Privacy policy

1. Introduction

This Privacy Policy explains how gerri living collects, uses, shares, and protects the personal data of visitors and customers who use this website. We are committed to handling your information responsibly and transparently, and this policy describes the categories of data we collect, why we collect them, who we may share them with, and the rights available to you regarding your personal data. Please read this policy carefully. By using our website, you acknowledge the practices described below.

2. Controller

The controller responsible for personal data processed on this website is:
gerri living
79381 Wilson Neck Road
32097 Yulee, United States
Email: contact@gerri-6839.shop
Phone: +1330572-0270

If you have any questions about this Privacy Policy or about how your personal data is handled, please contact us using the details above.

3. Data We Collect

We collect personal data in the following situations, each tied to a specific purpose and legal basis.

3.1 When You Visit the Site

Whenever you browse our website, our server temporarily and automatically logs certain technical information generated by your device and browser. This includes your IP address, the date and time of access, the URL requested, the referring page, and details about your browser and operating system. We process this information to ensure the security, stability, and proper functioning of our website, and to diagnose technical issues. The legal basis for this processing is our legitimate interest under GDPR Art. 6(1)(f).

3.2 When You Place an Order

When you make a purchase, we collect the information necessary to process, fulfill, and deliver your order. This includes your name, billing and shipping address, email address, phone number (optional), and payment details. This data is essential for us to enter into and perform the contract of sale with you, and is processed on the legal basis of GDPR Art. 6(1)(b).

3.3 When You Contact Us

If you reach out to us — for example, with a question about a product or an order — we store the content of your message along with the contact details you provide, so that we can respond to your inquiry and keep a record of our correspondence. This processing relies on GDPR Art. 6(1)(b), where your inquiry relates to an existing or prospective order, and Art. 6(1)(f), our legitimate interest in providing effective customer service.

4. Sharing of Data

We do not sell your personal data. We only share personal data with third parties in the following circumstances:

  • you have given your explicit consent to the sharing;
  • sharing is necessary to fulfill a contract with you, for example passing your shipping details to a carrier so your order can be delivered, or your payment details to a payment provider so your purchase can be processed;
  • a legal obligation requires us to disclose the data, for example to comply with a court order or a request from a competent authority; or
  • we have a legitimate interest in sharing the data under GDPR Art. 6(1)(f), and this interest is not overridden by your own rights and freedoms.

Any third party that receives personal data from us is only permitted to use it for the specific purpose for which it was shared.

5. Cookies

Our website uses cookies, which are small text files stored on your device to enable certain functionality. We distinguish between two categories:

  • Necessary cookies: required for the core functioning of the website, such as maintaining your shopping cart and enabling secure checkout. These cookies are set automatically and do not require your consent.
  • Optional cookies: used for purposes such as analytics or marketing. These are only activated after you have given your consent through our cookie banner, and you may withdraw that consent at any time.

6. Services We Use

To operate our store, we rely on the following third-party services, each of which processes personal data under its own privacy policy:

  • Hosting: this website is hosted on the Shopify platform, provided by Shopify Inc., 150 Elgin Street, Ottawa, ON, K2P 1L4, Canada.
  • Payments: payment transactions are processed by our configured payment providers. Depending on the payment method you select at checkout, your payment details are transmitted directly and securely to the relevant provider.

We encourage you to review the privacy policies of these providers to understand how they handle your personal data.

7. Your Rights

Subject to applicable law, you have the following rights regarding your personal data:

  • Right of access — request confirmation of whether we process your personal data, and access to that data (GDPR Art. 15);
  • Right to rectification — request correction of inaccurate or incomplete personal data (Art. 16);
  • Right to erasure — request deletion of your personal data, subject to applicable legal retention obligations (Art. 17);
  • Right to restriction of processing — request that we limit how we use your data in certain circumstances (Art. 18);
  • Right to data portability — receive the personal data you have provided to us in a structured, commonly used, machine-readable format (Art. 20);
  • Right to withdraw consent — withdraw any consent you have given at any time, without affecting the lawfulness of processing carried out before the withdrawal (Art. 7(3));
  • Right to lodge a complaint — file a complaint with a supervisory authority if you believe your data protection rights have been violated (Art. 77).

To exercise any of these rights, please contact us at contact@gerri-6839.shop. We will respond to your request in accordance with applicable law.

8. Right to Object

Where we process your personal data on the basis of legitimate interest, you have the right to object to that processing at any time under GDPR Art. 21, on grounds relating to your particular situation. If you object, we will stop processing your personal data for those purposes unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or unless the processing is necessary for the establishment, exercise, or defense of legal claims.

To exercise your right to object, please contact us at contact@gerri-6839.shop.

9. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, including to satisfy any applicable legal, accounting, or reporting requirements. Once the relevant retention period expires, your data is securely deleted or anonymized.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. The version published on this page is always the current, applicable version. We encourage you to review this policy periodically to stay informed about how we protect your personal data.