Privacy policy

Shopdiax — Privacy Policy

Last updated: 24 October 2026

1. Introduction

Welcome to Shopdiax.

Shopdiax operates this website and online store, including its associated content, features, products and services (collectively, the "Services").

Our online store is powered by Shopify.

We respect your privacy and are committed to processing personal data lawfully, fairly and transparently in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR), the German Federal Data Protection Act (BDSG), and other applicable data protection legislation.

This Privacy Policy explains what personal information we collect, why we process it, the legal grounds for processing, the third parties involved, how long we retain information, and the rights available to you.

2. Data Controller and Contact Information

The controller responsible for the processing of personal data by Shopdiax is:

Vishaldeep Singh (trading as Shopdiax)
Legal Form: Sole Proprietorship (Einzelunternehmen)

Adalbert-Stifter-Weg 1
85570 Markt Schwaben
Germany

Email: info@shopdiax.com
Telephone: +49 176 71190254
Website: https://shopdiax.com

For privacy questions or requests relating to your personal data, please contact us using the information above.

Where Shopify or another service provider acts as an independent controller for specific processing activities, that provider may also be responsible for its own processing under its applicable privacy notice.

3. Personal Data We Collect

Depending on your interaction with Shopdiax, we may collect and process the following categories of personal data.

3.1 Identity and Contact Information

  • Full name.

  • Email address.

  • Telephone number.

  • Billing and shipping addresses.

  • Other contact information voluntarily provided.

3.2 Order and Transaction Information

  • Products ordered or returned.

  • Order numbers and transaction history.

  • Payment status and confirmation.

  • Billing and invoicing information.

  • Delivery and shipping details.

  • Refunds, cancellations and customer-service requests.

Payments are handled using the payment methods and providers available at checkout. Payment providers may independently process payment credentials according to their own privacy notices.

Shopdiax does not necessarily receive or store complete payment-card details.

3.3 Customer Account Information

Where customer accounts are available, we may process:

  • Account identifiers and contact details.

  • Order history.

  • Saved addresses.

  • Account preferences.

  • Authentication information handled by the relevant account service.

3.4 Technical and Usage Information

When you visit our website, certain information may be processed automatically, including:

  • IP address.

  • Browser type and version.

  • Device type and operating system.

  • Pages visited and interactions with the website.

  • Approximate location derived from technical information.

  • Cookies and similar identifiers.

  • Technical logs and security-related events.

3.5 Customer Communications

When you contact us by email, WhatsApp or another available support channel, we process the information you provide to answer your enquiry and manage customer-service matters.

3.6 Marketing and Preferences

Where applicable, we may process newsletter subscriptions, marketing preferences, consent records and information associated with advertising or website analytics.

4. Sources of Personal Data

We may obtain personal data:

  • Directly from you when you place an order, create an account, contact us or subscribe to communications.

  • Automatically from your device when you use our website.

  • From Shopify and service providers involved in processing transactions, shipping or customer support.

  • From advertising, analytics or other partners where lawful and relevant to the services used.

Where information is obtained from sources other than you, we provide the disclosures required by applicable law.

5. Purposes and Legal Bases for Processing

We process personal data only where an appropriate legal basis applies.

The principal legal bases under Article 6(1) GDPR are described below.

5.1 Order Processing and Contract Performance

Legal basis: Article 6(1)(b) GDPR — Performance of a contract or steps requested before entering into a contract.

We process personal data where necessary to:

  • Receive and manage orders.

  • Process payments.

  • Arrange shipment and delivery.

  • Provide order confirmations and updates.

  • Handle returns, cancellations and refunds.

  • Respond to enquiries directly related to purchases.

  • Administer customer accounts where necessary for their services.

5.2 Legal and Regulatory Obligations

Legal basis: Article 6(1)(c) GDPR — Compliance with legal obligations.

We may process or retain information where required for:

  • Taxation and accounting.

  • Invoicing and financial recordkeeping.

  • Statutory consumer rights and warranty obligations.

  • Compliance with legally binding requests from authorities.

  • Other applicable legal obligations.

5.3 Website Security and Fraud Prevention

Legal basis: Article 6(1)(f) GDPR — Legitimate interests, where applicable.

We may process necessary technical and transactional information to:

  • Protect the website against unauthorized access.

  • Detect and prevent fraudulent transactions.

  • Maintain website reliability.

  • Investigate security incidents.

  • Establish, exercise or defend legal claims.

Our legitimate interests include maintaining a secure and reliable online store, protecting customers and preventing misuse.

Where the processing requires access to or storage of information on a user's device, the applicable requirements of § 25 TDDDG also apply.

5.4 Customer Support and Communications

Legal basis: Article 6(1)(b) or 6(1)(f) GDPR, depending on the purpose.

We use the information you provide to respond to requests concerning products, orders, delivery, returns or general enquiries.

Our legitimate interest, where applicable, is providing effective customer service and responding to legitimate business communications.

5.5 Marketing Communications

Legal basis: Article 6(1)(a) GDPR — Consent, where required.

Where consent is required, we send promotional emails or other direct marketing only after obtaining the necessary permission.

Any legally permitted exceptions to consent requirements are applied only where their statutory conditions are fulfilled.

You can withdraw your marketing consent at any time, including through unsubscribe links in eligible marketing messages or by contacting us.

Withdrawal does not affect processing carried out lawfully before withdrawal.

5.6 Analytics and Advertising

Legal basis: Article 6(1)(a) GDPR — Consent, where required.

For non-essential analytics, advertising cookies, tracking pixels and comparable technologies requiring consent, data processing takes place only after valid consent has been obtained.

Some strictly necessary technical processing may rely on other applicable legal bases.

We do not treat acceptance of our Terms of Service or general use of the website as a substitute for legally required tracking consent.

6. Cookies and Similar Technologies

Shopdiax uses cookies and similar technologies to operate the online store and, where enabled, to measure performance or support advertising.

6.1 Strictly Necessary Technologies

Certain technologies are necessary for functions such as:

  • Shopping-cart operations.

  • Checkout and payment processing.

  • Authentication and security.

  • Maintaining selected privacy preferences.

  • Other functions strictly necessary to provide a service explicitly requested by the user.

These may be used without cookie consent where the statutory exemption under § 25(2) TDDDG applies.

Any related processing of personal data must still have a valid GDPR legal basis.

6.2 Analytics Technologies

Where enabled, analytics technologies may help us understand website traffic, visitor interactions and technical performance.

Where consent is legally required, these technologies must not be activated before the necessary consent has been obtained.

6.3 Advertising and Marketing Technologies

Shopdiax may use advertising or conversion measurement technologies supplied through its connected ecommerce integrations.

Depending on the services actually enabled, these may include technologies associated with:

  • Meta (Facebook and Instagram).

  • Google services.

  • TikTok.

  • Shopify advertising and analytics features.

These providers may process information such as device identifiers, website events, interactions with products and advertising conversion data.

The actual processing, recipients, purposes and applicable consent requirements depend on the services enabled and their technical configuration.

6.4 Consent Management

Where required, customers are offered appropriate privacy choices through the website's cookie consent system.

Customers may accept or reject non-essential technologies and manage their preferences through the available consent controls.

Consent may be withdrawn with effect for the future.

Rejecting optional cookies should not prevent customers from using the essential shopping functions of the website.

Customers may also manage certain cookies through their browser settings.

More information about relevant cookies and providers should be available through the website's cookie preferences interface, where provided.

7. Shopify and Ecommerce Service Providers

Shopdiax uses Shopify to host and operate its online store.

Shopify provides services relating to website hosting, ecommerce functionality, checkout, security, customer accounts and other store operations.

Personal data submitted through the website may be processed by Shopify and its authorized service providers.

In certain circumstances, Shopify may also process personal information as an independent controller, including for eligible enhanced platform features.

For further information, please consult:

Shopify Consumer Privacy Policy:
https://www.shopify.com/legal/privacy/app-users

Shopify Privacy Portal:
https://privacy.shopify.com/en

Shopdiax may also use third-party applications for functions such as reviews, shipping, customer communication, analytics and marketing.

These applications may receive personal data only to the extent relevant to the services they provide and subject to applicable data protection requirements.

8. Disclosure of Personal Data

We may share personal data with appropriate recipients where necessary and lawful, including:

Payment service providers: To process or verify payments and handle refunds.

Shipping and logistics providers: To arrange delivery and provide shipment tracking.

IT and hosting providers: To maintain website operations, security and technical services.

Customer support providers: To manage enquiries and communications.

Accounting and professional advisers: Where necessary to fulfill legal or legitimate business obligations.

Analytics and advertising providers: Where relevant processing is lawfully enabled and required consent has been obtained.

Public authorities: Where disclosure is required by applicable law or a legally binding request.

We do not disclose personal information to unrelated third parties merely because a customer visits our website.

Any disclosure is subject to an appropriate legal basis and applicable data protection safeguards.

9. International Transfers

Shopdiax operates from Germany and may use service providers that process information outside Germany or the European Economic Area (EEA).

Where personal data is transferred to a country outside the EEA, we ensure that an applicable transfer mechanism or legal exception is available.

Depending on the circumstances, these may include:

  • An adequacy decision issued by the European Commission.

  • Standard Contractual Clauses approved by the European Commission, together with supplementary safeguards where required.

  • Another mechanism permitted under Chapter V GDPR.

Information about applicable transfer safeguards and how to obtain relevant details may be requested using our privacy contact information.

Service providers may maintain separate privacy notices describing their international processing arrangements.

10. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected or for an additional period required by applicable law.

Retention depends on the type of information and the purpose of processing.

10.1 Order and Accounting Records

Invoices, business correspondence and other relevant financial documents may be retained for the applicable statutory periods under German commercial and tax legislation.

Depending on the type of record, relevant retention obligations may extend for several years.

10.2 Customer Account Information

Where customer accounts are provided, associated information is generally retained for as long as necessary to maintain the account and fulfill associated contractual obligations.

Certain records may be retained for longer where required by law or for the establishment, exercise or defense of legal claims.

10.3 Customer Support Communications

Support communications are retained for as long as reasonably necessary to resolve the enquiry, fulfill associated obligations or address potential legal claims.

10.4 Marketing Information

Marketing preferences and consent records are retained for as long as necessary to administer subscriptions, document valid consent or demonstrate compliance with legal obligations.

Where consent is withdrawn, information may still be retained to the extent necessary to record and respect the withdrawal.

10.5 Technical Information and Cookies

Technical logs, cookies and related identifiers are retained according to their operational purpose, applicable settings and legal requirements.

Where consent-based processing applies, the relevant cookie or service settings govern the applicable periods.

When personal data is no longer required, it will be deleted or anonymized unless further retention is legally required.

11. Your Rights Under the GDPR

Subject to applicable legal conditions and exceptions, you have the following rights.

Right of Access — Article 15 GDPR
You may request information about the personal data we process concerning you.

Right to Rectification — Article 16 GDPR
You may request correction of inaccurate personal data.

Right to Erasure — Article 17 GDPR
You may request deletion of personal data where the applicable legal conditions are satisfied.

Right to Restriction — Article 18 GDPR
You may request restriction of processing in circumstances established by law.

Right to Data Portability — Article 20 GDPR
You may request a copy of certain personal data in a structured, commonly used and machine-readable format, and request transfer where applicable.

Right to Object — Article 21 GDPR
You may object to processing based on legitimate interests where the applicable legal conditions are met.

You may object at any time to the processing of your personal data for direct marketing purposes.

Right to Withdraw Consent — Article 7(3) GDPR
Where processing is based on consent, you may withdraw it at any time with effect for the future.

Right to Lodge a Complaint — Article 77 GDPR
You may lodge a complaint with a competent data protection supervisory authority.

To exercise your rights, contact:

info@shopdiax.com

We may request reasonable information to verify your identity before responding.

We will respond within the periods required by applicable law.

12. Information Required for Purchases

Certain personal information is necessary for us to process and deliver orders.

For example, we normally require appropriate contact, billing, payment and delivery information.

If required information is not provided, we may be unable to complete a purchase, process payment or deliver the order.

Providing information for optional marketing activities is voluntary and is not a condition of purchasing products.

13. Automated Processing and Fraud Prevention

Shopdiax and its service providers may use automated technical systems to support payment processing, security and fraud prevention.

Where automated decision-making occurs that is subject to Article 22 GDPR, any applicable rights and information requirements will be respected.

Customers may contact us if they have questions about decisions affecting their orders or transactions.

14. Children's Privacy

Our online store is intended primarily for customers who are legally permitted to make purchases.

We do not knowingly solicit personal data from children for purposes unrelated to the operation of our Services.

If a parent or legal guardian believes that a child has provided personal data in circumstances that require action, they may contact us at info@shopdiax.com.

We will review the request and take appropriate action under applicable law.

15. Security of Personal Data

We use appropriate technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration and unlawful disclosure.

Measures may include secure connections, access controls, service-provider protections and measures implemented through our ecommerce platform.

However, no online service can guarantee absolute security.

Customers are encouraged to protect their account credentials and contact us if they suspect unauthorized activity relating to their accounts.

16. Third-Party Websites

Our website may contain links to external websites or services operated by third parties.

These websites may have their own privacy policies and data protection practices.

Shopdiax is not responsible for the privacy practices of independent third-party websites, except where responsibility arises under applicable law.

We encourage users to review the relevant privacy notices before sharing personal information.

17. Complaints and Supervisory Authority

If you believe your personal data has been processed unlawfully, you may contact Shopdiax directly or lodge a complaint with a competent supervisory authority.

The supervisory authority generally responsible for private-sector businesses based in Bavaria is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)

Website: https://www.lda.bayern.de/

You may also have the right to contact another competent supervisory authority under applicable data protection law.

18. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our operations, technology, service providers or applicable legal requirements.

When material changes are made, we will provide any additional notice required by law.

The latest version will be published on our website with an updated revision date.

19. Privacy Contact

For questions about this Privacy Policy, personal data processing, consent or the exercise of your GDPR rights, please contact:

Shopdiax
Vishaldeep Singh
Adalbert-Stifter-Weg 1
85570 Markt Schwaben
Germany

Email: info@shopdiax.com
Telephone: +49 176 71190254
Website: https://shopdiax.com

We will review and respond to privacy requests in accordance with applicable data protection legislation.