Privacy Policy

Last updated: September 2026

1. Data Controller

The data controller responsible for the processing of your personal data on this website is Retro Shirts, located in Opole, Poland (email: contact@retroshirts.eu).

2. What Information We Collect

We collect information necessary to provide you with our services, process your purchases, and maintain your account:

• Account Details: Email address, full name, and preferred settings (managed via Supabase Auth).
• Shipping & Order Information: Delivery address (street, building number, city, postal code, country), recipient full name, and phone number.
• Payment Data: Transaction status and session identifiers. Payment card details are processed directly by Stripe and are never stored on our servers.
• Technical Data: IP address, device/browser information, and language preferences stored locally in your browser.

3. Purpose and Legal Basis for Processing

We process your data under the following legal bases pursuant to the General Data Protection Regulation (GDPR):

• Contract Performance (Art. 6(1)(b) GDPR): To fulfill your shirt orders, manage user accounts, and process transactions.
• Legal Obligations (Art. 6(1)(c) GDPR): To comply with financial accounting and tax requirements.
• Legitimate Interests (Art. 6(1)(f) GDPR): To protect against fraud, ensure platform security, and improve site performance.
• Consent (Art. 6(1)(a) GDPR): For sending promotional newsletters (only if explicitly checked by the user).

4. Third-Party Service Providers

We work with trusted external partners to process data strictly on our behalf:

• Stripe, Inc.: Payment processing gateway.
• Supabase, Inc.: Database hosting, user authentication, and secure session management.
• Shipping Carriers: Postal and courier services required to deliver your physical parcels.

5. Cookies and Local Storage

We do not use invasive third-party tracking cookies. We utilize browser localStorage solely to remember your preferred language (EN/DE) and maintain seamless shopping cart sessions across visits.

6. Your Rights

Under GDPR, you have the right to access, rectify, or request the erasure of your personal data, as well as the right to data portability and restriction of processing. To exercise any of these rights, please email us at contact@retroshirts.eu.

7. Data Retention

We retain order and transaction records for the duration required by applicable statutory tax and commercial laws. User account profiles remain active until you request their deletion.