Privacy policy

Privacy Policy

This Privacy Policy describes how thecommense.shop ("we", "us", or "our") collects, uses, discloses, stores, and protects personal data when you visit, use, make a purchase from, or otherwise interact with our Shopify-powered online store.

We respect your privacy and are committed to processing personal data responsibly and in accordance with applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 ("GDPR"), applicable German data protection laws, and applicable U.S. state privacy laws including the California Consumer Privacy Act (CCPA/CPRA).

By using our website, you acknowledge the data processing practices described in this Privacy Policy.

1. Data Controller and Contact Information

For the purposes of applicable data protection laws, the controller responsible for the processing of personal data through this online store is:

Website: thecommense.shop
Email: info@thecommense.shop
Customer Service: +49 171 6411776
Business Address: GEORGII-V-GEORGENAU-STR 9, 75365 CALW, Germany

Questions, requests, objections, withdrawals of consent, and other privacy-related inquiries may be submitted to the email address or phone number above.

2. Personal Data We Collect

Depending on how you interact with our store, we may collect and process the following categories of personal data.

Information You Provide Directly:

When you place an order, create an account, contact us, subscribe to marketing communications, submit a form, or otherwise communicate with us, we may collect:

  • Full name
  • Billing address and Shipping address
  • Email address and Telephone number
  • Order information, products purchased or returned
  • Customer service communications and return/refund records
  • Marketing preferences

Payment Information:

When you make a purchase, payment information is collected and processed by Shopify and our authorized payment service providers. Depending on the payment method, this may include payment card details, billing address, transaction identifiers, and fraud-prevention data. We do not directly store complete credit card numbers on our servers.

Information Collected Automatically:

When you visit our website, technical and usage information may be collected automatically, including IP address, browser type, device type, operating system, time zone, referring URL, pages viewed, cart interactions, and cookie identifiers.

3. How We Collect Personal Data

We collect personal data directly from you, automatically through your use of our website via cookies, from Shopify, payment processors, shipping and logistics partners, analytics providers, and fraud prevention services.

4. How We Use Personal Data

We process personal data for the following essential business purposes:

  • Processing and Fulfilling Orders: To process transactions, confirm orders, handle payments, arrange delivery, process returns, and issue refunds.
  • Customer Support: To respond to inquiries, investigate complaints, and provide order updates.
  • Security and Fraud Prevention: To protect our website, prevent unauthorized transactions, and maintain data security.
  • Legal Compliance: To comply with tax, accounting, customs, and consumer protection laws.
  • Marketing Communications: Where permitted or consented to, to send promotional updates (you may opt out at any time).

5. Legal Bases for Processing (GDPR)

Where European data protection law applies, our processing is based on:

  • Performance of a Contract: To fulfill your order and provide customer service.
  • Legal Obligation: To comply with financial, tax, and consumer safety rules.
  • Legitimate Interests: To secure our website, prevent fraud, and run our operations efficiently.
  • Consent: Where explicitly given for marketing or optional cookies.

6. Shopify

Our store is hosted by Shopify Inc., which provides the e-commerce platform that allows us to sell products to you. Shopify processes personal data on our behalf to support store operations, checkout, and order fulfillment in compliance with applicable privacy standards.

7. Service Providers and Third Parties

We may share necessary personal data only with trusted third parties strictly required for store operations, including Shopify, payment gateways, shipping carriers, customer support software, and legal/financial advisers. We do not sell your personal data to third parties for monetary consideration.

8. Shipping and Delivery

To deliver your purchases, we share necessary order details (Name, Shipping Address, Phone Number, Email) with international logistics and postal service providers. This information is used strictly for transit, tracking, and customs clearance.

9. Cookies and Similar Technologies

We use essential cookies necessary for store functionality (such as shopping cart persistence and checkout security). Non-essential cookies for analytics or marketing are deployed in accordance with your consent preferences, which can be managed via our cookie banner.

10. United States Privacy Rights (CCPA / CPRA Compliance)

If you are a resident of the United States, including California, state laws provide specific privacy rights regarding your personal information:

  • Right to Know / Access: You have the right to request details about the categories and specific pieces of personal information we collect, use, and disclose.
  • Right to Delete: You have the right to request the deletion of your personal information held by us, subject to legal exceptions.
  • Right to Correct: You have the right to request correction of inaccurate personal information.
  • Right to Opt-Out of Sale or Sharing: We do not sell your personal information for monetary compensation. If non-essential cookies qualify as "sharing" for cross-context behavioral advertising under California law, you may opt-out through our cookie preference settings.
  • Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.

To exercise your U.S. state privacy rights, please contact us at info@thecommense.shop.

11. International Data Transfers

To serve customers globally and manage order fulfillment, personal data may be processed or transferred outside your home country or the European Economic Area (EEA), including to the United States. We ensure appropriate safeguards, such as Standard Contractual Clauses, are utilized for international transfers.

12. Data Retention

We retain personal data only as long as necessary to fulfill the purposes described in this policy, including order processing, dispute resolution, and legal or tax retention obligations.

13. Data Security

We implement appropriate technical and organizational measures to safeguard your personal data against unauthorized access, loss, or alteration. However, no electronic transmission over the Internet can be guaranteed 100% secure.

14. Your Rights Under GDPR

If you reside in the EEA/UK, you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, as well as the right to data portability and the right to lodge a complaint with a supervisory authority.

15. Children's Privacy

Our website is intended for a general adult audience and does not knowingly collect personal information from children under 16 years of age.

16. Changes to This Policy

We may update this Privacy Policy periodically to reflect operational, legal, or regulatory changes. Updated versions will be published on this page with the effective date.

17. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

Website: thecommense.shop
Email: info@thecommense.shop
Customer Service: +49 171 6411776
Business Address: GEORGII-V-GEORGENAU-STR 9, 75365 CALW, Germany