Privacy policy

Last updated: 25 October 2026

Controller

The controller responsible for processing personal data on this website is:

Amora Gifts
Owner: Kieran Nicholas Hitchcock
Preysingstraße 10b
83115 Neubeuern
Germany
Email: team@amora.gifts

This privacy policy describes how we collect, use and disclose your personal data when you visit our website amora.gifts (the “Website”), use our services or make a purchase (together the “Services”). “You” refers to any natural person whose personal data we process in connection with our Services – whether you are a customer, a visitor to our Website or another data subject.

Changes to this privacy policy

We may update this privacy policy from time to time to reflect changes in our business practices or legal requirements. The current version is published on our Website and the “Last updated” date is adjusted accordingly.

What data we collect

Personal data means any information relating to an identified or identifiable person. Which data we collect depends on how you use our Website.

Data you provide to us

• Contact details (name, address, phone number, email address)
• Order information (billing and shipping address, payment confirmation, contact details)
• Account information, if you create a customer account
• Customer service information (e.g. messages you send us by email or via the contact form)

Usage data collected automatically

When you visit our Website, certain data about your use is collected automatically (“Usage Data”), e.g. IP address, browser type, device information, network connection and interactions with the Website. Cookies and similar technologies are used for this.

Data from third parties

We may also receive information from third parties, e.g. from payment providers (payment confirmation, billing address), from Shopify as the operator of our shop system and from advertising and analytics partners.

Purposes and legal bases of processing

• Processing orders: order, payment, shipping, customer account and customer service (Art. 6(1)(b) GDPR – performance of a contract).
• Legal obligations: e.g. retention obligations under tax and commercial law (Art. 6(1)(c) GDPR).
• Security and fraud prevention: protecting our Website and our customers (Art. 6(1)(f) GDPR – legitimate interest).
• Communication: answering your enquiries (Art. 6(1)(b) or (f) GDPR).
• Marketing, analytics and newsletter: only if you have given your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time with effect for the future.

Cookies

Our Website uses technically necessary cookies so that the shop works (e.g. shopping cart and checkout). Further cookies for analytics and marketing are only set with your consent. Information about the cookies used by Shopify can be found at www.shopify.com/legal/cookies. You can also delete or block cookies in your browser settings; this may limit the functionality of the Website.

Analytics and marketing tools (only with consent)

If you consent via the cookie banner, we use the following services to analyse the use of our Website and to measure and deliver advertising:

• Google Analytics and Google Ads (Google Ireland Limited, Ireland)
• Meta Pixel for Facebook and Instagram (Meta Platforms Ireland Limited, Ireland)
• Pinterest Tag (Pinterest Europe Limited, Ireland)

The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). Data may be transferred to the USA; such transfers are based on the EU-US Data Privacy Framework or EU Standard Contractual Clauses. You can withdraw your consent at any time with effect for the future, e.g. by changing your cookie settings or deleting the cookies in your browser.

Disclosure of personal data

We only disclose personal data where necessary:

• to service providers acting on our behalf, e.g. Shopify (shop system and hosting), payment providers and DHL or Deutsche Post for shipping,
• to advertising and analytics partners, if you have given your consent,
• if we are legally obliged to do so or if this is necessary to protect legitimate interests,
• in the context of a business transfer (e.g. sale of the business).

Our shop system is provided by Shopify International Limited (Ireland). Data may also be transferred to countries outside the EU (e.g. Canada or the USA). This only takes place on the basis of appropriate safeguards, e.g. an adequacy decision of the European Commission or EU Standard Contractual Clauses.

Data security and storage period

We use appropriate technical and organisational measures to protect your data against unauthorised access. We only store personal data for as long as necessary for the respective purposes. We retain order and invoice data in accordance with statutory retention periods (usually 6 to 10 years).

Your rights

Under the GDPR you have the following rights:

• Access to your stored data (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing, in particular for advertising purposes (Art. 21 GDPR)
• Withdrawal of consent with effect for the future (Art. 7(3) GDPR)

To exercise these rights, an email to team@amora.gifts is sufficient.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), www.lda.bayern.de.

Contact

If you have any questions about this privacy policy or the processing of your personal data, you can reach us at:

Amora Gifts – Kieran Nicholas Hitchcock
Preysingstraße 10b, 83115 Neubeuern, Germany
Email: team@amora.gifts