This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make a purchase from www.loopcraftset.com (the “Site”) by users residing within our operational regions of the European Union and the United States.
①. Data Controller
For the purposes of the General Data Protection Regulation (GDPR) and other applicable data protection laws in Europe and the United States, the data controller responsible for your personal information is:
- Company Name: The Establishment Group GmbH
- Registered Office Address: An der Pönt 45, 40885, Ratingen, Germany
- Corporate Telephone: +49 2102 1016972
- Official Correspondence Email: crochet@loopcraftset.com
②. Personal Information We Collect
When you interact with the Site, we collect certain categories of information necessary to fulfill our commercial transactions and maintain operational standards:
- Device Information: When you visit the Site, we automatically collect information about your device, including details about your web browser, IP address, time zone, and cookies installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site.
- Order Information: When you make a purchase or attempt to make a purchase through the Site, we collect specific information from you, including your name, billing address, shipping address, email address, telephone number, and purchase history.
③. Payment Processing & Secure Transmission
To process commercial transactions efficiently and adhere to global compliance mechanisms, we do not store full payment card details on our servers.
- Third-Party Processor: All transaction data is handled directly by our external payment processing partner, Stripe.
- Data Shared: Your payment information is transmitted directly to Stripe via secure, encrypted channels (SSL/TLS) to complete the purchase. Stripe manages your data in accordance with their own privacy protocols and international financial standards, maintaining strict compliance with the Payment Card Industry Data Security Standard (PCI-DSS).
④. How We Use Your Personal Information
We use the Order Information that we collect generally to fulfill any orders placed through the Site (including arranging for transit, providing you with invoices and/or order confirmations). Additionally, we use this information to:
- Communicate formally with you regarding your account, shipping updates, or transactions;
- Screen our orders for potential risk or fraudulent activity (in coordination with automated fraud-detection tools provided by our payment gateway); and
- Comply with statutory tax, accounting, and legal obligations applicable to our corporate entity in Germany.
⑤. Data Retention Periods
We retain your personal information only for as long as is strictly necessary to fulfill the purposes outlined in this policy, or as required by applicable European and United States legislation.
- Statutory Accounting and Tax Data: In accordance with the German Commercial Code (Handelsgesetzbuch – HGB) and Tax Code (Abgabenordnung – AO), operational and transactional data (such as corporate invoices, contract records, and accounting documents) must be retained for a mandatory period of ten (10) years.
- General Inquiry Data: General correspondence and operational communication data are retained for a period necessary to resolve the matter, up to a maximum of three (3) years following the conclusion of the inquiry, aligned with standard statutory limitation periods.
⑥. Data Security and Integrity Measures
We implement comprehensive administrative, technical, and organizational security measures designed to protect your personal information from unauthorized access, loss, disclosure, or alteration. We utilize industry-standard encryption techniques to safeguard our operational infrastructure. However, please note that while we maintain robust security controls, no method of transmission over the internet or electronic storage can be categorized as entirely impenetrable.
⑦. Your Statutory Rights
Depending on your residency, you possess specific legal rights regarding your personal data:
- European Residents (GDPR): You have the right to access the personal information we hold about you, to request that it be rectified, updated, or erased, to restrict or object to certain processing methods, and the right to data portability.
- United States Residents (State Privacy Frameworks including CCPA/CPRA): You have the right to request disclosure of the categories and specific pieces of personal information we have collected, to request deletion or correction of your information, and to know if your data is being sold or shared (please note: we do not sell your personal data).
To exercise any of your statutory rights, or for any further legal and operational questions, please contact our administration directly at crochet@loopcraftset.com. We respond to all verified compliance inquiries within legally mandated timeframes (typically within 30 days).