HomePrivacy Policy

Privacy Policy

1. Introduction and Overview

This Privacy Policy sets out the basis on which coverhanger (“we”, “us”, or “our”), as the Data Controller, collects, processes, uses, stores, and protects personal data obtained from visitors, customers, and users (“you” or “your”) accessing www.coverhanger.com.

We are committed to processing personal information in compliance with all applicable legal requirements, including the European Union General Data Protection Regulation (EU GDPR), the United Kingdom General Data Protection Regulation (UK GDPR), the German Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG), and relevant United States federal and state privacy statutes.

2. Identity of the Data Controller

For the purposes of applicable data protection legislation, the legal entity responsible for the collection and processing of your personal data is:

  • Data Controller Entity: coverhanger
  • Website: www.coverhanger.com
  • Contact Email: garment@coverhanger.com

3. Categories of Personal Data Collected

We collect only necessary personal data required to operate our commercial activities, fulfil orders, comply with statutory obligations, and communicate effectively with you. The categories of personal data collected include:

  • Identity & Contact Information: Full name, billing address, shipping address, email address, and telephone number.
  • Order & Transaction Details: Information regarding purchased automotive sunshades or window blinds, order history, order status, and transaction amounts.
  • Technical & Usage Data: IP address, browser type, operating system, referring URL, and technical access logs collected during your navigation of our website.

4. Legal Basis for Data Processing

We process personal data under the following legal bases established by applicable privacy laws:

  1. Performance of a Contract (Art. 6(1)(b) EU GDPR): Processing is necessary to process, pack, dispatch, and deliver your orders, and to handle customer service enquiries related to your transactions.
  2. Compliance with Legal Obligations (Art. 6(1)(c) EU GDPR): Processing is required to comply with statutory accounting, tax, commercial reporting, and record-keeping regulations in Germany, the European Union, and the United States.
  3. Legitimate Interests (Art. 6(1)(f) EU GDPR): Processing is necessary for our legitimate commercial interests, including technical optimization of our website, maintenance of system operational integrity, and protection against unauthorized activities.

5. Payment Processing via Stripe

To ensure standard payment transactions, all online payments made on www.coverhanger.com are processed securely through our authorized payment service provider, Stripe.

When you complete a transaction, your payment details are transmitted directly to Stripe. We do not handle, store, or process raw credit card numbers or sensitive banking credentials on our servers.

  • Role of Payment Processor: Stripe operates as an independent data controller regarding transaction and payment data for compliance, regulatory, and financial operation purposes.
  • Data Transferred: Transaction information provided to Stripe includes purchase amounts, currency, name, billing address, and IP address necessary for transaction verification and fraud mitigation.
  • Data Protection Compliance: Stripe processes personal data in accordance with its own privacy documentation and applicable international transfer standards, such as standard contractual clauses (SCCs) and recognized adequacy frameworks.

6. International Data Transfers

We serve customers residing in European countries and the United States. Where personal data is transferred across international borders outside the European Economic Area (EEA), such transfers are conducted in accordance with lawful transfer mechanisms. These include the European Commission’s Standard Contractual Clauses (SCCs) or equivalent recognized regulatory arrangements that ensure an adequate level of data protection.

7. Data Retention Policy

We do not retain personal data longer than necessary for the purposes for which it was collected or as required by applicable law:

  • Order & Transaction Records: Retained for 10 years in accordance with commercial and fiscal record-keeping obligations under German tax and commercial laws (e.g., Abgabenordnung – AO, Handelsgesetzbuch – HGB) and corresponding international regulatory frameworks.
  • Customer Communication Records: Retained for up to 6 years following the completion of an enquiry or transaction to satisfy statutory limitation periods for legal claims and customer support accountability.
  • Technical Access Logs: Retained for up to 30 days for operational integrity, security auditing, and server performance monitoring, after which they are automatically deleted or anonymised.

Upon the expiry of the applicable retention periods, personal data is securely deleted, overwritten, or permanently anonymised in accordance with standard legal procedures.

8. Your Statutory Rights

Under European and US data protection regulations (including EU GDPR, UK GDPR, and applicable US state laws like the CCPA/CPRA), you possess specific rights regarding your personal information:

  • Right of Access: The right to request copies of the personal data we hold about you.
  • Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
  • Right to Erasure (“Right to be Forgotten”): The right to request deletion of personal data, subject to legal retention obligations.
  • Right to Restriction of Processing: The right to request the restriction of processing under specific legal conditions.
  • Right to Data Portability: The right to receive personal data provided to us in a structured, commonly used machine-readable format.
  • Right to Object: The right to object to data processing based on legitimate interests.
  • Right to Lodge a Complaint: The right to submit a complaint to a competent data protection supervisory authority.

To exercise any of these rights, please contact our Data Controller representative via email at garment@coverhanger.com.

9. Technical Security Safeguards

We implement proportionate technical and organizational measures to safeguard personal data against unauthorized access, loss, alteration, or disclosure. Please note that no transmission over the internet or computerized system can be guaranteed completely immune to all potential vulnerabilities.

10. Updates to This Privacy Policy

We reserve the right to amend this Privacy Policy periodically to reflect updates in operational practices or legal regulations. Revisions will be published directly on this page with an updated effective date.

11. Contact Details

For any questions, requests, or legal notices concerning this Privacy Policy or your personal data, please contact:

  • Brand Name: coverhanger
  • Website: www.coverhanger.com
  • Contact Email: garment@coverhanger.com
Log In