1. Who we are Demo Store S.r.l. ("we", "us") is the data controller for personal data collected through this website. Contact: hello@demo-store.example. 2. What we collect - Account data: name, email, hashed password. - Order data: shipping address, order contents, order history. - Payment data: handled entirely by Stripe/PayPal — we only ever store their transaction ID and status, never your card or bank details. - Technical data: IP address and basic request metadata, for security (rate limiting, fraud prevention) and to operate the site. - Consent choices: which optional cookie categories you've accepted, and when. 3. Why we process it (legal basis) - Fulfilling your order and account (contract). - Fraud prevention and account security (legitimate interest). - Analytics/marketing cookies (consent — see our Cookie Policy). - Invoicing and tax records (legal obligation). 4. Retention Order and invoice records are kept as long as required by applicable tax/accounting law. Account data is kept until you delete your account; deleting your account anonymizes your profile while retaining the order records the law requires us to keep. 5. Your rights Under GDPR you can request access, correction, deletion, or export of your personal data. You can download your data or delete your account any time from your Account page, or contact us at hello@demo-store.example. 6. Third parties we share data with Stripe and/or PayPal (payment processing), our hosting provider, and our transactional email provider — each acting under their own data processing agreement with us, only for the purpose of providing the service. 7. International transfers Where a provider above is located outside the EU/EEA, transfers rely on that provider's standard contractual clauses or equivalent safeguard. 8. Changes We'll update this policy if our practices change and update the date below.
Last updated 9/14/2026
