Privacy Policy of MEDBY Store

MEDBY Store operates this shop and website, including all associated information, content, functions, tools, products and services, in order to provide you as a customer with a selected shopping experience. These services are referred to below as the “Services”.

MEDBY Store is supported by Shopify. Shopify enables us to provide these Services to you.

This Privacy Policy explains how we collect, use and disclose your personal data when you visit our website, use our Services, make a purchase or another transaction, or otherwise communicate with us.

If there is any conflict between our Terms of Service and this Privacy Policy, this Privacy Policy shall apply with regard to the collection, processing and disclosure of personal data.

Please read this Privacy Policy carefully. By using our Services, you confirm that you have read and understood this Privacy Policy.

Personal Data We Collect or Process

“Personal data” means information that identifies you or another person, or that can reasonably be linked to you or another person.

This does not include data collected anonymously or data that has been anonymised in such a way that it can no longer be linked to a specific person.

Depending on how you use our Services, where you live and which legal requirements apply, we may collect or process the following data:

• Contact details such as your name, address, billing address, delivery address, telephone number and email address
• Payment and financial information such as credit card, debit card or bank account details, payment method, transaction details and payment confirmations
• Account information such as username, password, security settings, preferences and other settings
• Order and transaction information, including products viewed, shopping cart contents, wish lists, purchases, returns, exchanges and cancellations
• The content of your communications with us, for example when contacting customer support
• Device information such as device type, browser, network connection, IP address and other identifiers
• Usage information about how and when you use our website and Services

Sources of Personal Data

We may receive personal data from the following sources:

• Directly from you, for example when you place an order, register an account or contact us
• Automatically through your use of our website, including through cookies and similar technologies
• From service providers that process data on our behalf
• From business partners or other third parties

How We Use Personal Data

Depending on how you interact with us, we may use your personal data for the following purposes:

Providing and Improving Our Services

We use your data to:

• process orders and payments
• ship products
• process returns and exchanges
• manage your customer account
• save your settings and interests
• send you notifications about your order or account
• enable product reviews
• personalise your shopping experience
• recommend suitable products
• improve our Services

Marketing and Advertising

We may use your data to:

• send you advertising and marketing messages by email, SMS or post
• display personalised advertising on our website or on other platforms
• suggest products that match your previous purchases or interests

You may unsubscribe from marketing emails at any time.

Security and Fraud Prevention

We use personal data to:

• protect customer accounts
• process payments securely
• detect fraud or unlawful activity
• investigate security incidents
• protect our Services and our customers

You are responsible for keeping your login details secure and for not sharing them with other persons.

Communicating with You

We use your data to:

• answer your questions
• provide customer support
• process orders and enquiries
• maintain our business relationship with you

Legal Obligations

We may process personal data to:

• comply with legal obligations
• respond to requests from authorities or courts
• establish, exercise or defend legal claims
• investigate violations of our terms or policies

Disclosure of Personal Data

Under certain circumstances, we may disclose personal data to third parties where legally permitted.

This may include:

• Shopify
• payment service providers
• shipping and fulfilment service providers
• providers of IT, hosting, cloud storage and data analysis services
• customer service providers
• marketing and advertising partners
• affiliated companies
• authorities or courts where we are legally required to do so

Personal data may also be disclosed where you have expressly consented, for example when using social networks or certain login functions.

Data may also be transferred in connection with a sale of the business, merger, insolvency or restructuring.

Working with Shopify

Our Services are provided through Shopify.

Shopify processes personal data relating to your access to and use of our shop in order to provide and improve the Services.

Data may be transferred to Shopify and other service providers that may be located outside your country of residence.

Shopify may also combine data from your interaction with our shop with data from other merchants in order to provide enhanced functions, personalised advertising and technical improvements.

For certain processing activities, Shopify is independently responsible under data protection law.

Further information can be found in Shopify’s Privacy Policy.

Third-Party Websites and Links

Our website may contain links to external websites or platforms.

We are not responsible for:

• their privacy practices
• their security measures
• their content
• the accuracy or completeness of the information provided there

Please review the privacy policies of external websites before using them.

Children’s Data

Our Services are not intended for children.

We do not knowingly collect personal data from children who have not reached the legal minimum age.

Parents or legal guardians may contact us if they believe that a child has provided personal data to us. In such cases, they may request that the data be deleted.

To the best of our current knowledge, we do not sell or share the personal data of persons under the age of 16 within the meaning of applicable data protection laws.

Security and Retention Period

We take appropriate technical and organisational measures to protect personal data.

However, no security measure can guarantee complete protection.

Please do not send confidential information through insecure communication channels.

The length of time for which we retain personal data depends in particular on:

• whether a customer account exists
• whether the data is required for an order
• whether statutory retention obligations apply
• whether legal claims need to be resolved
• whether contractual obligations need to be fulfilled

Your Rights

Depending on your place of residence, you may have various data protection rights.

These may include:

Right of Access

You may request information about the personal data we have stored about you.

Right to Deletion

Under certain conditions, you may request the deletion of your data.

Right to Rectification

You may request the correction of inaccurate or incomplete data.

Right to Data Portability

Under certain conditions, you may request a copy of your data in a transferable format.

Right to Object

You may object to certain forms of processing of your personal data.

Right to Restriction of Processing

You may request that the processing of your data be restricted.

Withdrawal of Consent

If processing is based on your consent, you may withdraw that consent at any time with effect for the future.

The lawfulness of processing carried out before the withdrawal of consent remains unaffected.

Unsubscribing from Marketing Messages

You may unsubscribe from marketing emails at any time by using the unsubscribe link contained in the relevant message.

Even after unsubscribing, we may continue to send you necessary messages relating to orders, payments or your customer account.

We may ask you to provide proof of identity in order to process a request.

Under certain conditions, you may also authorise another person to exercise your rights on your behalf.

We will not discriminate against you because you exercise your data protection rights.

Complaints

If you have any questions or complaints regarding the processing of your personal data, please contact us using the contact details provided below.

You also have the right to lodge a complaint with the competent data protection supervisory authority.

International Data Transfers

Personal data may be stored or processed outside your country of residence.

For transfers outside the European Economic Area or the United Kingdom, we use recognised safeguards, for example:

• Standard Contractual Clauses of the European Commission
• corresponding contractual clauses issued by UK authorities
• adequacy decisions for countries with an recognised level of data protection

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, for example due to:

• changes to our business processes
• technical developments
• legal requirements
• regulatory requirements

The updated version will be published on this website. The date of the latest update will also be amended accordingly.

Contact

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, you can contact us at:

Telephone: +49 1515 6010862
Email: mf5681976@gmail.com
Address: Allendestraße 21, 98574 Schmalkalden, Germany

For the purposes of applicable data protection laws, we are the controller responsible for processing your personal data.