Privacy policy
Privacy Policy
1. Controller
The controller responsible for data processing on this website is:
Email: habiify.work@gmail.com
2. General Information
We take the protection of your personal data seriously. We process your data exclusively in accordance with the EU General Data Protection Regulation (GDPR) and applicable national law. This policy explains what data we collect, why, and what rights you have.
3. Data We Collect
Server log files
When you visit our website, our hosting provider automatically collects and stores technical information your browser transmits: IP address, browser type and version, operating system, referring URL, and time of access. This data cannot be traced to a specific person and is not merged with other data sources. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure, stable operation).
Order and customer data
When you place an order, we collect your name, billing and shipping address, email address, phone number and order details. We process this data to fulfil the contract with you. Legal basis: Art. 6(1)(b) GDPR.
Payment data
Payments are processed by our payment providers. We do not store full credit card numbers on our servers. Your payment data is transmitted directly to the payment provider in encrypted form.
Contact by email
If you contact us, we store your message and contact details to process your enquiry. Legal basis: Art. 6(1)(b) or (f) GDPR.
4. Cookies
Our website uses cookies — small text files stored on your device. Technically necessary cookies are required for the shop and checkout to function (Art. 6(1)(f) GDPR). All other cookies, particularly for analytics and marketing, are only set with your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time via the cookie settings on our website, and delete cookies through your browser settings.
5. Recipients and Processors
We share your data only where necessary:
Shopify — shop hosting and order processing
Payment providers — payment handling
Shipping and fulfilment partners — delivery of your order
Email service providers — order confirmations and, where you have consented, newsletters
Meta Platforms and TikTok — advertising and conversion measurement, only with your consent
All processors are bound by data processing agreements under Art. 28 GDPR.
6. Transfers Outside the EU
Some of our service providers are based outside the European Economic Area, including in the United States. Transfers take place on the basis of EU Standard Contractual Clauses or an adequacy decision by the European Commission. Despite these safeguards, we cannot guarantee a level of protection identical to that within the EU.
7. Marketing and Analytics Tools
Where you have consented, we use tracking technologies from Meta (Facebook Pixel), TikTok and similar providers to measure the performance of our advertising and show you relevant ads. These tools may transmit a pseudonymised identifier, the pages you visited and actions you took. Legal basis: Art. 6(1)(a) GDPR. You may withdraw consent at any time with effect for the future.
8. Newsletter
If you subscribe to our newsletter, we use your email address to send product information and offers. Subscription uses a double opt-in procedure. You can unsubscribe at any time via the link in every email or by writing to habiify.work@gmail.com. Legal basis: Art. 6(1)(a) GDPR.
9. Retention
We delete your personal data as soon as the purpose for processing no longer applies, unless statutory retention obligations require otherwise. Commercial and tax records are retained for the periods required by law.
10. Your Rights
Under the GDPR you have the right to:
Access the personal data we hold about you (Art. 15)
Have inaccurate data corrected (Art. 16)
Have your data erased (Art. 17)
Restrict processing (Art. 18)
Receive your data in a portable format (Art. 20)
Object to processing based on legitimate interest (Art. 21)
Withdraw consent at any time with effect for the future (Art. 7(3))
To exercise any of these rights, contact us at habiify.work@gmail.com.
11. Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority if you believe our processing of your data infringes the GDPR.
12. SSL Encryption
This site uses SSL/TLS encryption to protect the transmission of confidential content such as orders and enquiries. You can recognise an encrypted connection by the "https://" prefix and the lock icon in your browser.
13. Changes to This Policy
We may update this privacy policy to reflect changes in our services or legal requirements. The current version always applies.
Last updated: 17.09.2026