Privacy policy
PRIVACY POLICY
IskahWraps operates this online store and website, including the related information, content, features, products, tools and services made available to you (the “Services”).
Our store is powered by Shopify, which provides the e-commerce platform that enables us to offer our products and Services.
This Privacy Policy explains how we collect, use, store and disclose your personal information when you visit our website, browse our products, make a purchase, contact us, subscribe to marketing communications or otherwise interact with us.
Please read this Privacy Policy carefully.
1. CONTROLLER AND CONTACT DETAILS
The controller responsible for the processing of personal information described in this Privacy Policy is:
IskahWraps
Owner: Sulekha Mohamud
Hindenburgstr. 33
85057 Ingolstadt
Germany
Email: iskahwraps@gmail.com
Phone: +49 1773 379324
For the purposes of applicable data protection law, Sulekha Mohamud, trading as IskahWraps, is the data controller.
2. PERSONAL INFORMATION WE COLLECT
“Personal information” means information that identifies you or can reasonably be connected to you.
Depending on how you interact with our store, we may collect or process the following information:
CONTACT INFORMATION
This may include:
• Your name
• Email address
• Telephone number
• Billing address
• Shipping address
PAYMENT AND TRANSACTION INFORMATION
This may include:
• Payment method
• Payment confirmation
• Transaction details
• Order value
• Billing information
• Information required by our payment providers to complete your transaction
Payment card information is generally processed securely by Shopify Payments or the relevant payment provider and is not stored directly by IskahWraps.
ORDER AND SHOPPING INFORMATION
This may include:
• Products you view
• Products added to your cart
• Products you purchase
• Returns or exchanges
• Cancelled orders
• Previous transactions
COMMUNICATIONS WITH US
When you contact us, we may process information contained in your message, including:
• Your name
• Email address
• Order number
• Reason for contacting us
• Any information you voluntarily provide
DEVICE AND USAGE INFORMATION
When you use our website, certain technical information may be collected automatically, including:
• IP address
• Browser type
• Device type
• Operating system
• Network information
• Pages viewed
• Time and date of visits
• How you navigate or interact with our website
• Cookie and consent information
3. HOW WE COLLECT PERSONAL INFORMATION
We may collect personal information in the following ways:
DIRECTLY FROM YOU
For example, when you:
• Place an order
• Enter your billing or shipping details
• Contact us
• Request a return or exchange
• Subscribe to our email list
• Otherwise provide information to us
AUTOMATICALLY
Certain information may be collected automatically when you visit or use our website through cookies and similar technologies.
FROM SERVICE PROVIDERS
We may receive information from companies that provide services to us, including:
• Shopify
• Payment providers
• Shipping providers
• Analytics providers, where used
• Marketing providers, where used
FROM OTHER THIRD PARTIES
Where permitted by law, we may receive limited information from third parties that help us operate, secure, analyse or market our store.
4. PURPOSES AND LEGAL BASES FOR PROCESSING
We process personal information only where we have an appropriate legal basis under applicable data protection law.
Depending on the circumstances, the following legal bases may apply:
PERFORMANCE OF A CONTRACT – ARTICLE 6(1)(b) GDPR
We process personal information where necessary to enter into or perform a contract with you.
This includes processing necessary to:
• Process and confirm your order
• Process payments
• Prepare and dispatch products
• Deliver your order
• Communicate with you about your purchase
• Process returns, exchanges, cancellations and refunds
• Provide customer service relating to your order
LEGAL OBLIGATIONS – ARTICLE 6(1)(c) GDPR
We may process and retain personal information where necessary to comply with legal obligations applicable to our business.
This may include:
• Tax obligations
• Accounting and bookkeeping requirements
• Responding to legally valid requests from public authorities
• Other statutory record-keeping obligations
CONSENT – ARTICLE 6(1)(a) GDPR
Where required, we process personal information based on your consent.
This may include:
• Certain marketing communications
• Certain analytics technologies
• Advertising or marketing cookies
• Other non-essential cookies or technologies requiring consent
Where processing is based on consent, you may withdraw your consent at any time.
Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
LEGITIMATE INTERESTS – ARTICLE 6(1)(f) GDPR
Where permitted by law, we may process personal information where necessary for our legitimate interests or those of a third party, provided that your interests, fundamental rights and freedoms do not override those interests.
Our legitimate interests may include:
• Protecting our website and business
• Preventing and detecting fraud or abuse
• Maintaining the security of our Services
• Handling and defending legal claims
• Improving the reliability and operation of our store
Where you have a legal right to object to processing based on legitimate interests, you may exercise that right by contacting us.
5. HOW WE USE YOUR PERSONAL INFORMATION
We may use your personal information for the following purposes:
PROCESSING AND FULFILLING ORDERS
We use personal information to:
• Process your purchase
• Process your payment
• Confirm your order
• Prepare and dispatch your products
• Provide shipping information
• Process returns, exchanges, cancellations and refunds
• Communicate with you about your order
PROVIDING AND IMPROVING OUR SERVICES
We may use information to:
• Operate our online store
• Remember certain preferences
• Understand how customers use our website where permitted
• Improve our website and shopping experience
• Recommend relevant products where permitted
MARKETING AND PROMOTIONAL COMMUNICATIONS
Where permitted by law and, where required, with your consent, we may use your personal information to send:
• New collection announcements
• Product updates
• Special offers
• Promotional emails
• Other IskahWraps marketing communications
You may unsubscribe from promotional emails at any time by using the unsubscribe link included in the email.
SECURITY AND FRAUD PREVENTION
We may use personal information to:
• Provide a secure checkout experience
• Detect suspicious transactions
• Prevent fraud
• Investigate potentially illegal or malicious activity
• Protect our website, business and customers
CUSTOMER SERVICE AND COMMUNICATION
We use personal information to:
• Respond to questions
• Assist with orders
• Handle complaints
• Process returns and exchanges
• Provide customer support
LEGAL AND REGULATORY REQUIREMENTS
We may process personal information where necessary to:
• Comply with applicable law
• Meet tax and accounting obligations
• Respond to lawful requests from authorities
• Establish, exercise or defend legal claims
• Enforce our terms and policies
6. INFORMATION REQUIRED TO COMPLETE AN ORDER
Certain personal information is necessary for us to enter into and perform a purchase contract with you.
For example, we generally require information such as your name, billing or shipping address, order details and information necessary for payment.
If you do not provide information required to process your purchase, we may not be able to accept, process or deliver your order.
Other information may be optional. Where information is optional, you may choose whether to provide it unless otherwise stated.
7. HOW WE SHARE PERSONAL INFORMATION
We only share personal information where necessary to operate our business, fulfil orders, comply with legal requirements or provide services requested by you.
We may share information with:
SHOPIFY
Our store is hosted and operated using Shopify.
Shopify may process certain personal information to provide services such as:
• Website hosting
• Checkout functionality
• Order processing
• Payment processing
• Fraud prevention
• Analytics
• Store functionality
PAYMENT PROVIDERS
Payment information may be shared with the payment provider selected during checkout for the purpose of completing the transaction and preventing fraud.
SHIPPING AND FULFILMENT PROVIDERS
We may provide shipping and fulfilment providers with information necessary to deliver your order, such as:
• Your name
• Shipping address
• Contact information where necessary
• Delivery details
SERVICE PROVIDERS
We may use third parties that assist us with services such as:
• IT and website services
• Data storage
• Analytics, where used
• Customer support
• Email marketing
• Shipping and fulfilment
• Fraud prevention
These providers may process personal information only as permitted and necessary for the relevant services and applicable legal arrangements.
MARKETING AND ADVERTISING PARTNERS
Where permitted by applicable law and, where necessary, based on your consent, we may use marketing and advertising providers to measure campaigns or display relevant advertising.
You may be able to manage certain privacy and advertising preferences through the privacy settings available on our website.
LEGAL REQUIREMENTS
We may disclose information where reasonably necessary to:
• Comply with applicable law
• Respond to lawful government or court requests
• Protect our legal rights
• Prevent fraud or abuse
• Protect the safety of our customers or others
8. RELATIONSHIP WITH SHOPIFY
Our Services are hosted by Shopify.
Shopify collects and processes certain information regarding your access to and use of our store to provide and improve its services.
Information submitted through our website may be transmitted to Shopify and certain authorised service providers that may operate in countries outside your country of residence.
Shopify may also process information independently for certain services and features.
For more information about Shopify's privacy practices, please refer to Shopify's applicable privacy information and privacy controls.
9. COOKIES AND SIMILAR TECHNOLOGIES
Our website uses cookies and similar technologies.
Cookies may be used to:
• Keep the website functioning properly
• Remember certain preferences
• Operate the shopping cart and checkout
• Improve website security
• Understand website usage
• Measure performance
• Support marketing and advertising where permitted
Some cookies are necessary for the operation of the website.
Other cookies, particularly analytics or marketing cookies, may require your consent.
Where consent is legally required, these cookies will not be activated until you provide consent through our cookie banner or privacy settings.
You may change or withdraw your cookie preferences at any time through the cookie settings available on our website.
10. MARKETING EMAILS
If you subscribe to our email list, we may send you information about:
• New collections
• Product launches
• Special promotions
• Exclusive offers
• IskahWraps news
Where required by law, marketing emails are sent only with the necessary consent or other applicable legal basis.
You can unsubscribe at any time by clicking the unsubscribe link contained in our marketing emails.
Even if you unsubscribe from marketing communications, we may still send essential communications relating to orders, transactions or customer service.
11. THIRD-PARTY WEBSITES AND SOCIAL MEDIA LINKS
Our website may contain links to third-party websites or social media platforms, such as Instagram or TikTok.
If you follow one of these links, you leave our website.
The relevant third party is responsible for its own privacy practices and services.
We recommend reviewing the privacy information of the relevant third-party service before providing personal information.
12. CHILDREN'S PRIVACY
Our website and products are not specifically intended for children.
We do not knowingly collect personal information from children where doing so would be unlawful.
If you are a parent or legal guardian and believe that a child has provided personal information to us improperly, please contact us so that we can review the matter and, where appropriate, delete the information.
13. SECURITY OF YOUR INFORMATION
We take reasonable technical and organisational measures to protect personal information against:
• Unauthorised access
• Loss
• Misuse
• Alteration
• Unauthorised disclosure
However, no method of internet transmission or electronic storage can guarantee complete security.
We recommend that you do not send highly sensitive or confidential information through unsecured communication channels.
14. HOW LONG WE KEEP PERSONAL INFORMATION
We retain personal information only for as long as necessary for the purpose for which it was collected or where retention is required or permitted by applicable law.
The applicable retention period depends on the type of information and purpose of processing.
When determining how long information must be retained, we may consider:
• The time necessary to process and complete an order
• Returns, refunds, cancellations and disputes
• Customer-service requirements
• Applicable accounting, commercial and tax retention obligations
• Fraud prevention and security requirements
• Limitation periods for potential legal claims
• The establishment, exercise or defence of legal claims
• Other applicable statutory obligations
Where statutory retention obligations apply, relevant information may be retained for the legally required period even after our contractual relationship with you has ended.
When personal information is no longer required and there is no legal basis for continued retention, it will be deleted or anonymised where appropriate.
15. YOUR PRIVACY RIGHTS
Depending on applicable law, you may have the following rights regarding your personal information:
RIGHT OF ACCESS
You may request information about personal data we process about you and, where applicable, receive a copy of that data.
RIGHT TO RECTIFICATION
You may request that inaccurate personal information be corrected and incomplete information completed.
RIGHT TO ERASURE
You may request deletion of your personal information where the applicable legal requirements are met.
RIGHT TO RESTRICT PROCESSING
You may request restriction of processing in certain circumstances.
RIGHT TO DATA PORTABILITY
Where applicable, you may request certain personal information in a structured, commonly used and machine-readable format and may have the right to transmit that information to another controller.
RIGHT TO OBJECT
You may have the right to object to processing based on legitimate interests.
You also have the right to object to the processing of your personal information for direct marketing purposes.
RIGHT TO WITHDRAW CONSENT
Where processing is based on your consent, you may withdraw your consent at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
To exercise your rights, please contact us at:
iskahwraps@gmail.com
16. AUTOMATED DECISION-MAKING AND FRAUD PREVENTION
Shopify, payment providers or other service providers involved in processing transactions may use automated systems to detect potentially fraudulent, suspicious or unauthorised transactions.
Where automated decision-making, including profiling, is carried out in circumstances covered by Article 22 GDPR, the information and rights required by applicable data protection law will apply.
For further information regarding automated processing carried out independently by Shopify or a payment provider, please refer to the privacy information provided by the relevant service provider.
You may contact us at iskahwraps@gmail.com if you have questions about how your personal information is processed in connection with an order.
17. ADVERTISING AND DATA-SHARING PREFERENCES
Depending on where you live, you may have the right to object to certain forms of targeted advertising or processing of personal information for advertising purposes.
Where applicable, you can exercise available preferences through the privacy controls provided on our website.
Shopify may also provide privacy controls through its own services.
18. COMPLAINTS AND SUPERVISORY AUTHORITY
If you have concerns about how we process your personal information, please contact us first at:
iskahwraps@gmail.com
You also have the right to lodge a complaint with a competent data protection supervisory authority.
For a private business established in Bavaria, the competent supervisory authority may be:
Bavarian State Office for Data Protection Supervision
(Bayerisches Landesamt für Datenschutzaufsicht – BayLDA)
Promenade 18
91522 Ansbach
Germany
19. INTERNATIONAL DATA TRANSFERS
Some of our service providers, including Shopify and its service providers, may process personal information outside Germany or the European Economic Area.
Where personal information is transferred to a country outside the European Economic Area, transfers will be handled in accordance with applicable data protection law.
Where required, appropriate safeguards may include:
• An applicable adequacy decision
• European Commission Standard Contractual Clauses
• Other legally recognised safeguards or transfer mechanisms
Further information about transfers carried out by individual service providers may be available in their respective privacy information.
20. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect:
• Changes to our business
• New services
• Changes to the technologies we use
• Changes to our service providers
• Legal or regulatory requirements
When we update this Privacy Policy, we will update the “Last updated” date at the top of this page.
Where required by law, we will provide additional notice regarding material changes.
21. CONTACT
If you have questions about this Privacy Policy, how we process your personal information, or if you would like to exercise any of your privacy rights, please contact:
IskahWraps
Owner: Sulekha Mohamud
Hindenburgstr. 33
85057 Ingolstadt
Germany
Email: iskahwraps@gmail.com
Phone: +49 1773 379324
For the purposes of applicable data protection law, Sulekha Mohamud, trading as IskahWraps, is the data controller responsible for the processing of personal information described in this Privacy Policy.