Privacy Policy

Last updated: October 2026

1. Data controller

Rock Clothing
[Street address]
[City, Postal code], Germany
Email: [contact email]

2. Data we collect

When you shop with us we collect:

• Contact details (name, email, phone)
• Shipping and billing addresses
• Order history and payment information (processed securely by our payment providers — we never store full card numbers)
• Technical data (IP address, browser, device) for security and analytics

3. How we use your data

• To process and deliver your orders
• To handle returns, refunds and customer support
• To prevent fraud and keep the store secure
• To send order updates (and marketing emails only if you opt in)

4. Legal basis (GDPR)

We process your data on the basis of contract performance (Art. 6(1)(b) GDPR), legal obligations (Art. 6(1)(c)), and your consent (Art. 6(1)(a)) where applicable.

5. Data sharing

We share data only with service providers necessary to run the store: payment processors (e.g. Stripe, PayPal), shipping carriers, and hosting infrastructure. We never sell your personal data.

6. Retention

Order data is kept as long as required by tax and commercial law (generally 10 years in Germany). Marketing consents are kept until you withdraw them.

7. Your rights

You have the right to access, rectify, erase, restrict or port your data, to object to processing, and to withdraw consent at any time. Contact us at the email above. You may also lodge a complaint with your local data protection authority.

8. Cookies

We use technically necessary cookies (cart, session, region) and, with your consent, analytics cookies. You can control cookies in your browser settings.