Privacy policy

Last updated: 22 October 2026

1. Who is responsible

The controller for data processing on this website is:
Phellora, owner Omar Abdallah, Künheimer Weg 23, 12349 Berlin, Germany
Email: ecomguy777@gmail.com

2. Overview

We only process personal data where this is needed to run the store, process your order, communicate with you or, with your consent, for analytics and advertising. The legal bases are in particular Art. 6(1)(b) GDPR / UK GDPR (contract), (c) (legal obligation, e.g. record keeping), (f) (legitimate interest, e.g. secure operation of the store) and (a) (consent, e.g. for marketing cookies).

3. Hosting and store system (Shopify)

Our store runs on Shopify (Shopify International Ltd., Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, Ireland). When you visit the site or place an order, Shopify processes data on our behalf, including IP address, device and browser data, pages visited, and order, contact and payment details. Data may also be processed in Canada and the USA on the basis of the EU-US Data Privacy Framework, the UK Extension or standard contractual clauses. More: shopify.com/legal/privacy.

4. Orders and customer account

To process your order, we use your name, billing and delivery address, email address, phone number if provided, and order and payment information (Art. 6(1)(b)). We must keep order records for 6 to 10 years under tax and commercial law (Art. 6(1)(c)).

5. Payment

Payments are processed by Shopify Payments (Stripe) and, depending on the method you choose, PayPal, Apple Pay or Google Pay. The data needed for payment is passed to the payment provider (Art. 6(1)(b)). We do not store full card details.

6. Shipping

To deliver your order, we pass your name and delivery address to our fulfilment and shipping partners (Art. 6(1)(b)). We only share your email address for delivery notifications where needed for delivery or with your consent.

7. Subscriptions

For automatic refills, we store your subscription details (interval, delivery address, payment reference) to charge and ship future deliveries (Art. 6(1)(b)).

8. Contact

When you email us or use our contact form, we process your details to handle your request (Art. 6(1)(b) or (f)) and delete them when no longer needed, unless we must keep them by law.

9. Cookies and consent

We use strictly necessary cookies (e.g. cart, checkout, security) on the basis of our legitimate interest. All other cookies and tracking (analytics, marketing) are only used with your consent via our cookie banner (Art. 6(1)(a)). You can withdraw consent at any time in your privacy choices.

10. Meta Pixel and Conversions API

With your consent, we use the Meta Pixel and Conversions API of Meta Platforms Ireland Ltd. (Merrion Road, Dublin 4, D04 X2K5, Ireland) to measure our ads on Facebook and Instagram and show you relevant ads. This sends page views, cart and purchase events, IP address, browser data and, in hashed form, email address and phone number to Meta. We are jointly responsible with Meta for collecting and sending this data (Art. 26 GDPR); Meta then processes it under its own responsibility, including in the USA. More: facebook.com/privacy/policy.

11. Shopify analytics

With your consent, Shopify creates statistics about how the store is used (e.g. visits, traffic sources, purchases) so we can improve it (Art. 6(1)(a)).

12. Email marketing

We only send newsletters and marketing emails with your consent, or to existing customers about similar products where the law allows. You can unsubscribe at any time with the link in every email.

13. Reviews

If you leave a product review, we publish it with your first name or the name you provide (Art. 6(1)(a)).

14. How long we keep data

We keep personal data only as long as needed for the purpose or as required by law.

15. Your rights

You have the right to access, correct and delete your data, to restrict processing, to data portability, and to withdraw consent at any time. You also have the right to object to processing based on legitimate interests and to object to direct marketing at any time. Just email us at ecomguy777@gmail.com.

You can also complain to a data protection authority, for example the Berlin Commissioner for Data Protection and Freedom of Information (Alt-Moabit 59–61, 10555 Berlin, Germany) or, in the UK, the Information Commissioner's Office (ico.org.uk).

16. Changes

We update this policy when our store or the law changes. The version published here applies.