Draft for review before collecting customer data.
Controller
Websytes operates the Duo Accessories brand. Controller address and privacy contact are awaiting confirmation.
Data and purposes
When enabled, orders will require contact, delivery and transaction details to perform the purchase agreement. Records required by tax law are retained for the applicable statutory period. Customer-service messages are used to respond to requests. Newsletter subscriptions require an appropriate permission or other valid legal basis and a working unsubscribe route.
Service providers
Shopify hosts the store. Payment, fulfilment, review, advertising and email providers must be listed and their roles assessed when selected. International transfers require the relevant safeguards. Do not treat a worldwide audience as consent to tracking.
Cookies
Only necessary functionality should run before consent where consent is required. Optional analytics and TikTok/Meta advertising tags must follow the regional consent settings. The advertising pixels are not installed in this build.
Retention and rights
Define exact retention periods for customer support, abandoned checkouts and marketing before launch. Depending on applicable law, you may request access, correction, deletion, restriction, portability or object to processing. You may withdraw consent without affecting earlier lawful processing and complain to the competent data-protection authority.
Before publication
Complete controller details, provider list, transfer safeguards, retention periods, cookie controls and the request procedure. Review regional privacy notices for the countries targeted.