Privacy Policy

1. INFORMATION ABOUT THE DATA CONTROLLER AND DATA COLLECTION

1.1 Information about the Data Controller

We are pleased that you are visiting our website and thank you for your interest in our products.

This Privacy Policy explains how we collect, use, and protect your personal data when you use our website or purchase our products.

Data Controller:

Store Name: Frigentra
Business Name: Frigentra
Email Address: info@frigentra-usa.shop

The data controller is responsible for determining the purposes and means of processing personal data in accordance with applicable data protection laws, including, but not limited to:

the GDPR — where applicable, the UK GDPR — where applicable, the Privacy Act 1988 (Australia), PIPEDA (Canada), and other applicable data protection laws.

1.2 Secure Data Transmission

For security reasons and to protect the transmission of personal data and other confidential content (such as orders or inquiries), this website uses SSL/TLS encryption.

An encrypted connection can be identified by:

the prefix "https://", and the padlock symbol in your browser's address bar.

2. DATA COLLECTED WHEN VISITING OUR WEBSITE

2.1 Server Log Files

When you visit our website solely for informational purposes, without registering an account or providing other information, we automatically collect the data your browser sends to our server ("server log files").

This technical data is necessary to display the website correctly and includes:

the website visited, the date and time of access, the amount of data transferred (in bytes), the referrer URL (the source from which you visited the website), the browser type and version, the operating system used, and the IP address (anonymized where possible).

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in improving the stability and functionality of the website).

This data is not shared with third parties and is not used for other purposes.

We reserve the right to review server log files if there are concrete indications of unlawful use of the website.

3. COOKIES AND TRACKING TECHNOLOGIES

3.1 What Are Cookies?

Cookies are small text files stored on your device when you visit our website.

They help us provide a more functional and user-friendly website.

3.2 Types of Cookies We Use

Necessary Cookies

These are required for the basic functionality of the website, for example:

the operation of the shopping cart and essential shopping functions.

Functional Cookies

These allow us to remember your preferences and settings.

Performance Cookies

These help us analyze how the website is used, for example:

Google Analytics.

Marketing Cookies

These track how the website is used in order to display more relevant advertisements, for example:

Facebook Pixel, Google Ads.

3.3 Cookie Retention Period

Session Cookies

These are deleted when you close your browser.

Persistent Cookies

These remain stored on your device for a certain period, depending on the cookie concerned.

Legal Basis:

Necessary cookies: Art. 6(1)(b) GDPR (performance of a contract).

Other cookies: Art. 6(1)(a) GDPR (consent) or Art. 6(1)(f) GDPR (legitimate interest).

3.4 Managing Cookies

You can configure your browser to:

notify you when cookies are placed;
accept or reject cookies individually;
block all cookies.

Please note that disabling cookies may limit the functionality of the website.

You can also withdraw your cookie consent at any time through:

our cookie banner;
your browser settings.

4. PERSONAL DATA WE COLLECT

4.1 Information You Provide to Us

When you create an account, place an order, or contact us, we may collect the following data:

Account and order information: full name, email address, billing address, shipping address, telephone number (optional), payment information (processed by payment service providers), order history, and product preferences.

Contact information: full name, email address, telephone number (if provided), and the contents of messages.

4.2 Automatically Collected Information

We may automatically collect the following data:

IP address, browser type and version, device type and operating system, pages visited and time spent on the website, referral source, click patterns, and user interactions.

5. HOW WE USE YOUR DATA

We collect and process your personal data for the following purposes:

5.1 Order Processing

Legal basis: Art. 6(1)(b) GDPR — performance of a contract.

We use your data to:

process and fulfill orders;
manage payments and invoicing;
arrange shipping and delivery;
send order confirmations and shipping notifications;
handle returns and refunds;
provide customer service.

5.2 Account Management

Legal basis: Art. 6(1)(b) GDPR.

We use your data to:

create and maintain your customer account;
remember your preferences;
provide a personalized shopping experience.

5.3 Communication

Legal basis: Art. 6(1)(b) or (f) GDPR.

We use your data to:

respond to questions and support requests;
send messages relating to order processing (for example, order updates and shipping information);
handle complaints and disputes.

5.4 Marketing

Legal basis: Art. 6(1)(a) GDPR — consent.

We may use your data to:

send newsletters and promotional messages (only with your consent);
display personalized advertisements;
send requests for reviews;
inform you about new products and special offers.

You can withdraw your marketing consent at any time by:

clicking the "unsubscribe" link in our emails;
contacting us at:

info@frigentra-usa.shop

5.5 Legal Obligations

Legal basis: Art. 6(1)(c) GDPR.

We use data to:

comply with tax and accounting requirements;
respond to legal requests;
prevent fraud and misuse;
enforce our Terms and Conditions.

5.6 Website Improvement

Legal basis: Art. 6(1)(f) GDPR — legitimate interest.

We use your data to:

analyze website usage and performance;
improve the user experience;
test and develop new features;
conduct research and analysis.

6. WHO WE SHARE YOUR DATA WITH

We share your personal data only with trusted third parties necessary for business operations.

6.1 Service Providers

Shopify Inc. (E-commerce Platform)

We use Shopify for:

hosting and managing the website;
processing orders;
integrating payment systems.

Location: Canada (adequate level of protection under the GDPR).

Payment Processors

We may use the following payment service providers:

PayPal (Europe) S.à r.l. et Cie, S.C.A.

Luxembourg

Stripe, Inc.

United States — using standard contractual clauses.

Payment Card Data Processors

(for example, processing in accordance with the PCI DSS standard)

Purpose: secure payment processing.

Shipping Companies

We use international courier services, such as:

FedEx, UPS, DHL, and local postal services.

Purpose: delivering products to the specified address.

Data shared:

full name, address, telephone number, and shipping and tracking information.

Email Service Providers

Purpose:

sending order-related messages;
sending marketing communications.

Data shared:

email address, full name, and order information.

6.2 Marketing and Analytics

Google LLC (United States)

We may use:

Google Analytics (website traffic analysis) and Google Ads (online advertising).

Legal basis: consent — Art. 6(1)(a) GDPR.

Meta Platforms (Facebook/Instagram)

We may use:

Facebook Pixel (conversion tracking) and Instagram integration.

Legal basis: consent — Art. 6(1)(a) GDPR.

6.3 Legal Requirements

We may disclose your data to:

law enforcement authorities where legally required;
courts and supervisory authorities;
legal and accounting advisers;
fraud prevention services.

6.4 Business Transfers

In the event of a:

merger, acquisition, or sale of part or all of our assets,

your data may be transferred to the new owner.

You will be notified of any such change.

7. INTERNATIONAL DATA TRANSFERS

Because we operate internationally and use service providers in different countries, your data may be transferred to countries outside the European Economic Area (EEA).

7.1 Safeguards for an Adequate Level of Protection

We apply appropriate safeguards, including:

Standard Contractual Clauses (SCCs)

These are used when data is transferred to countries for which no adequacy decision applies.

Adequacy Decisions

These include, among others:

Canada (PIPEDA), Switzerland, and New Zealand,

as recognized by the European Union.

Data Privacy Framework and Other Transfer Mechanisms

These are used, where applicable, for service providers in the United States.

7.2 Your Rights

You may request a copy of the safeguards used for international data transfers by contacting us at:

info@frigentra-usa.shop

8. DATA RETENTION PERIOD

We do not retain your personal data longer than necessary for the purposes described in this policy or as required by law.

8.1 Retention Periods

Order Data:

7 years

(tax and accounting requirements)

Account Data:

until account deletion + 30 days

Marketing Data:

until consent is withdrawn + 30 days

Contact Requests:

3 years after the matter has been resolved

Website Analytics Data:

14–26 months (depending on Google Analytics settings)

Cookie Data:

in accordance with cookie settings (the period depends on the type of cookie)

8.2 Data Deletion

After the retention periods expire, your data will be securely deleted or anonymized, unless:

you have consented to further use;
we are legally required to retain the data;
the data is necessary to establish or defend legal claims.

9. YOUR RIGHTS UNDER DATA PROTECTION LAW

Your rights may differ depending on where you live.

The rights applicable in different jurisdictions are set out below.

9.1 Customers in the EU/EEA (Rights under the GDPR)

You have the right to:

Right of Access (Art. 15 GDPR)

Request a copy of your personal data.

Right to Rectification (Art. 16 GDPR)

Have inaccurate data corrected.

Right to Erasure (Art. 17 GDPR)

Request the deletion of your data ("right to be forgotten").

Right to Restriction of Processing (Art. 18 GDPR)

Restrict how your data is used.

Right to Data Portability (Art. 20 GDPR)

Receive your data in a structured format.

Right to Object (Art. 21 GDPR)

Object to processing based on legitimate interest.

Right to Withdraw Consent (Art. 7(3) GDPR)

Withdraw your consent at any time.

Right to Lodge a Complaint (Art. 77 GDPR)

Lodge a complaint with the competent supervisory authority.

9.2 Customers in the United Kingdom (UK GDPR and Data Protection Act 2018)

Customers in the United Kingdom have the same rights under the UK GDPR as customers in the European Union.

These rights are enforced by:

Information Commissioner's Office (ICO)

Website: https://ico.org.uk

9.3 Customers in Canada (PIPEDA)

Customers in Canada have the right to:

access their personal data;
correct inaccurate information;
withdraw consent to data processing;
lodge a complaint with the Privacy Commissioner of Canada.

Website: https://www.priv.gc.ca

9.4 Customers in Australia (Privacy Act 1988)

Customers in Australia have the right to:

access their personal data (Australian Privacy Principle 12);
correct inaccurate data (APP 13);
lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

Website: https://www.oaic.gov.au

9.5 Customers in New Zealand (Privacy Act 2020)

Customers in New Zealand have the right to:

access their personal data (Principle 6);
correct inaccurate information (Principle 7);
lodge a complaint with the Privacy Commissioner.

Website: https://www.privacy.org.nz

9.6 Customers in the United States (Rights Vary by State)

California (CCPA/CPRA)

California residents have the right to:

know what personal data is collected;
request the deletion of personal data;
opt out of the sale of personal data (we do not sell personal data);
receive equal treatment without discrimination.

Other US States

Similar rights may apply under local laws, including in:

Virginia, Colorado, Connecticut, and other states.

10. DIRECT MARKETING

10.1 Email Newsletter

If you subscribe to our newsletter, we will regularly send you updates about:

products, offers, and promotions.

Subscription process: double opt-in

You must confirm your subscription by email.

Legal basis:

Art. 6(1)(a) GDPR (user consent).

Data collected: email address, first name (optional), subscription date, and IP address.

Unsubscribe:

You can unsubscribe from the newsletter by:

clicking the unsubscribe link in each email;
contacting us by email:

info@frigentra-usa.shop

10.2 Marketing to Existing Customers

If you have made a purchase from our store, we may send you marketing messages about similar products based on:

Art. 6(1)(f) GDPR (legitimate interest).

You can opt out of such messages at any time.

11. SOCIAL MEDIA PLUG-INS AND INTEGRATIONS

11.1 Facebook

We use Facebook plug-ins with privacy-enhancing solutions.

Data is transmitted only when a user actively clicks on or interacts with the plug-in.

Facebook Privacy Policy:

https://www.facebook.com/privacy/policy

11.2 Instagram

Instagram plug-ins are integrated using privacy-enhancing methods.

Data is transmitted only after user interaction.

Instagram Privacy Policy:

https://help.instagram.com/155833707900388

12. WEB ANALYTICS

12.1 Google Analytics

We use Google Analytics to:

analyze website traffic;
study user behavior;
improve our website's performance.

Your IP address is anonymized.

Legal basis:

Art. 6(1)(f) GDPR (legitimate interest)

Art. 6(1)(a) GDPR (user consent).

Opting Out:

You can opt out of Google Analytics using the browser add-on:

https://tools.google.com/dlpage/gaoptout

13. ONLINE ADVERTISING

13.1 Google Ads and DoubleClick

We use Google Ads to display advertisements tailored to your interests.

Legal basis:

Art. 6(1)(a) GDPR (consent provided through the cookie banner).

Opting Out:

You can change your Google Ads settings here:

https://adssettings.google.com

13.2 Facebook Pixel

We use Facebook Pixel to:

track conversions;
optimize advertising campaigns;
analyze advertising performance.

Legal basis:

Art. 6(1)(a) GDPR (user consent).

Opting Out:

You can change your Facebook advertising settings here:

https://www.facebook.com/ads/preferences

14. SECURITY MEASURES

We apply industry-standard security measures to protect your data, including:

SSL/TLS encryption during data transmission, secure servers with firewall protection, payment processing that complies with the PCI DSS standard, access controls that limit employees' access to data, regular security audits and vulnerability assessments, and backup systems to prevent data loss.

15. DATA BREACH NOTIFICATION

In the event of a data breach that may pose a risk to your rights and freedoms, we undertake to:

inform affected individuals within 72 hours (GDPR requirement);
inform the relevant supervisory authorities in accordance with applicable law;
provide information about the data breach and the remedial measures taken.

16. CHILDREN'S PRIVACY

Our website and services are not intended for individuals under the age of 18.

We do not knowingly collect personal data from children.

If you believe that we have collected personal data from a minor, please contact us immediately:

info@frigentra-usa.shop

17. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy periodically to reflect:

changes in our practices, changes in legislation, and new legal requirements.

Updates will be posted on this page together with an updated last-modified date.

If you continue to use our website after changes have been made, this means that you accept the updated Privacy Policy.

18. CONTACT US AND EXERCISE YOUR RIGHTS

If you wish to exercise your rights or have questions about this Privacy Policy, please contact us:

Email: info@frigentra-usa.shop

Opening hours: Monday – Saturday 09:00 – 17:00 CET

We will respond to your request within:

30 days — GDPR / UK GDPR, 30 days — PIPEDA Canada, 30 days — Australian Privacy Act, 20 business days — New Zealand Privacy Act, 45 days — CCPA California.