This Privacy Policy explains how personal data is collected, used, stored, disclosed, transferred, and protected when you visit heathceramics.shop, place or attempt to place an order, create or use a customer account, communicate with us, subscribe to marketing communications, submit content, or otherwise interact with our online store and related services.

This Privacy Policy also explains the rights available to individuals under applicable German and European Union data-protection laws.

Nothing in this Privacy Policy limits any mandatory right available under applicable law.

1. Data Controller and Contact Information

The operator of heathceramics.shop acts as the data controller where it determines the purposes and means of processing personal data through this online store.

Website: heathceramics.shop
Privacy Contact Email: info@heathceramics.shop

Questions about this Privacy Policy, requests to exercise data-protection rights, objections, consent withdrawals, complaints, and other privacy-related communications may be submitted to the email address above.

This Privacy Policy should be read together with the Legal Notice or Impressum published on heathceramics.shop.

2. Scope of This Privacy Policy

This Privacy Policy applies to personal data processed through:

• The heathceramics.shop website;

• Product and collection pages;

• Shopping-cart and checkout functions;

• Customer accounts;

• Orders, payments, fulfilment, shipping, and delivery;

• Withdrawals, cancellations, returns, exchanges, and refunds;

• Customer-service communications;

• Marketing and promotional communications;

• Cookies and similar technologies;

• Product reviews, surveys, and customer submissions;

• Fraud-prevention and website-security activities;

• Social media interactions connected with our store; and

• Other services made available through heathceramics.shop.

This policy does not govern independent third-party websites or services that process personal data for their own purposes under their own privacy notices.

3. Meaning of Personal Data

Personal data means information relating to an identified or identifiable natural person.

Personal data may identify you directly through information such as:

• Your name;

• Email address;

• Telephone number;

• Billing address; or

• Shipping address.

It may also identify you indirectly through information such as:

• An order number;

• A customer-account identifier;

• An IP address;

• A device identifier;

• A cookie identifier;

• Transaction history;

• Website activity; or

• Other information capable of being linked to an identifiable individual.

Information that has been effectively anonymized so that an individual can no longer reasonably be identified is not treated as personal data.

4. Data-Protection Principles

We aim to process personal data according to the following principles:

• Lawfulness, fairness, and transparency;

• Purpose limitation;

• Data minimization;

• Accuracy;

• Storage limitation;

• Integrity and confidentiality; and

• Accountability.

We collect and process only personal data reasonably necessary for identified and legitimate purposes.

5. Categories of Personal Data We Collect

The personal data collected depends on how you interact with heathceramics.shop.

Identity and Contact Data

We may collect:

• Full name;

• Email address;

• Telephone number;

• Billing address;

• Shipping address;

• Country or region;

• Language preference; and

• Other contact information you provide.

Customer-Account Data

Where customer accounts are available, we may collect:

• Customer-account identifier;

• Login or authentication information;

• Saved addresses;

• Order history;

• Account preferences;

• Product preferences;

• Marketing preferences;

• Account activity; and

• Information used to protect account security.

Passwords and authentication credentials are processed through the technical systems supporting the store and are not normally available to heathceramics.shop in readable form.

Order and Transaction Data

When you place or attempt to place an order, we may collect:

• Products ordered;

• Product sizes, colours, models, or variants;

• Quantities;

• Order number;

• Order date;

• Purchase amount;

• Discounts and promotional codes;

• Applicable tax information;

• Payment status;

• Fulfilment status;

• Shipping method;

• Tracking information;

• Delivery status;

• Return and exchange information;

• Refund and cancellation information; and

• Communications relating to the transaction.

Payment Data

Payments are processed through Shopify, payment processors, banks, card networks, digital-wallet providers, or other payment services available during checkout.

Depending on the payment method, payment-related information may include:

• Name of the payment-account holder;

• Billing address;

• Payment method;

• Transaction identifier;

• Payment-authorization result;

• Limited payment-card information;

• Fraud-screening information; and

• Information required to process refunds or payment disputes.

heathceramics.shop does not normally receive or store complete payment-card numbers or card security codes.

Payment providers may independently process payment information according to their own legal obligations and privacy notices.

Shipping and Delivery Data

To arrange and manage delivery, we may collect:

• Recipient name;

• Shipping address;

• Telephone number;

• Email address;

• Delivery instructions;

• Tracking number;

• Carrier information;

• Proof of delivery;

• Customs-related information; and

• Information concerning delayed, failed, damaged, or missing deliveries.

Withdrawal, Return, and Refund Data

When you request a withdrawal, cancellation, return, exchange, repair, replacement, price reduction, or refund, we may collect:

• Order information;

• Return reason;

• Product-condition information;

• Description of an alleged defect;

• Photographs or videos;

• Return tracking information;

• Refund status;

• Communications concerning the request; and

• Information reasonably necessary to investigate the claim or prevent fraud.

Customer-Service Data

When you contact us, we may collect:

• Your name and contact information;

• The content of your communication;

• Order information;

• Customer-support history;

• Complaint details;

• Photographs or videos you provide;

• Shipping documents; and

• Other information reasonably necessary to investigate and respond to your enquiry.

Do not send passwords, complete payment-card numbers, card security codes, online-banking credentials, authentication codes, or unnecessary sensitive personal data by email.

Marketing and Communication Data

If you subscribe to or interact with marketing communications, we may collect:

• Email address;

• Telephone number where SMS marketing is available;

• Subscription status;

• Consent records;

• Consent date and method;

• Unsubscribe records;

• Marketing preferences;

• Message-delivery status;

• Message-opening information;

• Links selected;

• Campaign source; and

• Information used to measure communication performance.

Device and Website-Usage Data

When you visit heathceramics.shop, technical systems may automatically collect:

• IP address;

• Browser type and version;

• Device type;

• Operating system;

• Screen and display settings;

• Language settings;

• Time zone;

• Approximate location derived from an IP address;

• Referring website, search engine, or advertising source;

• Pages and products viewed;

• Searches performed;

• Links selected;

• Shopping-cart activity;

• Checkout activity;

• Date and time of access;

• Session identifiers;

• Cookie identifiers;

• Error reports;

• Security information; and

• Fraud and risk indicators.

Reviews and Customer-Submitted Content

If you submit a review, rating, comment, photograph, video, survey response, or other content, we may collect:

• Your name or displayed account name;

• Review or comment content;

• Product rating;

• Images or videos;

• Submission date;

• Purchase-verification information; and

• Technical information used to prevent fraudulent or abusive submissions.

Content submitted for publication may be visible to other website visitors.

Do not include private, confidential, or sensitive information that you do not want to make public.

6. Sensitive Personal Data

heathceramics.shop does not intend to collect special categories of personal data through ordinary shopping activities.

Please do not provide unnecessary information concerning:

• Health;

• Genetic or biometric characteristics;

• Race or ethnic origin;

• Religious or philosophical beliefs;

• Political opinions;

• Trade-union membership;

• Sexual orientation or sex life; or

• Criminal convictions or offences.

Where sensitive information is voluntarily provided and genuinely necessary to address a particular request, it will be processed only where an appropriate legal basis and required safeguards apply.

7. How We Collect Personal Data

Directly From You

We collect personal data directly when you:

• Browse or use the website;

• Create or update a customer account;

• Add products to a shopping cart;

• Place or attempt to place an order;

• Contact customer support;

• Request withdrawal, cancellation, return, exchange, repair, replacement, or refund;

• Subscribe to marketing communications;

• Submit a review or survey;

• Participate in a promotion; or

• Change your privacy preferences.

Automatically

We may collect data automatically through:

• Cookies;

• Pixels;

• Tags;

• Web beacons;

• Local storage;

• Server logs;

• Fraud-prevention tools; and

• Similar technologies.

From Service Providers and Other Parties

We may receive data from:

• Shopify;

• Payment processors;

• Banks and card networks;

• Shipping carriers;

• Warehouses and fulfilment providers;

• Fraud-prevention providers;

• Customer-support providers;

• Analytics providers;

• Advertising and marketing providers;

• Social media platforms;

• Product-review applications; and

• Other services connected with heathceramics.shop.

8. Legal Bases for Processing

We process personal data only where an appropriate legal basis applies.

Depending on the processing activity, the legal basis may be:

• Performance of a contract;

• Steps taken at your request before entering into a contract;

• Compliance with a legal obligation;

• Our legitimate interests or those of another party, where those interests are not overridden by your rights and freedoms;

• Your consent;

• Protection of vital interests in exceptional circumstances; or

• Another legal basis permitted by applicable law.

9. Order Processing and Contract Performance

We process identity, contact, order, payment, and delivery data where necessary to:

• Receive and confirm orders;

• Verify product availability;

• Process and verify payments;

• Prepare and fulfil purchases;

• Arrange shipping and delivery;

• Provide order and tracking updates;

• Process cancellations and withdrawals;

• Handle returns, exchanges, and refunds;

• Provide statutory remedies; and

• Resolve order or delivery problems.

The legal basis is normally performance of the purchase contract or taking steps at your request before entering into the contract.

If you do not provide information required to process an order, we may be unable to accept, fulfil, or deliver it.

10. Customer Service

We process contact, order, transaction, and communication data to:

• Respond to enquiries;

• Locate and verify orders;

• Investigate complaints;

• Provide product information;

• Resolve payment or delivery issues;

• Process withdrawal and return requests;

• Handle damage or defect claims;

• Respond to privacy requests; and

• Maintain records of customer communications.

The legal basis may be contract performance, compliance with legal obligations, or our legitimate interest in providing customer support and resolving disputes.

11. Legal and Regulatory Compliance

We may process personal data to:

• Comply with tax and accounting obligations;

• Maintain legally required business and transaction records;

• Provide information required under consumer law;

• Respond to lawful requests, orders, or legal proceedings;

• Cooperate with regulators and competent authorities;

• Handle product-safety or recall obligations;

• Establish, exercise, or defend legal claims; and

• Meet other applicable legal requirements.

The legal basis is compliance with legal obligations or, where appropriate, our legitimate interest in protecting legal rights.

12. Fraud Prevention and Security

We may process personal data to:

• Verify identities and transactions;

• Detect and prevent payment fraud;

• Protect customer accounts;

• Prevent misuse of promotions, returns, refunds, and chargebacks;

• Identify suspicious or unauthorized activity;

• Protect the website against cyberattacks;

• Enforce our Terms of Service;

• Protect customers and service providers; and

• Maintain the security and integrity of our systems.

The legal basis is normally our legitimate interest in preventing fraud, protecting transactions, and maintaining website security.

Where required, those interests will be balanced against the rights and freedoms of affected individuals.

13. Website Operation and Improvement

We may process technical, usage, and transaction data to:

• Operate and maintain the website;

• Provide shopping-cart and checkout functions;

• Diagnose technical problems;

• Improve website navigation and performance;

• Understand aggregate customer behaviour;

• Improve products and services;

• Manage inventory and fulfilment;

• Conduct internal reporting; and

• Measure the effectiveness of website features.

Processing necessary to operate requested website functions may be based on contract necessity or legitimate interests.

Non-essential analytics, personalization, and tracking technologies will be based on consent where legally required.

14. Marketing Communications

Where permitted by law, we may use contact and marketing-preference data to:

• Send information about products;

• Send promotional offers;

• Provide store news;

• Notify customers of relevant promotions; and

• Measure communication performance.

Where legally required, marketing communications are based on consent.

You may withdraw marketing consent at any time by:

• Selecting the unsubscribe link included in the message; or

• Contacting info@heathceramics.shop.

Withdrawing consent does not affect the lawfulness of processing performed before withdrawal.

Unsubscribing from marketing does not prevent us from sending necessary transactional communications concerning:

• Orders;

• Payments;

• Shipping;

• Delivery;

• Returns;

• Refunds;

• Product-safety notices;

• Account security; or

• Customer-service enquiries.

15. Existing-Customer Marketing

Where applicable law permits limited marketing to existing customers without separate consent, such communications will be sent only where the legal conditions are satisfied.

This may include circumstances where:

• Contact information was obtained in connection with a sale;

• Marketing concerns our own similar products or services;

• The customer was clearly informed of the right to object when the information was collected;

• The customer is clearly informed of the right to object in each communication; and

• The customer has not objected.

You may object to such marketing at any time without incurring any cost other than ordinary transmission costs.

16. Personalized Advertising

Where advertising or audience tools are enabled, we and relevant service providers may process:

• Cookie identifiers;

• Device information;

• Website interactions;

• Product views;

• Shopping-cart events;

• Checkout events;

• Purchase information;

• Advertising interactions; and

• Protected or hashed contact information.

These activities may be used to:

• Measure advertising performance;

• Attribute purchases or visits to campaigns;

• Create advertising audiences;

• Limit repeated advertising; and

• Display advertising based on interests or website activity.

Personalized advertising and profiling technologies will be used only after consent where consent is legally required.

You may withdraw or change consent through the cookie or privacy controls available on the website.

17. Shopify

Our online store is hosted through Shopify.

Shopify provides technology and services used to:

• Operate and host the website;

• Display products;

• Manage customer accounts;

• Provide shopping-cart and checkout functions;

• Process and manage orders;

• Support payment services;

• Prevent fraud;

• Provide analytics;

• Support customer privacy controls; and

• Operate other store functions.

Depending on the service and circumstances, Shopify may process personal data:

• On our behalf as a processor or service provider;

• As an independent controller for its own identified purposes; or

• In another role described in Shopify’s applicable privacy terms.

Shopify may receive personal data directly from your interaction with the website and may process that data according to its applicable privacy notices.

18. Shopify Network Intelligence and Enhanced Services

Where Shopify Network Intelligence or related Enhanced Services are enabled, Shopify may use information concerning customer interactions with heathceramics.shop and other Shopify-powered services.

Depending on the enabled features, this processing may support:

• Fraud prevention;

• Customer recognition;

• Improved search or recommendations;

• Analytics;

• Personalization;

• Advertising measurement;

• Audience services; and

• Other enhanced commerce functions.

Where legally required, these activities will be subject to consent or another valid legal basis.

Available consent-withdrawal, objection, or privacy choices may be provided through:

• The website cookie banner;

• The website privacy-preferences interface;

• Shopify’s applicable privacy portal; or

• A request sent to info@heathceramics.shop.

19. Payment Providers

We disclose necessary personal data to:

• Payment processors;

• Banks;

• Card networks;

• Digital-wallet providers;

• Fraud-prevention services; and

• Other authorized financial-service providers.

These parties may process data to:

• Authorize payments;

• Complete transactions;

• Prevent fraud;

• Issue refunds;

• Resolve payment disputes; and

• Meet legal or regulatory obligations.

Payment providers may act as independent controllers for certain processing activities and may provide their own privacy notices.

20. Shipping and Fulfilment Providers

We may provide necessary personal data to:

• Warehouses;

• Fulfilment providers;

• Postal operators;

• Courier companies;

• Customs brokers;

• Logistics providers; and

• Delivery partners.

Information disclosed may include:

• Recipient name;

• Shipping address;

• Telephone number;

• Email address;

• Order details;

• Customs information; and

• Delivery instructions.

This processing is normally necessary to fulfil and deliver the order.

21. Technology and Business Service Providers

We may provide personal data to providers supporting:

• Website hosting;

• Cloud storage;

• Order management;

• Customer support;

• Email delivery;

• Cybersecurity;

• Fraud prevention;

• Analytics;

• Advertising;

• Product reviews;

• Inventory management;

• Accounting;

• Legal services; and

• Business administration.

Service providers receive only personal data reasonably necessary to perform the relevant service.

Where required, providers acting on our behalf are subject to contractual data-protection obligations.

22. Social Media Platforms

If you interact with heathceramics.shop through a social media platform, the platform may process personal data according to its own privacy policy.

Depending on your settings and interaction, we may receive:

• Public profile information;

• Messages;

• Comments;

• Reactions;

• Advertising-interaction information; and

• Other information made available by the platform.

Do not provide sensitive personal data through public comments or posts.

23. Legal Disclosures

We may disclose personal data where reasonably necessary to:

• Comply with applicable law;

• Respond to a court order, warrant, subpoena, or lawful request;

• Cooperate with regulators or law-enforcement authorities;

• Investigate suspected fraud or unlawful conduct;

• Protect legal rights;

• Enforce store policies;

• Protect a person from harm; or

• Prevent financial loss or cybersecurity threats.

Only data reasonably necessary for the relevant purpose will be disclosed.

24. Business Transactions

Personal data may be disclosed in connection with a proposed or completed:

• Merger;

• Acquisition;

• Financing;

• Reorganization;

• Sale of business assets;

• Insolvency proceeding; or

• Transfer of the online store.

Where appropriate, confidentiality, data-minimization, and privacy safeguards will be applied.

25. Cookies and Similar Technologies

heathceramics.shop and its service providers may use cookies and similar technologies to operate the website, remember preferences, measure website activity, prevent fraud, and support marketing.

A cookie is a small data file stored on or accessed from a user’s device.

Similar technologies may include:

• Pixels;

• Tags;

• Web beacons;

• Local-storage objects;

• Software-development kits; and

• Device identifiers.

26. Essential Technologies

Essential or strictly necessary technologies may be used to support:

• Shopping-cart functions;

• Checkout;

• Payment processing;

• Customer-account security;

• Privacy-preference storage;

• Fraud prevention;

• Website traffic management; and

• Core website functionality.

These technologies may be used without consent where storing or accessing information is strictly necessary to provide a service expressly requested by the user or where another statutory exception applies.

Blocking essential technologies may prevent parts of the website from functioning correctly.

27. Functional Technologies

Functional technologies may remember:

• Language;

• Region;

• Display settings;

• Customer-account preferences; and

• Other website choices.

Where functional technologies are not strictly necessary, they will be used only after consent where required.

28. Analytics Technologies

Analytics technologies may help us understand:

• Which pages are visited;

• Which products are viewed;

• How users navigate the website;

• Whether technical errors occur;

• How long users interact with the website; and

• How website performance may be improved.

Non-essential analytics technologies will be activated only after consent where required.

29. Advertising and Profiling Technologies

Advertising and profiling technologies may be used to:

• Measure campaign effectiveness;

• Attribute visits or purchases to advertisements;

• Create advertising audiences;

• Display advertising based on interests;

• Personalize commercial content; and

• Combine website interaction data with information held by advertising providers.

These technologies will not be activated for users in Germany or other consent-based jurisdictions before valid consent has been obtained, unless a specific legal exception applies.

30. Cookie Consent

Where required, the website will display a cookie or privacy banner allowing users to:

• Accept non-essential technologies;

• Reject non-essential technologies;

• Select individual categories;

• Review their choices; and

• Change or withdraw their choices.

Consent must be:

• Freely given;

• Specific;

• Informed;

• Unambiguous; and

• Indicated through an affirmative action.

Silence, inactivity, continued browsing, or a preselected option will not be treated as valid consent where affirmative consent is required.

Refusing non-essential technologies should not prevent access to essential shopping functions.

31. Withdrawing or Changing Cookie Consent

You may change or withdraw your cookie choices through the privacy-preferences or cookie-settings control available on the website.

Withdrawing consent must be possible without unnecessary difficulty.

You may also configure your browser to:

• Block cookies;

• Delete cookies;

• Notify you before cookies are stored; or

• Limit certain tracking technologies.

Deleting cookies may also delete a saved consent preference, requiring a new selection during a future visit.

32. Consent Records

Where processing depends on consent, we or our consent-management providers may retain records showing:

• The consent choice;

• Date and time;

• Consent version;

• Applicable categories;

• Device or browser information; and

• Withdrawal or preference changes.

These records may be retained to demonstrate compliance with legal obligations and respect future choices.

33. International Data Transfers

Shopify and other service providers may process or store personal data outside Germany or the European Economic Area.

Where personal data is transferred to a country outside the European Economic Area, a lawful transfer mechanism will be used where required.

Such mechanisms may include:

• A European Commission adequacy decision;

• European Commission Standard Contractual Clauses;

• Binding Corporate Rules;

• An approved certification or code mechanism;

• A legally permitted derogation; or

• Another valid safeguard.

Where appropriate, supplementary technical, organizational, or contractual measures may also be used.

You may contact info@heathceramics.shop for available information about safeguards relevant to your personal data.

34. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected.

Retention periods may depend on:

• The type and sensitivity of the data;

• The purpose of processing;

• The customer relationship;

• Contractual requirements;

• German tax and commercial recordkeeping obligations;

• Consumer-protection obligations;

• Statutory limitation periods;

• Fraud-prevention requirements;

• Security needs;

• Pending complaints or disputes; and

• Legal claims.

Order and transaction records may be retained for the period required to meet accounting, tax, warranty, consumer-law, fraud-prevention, and dispute-resolution obligations.

Marketing information is retained until consent is withdrawn or the information is no longer reasonably required, subject to retaining limited suppression records needed to respect an unsubscribe or objection.

When data is no longer required, it will be deleted, anonymized, or securely disposed of, subject to legal, technical, backup, and record-retention requirements.

35. Data Accuracy

We take reasonable steps to keep personal data accurate, complete, and current for the purposes for which it is processed.

Customers are responsible for providing accurate:

• Contact information;

• Order information;

• Billing information;

• Delivery information; and

• Customer-account information.

Contact info@heathceramics.shop if your personal data changes or requires correction.

36. Data Security

We use reasonable technical and organizational measures designed to protect personal data against:

• Unauthorized or unlawful access;

• Unauthorized disclosure;

• Improper use;

• Accidental loss;

• Alteration;

• Destruction;

• Theft; and

• Unauthorized copying.

Safeguards may include:

• Encrypted transmission;

• Secure checkout systems;

• Access controls;

• Authentication measures;

• System monitoring;

• Data minimization;

• Service-provider restrictions;

• Software and security updates;

• Backup procedures; and

• Incident-response processes.

No internet transmission or electronic-storage method can be guaranteed to be completely secure.

Customers are responsible for protecting their account credentials and notifying us promptly of suspected unauthorized activity.

37. Personal Data Breaches

If a personal data breach occurs, we will investigate and take reasonable steps to:

• Contain the incident;

• Assess its nature and scope;

• Reduce potential harm;

• Restore the security of affected systems;

• Preserve legally required records; and

• Prevent recurrence.

Where required by applicable law, we may notify:

• The competent data-protection supervisory authority; and

• Affected individuals.

The form and timing of a notification will depend on the risks presented by the incident and applicable legal requirements.

38. Your Data-Protection Rights

Subject to applicable conditions and exceptions, you may have the right to:

• Obtain confirmation of whether your personal data is being processed;

• Access your personal data;

• Correct inaccurate data;

• Complete incomplete data;

• Request deletion of personal data;

• Request restriction of processing;

• Receive certain data in a structured, commonly used, machine-readable format;

• Transmit eligible data to another controller;

• Object to processing based on legitimate interests;

• Object to direct marketing;

• Withdraw consent;

• Obtain information concerning certain automated decisions;

• Request human intervention where applicable; and

• Submit a complaint to a supervisory authority.

These rights are not absolute and may be subject to statutory conditions, limitations, or exceptions.

39. Right of Access

You may request confirmation of whether we process personal data about you and request access to that data.

Where applicable, you may also request information concerning:

• Processing purposes;

• Categories of personal data;

• Recipients or categories of recipients;

• Retention periods or criteria;

• Available data-protection rights;

• The source of data not collected directly from you;

• International transfers; and

• Relevant automated decision-making.

40. Right to Rectification

You may request correction of inaccurate personal data and completion of incomplete personal data.

Where required, relevant corrections may be communicated to service providers or other recipients that received the inaccurate information.

41. Right to Erasure

You may request deletion of personal data where:

• The data is no longer necessary;

• You withdraw consent and no other legal basis applies;

• You successfully object to processing;

• The data was processed unlawfully; or

• Deletion is required to comply with a legal obligation.

We may retain data where necessary to:

• Comply with legal obligations;

• Complete an order, return, or refund;

• Maintain tax and accounting records;

• Prevent or investigate fraud;

• Exercise freedom of expression or information;

• Establish, exercise, or defend legal claims; or

• Perform other processing permitted by law.

42. Right to Restriction

You may request restriction of processing where:

• You contest the accuracy of the data;

• Processing is unlawful and you prefer restriction instead of deletion;

• We no longer require the data but you need it for legal claims; or

• You object to processing while the relevant assessment is pending.

During restriction, personal data will generally be stored and processed only where legally permitted.

43. Right to Data Portability

Where processing is based on consent or contract and is carried out by automated means, you may request eligible personal data in a structured, commonly used, machine-readable format.

Where technically feasible and legally applicable, you may request direct transmission to another controller.

This right does not adversely affect the rights and freedoms of other individuals.

44. Right to Object

You may object to processing based on our legitimate interests.

We will stop the relevant processing unless:

• We demonstrate compelling legitimate grounds that override your interests, rights, and freedoms; or

• Processing is required to establish, exercise, or defend legal claims.

45. Right to Object to Direct Marketing

You may object at any time to processing of personal data for direct marketing, including related profiling.

After receiving the objection, we will stop using your personal data for the relevant direct-marketing purpose.

You may object by:

• Using the unsubscribe link in a marketing message; or

• Contacting info@heathceramics.shop.

46. Withdrawal of Consent

Where processing is based on consent, you may withdraw that consent at any time.

Withdrawal does not affect the lawfulness of processing completed before consent was withdrawn.

Consent may be withdrawn through:

• Website cookie or privacy settings;

• An unsubscribe link;

• Customer-account preferences; or

• A request sent to info@heathceramics.shop.

47. Automated Decision-Making and Profiling

Shopify, payment processors, and fraud-prevention providers may use automated tools to evaluate transactions and identify suspicious activity.

These tools may consider:

• IP address;

• Device information;

• Payment details;

• Billing and shipping information;

• Order history;

• Transaction patterns;

• Customer-account activity; and

• Security indicators.

An order may be delayed, reviewed, refused, or cancelled where a material fraud or security risk is identified.

We do not intend to make decisions based solely on automated processing that produce legal or similarly significant effects unless:

• The decision is necessary to enter into or perform a contract;

• The decision is authorized by law; or

• You have provided explicit consent,

and any safeguards required by law are provided.

Where applicable, you may request:

• Human intervention;

• An explanation of the decision;

• An opportunity to express your position; and

• An opportunity to challenge the result.

48. Exercising Your Rights

To exercise a data-protection right, contact:

Email: info@heathceramics.shop

Please include:

• Your full name;

• The email address associated with your account or order;

• Your order number where relevant;

• The right you wish to exercise; and

• A clear description of your request.

You are not normally required to pay a fee to exercise your rights.

A reasonable fee may be charged, or a request may be refused, where permitted by law if the request is manifestly unfounded or excessive.

49. Identity Verification

Before completing a privacy request, we may need to verify your identity.

Verification may involve confirming:

• Your name;

• Email address;

• Order number;

• Delivery information;

• Customer-account information; or

• Other information reasonably related to your interaction with heathceramics.shop.

Verification information will be used only to authenticate the request, prevent unauthorized disclosure, and complete the privacy process.

50. Response Period

We will respond to valid data-protection requests without undue delay and normally within the period required by applicable law.

Where a request is particularly complex or numerous requests have been received, the response period may be extended where legally permitted.

Where an extension applies, we will provide notice and explain the reason.

51. Authorized Representatives

You may authorize another person to submit a privacy request on your behalf.

We may require:

• Written authorization;

• Verification of your identity;

• Verification of the representative’s identity; and

• Information confirming the scope of the representative’s authority.

52. Complaints to a Supervisory Authority

You have the right to submit a complaint to a competent data-protection supervisory authority if you believe that your personal data has been processed unlawfully.

You may generally contact the supervisory authority responsible for:

• Your habitual residence;

• Your place of work;

• The location of the alleged infringement; or

• The establishment of the data controller.

We encourage you to contact info@heathceramics.shop first so that we have an opportunity to investigate and address the concern.

Contacting us does not restrict your right to submit a complaint directly to a supervisory authority or seek a judicial remedy.

53. Children’s Privacy

heathceramics.shop is intended for general consumers and is not specifically directed at children.

Orders must be placed by individuals who have the legal capacity to enter into the purchase contract or with the valid involvement of a parent or legal guardian.

We do not knowingly request personal data from children who cannot lawfully provide the required information or consent.

A parent or legal guardian who believes that a child has provided personal data without appropriate authorization may contact:

Email: info@heathceramics.shop

We will investigate and take appropriate action.

54. Public Reviews and Content

Reviews, comments, photographs, videos, and other customer-submitted content may be publicly visible.

Do not include:

• Private contact information;

• Payment information;

• Passwords;

• Sensitive personal data; or

• Information about another person without authorization.

We may moderate or remove content that violates applicable law, our policies, or another person’s rights.

55. External Websites and Services

heathceramics.shop may contain links to websites, payment services, social media platforms, applications, or other resources operated by independent third parties.

We do not control the privacy, security, or content practices of independent third parties.

Before providing personal data to an external service, review that service’s privacy notice and terms.

56. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in:

• Our products or services;

• Shopify functionality;

• Installed applications;

• Payment methods;

• Shipping providers;

• Analytics or advertising tools;

• Business operations;

• Privacy practices; or

• Applicable legal requirements.

The updated version will be published on heathceramics.shop with a revised “Last updated” date.

Where required, we will provide additional notice or request new consent before making a material change to how previously collected personal data is processed.

57. Contact Information

For privacy questions, access requests, correction requests, deletion requests, restriction requests, portability requests, objections, consent withdrawals, marketing preferences, or privacy complaints, contact:

Website: heathceramics.shop
Privacy Contact Email: info@heathceramics.shop