Last updated: October 2026
This Privacy Policy explains what personal data we collect when you visit our shop or place an order, how we use and share it, and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
The controller of your personal data is:
Euroarabin UG (haftungsbeschränkt)
Friedrich-Wilhelm-Straße 7a
32423 Minden
Germany
Phone: +49 8364 854807
Email: support@euroarabin.shop
2. Data we collect
- Contact and order data: name, delivery and billing address, email address, phone number (optional), products ordered, order history.
- Payment data: payment details are processed by our payment providers and Shopify; we do not receive full card numbers.
- Account data: if you create a customer account, your email address, name, saved addresses and order history.
- Communications: information you send us by email, phone or through our contact or returns forms.
- Device and usage data: IP address, browser type, device information, pages viewed, referring URL and similar data collected automatically through cookies and similar technologies.
3. How we use your data and our lawful bases
| Purpose | Lawful basis |
|---|---|
| Processing and delivering orders, returns and customer service; order and dispatch emails | Performance of a contract |
| Running, securing and improving the shop; preventing fraud | Legitimate interests |
| Analytics and advertising cookies (e.g. Google Ads conversion tracking) | Consent |
| Marketing emails (only if you opt in – unsubscribe at any time via the link in every email) | Consent |
| Tax, accounting and other legal obligations | Legal obligation |
4. Shopify (shop platform and hosting)
Our shop runs on Shopify, which provides hosting, shop software, checkout and customer accounts and processes data on our behalf. Shopify may store and process data in Canada, the United States, the European Union and other countries. More information is available in Shopify's Privacy Policy.
5. Who we share data with
| Recipient | Purpose |
|---|---|
| Shopify (processor) | Hosting, shop software, checkout, customer accounts, email delivery |
| Payment providers | Payment processing and fraud prevention |
| Couriers and delivery companies | Delivering your order (name, delivery address and, where needed, email or phone) |
| Advertising and analytics partners (e.g. Google) – with your consent | Measuring ad performance and shop analytics |
| Professional advisers, authorities | Where required by law or to protect our rights |
We do not sell your personal data.
6. International transfers
We are based in Germany, and some of our service providers are located outside the UK. Where personal data is transferred outside the UK, we rely on UK adequacy regulations (for example for the EU/EEA) or appropriate safeguards such as the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.
7. Cookies
We use cookies for the shop to work and, with your consent, for analytics and advertising measurement. Details are in our Cookie Policy.
8. Your rights
Under the UK GDPR you have the right to:
- access the personal data we hold about you,
- have inaccurate data corrected,
- have your data erased,
- restrict or object to processing (including direct marketing at any time),
- receive your data in a portable format,
- withdraw your consent at any time, without affecting processing carried out before withdrawal.
To exercise any of these rights, email support@euroarabin.shop. We will respond within one month. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113, although we would appreciate the chance to deal with your concerns first.
9. How long we keep data
We keep order and invoice records for as long as required by tax and accounting law (generally up to 10 years), customer account data until you delete your account or ask us to, and other enquiries only as long as needed to deal with them.
10. Security
Data is sent between your browser and our shop using encryption (TLS/HTTPS). Shopify is certified PCI DSS Level 1 compliant for card payments. No method of transmission or storage is completely secure, but we take appropriate technical and organisational measures to protect your data.
11. Children
Our shop is not aimed at children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.
12. Changes to this policy
We may update this Privacy Policy when our practices or the law change. The version published on this page applies.
13. Contact
Questions about this policy or your data? Email support@euroarabin.shop.