TheElegant.Store Privacy Policy – Data Protection, Cookies & Your Rights
At TheElegant.Store, protecting your personal information is an important part of earning your trust.
This Privacy Policy explains what personal data we collect when you visit or shop at TheElegant.Store, why we process it, the legal bases we rely on, who may receive it, how long we keep it, how cookies and similar technologies are used, and what privacy rights you may have.
TheElegant.Store is a Germany-based online gift shop offering personalized gifts, home and living products, apparel, wall art, mugs, accessories, digital products and other thoughtful gift ideas.
Because our store includes personalized products, made-to-order physical goods, digital downloads, customer accounts, payments, delivery and customer support, different types of personal data may be required depending on how you use the Website.
Your Trust Is Our Earning.
1.Who Is Responsible for Your Personal Data?
The data controller responsible for processing personal data through TheElegant.Store is:
TheElegant.Store
Operated by: Hafiz Saqib Javed
Pöllatstr. 6
81539 München
Germany
Email: info@theelegant.store
For additional legally required business information, please see our Legal Notice (Impressum).
In this Privacy Policy, “TheElegant.Store”, “we”, “us” and “our” refer to the controller identified above.
2.Scope of This Privacy Policy
This Privacy Policy applies to personal data processed when you:
- Visit TheElegant.Store
- Browse products or gift collections
- Create or use a customer account
- Place an order
- Purchase a physical or digital product
- Personalize a product
- Upload an image or other file
- Make a payment
- Subscribe to marketing communications
- Submit a product review
- Contact customer support
- Use Website features, forms or cookies
Third-party websites linked from TheElegant.Store are governed by their own privacy policies.
3.What Personal Data We Collect
The personal information we process depends on how you interact with TheElegant.Store.
Identity & Contact Information
We may collect:
- Full name
- Email address
- Telephone number
- Billing address
- Shipping address
- Country
- Other contact information you voluntarily provide
Order & Transaction Information
When you place an order, we may process information including:
- Order number
- Products ordered
- Product variants
- Sizes and colours
- Quantity
- Price
- Discounts
- Shipping method
- Billing and delivery information
- Order status
- Refund or return information
- Transaction references
We need this information to process and manage your purchase.
Account Information
If you create a customer account, we may process:
- Name
- Email address
- Account credentials in protected form
- Saved billing and shipping information
- Order history
- Account preferences
Passwords should be stored securely in protected form rather than as readable plain text.
Personalization Data
For personalized gifts and custom products, you may provide information such as:
- Names
- Dates
- Messages
- Photographs
- Uploaded images
- Custom text
- Other product-specific personalization instructions
This information is used to create the product you requested and, where necessary, to manage production, fulfilment, customer support or a problem with the order.
Please avoid including unnecessary sensitive personal information in personalization requests.
Payment Information
Payments are processed through the payment methods available at checkout.
Payment providers such as PayPal may process payment information directly.
TheElegant.Store does not normally receive or store your complete payment-card details when those details are processed directly by a payment provider.
We may receive information needed to manage the transaction, such as:
- Payment status
- Transaction identifier
- Payment method
- Refund status
- Limited fraud-prevention information
Digital Product Information
If you purchase a downloadable or other digital product, we may process information needed to:
- Confirm your purchase
- Provide access to the digital content
- Manage downloads
- Prevent misuse
- Provide technical support
Customer Support & Contact Information
When you contact us through email, a contact form or another support channel, we may process:
- Your name
- Email address
- Order number
- Message
- Product information
- Tracking information
- Personalization details
- Photographs or files you send
- Previous correspondence relating to the enquiry
Please do not send passwords, complete payment-card details or other unnecessary sensitive financial information through email or our general contact form.
Reviews & Public Content
If you voluntarily submit a review, comment, photograph or other material for public display, we may process the information you provide together with information needed to verify or administer the submission.
Information that you intentionally publish as part of a review may become publicly visible.
Technical, Usage & Device Information
When you access the Website, certain technical information may be processed automatically, such as:
- IP address
- Browser type
- Device type
- Operating system
- Date and time of access
- Pages requested
- Referring page
- Technical error and security information
- Cookie or similar identifiers where applicable
Some technical data is necessary to deliver and secure the Website. Other analytics or marketing data is processed only where permitted by applicable law and, where required, after consent.
Newsletter & Marketing Information
If you subscribe to marketing communications, we may process:
- Email address
- Name, where provided
- Subscription status
- Marketing preferences
- Consent information
- Unsubscribe information
- Relevant technical information needed to manage the subscription
You can unsubscribe from marketing communications at any time.
4.Where Personal Data Comes From
Most personal data is provided directly by you when you:
- Place an order
- Create an account
- Customize a product
- Contact us
- Subscribe to marketing
- Submit a review
We may also receive limited personal data from:
- Payment providers
- Shipping carriers
- Production and fulfilment partners
- Website security or technical providers
- Analytics or advertising providers where you have consented to such processing
Technical data may also be collected automatically when your browser or device interacts with the Website.
5.Why We Use Personal Data & Our Legal Bases
We process personal data only where there is an appropriate legal basis.
Processing Orders & Performing the Contract
We use information needed to:
- Process purchases
- Create personalized products
- Provide digital products
- Arrange fulfilment
- Arrange shipping
- Send order confirmations
- Provide order-related customer service
- Process eligible returns or refunds
The legal basis is generally Article 6(1)(b) GDPR – performance of a contract or steps requested before entering into a contract.
Meeting Legal Obligations
We may process and retain information where necessary for:
- Tax
- Accounting
- Commercial record keeping
- Fraud-related legal obligations
- Consumer-protection requirements
- Responding to lawful authority requests
The legal basis is generally Article 6(1)(c) GDPR – compliance with a legal obligation.
Website Security, Fraud Prevention & Business Protection
We may process limited technical, order or account information where necessary to:
- Protect the Website
- Detect misuse
- Prevent fraud
- Maintain system security
- Investigate technical problems
- Establish, exercise or defend legal claims
Where appropriate, the legal basis is Article 6(1)(f) GDPR – our legitimate interests in operating and protecting a secure ecommerce business.
When relying on legitimate interests, we consider the interests, rights and freedoms of the individuals concerned.
Customer Support
Where your enquiry relates to an existing or potential order, processing may be necessary under Article 6(1)(b) GDPR.
For general enquiries, security matters or business administration, processing may also be based on Article 6(1)(f) GDPR.
Newsletter & Promotional Marketing
Where consent is required, newsletters and promotional communications are processed on the basis of:
Article 6(1)(a) GDPR – consent.
You can withdraw your consent at any time without affecting processing that was lawful before withdrawal.
Analytics & Marketing Technologies
Where analytics, advertising or similar non-essential technologies require consent, we process related personal data only after the necessary consent has been obtained.
The GDPR legal basis is generally:
Article 6(1)(a) GDPR – consent.
You can withdraw or change your cookie choices through the consent controls available on the Website.
6.Cookies & Similar Technologies
TheElegant.Store uses cookies and similar technologies for different purposes.
Strictly Necessary Cookies
These may be required for functions such as:
- Shopping cart
- Checkout
- Login
- Account security
- Session management
- Cookie-consent preferences
- Website security
Where storing or accessing information on your device is strictly necessary to provide a digital service expressly requested by you, consent may not be required under applicable German law.
Preference Cookies
Preference technologies may remember choices such as language, display settings or other optional Website preferences.
Where consent is legally required, these technologies are activated only after consent.
Analytics Cookies
Analytics technologies can help us understand:
- How visitors use the Website
- Which pages are viewed
- Website performance
- Navigation patterns
- Technical issues
Where required, analytics technologies are activated only after consent.
Marketing & Advertising Technologies
Advertising or marketing technologies may be used to measure advertising performance or understand interactions with campaigns.
Where such technologies require consent, they are not activated before the appropriate consent is obtained.
You can manage your choices through our cookie-consent mechanism.
You can also configure your browser to restrict or delete cookies, although blocking strictly necessary cookies may prevent parts of the Website from functioning correctly.
7.Analytics, Marketing & Security Services
Depending on the services currently enabled on the Website and your consent choices, TheElegant.Store may use third-party tools for analytics, marketing, anti-spam or Website security.
These can include services such as:
Google Analytics
Where enabled and where required consent has been obtained, Google Analytics may be used to understand Website usage and performance.
Information processed may include technical and usage information such as device information, browser information, page interactions and online identifiers.
Meta Pixel
Where enabled and where required consent has been obtained, Meta technologies may be used to measure advertising activity and campaign performance.
Marketing technologies should remain disabled where the required consent has not been provided.
reCAPTCHA or Similar Anti-Abuse Technology
Security or anti-spam technology may be used to protect Website forms and services from automated abuse, spam or malicious activity.
The data processed and applicable legal basis depend on the specific technical configuration.
Details of active cookies and services should be available through the Website’s cookie-consent interface where applicable.
8.Email & Newsletter Services
TheElegant.Store may use an email or newsletter service such as MailPoet to manage subscribers and marketing communications.
Where you subscribe voluntarily, relevant information may be processed to:
- Store your subscription
- Send requested newsletters
- Manage preferences
- Record consent
- Process unsubscribe requests
You may unsubscribe at any time using the unsubscribe option provided in marketing emails or by contacting us.
We may retain limited suppression information where necessary to ensure that an unsubscribe request continues to be respected.
9.Payment Providers
Payments may be handled by third-party payment providers such as PayPal.
When you choose a third-party payment method, relevant information may be transferred to that provider to:
- Process payment
- Confirm payment
- Prevent fraud
- Process refunds
- Meet legal and regulatory requirements
A payment provider may process certain information as an independent controller under its own privacy policy.
Please review the privacy information provided by your selected payment provider.
10.Production, Personalization & Fulfilment Partners
Many TheElegant.Store physical products are made or prepared on demand.
To fulfil an order, we may provide production or fulfilment partners with the information reasonably necessary to create and deliver the product.
Depending on the order, this may include:
- Recipient name
- Shipping address
- Product ordered
- Product variant
- Personalization text
- Uploaded image or design
- Order or fulfilment identifier
Partners receive only the information needed for their role in processing the order.
Where a personalized product requires an uploaded image or other custom file, that file may need to be shared with the relevant production partner.
11.Shipping & Delivery Providers
Where a physical order requires delivery, relevant information may be provided to shipping carriers or logistics providers.
This may include:
- Recipient name
- Delivery address
- Telephone number where required for delivery
- Email address where required for delivery notifications
- Shipment information
- Tracking information
This processing is necessary to fulfil the purchase and deliver the order.
12.Hosting, Ecommerce & Technical Providers
TheElegant.Store uses technical service providers to operate the online store.
These can include providers responsible for:
- Website hosting
- WordPress/WooCommerce functionality
- Database infrastructure
- Backups
- Email delivery
- Website security
- Performance
- Technical support
Such providers may process limited personal data where necessary to provide their services.
13.Other Recipients of Personal Data
Where necessary and lawful, personal data may also be disclosed to:
- Accountants
- Tax advisers
- Legal advisers
- Banks and payment institutions
- Insurers
- Fraud-prevention or security providers
- Courts
- Government authorities
- Tax authorities
- Law-enforcement bodies
- Other recipients where disclosure is required by law
We do not disclose personal data merely because a third party requests it. A valid legal basis must exist.
14.International Data Transfers
Some service providers may process personal data outside Germany or outside the European Economic Area.
Where personal data is transferred to a country outside the EEA, we use or rely on an appropriate transfer mechanism where required by law.
Depending on the recipient and destination, this may include:
- An adequacy decision adopted by the European Commission
- Standard Contractual Clauses
- Other safeguards permitted under applicable data-protection law
Where legally required, additional protective measures may also be used.
You may contact us if you would like further information about safeguards relevant to your personal data.
15.How Long We Keep Personal Data
We do not intend to retain personal data longer than necessary for the purpose for which it was collected, subject to applicable legal obligations.
Orders, Invoices & Accounting Records
Order and transaction information may need to be retained for periods required by German tax and commercial law.
Different records can be subject to different statutory retention periods.
Customer Accounts
Account information is generally retained while the account remains active or until deletion is requested, except where specific information must be retained because of an order, legal obligation, dispute or other lawful reason.
Personalization Files
Personalization data and uploaded files are retained for as long as reasonably necessary to:
- Produce the requested product
- Manage fulfilment
- Resolve an order problem
- Handle returns, refunds or legal claims
Files should then be deleted or anonymized when they are no longer required, unless a longer retention period is legally necessary.
Customer Support
Customer-service communications are retained for the period reasonably needed to resolve the enquiry and, where necessary, to document transactions or protect legal rights.
Marketing Data
Marketing subscription information is generally retained until you unsubscribe or withdraw consent.
Limited information may be retained afterward where needed to document that an opt-out must continue to be respected.
Technical & Security Data
Technical logs and security information are retained only for the period reasonably required for operation, troubleshooting, security, fraud prevention or legal purposes.
Cookie & Consent Information
Cookie and consent records are retained according to the applicable consent configuration and the need to document or respect your privacy choices.
16.Data Required to Complete a Purchase
Certain personal data is necessary if you want to enter into a purchase contract with TheElegant.Store.
For example, we generally need information such as:
- Name
- Billing information
- Delivery address for physical products
- Email address
- Payment-related transaction information
- Product selections
- Required personalization details
If required information is not provided, we may be unable to process or fulfil the order.
Optional marketing information is not required in order to make a purchase.
17.Your GDPR Data Protection Rights
Where the GDPR applies, you may have the following rights, subject to the legal requirements and exceptions applicable to each right.
Right of Access
You may request information about whether we process personal data concerning you and obtain access to applicable personal data.
Right to Rectification
You may request correction of inaccurate personal data and completion of incomplete information.
Right to Erasure
You may request deletion of personal data where the legal conditions for erasure are met.
This right is not absolute. For example, certain information may need to be retained because of legal obligations.
Right to Restriction of Processing
In certain circumstances, you may request that processing of your personal data be restricted.
Right to Data Portability
Where the legal requirements are satisfied, you may receive certain personal data you provided to us in a structured, commonly used and machine-readable format and may have the right to transmit it to another controller.
Right to Object
Where processing is based on legitimate interests, you may have the right to object on grounds relating to your particular situation.
Right to Object to Direct Marketing
You may object to processing of your personal data for direct marketing purposes at any time.
When you object to direct marketing, we will stop using the relevant personal data for that purpose.
Right to Withdraw Consent
Where processing is based on your consent, you may withdraw that consent at any time.
Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
18.How to Exercise Your Privacy Rights
To make a privacy request, contact:
Email: info@theelegant.store
Please explain which right you wish to exercise and provide sufficient information for us to identify the relevant data.
We may request additional information where reasonably necessary to confirm your identity and protect personal information from unauthorized disclosure.
We will respond within the timeframe required by applicable data-protection law.
19.Right to Lodge a Complaint
If you believe that the processing of your personal data violates applicable data-protection law, you have the right to lodge a complaint with a competent supervisory authority.
For a private-sector business established in Bavaria, the relevant supervisory authority is generally:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany
The BayLDA provides an online service for submitting data-protection complaints.
You may also have the right to contact another competent supervisory authority, particularly in the EU Member State of your habitual residence, place of work or place of the alleged infringement.
20.Automated Decision-Making & Profiling
TheElegant.Store does not currently intend to make decisions about customers based solely on automated processing that produce legal effects or similarly significant effects within the meaning of Article 22 GDPR.
Analytics and advertising technologies may create or use audience or behavioural information where enabled and consented to, but this is separate from solely automated decision-making that produces significant legal effects.
If our use of automated decision-making changes materially, this Privacy Policy will be updated as required.
21.Children’s Personal Data
TheElegant.Store sells products that may be purchased for children, including personalized gifts.
Where an adult customer provides a child’s name or other information for a personalized product, the customer should ensure that they are legally entitled to provide that information for the requested purpose.
Please do not provide unnecessary personal information about children.
If you believe personal data relating to a child has been provided to us improperly, contact info@theelegant.store.
22.Data Security
We use reasonable technical and organizational measures designed to protect personal data against:
- Unauthorized access
- Unauthorized disclosure
- Alteration
- Accidental loss
- Destruction
- Misuse
Measures may include encrypted connections, access restrictions, security controls, backups and reputable service providers.
However, no online system can guarantee absolute security.
23.Data Breaches
If a personal-data breach occurs, we will assess the incident and take the measures required.
24.Third-Party Links
The Website may contain links to external websites, social-media platforms or third-party services.
Once you leave TheElegant.Store, the processing of personal data by the third party is governed by that party’s own privacy policy and practices.
We encourage you to review the privacy information of third-party services before providing personal data to them.
25.Visitors Outside the European Economic Area
TheElegant.Store is operated from Germany and may serve customers in selected international destinations.
Depending on where you live, additional privacy rights under local law may apply.
Where another applicable privacy law gives you mandatory rights beyond those described in this Privacy Policy, those rights remain unaffected.
26.Changes to This Privacy Policy
We may update this Privacy Policy when necessary because of:
- Changes to our Website
- New products or services
- Changes to payment, fulfilment or technical providers
- Changes to cookies or analytics technologies
- Legal or regulatory developments
- Changes to our processing activities
The updated version will be published on this page with a revised “Last updated” date.
Where legally required, we will provide additional notice or request new consent before using personal data for a materially different purpose.
Publishing a revised Privacy Policy does not itself constitute consent to processing that legally requires consent.
27. Contact Us About Privacy
If you have a question about this Privacy Policy, the way your personal data is handled, or your data-protection rights, contact:
TheElegant.Store
Operated by: Hafiz Saqib Javed
Pöllatstr. 6
81539 München
Germany
Email: info@theelegant.store
Phone: +49 162 2680771
You may also review our:
Our goal is to handle personal information transparently and only for clear and legitimate purposes connected with operating TheElegant.Store and providing our products and services.
