This Privacy Policy explains how reefa.shop collects, uses, stores, shares, and protects personal data when you visit our website, create an account, place an order, contact us, or otherwise use our services.

This policy is intended to provide information under the General Data Protection Regulation and other applicable data-protection laws.

Website: reefa.shop
Privacy contact: info@reefa.shop

1. Data Controller

For personal data processed in connection with this online store, the controller is identified under the trading and website name:

reefa.shop
Email: info@reefa.shop

The operator’s complete legal identity and physical business address must also be published where required by applicable law.

2. Personal Data We Collect

Depending on how you use our website, we may collect the following categories of personal data.

Identity and contact information

• Full name

• Billing address

• Shipping address

• Email address

• Telephone number

• Account information

Order and transaction information

• Products ordered

• Product size, color, and quantity

• Order number

• Order date

• Payment status

• Shipping method

• Delivery and tracking information

• Returns, withdrawals, refunds, and complaints

• Communications relating to an order

Payment information

Payments are generally processed by third-party payment providers.

We may receive limited payment-related information, such as:

• Payment method

• Payment confirmation

• Transaction identifier

• Billing details

• Fraud or risk indicators

• Partial card information where provided by the payment processor

We do not normally receive or store complete payment-card numbers.

Technical and device information

• Internet Protocol address

• Device type

• Browser type and version

• Operating system

• Language and time-zone settings

• Referring website

• Pages viewed

• Interaction and navigation data

• Session identifiers

• Cookie and similar-technology information

• Approximate location derived from an IP address

Customer-service information

When you contact us, we may process:

• The content of your message

• Your contact details

• Order information

• Photographs or documents you provide

• Complaint and support history

• Records of our response

Marketing information

Where applicable, we may process:

• Marketing preferences

• Newsletter subscriptions

• Consent records

• Campaign engagement

• Email opening and link-interaction data, where legally permitted

3. How We Collect Personal Data

We may collect personal data:

• Directly from you

• Through our website and cookies

• Through Shopify and connected applications

• From payment service providers

• From shipping and logistics providers

• From fraud-prevention and security providers

• From customer-service platforms

• From advertising or analytics providers where permitted

• From publicly available sources where lawful

4. Purposes and Legal Bases

We process personal data only where we have an appropriate legal basis.

Processing orders and performing contracts

We process data to:

• Accept and manage orders

• Process payments

• Deliver products

• Provide order confirmations

• Provide customer service

• Manage withdrawals, returns, and refunds

• Handle warranty and conformity claims

The legal basis is generally the performance of a contract or steps taken at your request before entering into a contract.

Compliance with legal obligations

We may process and retain data to comply with:

• Tax and accounting requirements

• Consumer-protection requirements

• Product-safety obligations

• Fraud-prevention duties

• Regulatory requests

• Court orders and lawful government requests

The legal basis is compliance with a legal obligation.

Legitimate interests

We may process data for legitimate interests such as:

• Securing our website

• Preventing fraud and abuse

• Protecting legal rights

• Improving products and services

• Managing business operations

• Measuring website performance

• Responding to customer enquiries

• Establishing, exercising, or defending legal claims

We use this basis only where our interests are not overridden by your rights and freedoms.

Consent

Where required, we rely on consent for:

• Non-essential cookies

• Personalized advertising

• Certain analytics

• Email marketing

• Other optional processing activities

You may withdraw consent at any time. Withdrawal does not affect processing that occurred lawfully before consent was withdrawn.

5. Shopify

Our online store is hosted and supported through Shopify.

Shopify provides e-commerce infrastructure, checkout functionality, hosting, security, order management, and related services. Shopify and its affiliated service providers may process personal data to operate the platform, prevent fraud, support transactions, comply with legal duties, and provide services to merchants and customers.

Shopify’s own privacy documentation may apply to processing for which Shopify acts independently.

6. Payments

When you select a payment method, your information may be transmitted to the relevant payment provider.

Payment providers may process personal data for:

• Payment authorization

• Transaction completion

• Identity verification

• Fraud prevention

• Chargeback management

• Compliance with financial regulations

Their own privacy policies apply to processing for which they act as independent controllers.

7. Shipping and Delivery Providers

We share necessary information with warehouses, fulfillment providers, postal operators, couriers, customs service providers, and logistics partners.

This information may include:

• Recipient name

• Delivery address

• Telephone number

• Email address

• Order reference

• Parcel information

• Customs information where required

These providers use the information to fulfill, transport, track, and deliver your order.

8. Cookies and Similar Technologies

Our website may use cookies, pixels, local storage, tags, software development kits, and similar technologies.

Essential technologies

Essential technologies may be used to:

• Operate the shopping cart

• Maintain checkout sessions

• Process orders

• Remember privacy preferences

• Prevent fraud

• Protect the website

• Provide account functionality

These technologies may be used without consent where legally permitted because they are necessary to provide a requested service or protect the website.

Optional technologies

With consent where required, optional technologies may be used for:

• Analytics

• Performance measurement

• Personalization

• Advertising

• Retargeting

• Social-media integration

You can manage optional cookies through the consent tool displayed on our website. You may also change browser settings, although disabling essential cookies may affect website functionality.

9. Marketing Communications

We send promotional emails only where legally permitted.

You can unsubscribe by:

• Using the unsubscribe function in a marketing email; or

• Contacting info@reefa.shop

Service communications relating to an order, payment, security issue, return, refund, or legal notice are not marketing communications and may still be sent where necessary.

10. Disclosure of Personal Data

We may disclose personal data to:

• Shopify and e-commerce service providers

• Payment processors

• Banks and payment networks

• Warehouses and fulfillment providers

• Shipping and logistics providers

• IT, hosting, and security providers

• Customer-support providers

• Analytics and advertising providers, subject to consent requirements

• Accountants, auditors, insurers, and professional advisers

• Courts, regulators, law-enforcement bodies, and government authorities

• Buyers, investors, or advisers involved in a lawful business transaction

Service providers receive only the information reasonably necessary for their services and are subject to contractual or legal obligations where required.

11. International Data Transfers

Some service providers may process personal data outside Germany or outside the European Economic Area.

Where required, international transfers are protected through an approved legal mechanism, such as:

• An adequacy decision

• Standard Contractual Clauses

• Additional contractual, technical, or organizational safeguards

• Another lawful transfer mechanism

You may contact info@reefa.shop for information about applicable safeguards.

12. Data Retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected.

Retention periods may depend on:

• Contract performance

• Tax and accounting obligations

• Consumer-law requirements

• Warranty and defect claims

• Fraud prevention

• Payment disputes and chargebacks

• Legal limitation periods

• Consent status

• The need to establish, exercise, or defend legal claims

When data is no longer required, it will be deleted, anonymized, or securely restricted unless continued storage is legally required.

13. Data Security

We use reasonable technical and organizational measures intended to protect personal data against:

• Unauthorized access

• Unlawful use

• Accidental loss

• Destruction

• Alteration

• Unauthorized disclosure

No internet transmission or storage system can be guaranteed to be completely secure. Customers should protect their passwords and contact us if they suspect unauthorized account activity.

14. Automated Fraud Prevention

We may use automated systems to identify unusual transactions, payment risks, account abuse, or suspected fraud.

These systems may evaluate factors such as:

• IP address

• Order value

• Transaction history

• Address consistency

• Device information

• Payment-provider risk signals

Where required by law, you may request human review of a decision that is based solely on automated processing and produces legal or similarly significant effects.

15. Your Data-Protection Rights

Subject to applicable conditions and exceptions, you may have the right to:

• Request access to your personal data

• Request correction of inaccurate data

• Request deletion of personal data

• Request restriction of processing

• Object to processing based on legitimate interests

• Object to direct marketing

• Receive certain data in a portable format

• Withdraw consent

• Request information about international-transfer safeguards

• Lodge a complaint with a competent supervisory authority

• Request human intervention in certain automated decisions

To exercise a right, contact:

info@reefa.shop

We may request reasonable information to verify your identity before responding.

16. Right to Object

Where processing is based on legitimate interests, you may object on grounds relating to your particular situation.

Where personal data is processed for direct marketing, you may object at any time. After receiving such an objection, we will stop using the relevant data for direct marketing.

17. Complaints

You may lodge a complaint with a data-protection supervisory authority, particularly in the EU or EEA country where you live, work, or believe an infringement occurred.

We encourage you to contact info@reefa.shop first so that we can attempt to address your concern.

18. Children’s Privacy

Our products and services are not intended to be purchased independently by children who do not have legal capacity to enter into a binding purchase contract.

We do not knowingly collect personal data from children in violation of applicable law. A parent or legal guardian who believes that a child has provided personal data unlawfully may contact us.

19. Third-Party Websites

Our website may contain links to third-party websites or services.

We are not responsible for the privacy practices of independent third parties. You should review their privacy notices before providing personal data.

20. Changes to This Policy

We may update this Privacy Policy when our processing activities, services, technologies, or legal obligations change.

The updated version will be published on reefa.shop with a revised “Last updated” date. Material changes may also be communicated through the website or another appropriate method.

21. Contact

For privacy questions or requests, contact:

reefa.shop
Email: info@reefa.shop