Privacy policy

Last Updated: August 28, 2026

This Privacy Policy explains how Elowyn ("we", "us", "our") collects, uses, stores and safeguards your personal data when you browse, register or make purchases on www.elowyn.shop, fully compliant with the General Data Protection Regulation (GDPR) and German Federal Data Protection Act (BDSG).

By accessing our website, you consent to your personal information being processed in accordance with this policy.

Data Controller Details

Categories of Personal Data We Collect

Information you manually provide

• Full name, email address, telephone number
• Billing and delivery addresses
• Order history
• Messages sent to customer service

Automatically collected technical data

• IP address, device type, browser software
• Website browsing activity
• Cookies and advertising pixel data from Google Analytics and Google Ads

Transaction records

Purchased items and payment status (full card details are never stored by our system).

Legal Bases and Purposes for Data Processing

• Process, pack, deliver and track your orders (Performance of a Contract)
• Respond to customer service enquiries, returns, refunds and warranty requests (Legitimate Interest)
• Send critical order updates, policy amendments and service notifications (Legitimate Interest)
• Optimise website functionality, user journey and system performance (Legitimate Interest)
• Detect and prevent fraudulent orders and payment security risks (Legitimate Interest)
• Deliver targeted marketing advertising and measure campaign performance (Valid Consent)
• Comply with German tax, record-keeping and statutory legal obligations (Legal Obligation)

Third-Party Data Processors

We only share necessary personal data with contracted service providers required to fulfil your order and operate our business, including:

• Shopify e-commerce platform
• Authorised payment gateways
• German courier companies
• Anti-fraud tools
• Google Analytics
• Qualified accounting/legal advisors

We will never sell, lease or trade your personally identifiable information for commercial gain.

All third-party processors have signed legally binding data processing agreements required under GDPR.

Cookies and Tracking Pixels

Our website uses cookies, web beacons and conversion tracking pixels to preserve cart contents, maintain session logins, strengthen site security, analyse visitor behaviour and deliver remarketing advertisements.

You may disable non-essential cookies through your browser settings, although some core checkout functionality may be limited as a result.

Your Statutory GDPR Rights

• Right to access a copy of all data we hold about you
• Right to correct inaccurate or incomplete personal information
• Right to erasure (right to be forgotten) where legal grounds apply
• Right to restrict the processing of your data
• Right to data portability to receive your information in a machine-readable format
• Right to object to processing for direct marketing purposes at any time
• Right to withdraw previously granted consent without affecting prior lawful processing

To exercise any of these rights, submit a verified written request to hello@elowyn.shop with appropriate proof of identity.

Data Retention Period

We retain your personal data only for as long as necessary to complete your order, resolve ongoing disputes, prevent fraud and satisfy German statutory tax and accounting record retention requirements.

Business financial records will be archived in line with German official authority retention rules.

Data Security Safeguards

All payment transactions run on Shopify's secure PCI compliant infrastructure. While no online data transmission can be guaranteed completely risk-free, we deploy industry-standard encryption and access controls to minimise data breach vulnerabilities.

Protection for Minors

Our website is intended for users aged 18 years or older. We do not knowingly collect personal data from children under the age of 18.

If we become aware of unintentionally collected minor's data, please contact us for immediate secure deletion.

Policy Updates

We may revise this Privacy Policy periodically. The revised Last Updated date will be displayed at the top of the page.

Continued use of www.elowyn.shop after amendments constitute your acceptance of the updated terms.

Right to Lodge a Complaint

If you believe we have breached GDPR or German data protection law, you have the right to submit a formal complaint to the respective German state data protection authority.

Contact Email: hello@elowyn.shop

Enquiries responded within 24–48 business hours.