We collect only what is necessary to fulfill orders, prevent fraud, and provide support (e.g., email, IP, device, payment metadata via Stripe). Lawful bases: contract, legitimate interests, and consent for marketing.
We minimize retention, secure data with encryption, and honor data-subject rights. Processors: Stripe and essential providers. Contact support for privacy requests.