NoirLayer Email: contact@noirlayer.com Phone: +49-17661177542 Data Protection Officer: Gaurav Kundu
2. Personal Data We Collect
– Full name – Billing and shipping address – Email address – Phone number – IP address, browser type, device data – Account login credentials – Payment-related information (processed by Stripe or PayPal) – Consent status, cookie preferences, marketing data
3. Legal Basis for Processing
We process your data under the following legal bases (per Article 6 GDPR): – Performance of a contract (e.g. fulfilling your order) – Your consent (e.g. for marketing, cookies) – Our legitimate interest (e.g. improving our services, fraud prevention) – Legal obligation (e.g. tax and accounting laws)
4. How We Use Your Data
– To process, ship, and fulfill your orders – To create and manage your account – To respond to support and inquiries – To send you order confirmations and updates – To send marketing communications (if you have consented) – To analyze website traffic and user behavior – To secure and maintain our website and systems – To comply with applicable laws and regulations
5. Third-Party Services
We share your personal data with the following trusted third parties: – Payment processors: Stripe, PayPal – Analytics: Google Analytics – Advertising & tracking: Facebook Pixel, Google Ads – Email marketing: Mailchimp
These service providers may process your data but only under our instruction and in accordance with data protection laws. We do not transfer your data outside of the EU/EEA.
6. Cookies & Tracking Technologies
We use cookies to enhance your experience and analyze site usage. – Essential cookies – Required for the website to function – Analytics cookies – Help us understand visitor behavior (Google Analytics) – Marketing cookies – Help us display relevant ads (Facebook Pixel, Google Ads) You can choose to accept or decline non-essential cookies through our cookie consent banner. You can also adjust cookie settings in your browser.
7. Data Retention
– Customer accounts: until deleted or 24 months after last activity – Order and invoice records: 10 years (per German tax law) – Marketing preferences: until you withdraw consent or after 24 months of inactivity – Analytics data: anonymized after 26 months
8. Your Rights Under GDPR
You have the right to: – Request access to your personal data – Correct or update inaccurate data – Request deletion (“right to be forgotten”) – Restrict or object to processing – Withdraw your consent at any time – Request a copy of your data (data portability) – Lodge a complaint with a data protection authority (e.g., BfDI in Germany) To exercise these rights, email us at: contact@noirlayer.com
9. Security Measures
We implement industry-standard security practices, including: – SSL/TLS encryption on all website traffic – Encrypted storage of sensitive data – Role-based access controls for staff – Regular data backups – Hosting and processing exclusively within the EU
10. Children’s Privacy
Our website and products are intended for users aged 16 and older. We do not knowingly collect personal data from children under 16 without parental consent. If we learn that we have unintentionally collected data from a minor under 16 without appropriate consent, we will delete that data promptly.
11. Policy Updates
We may update this Privacy Policy as needed to comply with legal changes or service improvements. Updates will be posted on this page with a revised “Effective Date.” We encourage you to review it periodically.
