Foldanddrain is the data controller responsible for personal data collected through www.foldanddrain.com.
Brand Name: Foldanddrain
Registered Business Name: [Company Name]
Business Address: [XXX]
Email: supplier@foldanddrain.com
Telephone: [XXX]
This Privacy Policy explains how personal data is collected, used, stored and disclosed when you visit our website, place an order or contact us.
2. Personal Data We Collect
Depending on how you use our website, we may collect the following information:
- Contact details: name, email address, telephone number and billing or delivery address.
- Order information: products purchased, order reference, transaction status and order history.
- Payment information: payment status, transaction references and relevant payment details made available to us by our payment service provider.
- Communications: information contained in enquiries, messages and customer service correspondence.
- Website information: IP address, browser type, device information, access records and cookie preferences, where applicable.
We collect information that is relevant to processing orders, responding to enquiries, maintaining business records and operating our website.
3. How We Use Personal Data
We process personal data for the following purposes:
- To receive, process and fulfil orders.
- To arrange payment processing and maintain transaction records.
- To communicate with customers regarding purchases and enquiries.
- To manage returns, refunds and order-related requests.
- To maintain website functionality and understand website usage.
- To detect potentially fraudulent transactions and address misuse.
- To meet applicable accounting, tax and other legal obligations.
- To establish, exercise or defend legal claims where necessary.
Under the General Data Protection Regulation (GDPR), the legal basis for processing may include contractual necessity, compliance with legal obligations, legitimate interests or consent, depending on the specific purpose. Where consent is required, it may be withdrawn at any time.
4. Payment Processing by Stripe
We use Stripe to process payments for purchases made through our website. When you proceed to payment, relevant personal and transaction information may be shared with Stripe, including your name, contact details, billing information, order amount, transaction reference and payment-related information required to process the transaction.
Stripe processes payment information to facilitate transactions and may process certain personal data in its own capacity as a data controller for purposes such as fraud prevention, regulatory compliance and the operation of its services. Its role depends on the particular processing activity.
We do not use this Privacy Policy to claim that Stripe acts exclusively as a processor or exclusively as a controller. Stripe’s handling of personal data is also governed by its own privacy documentation.
For further information, please consult the Stripe Privacy Centre at https://stripe.com/privacy.
5. Disclosure of Personal Data
We may disclose relevant personal data to the following categories of recipients where necessary:
- Stripe: for payment processing and related transaction services.
- Delivery and fulfilment providers: for preparing, dispatching and delivering orders.
- Website hosting and service providers: for website operation, maintenance and customer communications.
- Professional advisers and public authorities: where disclosure is necessary to comply with applicable law or address legal claims.
We disclose only information relevant to the applicable purpose. Where required, appropriate contractual and legal arrangements govern the handling of personal data by service providers.
We do not sell personal information in exchange for money. Where applicable privacy laws treat certain disclosures or advertising activities as a sale or sharing of personal information, relevant rights and choices will be respected.
6. Data Retention
We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, subject to applicable legal retention requirements.
Our general retention approach is as follows:
- Order and transaction records: retained for the period required by applicable accounting, tax and commercial record-keeping laws. Certain German tax and accounting records may need to be retained for up to 10 years, depending on the record type and applicable rules.
- Customer enquiries: retained for up to 3 years after the enquiry is closed, where appropriate, unless a longer period is necessary for a legal obligation or an ongoing claim.
- Website and technical logs: retained for the period reasonably necessary for operational, diagnostic and misuse-prevention purposes.
- Consent and cookie records: retained for the period necessary to document and manage the relevant preferences and demonstrate compliance.
- Payment records held by Stripe: retained in accordance with Stripe’s applicable policies, contractual arrangements and legal obligations.
When personal data is no longer required, it will be deleted or anonymised where appropriate, unless continued retention is required by law or necessary for the establishment, exercise or defence of legal claims.
7. Cookies and Similar Technologies
Our website may use cookies and similar technologies to support essential website functions, remember preferences and understand website usage.
Where consent is required, non-essential cookies will be activated only after you provide the relevant consent. You may manage your preferences through the website’s cookie settings and, where available, your browser settings.
Stripe may use cookies or similar technologies in connection with payment services, depending on the payment flow and configuration. Such technologies are subject to the applicable provider documentation and consent requirements.
Further information is available in our Cookie Policy.
8. International Data Transfers
Personal data may be processed in countries outside the European Economic Area where our service providers operate or provide their services.
Where personal data is transferred outside the EEA, we will apply an appropriate transfer mechanism where required by applicable data protection law, such as an adequacy decision or Standard Contractual Clauses, together with any additional measures required in the circumstances.
9. Data Protection Measures
We apply appropriate organisational and technical measures intended to protect personal data against unauthorised access, loss, alteration or disclosure.
Access to personal data is limited according to operational requirements. Where service providers handle personal data on our behalf, we seek appropriate contractual arrangements governing their processing activities.
10. Your Privacy Rights
Depending on your location and the applicable law, you may have the right to:
- Request access to personal data held about you.
- Request correction of inaccurate or incomplete information.
- Request deletion of personal data, subject to applicable legal exceptions.
- Request restriction of processing or object to certain processing activities.
- Request a copy of eligible personal data in a portable format.
- Withdraw consent where processing is based on consent.
- Opt out of the sale or sharing of personal information for cross-context behavioural advertising where applicable under US state privacy laws.
- Appeal a decision concerning a privacy request where the applicable law provides that right.
- Lodge a complaint with the competent data protection authority.
To exercise an applicable right, contact us at supplier@foldanddrain.com. We may request information reasonably necessary to verify your identity and locate the relevant records. We will handle requests in accordance with the deadlines and requirements of applicable law.
Exercising privacy rights will not result in unlawful discriminatory treatment.
11. Children’s Privacy
Our website is intended for a general shopping audience and is not directed at children who are below the applicable minimum age for online consent under relevant law. We do not knowingly collect children’s personal data in circumstances where parental consent or another lawful basis is required and absent. If you believe that a child has provided personal data inappropriately, please contact us so that the matter can be reviewed.
12. Third-Party Websites
Our website may contain links to external websites or services. Those websites operate under their own privacy policies and practices. We encourage you to review the applicable privacy information before providing personal data to an external service.
13. Changes to This Policy
We may update this Privacy Policy to reflect changes in our business operations, website functionality or applicable legal requirements. The revised version will be published on this page with an updated revision date.
14. Contact
For questions about this Privacy Policy or requests concerning personal data, please contact:
Data Controller: Foldanddrain
Email: supplier@foldanddrain.com
Registered Business Name: [Company Name]
Business Address: [XXX]
Telephone: [XXX]