Privacy policy
This Privacy Policy describes how DEMYR collects, uses, retains and shares your personal data when you visit or use our website, make a purchase, create an account, contact our customer support or otherwise interact with us.
Protecting your privacy is important to us. We process personal data in accordance with applicable data protection legislation, including the General Data Protection Regulation (GDPR).
1. PERSONAL DATA WE COLLECT
The personal data we collect depends on how you interact with DEMYR and may include:
Identification and contact details: name, email address, telephone number, billing address and delivery address.
Order information: products purchased, order value, purchase history, returns, refunds, cancellations and other information relating to your transactions.
Payment information: payment method, payment status and confirmation, and other information required to process the transaction. Payments may be processed by external payment service providers, so DEMYR does not necessarily receive your full card details or complete details of other payment methods.
Account information: where applicable, information associated with your customer account, preferences and settings.
Communications: information you provide when contacting us, including by email, contact forms or customer support requests.
Technical and usage data: IP address, device type, browser, operating system, device identifiers, pages visited and information about how you interact with our website.
Data collected through cookies and similar technologies: as described in our Cookie Policy and the consent preferences available on the website.
2. HOW WE COLLECT YOUR DATA
We may collect personal data:
- Directly from you, for example when you place an order, create an account, subscribe to communications or contact us;
- Automatically when you use the website, through cookies and similar technologies;
- Through Shopify and service providers used to operate the store;
- Through payment, shipping, analytics, marketing and other partners necessary for the operation of our services, where applicable.
3. HOW WE USE YOUR DATA AND LEGAL BASES
We process your personal data only where an appropriate legal basis exists.
Order processing and management
We use the data necessary to receive, process, prepare and deliver your orders, process payments, manage returns and refunds, and provide support relating to your purchase.
Legal basis: performance of a contract or steps taken at the customer's request before entering into a contract.
Legal, tax and accounting obligations
We may retain and use certain data relating to orders, payments and invoicing where necessary to comply with legal, tax, accounting or regulatory obligations.
Legal basis: compliance with a legal obligation.
Customer support
We use the information provided in your communications to respond to questions, requests, complaints and other matters relating to our products or services.
Legal basis: performance of a contract, steps taken before entering into a contract, or our legitimate interest in providing support to our customers, depending on the circumstances.
Security and fraud prevention
We may process certain data to protect the store, transactions and our customers, prevent misuse, detect fraud and investigate potentially unlawful activities.
Legal basis: our legitimate interest in protecting our business, customers and systems and, where applicable, compliance with legal obligations.
Marketing and commercial communications
Where applicable, we may use your data to send newsletters, product information, updates, campaigns and other promotional communications.
Where applicable legislation requires consent, these communications will be sent only after you have provided it.
You can unsubscribe from promotional communications at any time using the option provided in the communications themselves or by contacting us.
Legal basis: consent, where required, or another legal basis permitted by applicable legislation.
Cookies, analytics and advertising
We may use cookies and similar technologies to ensure the website operates correctly, understand how the store is used, measure performance and, subject to consent where necessary, personalise content or advertising.
Non-essential cookies requiring consent should not be used before the relevant consent has been obtained.
See our Cookie Policy for more information.
Legal basis: consent where legally required and, for technologies strictly necessary for the operation of the service, the legal basis applicable to providing the requested service.
4. SHOPIFY
Our store is provided through Shopify, which supplies the technological infrastructure necessary for the operation of the website and online store.
Shopify collects and processes certain personal data relating to the use of our store, transactions, security and the operation of its services.
We also use Shopify features supported by Shopify Network Intelligence, which may use information resulting from customers' interactions with DEMYR, Shopify and other merchants to provide enhanced services, including personalisation, analytics and advertising features.
Where required by applicable legislation, the use of data for non-essential purposes, including certain forms of personalisation and advertising, is subject to the user's consent choices.
To provide these services, information supplied through our store may be shared with Shopify and with service providers or other third parties, who may be located in countries other than your country of residence.
In certain situations, Shopify acts as a service provider to DEMYR and, in others, it may act as a data controller for certain purposes of its own, in accordance with applicable legislation.
For more information about how Shopify processes your personal data, see the Shopify Consumer Privacy Policy.
You can also use the Shopify Privacy Portal to obtain more information and exercise certain rights regarding processing carried out by Shopify.
5. WHO WE SHARE DATA WITH
We do not sell your personal data.
However, we may share data that is strictly necessary with third parties where this is necessary to operate the store and provide our services, including:
- Shopify and technological infrastructure providers;
- Payment service providers;
- Suppliers and partners responsible for order processing and preparation;
- Carriers and logistics operators;
- Email, customer support and communications service providers;
- Analytics, advertising and marketing service providers, where applicable and subject to applicable consent rules;
- Professional advisers, accountants, public authorities or other entities where necessary to comply with legal obligations or protect our rights.
These third parties receive only the data necessary to perform their respective functions, in accordance with their legal responsibilities and, where applicable, the contractual obligations established.
6. INTERNATIONAL DATA TRANSFERS
Some of our service providers may process or store personal data outside your country of residence, including outside the European Economic Area.
Where personal data is transferred to countries not covered by an applicable adequacy decision, we will seek to ensure the use of transfer mechanisms recognised by applicable legislation, including, where appropriate, the Standard Contractual Clauses approved by the European Commission, or other legally recognised safeguards.
7. DATA RETENTION
We retain personal data only for as long as necessary for the purposes for which it was collected.
The specific period may vary depending on the nature of the data and the purpose of processing.
For example, certain data relating to orders and transactions may need to be retained for the periods required by tax, accounting or other applicable legislation.
When data is no longer necessary and there is no legal obligation or legitimate ground for retaining it, it will be appropriately deleted or anonymised.
8. DATA SECURITY
We adopt appropriate technical and organisational measures intended to protect personal data against loss, misuse, unauthorised access, alteration or disclosure.
However, no system for transmitting or storing data over the Internet can guarantee absolute security.
We recommend that you keep your account credentials confidential and do not share passwords or other access information with third parties.
9. DATA SUBJECT RIGHTS
Under applicable legislation and where the relevant conditions are met, you may exercise the following rights regarding your personal data:
- Right of access — obtain information about the personal data we process and access that data;
- Right to rectification — request the correction of inaccurate or incomplete data;
- Right to erasure — request the deletion of your personal data in certain circumstances;
- Right to restriction of processing — request that processing of your data be restricted in certain situations;
- Right to data portability — receive certain personal data in a structured, commonly used and machine-readable format and, where applicable, transmit it to another controller;
- Right to object — object to certain processing based on legitimate interests;
- Right to object to direct marketing — you may object at any time to the processing of your data for direct marketing purposes;
- Right to withdraw consent — where processing is based on your consent, you may withdraw it at any time, without affecting the lawfulness of processing carried out previously;
- Rights relating to automated decisions — where applicable, you have the rights provided by legislation regarding decisions based solely on automated processing that produce legal effects or similarly significantly affect you.
These rights are not absolute and may be subject to the conditions and exceptions provided by applicable legislation.
The CNPD confirms, among others, the rights of access, rectification, erasure, restriction, portability and objection; it also explains that exercising these rights is generally free of charge and that requests should be addressed to the data controller.
10. HOW TO EXERCISE YOUR RIGHTS
To exercise any of your data protection rights, contact us at:
support@demyr.com
We may request information reasonably necessary to confirm your identity before acting on your request.
We will respond to requests within the time limits provided by applicable legislation. Under the GDPR, the general rule is a response within one month, which may be extended in certain circumstances provided by law.
11. MARKETING
If you subscribe to our marketing communications, you may unsubscribe at any time using the unsubscribe link included in the communications or by contacting us at support@demyr.com.
Unsubscribing from promotional communications does not prevent us from sending messages necessary to fulfil an order or provide the requested services, such as purchase confirmations, shipping information or customer support responses.
12. COOKIES
We use cookies and similar technologies to enable the website to operate and, where applicable, for analytics, personalisation and advertising.
Where required by applicable legislation, non-essential cookies will be used only with your consent.
You can manage your preferences through the consent tools available on the website.
For detailed information about the cookies used, their purposes, duration and the third parties involved, see our Cookie Policy.
13. CHILDREN'S DATA
Our services are not specifically directed at children, and we do not seek to intentionally collect personal data from minors who lack the legal capacity to provide the data or enter into the transactions concerned.
If you become aware that a minor has improperly provided us with personal data, contact us at support@demyr.com so that we can assess the situation and take appropriate measures.
14. THIRD-PARTY WEBSITES AND SERVICES
Our website may contain links to websites, platforms or services operated by third parties.
DEMYR does not control those third parties' privacy practices. We recommend that you consult their respective privacy policies before providing them with personal data.
15. CHANGES TO THE PRIVACY POLICY
We may update this Privacy Policy periodically to reflect changes in our practices, services or legal and regulatory requirements.
When we make changes, we will update the date shown at the beginning of this page and, where legally required, provide additional information about the changes made.
16. COMPLAINTS AND SUPERVISORY AUTHORITY
If you have any questions or complaints about how we process your personal data, we recommend that you first contact us at support@demyr.com so that we can assess the situation.
Without prejudice to other remedies, you have the right to lodge a complaint with the competent data protection authority.
If you reside in another country in the European Economic Area, you may also contact the competent data protection authority in your country of residence, in accordance with applicable legislation.
17. CONTACT
For any questions relating to this Privacy Policy, the processing of personal data or the exercise of your rights, contact us at:
support@demyr.com