Privacy Policy

Who we are

The Yogist Wear ([legal entity], [address]) is the controller responsible for the personal data processed through this website. You can reach us at [contact email address]. Full company details are listed in our Impressum.

What we collect

Account data — the email address and password you provide when creating an account, along with any name and address you save to your profile.

Order data — the items you purchase, delivery and billing address, and order history.

Payment data — card and payment details are collected and processed directly by our payment provider. We never see or store full card numbers.

Technical data — IP address, browser type, and pages visited, recorded in server logs for security and troubleshooting.

Why we process it

To create and manage your account, process and deliver your orders, handle returns and support requests, and meet our legal accounting and tax obligations. The legal bases are performance of a contract (Art. 6 (1)(b) GDPR), our legitimate interest in a secure and functional shop (Art. 6 (1)(f) GDPR), and legal obligation (Art. 6 (1)(c) GDPR).

Who we share it with

Supabase — hosts our database and handles account authentication.

Stripe — processes payments and receives the data needed to complete your transaction.

Shipping and fulfilment partners — receive the delivery details required to bring your order to you.

These providers act as processors on our behalf under data processing agreements. We do not sell your personal data.

How long we keep it

Account data is kept for as long as your account exists. Order and invoice records are retained for the statutory retention periods (up to 10 years under German commercial and tax law). Server logs are deleted after [retention period].

Cookies

We use cookies that are strictly necessary to operate the shop — keeping you signed in and remembering the contents of your cart. These do not require consent. We do not use advertising or third-party tracking cookies. [Update this section if analytics or marketing tools are added.]

Your rights

Under the GDPR you have the right to access your data, correct it, have it deleted, restrict or object to its processing, and receive it in a portable format. You may withdraw any consent at any time with future effect. To exercise these rights, contact us at [contact email address].

You also have the right to lodge a complaint with a supervisory authority, for example the data protection authority of [federal state].

Security

This site is served over TLS, passwords are stored hashed by our authentication provider, and access to personal data is limited to the people who need it to operate the shop.

Changes to this policy

We may update this policy as the shop evolves or the law changes. The current version always applies and is published on this page.