Politique de confidentialité

Last Updated: 03-09-2026

AtticLegacy ("AtticLegacy," "we," "us," or "our") operates this store and website, including all related information, content, features, tools, products, and services, to provide you with a curated shopping experience (the "Services"). AtticLegacy is powered by Shopify, which enables us to deliver the Services to you.

This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you visit, use, or make a purchase through the Services, or otherwise communicate with us. If there is any conflict between our Terms of Service and this Privacy Policy, this Privacy Policy shall control regarding the collection, processing, and disclosure of your personal information.

By accessing or utilizing any of the Services, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy.

1. Personal Information We Collect

In this Privacy Policy, "personal information" refers to data that identifies, relates to, or can reasonably be linked to you or another person. This does not include data collected anonymously or de-identified so that it cannot be linked to you. Depending on your interactions with the Services, your jurisdiction, and applicable law, we may collect and process the following categories of personal information:

Contact Information: Name, billing and shipping addresses, phone number, and email address.
Financial Information: Credit card, debit card, and financial account numbers, payment details, transaction records, and payment confirmations. (Note: Payment card information is securely processed by our payment processors; we do not store full payment card data on our servers.)
Account Information: Username, password, security questions, account preferences, and settings.
Transaction Information: Browsing history, items added to your cart or wishlist, purchase history, returns, exchanges, and cancellations.
Communications: Information provided in communications with us, such as customer support inquiries or feedback.
Device and Usage Information: Internet protocol (IP) address, browser type, operating system, unique device identifiers, and data regarding how and when you interact with and navigate the Services.

2. Sources of Personal Information

We obtain personal information from the following sources:

Directly from you: When you create an account, make a purchase, subscribe to our communications, or otherwise interact with the Services.
Automatically: From your device or browser through cookies, web beacons, and similar tracking technologies when you navigate our website.
Service Providers: Third parties engaged to facilitate our operations, who may collect or process data on our behalf.
Partners and Third Parties: Entities that assist in providing specific features or services to you.

3. How We Use Your Personal Information

We process your personal information for the following legitimate business purposes:

Service Provision and Fulfillment: To process payments, fulfill orders, arrange shipping, facilitate returns and exchanges, manage your account, and deliver the Services as contracted.
Personalization and Improvement: To remember your preferences, recommend products, create a customized shopping experience, and analyze data to improve our Services.
Marketing and Advertising: To send promotional communications via email, SMS, or postal mail, and to present targeted online advertisements based on your activity on our Services and other websites.
Security and Fraud Prevention: To authenticate users, monitor for fraudulent, illegal, or malicious activity, secure our infrastructure, and protect public safety.
Customer Support: To respond to your inquiries, provide effective service, and maintain our business relationship.
Legal Compliance: To comply with applicable laws, respond to valid legal processes (including law enforcement requests), investigate potential violations, and enforce our Terms of Service.

4. How We Disclose Personal Information

Under specific circumstances, we may share your personal information with third parties for legitimate purposes, including:

Service Providers and Vendors: Third parties performing services on our behalf, such as IT management, payment processing, data analytics, customer support, cloud storage, and fulfillment.
Business and Marketing Partners: To deliver marketing services and targeted advertising. We utilize Shopify to support personalized advertising based on your online activity across different merchants and websites. Our partners use your data in accordance with their respective privacy policies. Depending on your jurisdiction, you may have the right to opt out of targeted advertising [Insert Opt-Out Link Here].
User-Directed Disclosures: When you direct us to share information, such as via social media integrations or login functionalities.
Corporate Affiliates: Within our corporate group for internal administrative and operational purposes.
Business Transfers: In connection with a merger, acquisition, bankruptcy, or sale of all or a portion of our assets.
Legal Compliance: To comply with applicable legal obligations, enforce our terms and policies, and protect the rights, property, and safety of AtticLegacy, our users, or others.

5. Relationship with Shopify

The Services are hosted by Shopify. Shopify collects and processes personal information regarding your access to and use of the Services. Information submitted to the Services will be transmitted to and shared with Shopify and its third-party partners, which may be located in countries outside your jurisdiction.

To help protect and improve our business, we use Shopify's enhanced features, which incorporate data obtained from your interactions with our store, other merchants, and Shopify itself. In these circumstances, Shopify acts as an independent controller responsible for the processing of your personal information and for responding to your data rights requests. To learn more, please review the Shopify Consumer Privacy Policy or exercise your rights via the Shopify Privacy Portal.

6. Third-Party Websites and Links

The Services may contain links to third-party websites or platforms not affiliated with or controlled by us. We are not responsible for the privacy practices, security, or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

7. Data Security and Retention

We implement industry-standard technical and organizational measures designed to protect your personal information. However, no security system is impenetrable, and we cannot guarantee absolute security. We advise against transmitting sensitive information via unsecure channels.

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

8. Your Privacy Rights

Depending on your jurisdiction, you may possess certain rights regarding your personal information. These rights are not absolute and may be subject to legal exceptions:

Right to Access/Know: Request a copy of the personal information we hold about you.
Right to Delete: Request the deletion of your personal information.
Right to Correct: Request the correction of inaccurate or incomplete personal information.
Right to Data Portability: Request the transfer of your personal information to a third party in a structured, machine-readable format.
Right to Opt-Out of Targeted Advertising: You may opt out of the "sale" or "sharing" of your personal information for targeted advertising purposes [Insert Opt-Out Link Here]. If your browser sends a Global Privacy Control (GPC) signal, we will automatically treat this as an opt-out request for the applicable device and browser. We do not currently recognize other "Do Not Track" signals.
Communication Preferences: You may opt out of receiving promotional emails at any time by clicking the "unsubscribe" link provided in our emails. You will continue to receive essential transactional and account-related communications.

Additional Rights for EEA and UK Residents: If you reside in the European Economic Area or the United Kingdom, you additionally have the right to:

Object to Processing: Object to our processing of your personal information for certain purposes.
Restrict Processing: Request that we restrict the processing of your personal information under certain conditions.
Withdraw Consent: Withdraw consent at any time where we rely on consent to process your data.

To exercise any of these rights, please contact us using the details provided below. We may need to verify your identity before processing your request. You may also designate an authorized agent to make requests on your behalf, provided they submit proof of authorization. We will not discriminate against you for exercising your privacy rights.

9. International Data Transfers

We may transfer, store, and process your personal information in countries outside of your jurisdiction of residence. If we transfer personal information out of the European Economic Area (EEA) or the United Kingdom (UK), we will rely on appropriate data transfer mechanisms, such as the European Commission's Standard Contractual Clauses (SCCs) or the UK's equivalent frameworks, to ensure your data is adequately protected.

10. Complaints

If you have concerns regarding our processing of your personal information, please contact us. If you are in the EEA or UK and we cannot resolve your complaint, you have the right to lodge a complaint with your local Data Protection Authority.

11. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, operational needs, or legal requirements. We will post the updated policy on this page and revise the "Last Updated" date. We encourage you to review this policy periodically.

12. Contact Information

If you have questions regarding this Privacy Policy or wish to exercise your data protection rights, please contact us:

AtticLegacy
Brüggemannstraße 12
52072 Aachen, Germany
Phone: +49 152 02119395
Email: ali.basma@atticlegacy.com

For the purposes of applicable data protection laws, AtticLegacy acts as the data controller of your personal information.