Where applicable, customers may manage their cookie preferences using the consent controls made available through the website.
Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
Shopify
Our ecommerce store is powered by Shopify.
Shopify provides the infrastructure through which we offer products and services.
Depending on the services enabled, Shopify may process customer personal data as our processor/service provider and, for certain Shopify services, may process specified information in its own controller capacity.
Shopify's Data Processing Addendum explains those roles and requires appropriate protections for relevant customer data.
Payment Processing
Payment information may be processed by payment processors, banks, card networks, Shopify Payments or other payment providers made available at checkout.
We do not necessarily directly receive or store complete payment-card credentials.
Payment providers may process personal information according to their own legal obligations and privacy practices.
Service Providers
Personal information may be disclosed to service providers where reasonably necessary to operate the business.
These providers may include:
- Shopify;
- Payment processors;
- Fraud-prevention providers;
- Fulfilment providers;
- Warehousing providers;
- Shipping carriers;
- Customer-service providers;
- IT providers;
- Cloud-hosting providers;
- Analytics providers;
- Marketing providers; and
- Professional advisers.
We seek to disclose information only where reasonably necessary and subject to appropriate legal arrangements.
International Data Transfers
Some service providers may process personal information outside Germany or outside the European Economic Area.
Where GDPR transfer restrictions apply, appropriate safeguards are used as required by law.
Shopify explains that European personal data may be processed internationally and that mechanisms including approved Binding Corporate Rules, adequacy decisions and Standard Contractual Clauses may be used depending on the transfer.
Marketing Communications
Where legally permitted, customers may receive marketing communications after providing the required permission or where another lawful basis applies.
Customers may unsubscribe through the mechanism included in marketing communications or by contacting:
Withdrawal from marketing does not prevent communications that are necessary for existing orders or other transactional purposes.
Data Retention
Personal data will be retained only for as long as reasonably necessary for the purpose for which it was collected and to satisfy applicable legal, accounting, tax, contractual and dispute-resolution requirements.
Retention periods may differ according to the category of information and the legal purpose for which it is held.
When information is no longer reasonably required, it may be deleted, anonymized or otherwise securely handled.
Data Security
We use reasonable organizational, administrative and technical safeguards intended to protect personal information against:
- Unauthorized access;
- Unauthorized disclosure;
- Accidental loss;
- Misuse;
- Destruction;
- Alteration; or
- Other unlawful processing.
No internet-based system can guarantee absolute security.
GDPR Data-Subject Rights
Where the GDPR applies, individuals may have rights including, subject to applicable conditions and exceptions:
- Right of access;
- Right to rectification;
- Right to erasure;
- Right to restriction of processing;
- Right to object;
- Right to data portability;
- Right to withdraw consent;
- Rights concerning certain automated decisions; and
- Right to lodge a complaint with a competent supervisory authority.
The GDPR establishes these data-subject rights and associated controller obligations.
Exercising Privacy Rights
Requests may be submitted to:
We may need to verify the requester's identity before providing access to personal information or implementing certain requests.
Verification helps protect customers from unauthorized disclosure.
Right to Object to Direct Marketing
Where personal information is processed for direct marketing, customers may object to such processing as provided by applicable law.
Marketing communications may also include an unsubscribe mechanism.
Right to Withdraw Consent
Where processing is based on consent, consent may be withdrawn at any time.
Withdrawal applies prospectively and does not invalidate lawful processing carried out before withdrawal.
Children's Privacy
Our store is intended for customers legally capable of entering into online purchase contracts or acting with appropriate authorization.
We do not intentionally seek to collect unnecessary personal information from children.
If you believe personal data concerning a child has been improperly provided, contact:
Legal Disclosure
Information may be disclosed where reasonably necessary to:
- Comply with applicable law;
- Comply with a lawful court order;
- Respond to legally valid requests from authorities;
- Prevent fraud;
- Protect safety;
- Enforce contractual rights; or
- Establish, exercise or defend legal claims.
Business Transfers
If the business is reorganized, transferred, merged or sold, relevant personal data may be transferred as part of the transaction where permitted by applicable law and subject to appropriate safeguards.
Third-Party Websites
Our website may contain links to external websites or services.
Those third parties may maintain their own privacy practices.
We encourage users to review the privacy notices of third-party services they choose to use.
Changes to This Privacy Policy
We may update this Privacy Policy when necessary because of:
- Changes in our services;
- New technology;
- Operational changes;
- Legal changes; or
- Regulatory requirements.
The current version will be displayed through alloyapparel.shop.
Contact
For privacy enquiries or requests:
alloyapparel.shop
Email: info@alloyapparel.shop
- Choosing a selection results in a full page refresh.