Privacy policy

Effective date: September 2026 | Last updated: September 2026

Chop Helmets Europe is committed to protecting your personal data in full compliance with the General Data Protection Regulation (GDPR) – Regulation (EU) 2016/679. Please read this policy carefully to understand how we collect, use, and protect your information.

1. Data Controller

The data controller responsible for your personal data is:

2. Data We Collect

Category Data Collected
Identity First name, last name
Contact Email address, phone number
Address Billing address, shipping address
Transaction Order history, items purchased, payment method type
Technical IP address, browser type, device, pages visited, session duration
Marketing Newsletter subscription status, email preferences

We do not store full card numbers or sensitive payment data. All payment processing is handled exclusively by our certified payment provider.

3. How We Use Your Data

  • To process and fulfil your orders
  • To send order confirmations, shipping updates, and tracking information
  • To handle customer service enquiries, returns, and claims
  • To comply with legal obligations (tax records, consumer law)
  • To detect and prevent fraud and unauthorised activity
  • To send marketing communications — only with your explicit prior consent

4. Legal Basis for Processing

Purpose Legal Basis
Processing and fulfilling your order Contract performance – Art. 6(1)(b) GDPR
Tax and legal compliance Legal obligation – Art. 6(1)(c) GDPR
Fraud prevention and service improvement Legitimate interest – Art. 6(1)(f) GDPR
Marketing emails and newsletters Consent – Art. 6(1)(a) GDPR

5. Data Sharing

We do not sell your personal data. We share data only with the following trusted parties, strictly to the extent necessary:

  • Shopify Inc. – our e-commerce platform, under their Data Processing Agreement
  • Shipping carriers (e.g. DHL, UPS, DPD) – name and address only, for order delivery
  • Payment processors (e.g. Stripe, PayPal) – for secure transaction handling
  • Dropshipping suppliers – name and shipping address only, for order fulfilment
  • Legal and tax authorities – where required by applicable EU or national law

6. Data Retention

Data Type Retention Period
Order and transaction records 7 years (legal/tax obligation)
Customer account data Duration of account + 2 years after last activity
Marketing consent records Until withdrawal of consent
Technical and browsing data 12 months

7. Your Rights Under the GDPR

As an EU resident, you have the following rights regarding your personal data:

  • Right of Access – request a copy of the personal data we hold about you
  • Right to Rectification – request correction of inaccurate or incomplete data
  • Right to Erasure – request deletion of your data ("right to be forgotten"), where applicable
  • Right to Restriction – request that we limit processing of your data
  • Right to Data Portability – receive your data in a structured, machine-readable format
  • Right to Object – object to processing based on legitimate interests
  • Right to Withdraw Consent – withdraw marketing consent at any time, without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at v2gear.adm@gmail.com. We will respond within 30 calendar days.

You also have the right to lodge a complaint with your national Data Protection Authority (DPA).

8. Cookies

We use the following types of cookies:

  • Essential cookies – required for the website to function (e.g. shopping cart, login session)
  • Analytical cookies – to understand how visitors use our site (e.g. Google Analytics)
  • Marketing cookies – to deliver relevant ads and track campaign performance

You will be asked for consent upon your first visit via our cookie banner. You can manage or withdraw cookie preferences at any time through the banner or your browser settings. Disabling essential cookies may affect website functionality.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our store is hosted on Shopify, which maintains industry-standard security certifications (PCI DSS compliant).

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically. Continued use of our website after changes are posted constitutes acceptance of the updated policy.

11. Contact

For any privacy-related questions or to exercise your rights, contact us at:

📧 v2gear.adm@gmail.com
🌐 eu.chophelmets.com