Template to complete and have validated. Replace the information in square brackets.
Last updated: [date].
Data controller
[Company name], [full address, country], [contact e-mail address].
[If applicable: representative in the European Union, representative in the United Kingdom, data protection officer.]
Data we collect
- Orders: name, addresses, e-mail, phone, products purchased.
- Payment: processed by Shopify and its providers. We do not see your full card number.
- Customer account: login details and order history.
- Newsletter: e-mail address.
- Browsing: cookies and technical data, according to your choices. See the Cookies page.
Fitdays app and measurements
Your measurements are stored in the Fitdays app, published by [Fitdays app publisher]. This app has its own privacy policy. [TO CHECK: confirm that Tracked has no access to the measurements stored in the app.]
Why we use your data
- To process and deliver your orders and handle returns: performance of the contract.
- To meet our accounting, tax and customs obligations: legal obligation.
- To send you the newsletter: your consent.
- To measure traffic and improve the website: your consent, where the law of your country requires it.
- To prevent fraud: legitimate interest.
Recipients
Shopify (hosting and payment), [carriers], [freight forwarders and customs services], [e-mailing tool], [other providers].
International transfers
Your data may be processed in countries other than your own, including Canada, the United States and the European Union, and in the delivery country for shipping and customs.
[TO COMPLETE: safeguards used, for example EU standard contractual clauses, the UK agreement, adequacy decisions.]
Retention periods
Order data: [period]. Customer account: [period]. Newsletter: until you unsubscribe. Cookies: [period].
Your rights
Depending on your country of residence, you can ask to access, correct, erase, restrict or port your data, and object to its processing. You can withdraw your consent at any time.
Write to [contact e-mail address]. We reply within the time limits set by the law of your country.
By region
European Union, Norway: General Data Protection Regulation (GDPR). You can contact the data protection authority of your country.
United Kingdom: UK GDPR. Authority: Information Commissioner's Office (ICO).
Switzerland: Federal Act on Data Protection (FADP). Authority: Federal Data Protection and Information Commissioner (FDPIC).
United States: if you live in a state with a privacy law, such as California, you have the right to know what data we hold, to have it deleted and to opt out of its sale or sharing. We do not sell your personal data. [TO CHECK: sharing for advertising purposes.]
Canada: Personal Information Protection and Electronic Documents Act (PIPEDA) and provincial laws.
Asia and other countries: we comply with local data protection laws, for example in Japan, South Korea, Singapore or China. [TO CHECK: specific obligations in the countries where you actually sell.]
Minors
The website is not aimed at children. [TO COMPLETE: minimum age by country.]