Privacy policy

Last updated: 05.November 2026

finaldraftclo operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). finaldraftclo is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us.

Please read this Privacy Policy carefully. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to your personal information.

Personal Information We Collect or Process

When we use the term "personal information," we mean information that identifies or can reasonably be linked to you or another person. Depending on how you use the Services, we may collect or process:

  • Contact details including your name, address, billing address, shipping address, phone number, and email address.
  • Financial information including payment card details, transaction details, form of payment and payment confirmation.
  • Account information including your username, password, preferences and settings.
  • Transaction information including the items you view, put in your cart, add to your wishlist, purchase, return, exchange or cancel, and your past transactions.
  • Communications with us including what you write to us, for example in a customer support request, our replies, and, where your request relates to an order, the related order details.
  • Device information including information about your device, browser or network connection, your IP address, and other unique identifiers.
  • Usage information including how and when you interact with or navigate the Services.

Personal Information Sources

We may collect personal information:

  • Directly from you when you create an account, use the Services, contact us, or otherwise provide it to us.
  • Automatically through the Services from your device, including through cookies and similar technologies.
  • From our service providers when they collect or process personal information on our behalf.
  • From our partners or other third parties.

How We Use Your Personal Information

  • Provide, Tailor, and Improve the Services. We use your personal information to perform our contract with you: to process payments, fulfil orders, arrange shipping, handle returns and exchanges, manage your account and send notifications about it. We also use it to tailor and improve the Services, for example by recommending related products. Legal basis: Art. 6(1)(b) GDPR, and Art. 6(1)(f) GDPR for tailoring and improving the Services, based on our legitimate interest in a useful shop.
  • Marketing and Advertising. With your consent, we send marketing by email, text message or post, and show you online advertising based on your activity on the Services. Legal basis: Art. 6(1)(a) GDPR, and § 25(1) TDDDG for cookies. You can withdraw your consent at any time.
  • Security and Fraud Prevention. We use your personal information to authenticate your account, secure payments, and detect and prevent fraud and misuse. Legal basis: Art. 6(1)(f) GDPR, based on our legitimate interest in protecting you and us.
  • Communicating with You. We use your personal information to answer your customer support requests. We keep each request in our ticket system and, where it relates to an order, link it to that order. Legal basis: Art. 6(1)(b) GDPR for questions about orders, deliveries, returns, withdrawals, warranty or products; otherwise Art. 6(1)(f) GDPR, based on our legitimate interest in efficient and traceable customer service.
  • Legal Reasons. We use your personal information to comply with legal obligations, such as tax and commercial record keeping (Art. 6(1)(c) GDPR), and to establish, exercise or defend legal claims (Art. 6(1)(f) GDPR).

We need the information marked as required at checkout to fulfil your order. We do not make decisions based solely on automated processing that have legal or similarly significant effects on you.

How We Disclose Personal Information

We may disclose your personal information to third parties in the following cases:

  • With Shopify and other service providers who process it on our behalf, for example for IT, hosting, payment processing, analytics, customer support, email, fulfillment and shipping. These include a hosting provider for our customer support ticket system, which stores your support requests and the related order details, and a hosting provider for our email, including our support mailbox.
  • With business and marketing partners, if you have consented, to provide marketing services and advertise to you. They use your information under their own privacy notices. You can opt out of these uses here.
  • When you ask or consent to us disclosing it, for example to ship products to you or through social media widgets or login integrations.
  • With our tax advisers, lawyers or authorities, where needed to meet legal obligations or defend our rights.
  • In connection with a business transaction such as a merger or sale, where the law allows it.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve them. To help protect, grow and improve our business, we use certain Shopify enhanced features that draw on your interactions with our store, other merchants and Shopify. For these features, Shopify is responsible for processing your personal information, including for responding to your requests. To learn more, visit the Shopify Consumer Privacy Policy. You can exercise certain rights through the Shopify Privacy Portal.

Third Party Websites and Links

The Services may link to websites or platforms operated by third parties. We are not responsible for their privacy or security, so please review their policies. Information you share on public platforms, including social networks, may be visible to others.

Children's Data

The Services are not intended for children, and we do not knowingly collect personal information about children under the age of majority in your jurisdiction. If you are a parent or guardian and your child has given us personal information, contact us and we will delete it.

Security and Retention of Your Information

We use technical and organizational measures to protect your personal information, but no security measures are perfect. We recommend that you do not send sensitive information to us through unsecure channels.

We keep your personal information only as long as we need it, or as long as the law requires:

  • Support tickets are deleted from our ticket system two months after the ticket is closed. Copies may remain in backups for up to [7] days.
  • Support emails stay in our mailbox. Emails that count as business letters, such as those about withdrawals, refunds, complaints or warranty, are kept for [6] years, or [8] years where they serve as accounting records. Other support emails are deleted after [period].
  • Orders, invoices and accounting records are kept for [8] years, as required by tax and commercial law.
  • Your account is kept until you delete it or ask us to, unless we must keep parts of it by law.
  • Marketing data is kept until you unsubscribe or withdraw your consent.

Statutory periods run from the end of the calendar year in which the record was created. We may keep information longer if we need it for a legal claim.

Your Rights and Choices

You have the following rights in relation to your personal information:

  • Right to Access. You can request a copy of the personal information we hold about you.
  • Right to Correct. You can ask us to correct inaccurate personal information.
  • Right to Delete. You can ask us to delete your personal information.
  • Right to Restriction. You can ask us to restrict how we process your personal information.
  • Right of Portability. You can ask to receive the personal information you gave us, or have it sent to a third party.
  • Withdrawal of Consent. Where we rely on your consent, you can withdraw it at any time. This does not affect processing that took place before.
  • Right to Object. Where we rely on our legitimate interests, you can object at any time on grounds relating to your particular situation. You can object to direct marketing at any time, without giving a reason.
  • Opt out of Targeted Advertising. You can opt out here. If you visit with the Global Privacy Control signal enabled, we treat it as an opt-out for that device and browser.
  • Managing Communication Preferences. You can unsubscribe from promotional emails at any time using the link in each email. We may still send you emails about your account or orders.

You can exercise these rights by contacting us using the details below. We may need to verify your identity first, and we will respond within the time required by law. We will not discriminate against you for exercising your rights.

Complaints

If you have complaints about how we process your personal information, please contact us using the contact details provided below. Depending on where you live, you may have the right to appeal our decision by contacting us using the contact details set out below, or lodge your complaint with your local data protection authority. For the EEA, you can find a list of the responsible data protection supervisory authorities here.

International Transfers

Some of our service providers process personal information outside the European Economic Area (EEA), for example in the USA and Singapore. These transfers rely on the European Commission's Standard Contractual Clauses. You can request a copy by contacting us.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for legal or regulatory reasons. We will post the revised Privacy Policy on this website and update the "Last updated" date.

Contact

The data controller of your personal information is:

J. Kleinert und M. Götz FD Projekt GbR, represented by Julian Kleinert and Marco Götz
Rudolf-Diesel-Strasse 1A
97318 Kitzingen, Germany
Phone: +49 9321 3003246

If you have questions about this Privacy Policy or want to exercise your rights, please email us at hello@finaldraftclo.com. You can find our other contact details on our contact information policy.