Privacy Policy
How We Handle Your Data
Account identification and communication.
Legal basis:
phone
Optional two-factor authentication and account recovery.
Legal basis:
password
Credential verification (stored as a one-way hash).
Legal basis:
sessions
Session management and security.
Legal basis:
audit_log
Security auditing of authentication events.
Legal basis:
Identifies the customer for orders, delivery and support.
Legal basis:
phone
Contact about an order and delivery notifications.
Legal basis:
address
Delivery and billing addresses used to fulfil orders.
Legal basis:
subscriber_email
Sends the newsletter the person asked for; a contact is created even without an account.
Legal basis:
consent_record
Proves when a consent was given or withdrawn, with the address and time it came from.
Legal basis:
message_content
Stores sent and received mail so it can be read and answered.
Legal basis:
correspondent_address
Identifies sender and recipients of each message.
Legal basis:
search_index
Makes mail searchable without decrypting it: keyed hashes only.
Legal basis:
delivery_log
Records what was sent, when, and whether it was delivered.
Legal basis:
Your Rights
Right to Access
You have the right to obtain a copy of the personal data we hold about you.
Right to Rectification
You can request correction of inaccurate or incomplete data.
Right to Erasure
You can request deletion of your data, subject to legal retention obligations.
Right to Portability
You can request your data in a structured, machine-readable format.
Right to Restriction
You can request that we restrict processing of your data.
Right to Object
You can object to processing based on legitimate interests.