Datenschutzerklärung

Scope and Controller

This Privacy Policy applies when a person visits cooperandcox.shop, creates or uses an account, places or attempts to place an order, contacts us, subscribes to marketing, participates in a promotion, or otherwise interacts with our store. For the processing described in this policy, the legal operator of cooperandcox.shop acts as the controller within the meaning of the General Data Protection Regulation (GDPR). Privacy enquiries and data-subject requests may be sent to info@cooperandcox.shop. The controller's complete legal identity and address must also be published in the Legal Notice before the store is launched.

Personal Information We Collect

Identity and contact information, such as name, email address, telephone number, billing address and delivery address.

Order and transaction information, including products viewed or purchased, order history, returns, refunds and customer-service communications.

Payment-related information. Payments are processed by payment providers; we generally receive transaction confirmations and limited payment details rather than full card data.

Account information, preferences and saved settings.

Device and usage information, such as IP address, browser type, device identifiers, pages viewed, referral source and interactions with the website.

Marketing preferences, consent records and responses to campaigns.

Fraud-prevention, security and verification information.

Information supplied in reviews, messages, photographs or other content sent to us.

How We Collect Information

We collect information directly from customers; automatically through cookies, pixels, logs and similar technologies; from Shopify and service providers involved in checkout, payments, fulfilment, analytics, security and support; and from advertising or social-media partners where permitted by law and the user's settings.

Purposes and Lawful Bases

To process orders, take payment, arrange delivery, provide updates, manage returns and refunds, and perform our contract with the customer.

To answer questions and provide customer service, based on contract necessity or our legitimate interests in operating and supporting the store.

To prevent fraud, misuse, cyber incidents and unlawful activity, based on legitimate interests and legal obligations.

To maintain records, comply with tax, accounting, consumer-protection and other legal requirements.

To improve website performance, products and customer experience, based on legitimate interests or consent where required.

To send marketing communications where consent has been given or another lawful basis applies, with the ability to unsubscribe.

To establish, exercise or defend legal claims.

Where we rely on legitimate interests, we consider the necessity and impact of the processing and the rights of individuals. Where consent is the lawful basis, consent may be withdrawn at any time without affecting prior lawful processing.

Shopify, Service Providers and Sharing

Our store is hosted using Shopify. We may share personal information with Shopify and with providers that help operate the business, including payment processors, warehouses, suppliers, carriers, email and support services, analytics providers, fraud-prevention services, cloud hosting, professional advisers and regulators. Providers receive information only as reasonably necessary for their functions and are expected to protect it.

We may disclose information where required by law, court order or regulatory request; to protect rights, safety and security; in connection with a merger, sale, financing or transfer of business assets; or with the individual's direction or consent.

International Transfers

Some recipients may process personal information outside Germany or the European Economic Area. Where the GDPR requires safeguards, we use an appropriate lawful transfer mechanism, such as an adequacy decision, approved Standard Contractual Clauses together with supplementary measures where required, or another mechanism permitted by Chapter V GDPR. Individuals may contact us for further information about applicable safeguards.

Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including fulfilling orders, providing support, maintaining business and tax records, resolving disputes, preventing fraud and meeting legal obligations. Retention periods vary by record type and may be extended where a complaint, dispute, investigation or legal hold applies. Information is deleted, anonymised or securely isolated when no longer required.

Cookies and Similar Technologies

The website uses technologies required for navigation, security, basket and checkout. It may also use analytics, personalisation and advertising technologies. Access to or storage of information on a user's terminal device is governed by Section 25 of the German Telecommunications-Digital Services Data Protection Act (TDDDG), while subsequent processing of personal data is governed by the GDPR. Where consent is required for non-essential technologies, we request it through the available cookie controls. Consent may be withdrawn for the future at any time.

Marketing

Marketing emails may be sent only as permitted by law. A recipient can unsubscribe using the link in a marketing message or by emailing info@cooperandcox.shop. We may retain a suppression record so that the opt-out is respected. Service messages about an order, account, security or policy change are not marketing and may still be sent when necessary.

Individual Rights

The right to be informed about processing.

The right to request access to personal information.

The right to request correction of inaccurate or incomplete information.

The right to request erasure in applicable circumstances.

The right to request restriction of processing.

The right to object to processing based on legitimate interests and to direct marketing.

The right to data portability where applicable.

Rights relating to solely automated decisions with legal or similarly significant effects, where applicable.

The right to withdraw consent at any time where processing is based on consent.

To exercise a right, email info@cooperandcox.shop. We may request information reasonably necessary to verify identity and locate relevant records. We normally respond within the period required by law and will explain if an extension or lawful exception applies.

Complaints

Individuals have the right to lodge a complaint with a competent data-protection supervisory authority, in particular in the EU Member State of their habitual residence, place of work or place of the alleged infringement. We would appreciate the opportunity to address the concern first, but contacting us is not a precondition to lodging a complaint.

Children

The store is not directed at children and we do not knowingly seek to collect personal information from children who cannot lawfully provide it. A parent or guardian who believes a child has supplied information should contact us.

Security and Changes

We use reasonable administrative, technical and organisational measures designed to protect personal information. No internet system is completely secure. We may update this policy to reflect changes in law, technology or business practices. The latest version will be posted on the website with an updated date.