Privacy Policy / 隐私政策
Last updated: September 2026 · GDPR-oriented template. Not legal advice.
1. Controller
The data controller is the operator of this online store (“Luxe Accessories” / your company name). Contact details are listed on the Contact and Impressum pages.
2. Data we process
- Account data: email, name, password hash
- Order data: shipping address, phone, items, amounts
- Payment data: payment method, crypto TX hash / provider session IDs (we do not store full card numbers)
- Technical data: IP, browser type (server logs), cookie preferences
- Communications: messages sent via contact forms
3. Purposes & legal bases (GDPR)
- Contract performance: checkout, delivery, customer service (Art. 6(1)(b))
- Legal obligations: tax/accounting (Art. 6(1)(c))
- Legitimate interests: security, fraud prevention, improving the shop (Art. 6(1)(f))
- Consent: non-essential cookies / marketing where required (Art. 6(1)(a))
4. Processors & third parties
Depending on configuration we may use: hosting providers, email (e.g. Resend), Stripe, PayPal, blockchain infrastructure / RPC providers, analytics only if you consent. Crypto payments are public on the blockchain; TX details are inherently transparent.
5. Retention
Account data while the account is active; order records as required by commercial/tax law (often 6–10 years); logs for a shorter operational period.
6. Your rights
Where GDPR applies you may request access, rectification, erasure, restriction, portability, and object to certain processing. You may lodge a complaint with a supervisory authority. To exercise rights, use the Contact page.
7. Cookies
Essential cookies keep you logged in and remember the cart. Analytics/marketing cookies are only used according to your banner choice.
8. Changes
We may update this policy; the “Last updated” date will change. Significant changes may be notified on the website.