Privacy, with clarity

Healthy Soul Awareness – Hind Ibrahim Aloufi
Wallensteinstraße 27, 80807 Munich, Germany
Email: team@healthysawarness.com
VAT ID: DE457277468

No data protection officer has been appointed because the legal requirements for mandatory appointment do not currently apply.

Depending on how you use the store, we may process:

• Account and contact data: name, email address, telephone number and account details.
• Order and delivery data: products, billing and shipping addresses, order history, fulfilment status and correspondence.
• Payment data: payment method, transaction status and identifiers. Full card details are handled by the selected payment provider and are not stored by us.
• Device and usage data: IP address, browser, device, timestamps, security logs and cookie or consent preferences.
• Communication data: information you send through forms, email, WhatsApp or customer support.

• Orders, payment, delivery and customer service: performance of a contract or steps requested before a contract, Article 6(1)(b) GDPR.
• Accounting, tax and other mandatory records: compliance with legal obligations, Article 6(1)(c) GDPR.
• Website security, fraud prevention and service improvement: our legitimate interests in operating a secure and reliable store, Article 6(1)(f) GDPR.
• Optional analytics, marketing cookies and newsletters: your consent, Article 6(1)(a) GDPR, where consent is required.
• Legal claims: our legitimate interest in establishing, exercising or defending claims.

You may withdraw consent at any time without affecting processing that occurred before withdrawal.

We share only the data necessary to process an order with providers involved in checkout, payment, production, delivery and support. Made-to-order products may be fulfilled by Printful or another disclosed production partner. Carriers receive the recipient details required for delivery. Payment providers process payment information under their own privacy notices.

Essential technologies are used to operate the store, shopping cart, checkout, security and consent settings. Optional analytics or marketing technologies are activated only where a valid legal basis exists, including consent when required.

You can accept, deny or change optional cookie choices through the consent settings available on the website. More detail is provided in our Cookie Policy.

When you contact us, we process your details and message to answer the request, support an order or take steps before a contract. Please do not send passwords, verification codes, complete payment-card data or other unnecessary sensitive information.

If you contact us through an external service such as WhatsApp or a social network, that provider also processes information under its own terms and privacy notice.

Personal data may be disclosed to carefully selected hosting, store-platform, payment, production, shipping, email, security, analytics, professional-adviser and public-authority recipients where necessary. Providers acting for us receive only the data required for their task and are bound by applicable data-protection duties.

We do not sell personal data.

Some service providers or their systems may be located outside the European Economic Area. Where this occurs, we use a lawful transfer mechanism where required, such as an adequacy decision, approved standard contractual clauses and supplementary safeguards. You may contact us for information about the relevant safeguards.

We keep personal data only for as long as it is needed for the stated purpose and any applicable legal obligation:

• Order, invoice and bookkeeping documents are retained for the statutory period applicable to the record; German booking documents are generally retained for eight years, while some commercial or tax records may require a different period.
• Customer-support and contract correspondence is kept while needed to resolve the matter and for applicable limitation periods.
• Consent records are kept as long as needed to demonstrate compliance.
• Security logs and technical data are kept for a limited period unless an incident requires longer preservation.

Data is deleted or anonymised when no longer required, unless continued storage is legally permitted or required.

Subject to the legal conditions, you may request access, correction, deletion, restriction, portability and information about recipients. You may object to processing based on legitimate interests and withdraw consent at any time.

You also have the right to lodge a complaint with a competent data-protection supervisory authority, including the authority responsible for your place of residence or the controller.

To exercise a right, email team@healthysawarness.com. We may request proportionate information to verify your identity before disclosing personal data.

Information marked as required during checkout is necessary to enter into and perform the purchase contract. Without it, we may be unable to accept payment, produce the goods, deliver the order or answer a related request. Optional information does not have to be provided.

We do not make decisions producing legal or similarly significant effects based solely on automated processing. Payment or security providers may conduct automated fraud and risk checks under their own responsibility and privacy information.

We use appropriate technical and organisational measures designed to protect personal data, including encrypted connections, access controls, updates, backups and security monitoring where appropriate. No online system can guarantee absolute security.

We may revise this notice when our services, providers or legal requirements change. The current version and review date will be displayed on this page.

For privacy questions or rights requests, contact team@healthysawarness.com.