Privacy Policy

1What data we collect & why

Server log files

When you visit, our hosting provider automatically records technical data (IP address, browser type, operating system, referring page, date and time) to deliver the site securely and prevent abuse. These logs are deleted after a short period.

Cookies & consent

Essential cookies keep the shop working (cart, checkout, security). Optional analytics or marketing cookies are only set after you agree via our consent banner, and you can change or withdraw your choice at any time.

Customer account

If you create an account, we store your name, email, address and order history so you can manage your orders.

Orders & payment

To process an order we collect your name, billing and shipping address, email, phone number and payment details. Payment information is handled by your chosen payment provider — we do not see or store full card details.

Shipping

We share your name and delivery address with our logistics partner so your order can be delivered.

Newsletter

If you subscribe (for example to claim the 10% welcome offer), we use your email to send marketing messages. We use a double opt-in, and you can unsubscribe at any time via the link in every email.

Contact

If you email us or use the contact form, we process the details you provide to answer your enquiry.

Product reviews

If you leave a review, we publish the name and rating you submit.

2Who we share data with

We share your data only where necessary, with processors bound by data-processing agreements under Art. 28 GDPR:

• Payment service providers you select at checkout (e.g. PayPal, Klarna, and card/Sofort processors)
• Shipping & logistics partners (e.g. DHL / DPD) to deliver your order
• Our hosting provider, which stores the website and its data on secure servers
• Email, newsletter and IT service providers that help us operate the shop
• Tax advisors and public authorities, where we are legally required to disclose

We do not sell your personal data.

3International data transfers

Processing takes place primarily within the EU/EEA. Where a provider processes data outside the EU/EEA, we ensure appropriate safeguards under Art. 44 ff. GDPR — such as the EU Standard Contractual Clauses or an EU adequacy decision.

4How long we keep your data

We keep personal data only as long as necessary for the purpose it was collected for. Order and invoice data is retained for the statutory periods under German commercial and tax law (generally up to 10 years — § 257 HGB, § 147 AO). Newsletter data is kept until you unsubscribe; account data until you delete your account.

5Your rights

Under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), and to object to processing based on legitimate interests (Art. 21). Where processing is based on consent, you may withdraw it at any time with future effect (Art. 7(3)). To exercise any right, contact info@elixia.shop.

6Payment & data security

When you pay, your payment data is transmitted securely to your chosen payment provider, who processes it under their own privacy policy and, where applicable, as our processor. This website uses SSL/TLS encryption (https) to protect data transmitted between your browser and our servers, and we apply appropriate technical and organisational measures to keep your data safe.

7Changes to this policy

We may update this policy to reflect changes in our processing or in the law. The version published here always applies; the date of the latest update is shown below.